$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa File: cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa (raw, json) Hash identifier: H8Ru1k2fUydTDVyzzxbAeYFHezzU5JLqNuQ3hS6C5S0= Subject key identifier: 0F:16:4E:A7:AF:EE:8B:83:CE:90:D7:8A:B6:31:D0:C1:B9:21:2D:C9 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584CB981CD8DF0639B27FF259E00 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 14618 IP address blocks: 164.153.128.0/24 maxlen: 32 164.153.129.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:cd:8d:f0:63:9b:27:ff:25:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=78fd1be1-2e6c-444b-89e0-c5a016f11253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e1:06:74:64:65:ab:67:1f:c6:99:b1:bd:eb: b4:86:64:cc:a8:00:94:38:92:98:54:51:69:b1:1c: fb:01:7c:cc:3a:0a:5e:8a:b2:30:16:ec:6c:1c:8a: 07:04:d5:0e:03:f7:a4:b0:b5:a2:ff:be:ad:c3:ae: b4:ad:5b:a0:80:85:c0:c1:f7:ad:8e:fa:e9:9b:f9: 42:b3:8c:1e:fe:42:3a:91:9f:c6:8a:61:44:84:1e: a0:2c:21:7e:0e:fe:22:dd:0e:fa:42:12:a7:c1:84: b2:92:9b:fd:a9:d6:dd:04:94:50:df:bf:50:f3:bd: 47:c8:c9:8a:00:89:0d:7f:00:98:30:b6:c6:93:8f: fd:29:0d:8e:0b:1d:b3:e8:5f:f7:62:a7:1c:68:25: 11:5a:4d:cf:6f:b9:c5:29:0f:15:ac:fb:f3:3d:9e: b8:76:f8:b0:4d:b4:5c:ef:63:a4:aa:07:88:59:f4: db:46:a9:19:df:32:d3:d9:66:c5:37:11:db:c1:a8: 95:03:ec:21:39:14:51:c9:38:06:53:91:11:c6:0e: 30:e5:66:58:aa:19:16:6d:89:2a:1a:b0:6c:37:41: 90:1d:9e:4c:f9:f7:54:92:16:30:a8:9f:2c:9c:e8: c8:ca:08:0b:f4:5f:ec:ab:43:47:89:3a:91:3a:5c: 1c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:16:4E:A7:AF:EE:8B:83:CE:90:D7:8A:B6:31:D0:C1:B9:21:2D:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:96:85:7e:e0:f4:a4:bc:31:f1:bb:34:d5:3c:12:db:e5:b5: 1d:24:75:41:cf:5f:04:c4:8b:cf:e2:4c:1b:56:b1:4a:e1:c2: c0:bf:19:a3:ff:73:40:38:7f:ec:bd:31:bf:a9:ca:90:7d:76: 91:16:9e:4d:36:d4:9e:71:ba:1b:ba:37:fb:0d:1e:c9:24:2a: d4:c3:96:f0:2c:a5:19:14:8c:fb:7d:20:e8:b2:86:59:cc:0b: 9e:77:4a:31:bb:46:93:a9:6d:94:f0:ee:7e:2e:41:33:c5:ce: 2a:a7:f1:26:bd:e7:55:5e:67:e6:eb:89:c3:24:04:5f:27:e9: 14:ff:4e:ed:ca:f9:c3:33:8c:42:89:f9:cd:f6:c5:3d:fc:00: 03:7b:a0:76:71:55:0d:4f:da:37:97:bf:a6:6a:ea:d1:87:e4: 2b:ad:d2:06:c7:ba:cb:6a:cc:25:c4:2b:7f:c5:94:66:ac:77: 00:6f:72:c6:88:ce:48:28:c2:cf:6d:98:49:97:24:2f:20:6f: a2:33:37:52:09:10:36:2e:e8:52:5c:c6:6a:07:94:4e:e4:96: 20:f7:a9:c0:67:b0:22:6d:32:36:cc:3a:0f:3d:bc:14:ea:45: 6a:9f:45:85:45:38:c3:2d:e6:42:d7:af:63:23:40:84:57:54: 22:2d:3f:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gc2N8GObJ/8lngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk NzhmZDFiZTEtMmU2Yy00NDRiLTg5ZTAtYzVhMDE2ZjExMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOEGdGRlq2cfxpmxveu0hmTMqACUOJKYVFFp sRz7AXzMOgpeirIwFuxsHIoHBNUOA/eksLWi/76tw660rVuggIXAwfetjvrpm/lC s4we/kI6kZ/GimFEhB6gLCF+Dv4i3Q76QhKnwYSykpv9qdbdBJRQ379Q871HyMmK AIkNfwCYMLbGk4/9KQ2OCx2z6F/3YqccaCURWk3Pb7nFKQ8VrPvzPZ64dviwTbRc 72OkqgeIWfTbRqkZ3zLT2WbFNxHbwaiVA+whORRRyTgGU5ERxg4w5WZYqhkWbYkq GrBsN0GQHZ5M+fdUkhYwqJ8snOjIyggL9F/sq0NHiTqROlwcMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8WTqev7ouDzpDXirYx0MG5IS3JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvY2QyOGYxZDUtY2JiNi0z YWI2LWI3M2EtNDM0ZDUwNWNiMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpJmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyWhX7g9KS8MfG7NNU8EtvltR0kdUHPXwTEi8/iTBtWsUrhwsC/GaP/ c0A4f+y9Mb+pypB9dpEWnk021J5xuhu6N/sNHskkKtTDlvAspRkUjPt9IOiyhlnM C553SjG7RpOpbZTw7n4uQTPFziqn8Sa951VeZ+bricMkBF8n6RT/Tu3K+cMzjEKJ +c32xT38AAN7oHZxVQ1P2jeXv6Zq6tGH5Cut0gbHustqzCXEK3/FlGasdwBvcsaI zkgows9tmEmXJC8gb6IzN1IJEDYu6FJcxmoHlE7kliD3qcBnsCJtMjbMOg89vBTq RWqfRYVFOMMt5kLXr2MjQIRXVCItP9A= -----END CERTIFICATE-----Generated at Mon Mar 2 00:51:07 2026 by rpki-client