$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/326ce21f-a360-3fad-b2de-69bd5e884293.roa File: 326ce21f-a360-3fad-b2de-69bd5e884293.roa (raw, json) Hash identifier: 4vN+n0RfXIFlvTgwnmabwKEXDPjrLbRWdk3eneHHrOg= Subject key identifier: 6A:61:D5:AB:77:8D:AC:39:AF:2E:1A:7C:FB:C2:5C:14:F1:B2:E9:0E Certificate issuer: /CN=1ff41215-3026-434d-963c-327afdcf5cbe Certificate serial: 010D0C9F4328584B7B220A978FB5C59D21724900 Authority key identifier: AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/326ce21f-a360-3fad-b2de-69bd5e884293.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 40450 IP address blocks: 164.153.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:22:0a:97:8f:b5:c5:9d:21:72:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff41215-3026-434d-963c-327afdcf5cbe Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=39d8aca7-f8c7-4223-9f74-7c96b626be89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:e0:45:62:0e:bc:d8:18:5f:e2:8e:0f:e5: 90:e9:bd:3c:13:31:4e:23:b1:12:df:58:76:1e:76: 7a:1b:7a:43:3e:b8:d4:ea:b7:a7:df:ab:7a:a3:be: e9:1e:f0:fd:82:39:a1:9d:bb:af:a8:39:2f:13:a3: e0:b0:1d:68:d8:91:f6:08:7d:a4:a3:1d:4e:51:1e: 8d:05:d6:bb:53:7c:3a:1e:78:18:76:aa:b4:2f:0b: fc:29:bd:d5:ee:a8:30:b5:90:3f:54:3d:2e:32:55: 95:33:6d:71:ea:85:08:4f:b4:bb:c6:99:b8:3f:3f: 88:57:4e:1f:fb:c0:20:1e:01:56:14:39:7a:15:bd: 49:ba:b1:75:c3:b1:d7:be:88:89:60:ac:ca:19:7a: a1:71:f9:3c:c3:9e:46:dd:4c:a3:12:52:63:b6:59: 65:cf:d8:fb:5e:2b:da:5c:e0:4b:de:5a:90:40:c7: 75:9a:ae:64:32:d8:86:e9:03:c6:70:4a:06:cf:e3: 52:b7:89:cd:63:9b:91:24:66:e0:22:1d:16:f8:92: a9:aa:83:65:af:d8:f3:67:d4:db:09:9c:f4:2f:31: 2a:4c:a5:dd:f0:fa:79:b6:04:70:a4:3a:fb:ec:c4: d4:c0:e2:8c:31:0e:24:dc:a2:f5:21:1b:31:f1:61: 16:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:61:D5:AB:77:8D:AC:39:AF:2E:1A:7C:FB:C2:5C:14:F1:B2:E9:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/326ce21f-a360-3fad-b2de-69bd5e884293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl X509v3 Authority Key Identifier: keyid:AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer sbgp-ipAddrBlock: critical IPv4: 164.153.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:42:98:9e:96:30:3b:24:a7:1e:73:84:f6:88:65:5b:a8:61: c2:c5:ad:b0:c0:08:06:0e:03:97:75:bd:75:77:c5:d2:68:c6: 5c:d7:9d:ac:2c:99:cf:15:d5:66:9c:4f:54:29:29:90:06:d7: c8:ee:54:b5:32:c0:05:54:c3:3f:85:bd:32:ac:00:ae:fe:ae: 84:41:93:87:c9:3c:33:43:88:08:8a:e2:82:b6:be:3f:6e:01: 5c:70:3c:db:4b:4a:5d:81:c0:06:41:5d:18:80:3f:2e:9b:da: 9b:4a:c9:62:c6:42:cd:db:f8:bf:86:7d:a8:08:54:66:55:0a: 11:1b:7f:71:8f:e8:42:58:95:1b:f8:37:a6:04:b0:4a:cc:32: 83:2a:1a:10:ed:8b:eb:84:a5:70:20:d5:53:10:c3:d6:89:75: 56:d6:88:ce:68:e2:96:0d:17:a5:0f:1e:57:86:6d:2d:4d:a1: fb:f8:8d:00:d4:02:21:d3:d4:94:5c:c4:05:49:85:7c:da:c0: 51:95:f8:c9:56:12:19:04:6d:46:db:3b:63:e7:8c:f7:8d:78: 4e:a9:fb:2a:10:9b:42:46:68:c1:57:5c:a2:3b:a9:ed:b1:5d: e1:14:f2:7b:2a:96:4a:56:d7:7d:93:31:5e:fa:18:72:10:f4: 91:aa:7c:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IgqXj7XFnSFySQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmNDEyMTUtMzAyNi00MzRkLTk2M2MtMzI3YWZkY2Y1 Y2JlMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk MzlkOGFjYTctZjhjNy00MjIzLTlmNzQtN2M5NmI2MjZiZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV7gRWIOvNgYX+KOD+WQ6b08EzFOI7ES31h2 HnZ6G3pDPrjU6ren36t6o77pHvD9gjmhnbuvqDkvE6PgsB1o2JH2CH2kox1OUR6N Bda7U3w6HngYdqq0Lwv8Kb3V7qgwtZA/VD0uMlWVM21x6oUIT7S7xpm4Pz+IV04f +8AgHgFWFDl6Fb1JurF1w7HXvoiJYKzKGXqhcfk8w55G3UyjElJjtlllz9j7Xiva XOBL3lqQQMd1mq5kMtiG6QPGcEoGz+NSt4nNY5uRJGbgIh0W+JKpqoNlr9jzZ9Tb CZz0LzEqTKXd8Pp5tgRwpDr77MTUwOKMMQ4k3KL1IRsx8WEWsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGph1at3jaw5ry4afPvCXBTxsukOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmY0 MTIxNS0zMDI2LTQzNGQtOTYzYy0zMjdhZmRjZjVjYmUvMzI2Y2UyMWYtYTM2MC0z ZmFkLWIyZGUtNjliZDVlODg0MjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZmNDEyMTUtMzAyNi00MzRkLTk2 M2MtMzI3YWZkY2Y1Y2JlLzFmZjQxMjE1LTMwMjYtNDM0ZC05NjNjLTMyN2FmZGNm NWNiZS5jcmwwHwYDVR0jBBgwFoAUriL8R2Ax2c+HjOhICWv28yNxC3swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmY0MTIxNS0zMDI2LTQzNGQtOTYzYy0zMjdh ZmRjZjVjYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZCmJ6WMDskpx5zhPaIZVuoYcLFrbDACAYOA5d1vXV3xdJoxlzXnaws mc8V1WacT1QpKZAG18juVLUywAVUwz+FvTKsAK7+roRBk4fJPDNDiAiK4oK2vj9u AVxwPNtLSl2BwAZBXRiAPy6b2ptKyWLGQs3b+L+GfagIVGZVChEbf3GP6EJYlRv4 N6YEsErMMoMqGhDti+uEpXAg1VMQw9aJdVbWiM5o4pYNF6UPHleGbS1Nofv4jQDU AiHT1JRcxAVJhXzawFGV+MlWEhkEbUbbO2PnjPeNeE6p+yoQm0JGaMFXXKI7qe2x XeEU8nsqlkpW132TMV76GHIQ9JGqfPI= -----END CERTIFICATE-----Generated at Wed Nov 5 21:13:42 2025 by rpki-client