$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/530783dc-2ac1-3a1f-9871-28b623d2aece.roa File: 530783dc-2ac1-3a1f-9871-28b623d2aece.roa (raw, json) Hash identifier: GqksZf7KIvTfrk8jiaMSPV8OXdix4EqyW+dL/EW7pnU= Subject key identifier: 62:F7:AE:EA:35:67:71:B1:7D:11:35:70:5D:55:CA:95:8F:75:10:64 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584C7EE15D51881158A5A6691EC0 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/530783dc-2ac1-3a1f-9871-28b623d2aece.roa Signing time: Mon 12 Jan 2026 02:00:30 +0000 ROA not before: Mon 12 Jan 2026 02:00:30 +0000 ROA not after: Sun 12 Apr 2026 01:00:30 +0000 asID: 22297 IP address blocks: 164.153.165.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7e:e1:5d:51:88:11:58:a5:a6:69:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Jan 12 02:00:30 2026 GMT Not After : Apr 12 01:00:30 2026 GMT Subject: CN=1d31d48e-a3cc-4f2a-88fc-046b4f1d4844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c6:9b:87:6d:69:19:4d:30:d8:35:71:14:95: c3:6f:72:04:9f:1c:57:ef:51:8d:0e:e8:3d:62:8c: b6:a4:d8:22:94:64:6c:bd:3d:6c:a4:55:a8:bd:82: 73:6f:43:f7:b4:cb:46:21:3d:a9:92:62:c7:aa:c0: cc:7a:81:0a:ea:c3:09:51:b6:70:2e:bd:18:b2:bc: ea:18:7b:bc:91:fb:18:32:93:34:99:df:be:59:a8: 48:1d:e8:18:24:5f:12:4f:a0:ad:d9:6c:24:ec:5c: 3c:65:44:9c:12:21:f8:13:55:6b:87:cf:10:3b:b3: 3c:e9:da:ce:dd:bd:07:27:d6:be:f5:85:d6:88:b8: 56:a5:21:18:16:43:24:40:af:80:e6:e3:34:8b:57: 9a:82:d2:56:bf:74:36:22:4a:1a:a0:1d:a8:2b:d7: cd:1a:b4:76:bd:62:0f:90:27:bf:62:7b:f7:ff:e9: fc:db:c4:9c:39:2c:61:5d:45:1d:d5:b6:5b:b5:b2: 97:22:2b:4d:4c:f1:ac:93:9a:7e:9c:d5:a6:4c:ca: 62:5f:60:1f:37:d3:d4:1e:74:5a:a2:9f:1f:1c:2b: 87:28:3f:f1:0b:0f:f8:27:4f:cb:b1:96:9c:2f:be: 5a:b0:31:e3:84:8c:aa:42:85:ff:a3:1b:6d:0c:09: 4e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F7:AE:EA:35:67:71:B1:7D:11:35:70:5D:55:CA:95:8F:75:10:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/530783dc-2ac1-3a1f-9871-28b623d2aece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d2:99:cd:97:34:42:9d:f3:66:00:78:53:29:ab:1b:32:eb: 63:e2:ac:b9:fd:f8:1c:2e:ce:cb:a9:6f:2c:88:49:9b:0a:c1: 33:6a:1b:55:40:c0:b0:dd:03:2f:f4:ea:37:f7:93:cb:37:96: b9:2d:c8:93:35:9a:96:e6:8c:35:36:eb:47:4b:66:d0:15:a4: 64:61:c1:2d:01:68:e7:7f:45:81:5e:30:3e:7c:11:be:73:2d: 5f:41:d2:46:e2:bc:46:eb:38:3f:78:c7:f3:3f:3c:53:d4:ee: bf:6a:6d:68:89:15:71:53:56:6a:8d:d7:1b:ea:b6:b1:31:47: d2:e0:f9:1b:c2:fe:05:72:69:b9:c0:09:32:0b:72:59:28:d1: e0:0e:86:ae:08:ef:56:3a:c3:5b:04:d1:53:da:11:f7:9e:dd: 8b:da:5f:35:be:4c:48:df:3a:6c:1b:b0:90:b3:fb:90:28:2c: 5d:c3:9f:a0:e5:cf:08:5b:ca:6e:32:2b:83:78:5f:b9:bb:53: 82:55:94:93:a3:6d:1a:64:67:41:58:b4:81:49:93:09:63:ef: 8d:2c:e3:29:e9:15:e4:94:5e:89:e0:cd:1d:9c:c4:e8:58:02: 38:cd:5f:b8:39:0b:26:aa:10:a6:83:70:6b:c4:15:f1:1e:fc: 43:3f:a0:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx+4V1RiBFYpaZpHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI2MDExMjAyMDAzMFoXDTI2MDQxMjAxMDAzMFowLzEtMCsGA1UEAxMk MWQzMWQ0OGUtYTNjYy00ZjJhLTg4ZmMtMDQ2YjRmMWQ0ODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMabh21pGU0w2DVxFJXDb3IEnxxX71GNDug9 Yoy2pNgilGRsvT1spFWovYJzb0P3tMtGIT2pkmLHqsDMeoEK6sMJUbZwLr0Ysrzq GHu8kfsYMpM0md++WahIHegYJF8ST6Ct2Wwk7Fw8ZUScEiH4E1Vrh88QO7M86drO 3b0HJ9a+9YXWiLhWpSEYFkMkQK+A5uM0i1eagtJWv3Q2IkoaoB2oK9fNGrR2vWIP kCe/Ynv3/+n828ScOSxhXUUd1bZbtbKXIitNTPGsk5p+nNWmTMpiX2AfN9PUHnRa op8fHCuHKD/xCw/4J0/LsZacL75asDHjhIyqQoX/oxttDAlOVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGL3ruo1Z3GxfRE1cF1VypWPdRBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvNTMwNzgzZGMtMmFjMS0z YTFmLTk4NzEtMjhiNjIzZDJhZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTSmc2XNEKd82YAeFMpqxsy62PirLn9+BwuzsupbyyISZsKwTNqG1VA wLDdAy/06jf3k8s3lrktyJM1mpbmjDU260dLZtAVpGRhwS0BaOd/RYFeMD58Eb5z LV9B0kbivEbrOD94x/M/PFPU7r9qbWiJFXFTVmqN1xvqtrExR9Lg+RvC/gVyabnA CTILclko0eAOhq4I71Y6w1sE0VPaEfee3YvaXzW+TEjfOmwbsJCz+5AoLF3Dn6Dl zwhbym4yK4N4X7m7U4JVlJOjbRpkZ0FYtIFJkwlj740s4ynpFeSUXongzR2cxOhY AjjNX7g5CyaqEKaDcGvEFfEe/EM/oAQ= -----END CERTIFICATE-----Generated at Mon Mar 2 08:06:44 2026 by rpki-client