$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/0e651a5d-eb99-327a-a275-5487fc0e5f47.roa File: 0e651a5d-eb99-327a-a275-5487fc0e5f47.roa (raw, json) Hash identifier: NzbRdvtEl7E0whRLZ+KpqzZfhpbBUWMLKn+SG9avavw= Subject key identifier: 66:05:40:31:9F:E2:53:3E:9A:E5:26:49:1F:B1:C9:8A:AF:DF:48:0D Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F2ABD0110FEAAE6BF813C2300 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/0e651a5d-eb99-327a-a275-5487fc0e5f47.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 164.153.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:01:10:fe:aa:e6:bf:81:3c:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=0aaf7ad3-d0e9-4d8c-bf2a-7b2048fa5908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:45:ca:b7:3e:64:83:cd:a5:9a:b6:ba:e6:a6: 66:5f:dc:22:9b:5c:21:91:57:44:d3:26:b7:25:52: 39:50:3c:08:9b:68:87:e5:27:ae:d2:72:91:07:9c: 9c:c9:30:9d:7e:32:a1:8b:cc:e1:ec:9f:ff:fa:ed: bd:55:62:42:18:01:12:e4:17:f0:f2:6e:51:36:98: 2f:5e:cd:da:53:3c:95:6a:72:13:51:b8:2f:f7:cb: 65:8d:ca:e0:ba:00:db:7f:26:5f:07:5c:28:61:b1: 06:36:6d:99:aa:0a:e3:75:55:a4:8d:87:26:0d:a0: 3e:f5:16:96:ec:7f:13:b1:7b:6c:8b:8f:87:17:6b: f7:cf:a7:88:d6:ac:e7:5a:d5:25:c7:1e:8a:1c:ab: 7a:d3:4d:47:c4:0b:0c:85:ed:73:08:4d:4b:b1:9e: 91:fe:4d:8f:4b:95:d3:f6:2a:8f:d9:b8:1e:84:8e: 43:b8:74:8b:79:ea:59:3e:a1:25:9a:31:03:f3:cb: fb:b7:d0:fa:71:4b:49:17:23:cc:5b:5f:af:f8:1f: 3f:1b:ee:f3:6f:c8:a7:8f:31:26:af:35:36:74:eb: 2c:ef:71:1d:c6:bc:2e:ba:f3:67:71:ad:3d:ee:ba: 12:cf:43:5f:7b:a1:ba:28:26:7f:f1:65:79:5a:60: 8a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:05:40:31:9F:E2:53:3E:9A:E5:26:49:1F:B1:C9:8A:AF:DF:48:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/0e651a5d-eb99-327a-a275-5487fc0e5f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f7:b1:11:1f:50:00:4d:30:4d:34:9a:b0:77:26:48:dc:c2: 8c:0a:f1:66:40:9d:0f:81:06:3a:64:64:81:41:81:f0:c7:9d: 7b:35:95:bc:02:bc:41:cc:e0:24:4e:03:6e:4e:77:36:54:7d: 58:48:bc:a2:01:4d:d3:11:39:ef:84:ec:21:fd:8c:57:34:ee: 86:e9:97:47:a0:03:5b:ee:12:56:d8:cf:78:b7:e4:20:14:57: 3e:bf:6b:53:09:ba:f6:fd:fe:ed:a7:5a:4c:57:2e:ab:07:84: c9:f0:81:f4:00:a7:84:ed:a5:90:be:4b:0a:4a:d0:b4:60:5d: 0e:84:08:85:f3:9a:ac:64:f4:2c:07:b0:ee:f4:d8:86:12:be: 4f:b2:5b:49:67:65:50:13:13:b5:6d:83:9d:30:16:de:da:9f: d2:69:76:7e:4d:e6:90:5e:7d:da:d8:78:51:4d:76:52:5a:df: 73:3b:67:61:2b:da:93:9f:11:79:79:d4:ef:43:04:f1:72:46: 4c:d5:15:f2:a8:f8:96:f1:9e:87:e3:7f:11:99:15:44:6d:61: e8:5a:2a:ab:11:d4:5b:62:23:a6:96:73:69:dc:c8:8a:a8:a1: cf:91:2b:e2:20:d9:57:91:0f:d9:b0:60:27:a9:ba:4f:9d:1e: 25:38:40:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQEQ/qrmv4E8IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MGFhZjdhZDMtZDBlOS00ZDhjLWJmMmEtN2IyMDQ4ZmE1OTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kXKtz5kg82lmra65qZmX9wim1whkVdE0ya3 JVI5UDwIm2iH5Seu0nKRB5ycyTCdfjKhi8zh7J//+u29VWJCGAES5Bfw8m5RNpgv Xs3aUzyVanITUbgv98tljcrgugDbfyZfB1woYbEGNm2ZqgrjdVWkjYcmDaA+9RaW 7H8TsXtsi4+HF2v3z6eI1qznWtUlxx6KHKt6001HxAsMhe1zCE1LsZ6R/k2PS5XT 9iqP2bgehI5DuHSLeepZPqElmjED88v7t9D6cUtJFyPMW1+v+B8/G+7zb8injzEm rzU2dOss73EdxrwuuvNnca097roSz0Nfe6G6KCZ/8WV5WmCKCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYFQDGf4lM+muUmSR+xyYqv30gNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvMGU2NTFhNWQtZWI5OS0z MjdhLWEyNzUtNTQ4N2ZjMGU1ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED3sREfUABNME00mrB3JkjcwowK8WZAnQ+BBjpkZIFBgfDHnXs1lbwC vEHM4CROA25OdzZUfVhIvKIBTdMROe+E7CH9jFc07obpl0egA1vuElbYz3i35CAU Vz6/a1MJuvb9/u2nWkxXLqsHhMnwgfQAp4TtpZC+SwpK0LRgXQ6ECIXzmqxk9CwH sO702IYSvk+yW0lnZVATE7Vtg50wFt7an9Jpdn5N5pBefdrYeFFNdlJa33M7Z2Er 2pOfEXl51O9DBPFyRkzVFfKo+JbxnofjfxGZFURtYehaKqsR1FtiI6aWc2ncyIqo oc+RK+Ig2VeRD9mwYCepuk+dHiU4QNk= -----END CERTIFICATE-----Generated at Tue Sep 29 19:36:42 2026 by rpki-client