$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/6d3e37e2-a3e9-3122-a5f9-0e8a1f6d9acb.roa File: 6d3e37e2-a3e9-3122-a5f9-0e8a1f6d9acb.roa (raw, json) Hash identifier: vjPJYrdifnMLkxrl+zc3Qzs9vQdLWsHXkkg2lBInNUw= Subject key identifier: A5:05:9B:31:A2:A2:82:C4:9B:45:F2:28:B8:47:C1:9B:7E:83:68:2D Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F2ABD01635E28BAB6DE39A1C8 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/6d3e37e2-a3e9-3122-a5f9-0e8a1f6d9acb.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 164.153.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:01:63:5e:28:ba:b6:de:39:a1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=c1fa964a-1ce2-4a11-889c-39daa32eadeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:54:2c:21:6d:fa:5d:85:0a:b7:57:59:66: 47:5c:97:85:00:3f:b8:e8:56:85:96:d4:1d:d6:c0: 5e:e0:0d:04:7a:b6:01:ac:17:d2:91:5b:2f:83:3a: fb:99:01:b2:ed:42:5a:e8:3b:c1:26:33:02:61:f0: 3b:74:aa:d5:2e:5e:c7:c9:48:39:ee:f7:ae:79:76: 97:be:9b:a7:0d:c3:18:10:4f:66:34:a0:21:91:d9: c9:10:a3:64:3e:31:f0:ec:1a:94:01:d4:04:45:72: bf:70:c5:ec:5f:55:0a:b2:07:0e:25:3b:1b:ee:60: 6f:29:94:45:e8:bc:6f:ad:02:1e:8a:9f:d5:b5:5e: b6:fb:35:e3:61:52:41:93:0d:d0:1e:5e:14:e5:94: ee:ad:6e:60:61:26:6a:34:71:b9:0e:d4:43:77:77: b4:ff:36:14:f1:5c:b6:d4:51:b4:fc:5a:d9:52:7d: 1b:46:76:46:62:df:a8:be:71:cd:ce:d1:c1:a0:69: 1e:58:41:ff:22:ff:20:22:ad:8d:f5:3a:05:e8:34: 54:6d:24:6e:9f:a4:f5:96:0f:eb:95:80:84:2f:1d: 96:3d:d8:80:8a:5f:08:9b:4f:03:05:12:46:a5:08: d5:26:0b:a0:58:74:ad:e1:ec:14:8a:50:6f:9e:56: 65:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:05:9B:31:A2:A2:82:C4:9B:45:F2:28:B8:47:C1:9B:7E:83:68:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/6d3e37e2-a3e9-3122-a5f9-0e8a1f6d9acb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a5:cd:69:59:7f:98:90:48:e4:05:14:9e:0a:8f:ef:9c:18: 78:31:0c:13:25:d2:14:53:92:a5:8a:93:ae:5d:09:f9:a2:03: 16:85:62:00:23:b5:7c:ff:2a:09:7b:a0:6c:46:e1:d3:30:9c: 8d:23:fb:6c:3b:bd:4e:a2:4e:ba:e4:ab:2d:9e:69:1e:9e:c5: ed:5a:69:44:7c:37:c1:0d:f1:7c:c0:a9:0a:80:4f:d0:7d:0e: 66:d5:be:1d:d9:1b:db:a5:9f:ef:1b:35:b3:f5:11:9b:38:56: 92:f4:15:b5:ac:f3:ab:1a:a5:41:1a:82:74:c9:6a:57:42:bb: f8:f2:89:f4:b6:c4:98:8d:2f:a8:55:0c:23:79:f1:86:5f:93: d2:d2:6d:c7:19:d8:3c:8c:95:78:69:32:d0:c0:7b:c1:9c:18: 69:65:9b:d3:a4:68:81:b9:58:b9:6b:26:21:81:1f:21:76:1f: 4c:19:2a:b9:17:30:a0:21:7e:e7:36:3a:b6:ee:91:4d:4c:4b: 87:1f:f3:9a:52:f8:0e:cc:5a:97:a6:87:b0:89:8b:74:99:e4: d1:e1:6e:75:a6:02:68:b4:01:17:98:87:59:2e:0b:04:52:ac: 99:cb:b4:06:6e:8e:bc:5e:d8:c2:af:65:7c:d9:cd:4b:75:51: e7:3a:ba:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQFjXii6tt45ocgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YzFmYTk2NGEtMWNlMi00YTExLTg4OWMtMzlkYWEzMmVhZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcdULCFt+l2FCrdXWWZHXJeFAD+46FaFltQd 1sBe4A0EerYBrBfSkVsvgzr7mQGy7UJa6DvBJjMCYfA7dKrVLl7HyUg57veueXaX vpunDcMYEE9mNKAhkdnJEKNkPjHw7BqUAdQERXK/cMXsX1UKsgcOJTsb7mBvKZRF 6LxvrQIeip/VtV62+zXjYVJBkw3QHl4U5ZTurW5gYSZqNHG5DtRDd3e0/zYU8Vy2 1FG0/FrZUn0bRnZGYt+ovnHNztHBoGkeWEH/Iv8gIq2N9ToF6DRUbSRun6T1lg/r lYCELx2WPdiAil8Im08DBRJGpQjVJgugWHSt4ewUilBvnlZlbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUFmzGiooLEm0XyKLhHwZt+g2gtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvNmQzZTM3ZTItYTNlOS0z MTIyLWE1ZjktMGU4YTFmNmQ5YWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGlzWlZf5iQSOQFFJ4Kj++cGHgxDBMl0hRTkqWKk65dCfmiAxaFYgAj tXz/Kgl7oGxG4dMwnI0j+2w7vU6iTrrkqy2eaR6exe1aaUR8N8EN8XzAqQqAT9B9 DmbVvh3ZG9uln+8bNbP1EZs4VpL0FbWs86sapUEagnTJaldCu/jyifS2xJiNL6hV DCN58YZfk9LSbccZ2DyMlXhpMtDAe8GcGGllm9OkaIG5WLlrJiGBHyF2H0wZKrkX MKAhfuc2OrbukU1MS4cf85pS+A7MWpemh7CJi3SZ5NHhbnWmAmi0AReYh1kuCwRS rJnLtAZujrxe2MKvZXzZzUt1Uec6uhs= -----END CERTIFICATE-----Generated at Sun Sep 27 21:24:40 2026 by rpki-client