$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d52f0d18-8889-3a47-b2b3-46c19e9e43ed.roa File: d52f0d18-8889-3a47-b2b3-46c19e9e43ed.roa (raw, json) Hash identifier: M/RYhq4eth/+IsqQ4b61lovhBFngYo88DTQUglmsuVc= Subject key identifier: C8:7A:E7:5E:DA:73:AB:73:F5:50:8E:29:33:1E:1D:AA:EC:DF:E9:E3 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F331D0F1DF677CA04CC279240 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d52f0d18-8889-3a47-b2b3-46c19e9e43ed.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 10279 IP address blocks: 164.153.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:0f:1d:f6:77:ca:04:cc:27:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=505fb85f-e6ff-4dab-b3c0-1a2345aa46c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:25:8d:c5:b7:8c:eb:c4:ab:e5:3b:94:4e:06: 4b:3f:cd:5e:dc:32:48:f3:ec:44:72:cf:09:81:e1: f8:aa:db:e4:e9:fe:88:92:7e:7d:c0:9f:cf:30:13: f9:71:6f:75:30:6f:47:25:7b:5d:04:b5:1a:52:c6: 88:33:5c:1c:a0:d2:db:52:90:1a:cd:ac:d9:10:82: 44:fc:33:96:00:72:8a:68:68:65:78:9d:3b:75:50: 1b:a8:e0:84:5a:a5:fe:71:13:6f:25:94:84:a4:43: be:80:8e:54:75:e5:9b:53:16:e6:43:7e:17:a3:fc: a3:78:4c:6f:03:82:a5:71:4a:fa:d6:44:7a:f5:37: 4f:c4:20:f4:22:ea:82:45:c6:6a:10:c7:24:f0:9d: 91:0c:a9:5f:95:4e:6e:b5:17:36:85:da:f0:65:bc: 73:35:0b:57:f8:e3:4a:91:9e:d8:e6:6c:cf:0f:2d: 74:27:de:1a:00:6c:d8:3c:9c:0a:e2:81:0d:5d:eb: 8a:40:b7:90:2e:b9:81:9d:89:78:98:31:3b:a4:a2: f6:e2:da:b7:3d:76:58:72:2c:c3:f8:7b:72:75:ba: 7c:d1:9b:54:a6:87:00:6b:eb:dd:b8:e6:a3:3b:f1: 46:a4:15:d2:16:e1:ee:ac:31:da:6b:6b:09:e8:49: 74:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7A:E7:5E:DA:73:AB:73:F5:50:8E:29:33:1E:1D:AA:EC:DF:E9:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d52f0d18-8889-3a47-b2b3-46c19e9e43ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d4:ca:e2:ed:53:c9:c3:3e:ad:d8:60:fb:9c:24:e4:68:0a: 7c:45:0a:06:7c:43:9a:08:7c:8f:ea:53:d6:c2:09:23:1b:c5: 91:a1:a6:39:4b:f7:a4:b9:df:04:f3:92:ea:79:3b:66:c9:9e: 1a:f2:a2:21:56:fe:39:b4:6b:8b:43:3c:8e:73:ba:2b:54:76: 98:df:97:ac:17:54:fa:55:56:2a:18:13:43:06:f7:5e:05:d4: 7c:31:d4:1b:f7:56:fb:7f:e2:6a:b2:26:45:88:96:ed:b3:df: ff:f0:4f:9a:57:6a:bc:be:37:81:54:cb:e5:65:68:23:ea:42: 3f:07:bb:45:bf:b9:d6:19:b4:ba:03:eb:ac:3f:c6:61:6b:7b: bc:9e:f3:2f:be:ca:4b:48:6f:6d:f1:10:ab:c7:c8:d7:bc:70: bd:5e:d9:86:f9:4d:7d:bb:e7:c6:56:97:36:95:4a:7e:7a:43: 0b:47:f8:da:57:bb:e0:c1:50:de:03:c2:82:2f:12:ce:9f:e9: 95:87:77:76:30:c9:d2:89:19:14:8f:f2:b6:af:91:4f:9b:27: 06:cb:10:ae:b6:0f:33:26:65:f9:46:a3:7e:33:c0:55:77:ab: 84:ed:36:88:ef:01:3c:3e:4c:9f:9c:b7:e3:ba:56:7f:58:4d: 61:b3:f3:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHQ8d9nfKBMwnkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk NTA1ZmI4NWYtZTZmZi00ZGFiLWIzYzAtMWEyMzQ1YWE0NmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCWNxbeM68Sr5TuUTgZLP81e3DJI8+xEcs8J geH4qtvk6f6Ikn59wJ/PMBP5cW91MG9HJXtdBLUaUsaIM1wcoNLbUpAazazZEIJE /DOWAHKKaGhleJ07dVAbqOCEWqX+cRNvJZSEpEO+gI5UdeWbUxbmQ34Xo/yjeExv A4KlcUr61kR69TdPxCD0IuqCRcZqEMck8J2RDKlflU5utRc2hdrwZbxzNQtX+ONK kZ7Y5mzPDy10J94aAGzYPJwK4oENXeuKQLeQLrmBnYl4mDE7pKL24tq3PXZYcizD +Htydbp80ZtUpocAa+vduOajO/FGpBXSFuHurDHaa2sJ6El0uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMh6517ac6tz9VCOKTMeHars3+njMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZDUyZjBkMTgtODg4OS0z YTQ3LWIyYjMtNDZjMTllOWU0M2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJk5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvUyuLtU8nDPq3YYPucJORoCnxFCgZ8Q5oIfI/qU9bCCSMbxZGhpjlL 96S53wTzkup5O2bJnhryoiFW/jm0a4tDPI5zuitUdpjfl6wXVPpVVioYE0MG914F 1Hwx1Bv3Vvt/4mqyJkWIlu2z3//wT5pXary+N4FUy+VlaCPqQj8Hu0W/udYZtLoD 66w/xmFre7ye8y++yktIb23xEKvHyNe8cL1e2Yb5TX2758ZWlzaVSn56QwtH+NpX u+DBUN4DwoIvEs6f6ZWHd3YwydKJGRSP8ravkU+bJwbLEK62DzMmZflGo34zwFV3 q4TtNojvATw+TJ+ct+O6Vn9YTWGz85U= -----END CERTIFICATE-----Generated at Sun Sep 27 16:58:55 2026 by rpki-client