$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/945dede8-9a3a-3dd6-9674-4e267b6fa176.roa File: 945dede8-9a3a-3dd6-9674-4e267b6fa176.roa (raw, json) Hash identifier: EGQGvE8TLu9wd40heJhQb73ACgob9R636APrNvmvukg= Subject key identifier: 8C:8E:AA:E8:66:C6:C9:C4:8C:BF:6C:3D:C1:55:D8:3D:4E:03:E5:50 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F331D0EFE8826715C5E982800 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/945dede8-9a3a-3dd6-9674-4e267b6fa176.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 10279 IP address blocks: 164.153.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:0e:fe:88:26:71:5c:5e:98:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=3290ee58-821e-44fd-8bf8-a79abef817b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:c3:b4:b8:34:84:76:8c:e6:79:ef:bf:21: d2:60:8c:80:71:c1:fd:0e:b7:73:65:1a:36:a8:66: a3:9d:92:97:ef:39:26:41:91:0a:6f:d8:3c:77:40: 42:9e:7f:6b:62:10:1a:bc:09:2e:90:3a:c3:82:d9: 5e:a8:64:89:3e:85:eb:18:3c:18:0e:e6:5a:ec:f9: dc:69:e9:b2:33:27:6a:26:d4:b6:01:36:c0:04:54: f2:52:db:29:64:9b:24:de:7c:c3:49:ab:2b:e8:74: 7f:a7:d1:6a:a1:4c:f3:43:9a:47:78:2c:1e:53:57: 05:35:ff:03:ac:20:e0:3c:8f:c8:9d:4e:ed:53:97: 81:05:1c:96:32:c5:5f:42:8a:5d:f7:0a:90:d5:02: 72:eb:03:eb:32:c2:f5:ec:e8:65:ab:eb:85:d9:e9: 2e:ad:8f:a3:af:b3:25:e6:d6:ab:94:cb:40:d1:a7: de:b0:61:02:b5:92:af:6d:ee:93:72:57:78:65:34: 8a:d9:d3:0f:01:86:0e:cf:38:77:db:93:7e:7d:06: 80:ce:9d:a7:bc:63:57:b6:0a:f9:93:22:dd:00:68: ed:0d:ef:39:24:1d:ad:75:bb:67:28:64:e5:9d:8c: e3:53:7f:67:94:77:39:ff:5a:0d:21:58:0e:40:df: b2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8E:AA:E8:66:C6:C9:C4:8C:BF:6C:3D:C1:55:D8:3D:4E:03:E5:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/945dede8-9a3a-3dd6-9674-4e267b6fa176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:62:2d:fc:2b:60:20:39:72:d7:9f:5d:45:25:cf:0d:57:ce: d6:1e:f7:96:36:6f:6e:d6:0e:8b:16:97:f5:84:04:bb:0b:95: 9a:4c:7d:55:fc:86:b7:dc:40:b1:15:0c:92:6d:fa:95:62:f8: 58:a6:f9:34:76:e5:e5:bd:3b:ca:f9:04:28:19:3a:37:47:bb: 9e:e1:45:78:f7:52:c9:3e:13:c6:14:a5:35:cc:f0:31:c2:11: ce:52:3e:e7:cd:6b:5a:90:bd:f1:99:cc:89:b6:7f:fd:b0:c4: bb:08:e5:65:14:4f:32:90:e7:af:ce:3c:67:5c:5a:7f:b4:55: 93:a5:58:fd:02:d5:62:68:1b:0d:83:d9:ef:a7:c8:96:ab:e7: 96:95:0f:46:14:71:4f:8e:04:cc:a6:79:cb:f0:e2:06:5a:f1: 5f:3a:35:21:d9:0a:07:86:04:39:19:6e:5d:cb:19:e4:9f:06: f4:45:7d:a7:99:6c:b4:c4:58:5a:16:0d:f6:fc:5d:3a:ef:7e: 4a:53:f6:af:88:b9:dc:c8:44:e2:d3:19:df:fc:50:8c:76:87: cf:25:5d:4a:6e:a9:38:10:88:1f:35:18:ab:ac:1e:7a:16:f2: 31:b8:5a:0b:e2:df:c5:4b:3e:e2:0a:66:25:a2:98:ab:c5:e8: 44:23:5b:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHQ7+iCZxXF6YKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk MzI5MGVlNTgtODIxZS00NGZkLThiZjgtYTc5YWJlZjgxN2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArErDtLg0hHaM5nnvvyHSYIyAccH9DrdzZRo2 qGajnZKX7zkmQZEKb9g8d0BCnn9rYhAavAkukDrDgtleqGSJPoXrGDwYDuZa7Pnc aemyMydqJtS2ATbABFTyUtspZJsk3nzDSasr6HR/p9FqoUzzQ5pHeCweU1cFNf8D rCDgPI/InU7tU5eBBRyWMsVfQopd9wqQ1QJy6wPrMsL17Ohlq+uF2ekurY+jr7Ml 5tarlMtA0afesGECtZKvbe6Tcld4ZTSK2dMPAYYOzzh325N+fQaAzp2nvGNXtgr5 kyLdAGjtDe85JB2tdbtnKGTlnYzjU39nlHc5/1oNIVgOQN+yeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyOquhmxsnEjL9sPcFV2D1OA+VQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvOTQ1ZGVkZTgtOWEzYS0z ZGQ2LTk2NzQtNGUyNjdiNmZhMTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJk3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHViLfwrYCA5ctefXUUlzw1XztYe95Y2b27WDosWl/WEBLsLlZpMfVX8 hrfcQLEVDJJt+pVi+Fim+TR25eW9O8r5BCgZOjdHu57hRXj3Usk+E8YUpTXM8DHC Ec5SPufNa1qQvfGZzIm2f/2wxLsI5WUUTzKQ56/OPGdcWn+0VZOlWP0C1WJoGw2D 2e+nyJar55aVD0YUcU+OBMymecvw4gZa8V86NSHZCgeGBDkZbl3LGeSfBvRFfaeZ bLTEWFoWDfb8XTrvfkpT9q+IudzIROLTGd/8UIx2h88lXUpuqTgQiB81GKusHnoW 8jG4Wgvi38VLPuIKZiWimKvF6EQjW2g= -----END CERTIFICATE-----Generated at Mon Sep 28 16:42:04 2026 by rpki-client