$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/2a2d503d-6cb3-39a3-805e-a9f41d3f8ee8.roa File: 2a2d503d-6cb3-39a3-805e-a9f41d3f8ee8.roa (raw, json) Hash identifier: dVzxvs2cK93cUnx0tPtFdd8ehE9l1WWsfYMmHmVDLbQ= Subject key identifier: 57:FE:1B:57:FA:80:87:11:5D:BE:D0:5D:2B:A3:B1:A4:4B:BE:49:1D Certificate issuer: /CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Certificate serial: 010D0C9F4328584F3A17DE478BEB4CAC181EBC00 Authority key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/2a2d503d-6cb3-39a3-805e-a9f41d3f8ee8.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 395516 IP address blocks: 153.65.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:de:47:8b:eb:4c:ac:18:1e:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=24449408-5d42-4f34-8ca3-a58290ce7972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8f:01:08:6f:b9:48:14:d1:9f:5d:8f:a0:b1: db:1c:21:90:12:60:5c:45:f7:7b:8f:db:c4:c0:06: 93:e5:2c:44:12:db:d5:74:5c:22:e1:25:00:6b:d5: 5a:a4:55:df:b6:d5:40:4a:d2:5a:da:5e:61:04:06: 95:2f:80:f4:90:10:99:3c:c3:2e:ca:16:7e:eb:69: ba:79:c4:fe:08:aa:84:92:f8:c2:c1:f3:19:b9:90: 29:9a:f3:41:95:41:c7:9e:be:2c:34:c8:e6:b3:c1: d7:cc:22:9e:31:42:01:0c:56:10:aa:db:9d:e4:14: a5:7b:d4:c5:fb:8e:fb:2e:40:58:ad:f8:f5:44:61: 4d:04:33:f9:8d:1a:c1:9d:81:57:c0:93:29:68:e1: 95:60:b0:f6:be:82:b7:e4:86:8b:6c:75:a5:c7:f7: 47:2e:b4:ae:9b:2a:1e:6d:51:b5:6c:c3:77:ae:7d: d6:ae:47:b8:e1:41:d6:5d:86:77:91:c6:4a:db:f3: a1:09:ec:f8:bd:e7:d9:8b:67:8e:84:6f:f2:27:2c: 4f:ec:e9:1f:8d:a1:fb:17:4c:3a:d8:65:bc:c5:b4: b7:47:69:c9:8d:3b:be:9e:c5:f1:50:ee:b5:3a:fe: ad:a1:46:fd:5b:5f:68:d0:45:f2:83:60:93:19:f9: d4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FE:1B:57:FA:80:87:11:5D:BE:D0:5D:2B:A3:B1:A4:4B:BE:49:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/2a2d503d-6cb3-39a3-805e-a9f41d3f8ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl X509v3 Authority Key Identifier: keyid:1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer sbgp-ipAddrBlock: critical IPv4: 153.65.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a8:3f:48:27:a1:8b:13:60:3f:a6:7b:c7:3a:39:d3:48:a5: ee:32:b4:51:f7:12:08:fc:73:82:e3:ef:79:6c:e0:42:93:ae: 94:a6:2c:d5:7d:3a:61:45:37:44:70:7c:fc:9e:13:86:c4:12: 6b:19:0b:82:02:e5:43:1c:a9:16:7a:22:1f:82:e9:19:cc:30: 77:b0:0d:07:85:c9:4f:69:e9:a2:94:1c:eb:e8:c6:b8:57:60: 73:6a:50:f7:10:9c:1a:75:e5:a9:01:9a:b2:c0:62:60:96:e8: ac:e7:3e:e1:dc:86:02:c7:69:29:89:4e:9d:4a:09:9d:10:88: 5c:5d:95:4a:cc:ec:a3:04:fa:c5:ef:9e:d0:7a:66:04:41:5c: d4:0e:09:e2:9b:57:b9:6a:07:a3:5a:89:ed:ef:e9:13:4f:90: 2e:b4:c3:0f:be:a5:84:49:64:c6:d1:a6:8b:19:1a:2d:6b:9f: 7c:9b:ec:eb:40:f9:6a:a6:eb:4e:39:08:01:69:0f:5e:d8:d3: f4:97:5a:ab:4a:01:71:f8:e4:8e:fa:ea:66:55:e2:6b:d2:47: dc:a3:f9:6f:16:d6:7a:3d:b5:12:06:2c:fe:30:8b:82:6e:03: 7f:71:92:06:cc:0c:aa:2c:25:1e:26:91:3b:80:9e:e5:c1:e2: 48:f6:38:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F95Hi+tMrBgevAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyN2JlM2UtNTY2My00MTk2LWJiOGEtOTY2ZThhNmJm NTcxMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MjQ0NDk0MDgtNWQ0Mi00ZjM0LThjYTMtYTU4MjkwY2U3OTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY8BCG+5SBTRn12PoLHbHCGQEmBcRfd7j9vE wAaT5SxEEtvVdFwi4SUAa9VapFXfttVAStJa2l5hBAaVL4D0kBCZPMMuyhZ+62m6 ecT+CKqEkvjCwfMZuZApmvNBlUHHnr4sNMjms8HXzCKeMUIBDFYQqtud5BSle9TF +477LkBYrfj1RGFNBDP5jRrBnYFXwJMpaOGVYLD2voK35IaLbHWlx/dHLrSumyoe bVG1bMN3rn3Wrke44UHWXYZ3kcZK2/OhCez4vefZi2eOhG/yJyxP7OkfjaH7F0w6 2GW8xbS3R2nJjTu+nsXxUO61Ov6toUb9W19o0EXyg2CTGfnUdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFf+G1f6gIcRXb7QXSujsaRLvkkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3 YmUzZS01NjYzLTQxOTYtYmI4YS05NjZlOGE2YmY1NzEvMmEyZDUwM2QtNmNiMy0z OWEzLTgwNWUtYTlmNDFkM2Y4ZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEyN2JlM2UtNTY2My00MTk2LWJi OGEtOTY2ZThhNmJmNTcxL2FhMjdiZTNlLTU2NjMtNDE5Ni1iYjhhLTk2NmU4YTZi ZjU3MS5jcmwwHwYDVR0jBBgwFoAUG5CFrukXfW06zWMhpYfluAl2X+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3YmUzZS01NjYzLTQxOTYtYmI4YS05NjZl OGE2YmY1NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmUEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWoP0gnoYsTYD+me8c6OdNIpe4ytFH3Egj8c4Lj73ls4EKTrpSmLNV9 OmFFN0RwfPyeE4bEEmsZC4IC5UMcqRZ6Ih+C6RnMMHewDQeFyU9p6aKUHOvoxrhX YHNqUPcQnBp15akBmrLAYmCW6KznPuHchgLHaSmJTp1KCZ0QiFxdlUrM7KME+sXv ntB6ZgRBXNQOCeKbV7lqB6Naie3v6RNPkC60ww++pYRJZMbRposZGi1rn3yb7OtA +Wqm6045CAFpD17Y0/SXWqtKAXH45I766mZV4mvSR9yj+W8W1no9tRIGLP4wi4Ju A39xkgbMDKosJR4mkTuAnuXB4kj2OIY= -----END CERTIFICATE-----Generated at Mon Sep 21 15:49:07 2026 by rpki-client