$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/32c5dc2d-cd82-38f9-9eed-463371c750d4.roa File: 32c5dc2d-cd82-38f9-9eed-463371c750d4.roa (raw, json) Hash identifier: lzYsMV1WDKHq0kp/Ghn/90GcfgtoGA2Clgfr8lche5Q= Subject key identifier: 2C:D2:06:3D:50:9B:64:94:BD:00:6B:FF:16:79:7A:4B:92:AB:DD:76 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F2ABD01332107D6F006B3DFE0 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/32c5dc2d-cd82-38f9-9eed-463371c750d4.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 164.153.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:01:33:21:07:d6:f0:06:b3:df:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=3d7a8d39-aff2-428f-b5dc-9301dc2e78b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d9:5d:5d:5c:7f:3e:7c:c5:c8:ed:6a:9c:25: 05:fe:3e:8a:92:40:c1:89:b9:f5:bb:d1:30:2b:db: 69:4f:f5:96:87:a3:7d:58:70:9d:cf:99:7d:65:60: c7:86:d9:0f:58:3a:2b:b8:7b:f7:54:85:43:7b:d1: 30:da:a3:a4:3f:2f:ee:a4:8f:b1:02:a6:39:af:6e: f9:ef:72:a3:44:ed:09:60:97:9b:cf:74:f5:44:5f: 18:ae:cc:46:94:e5:40:80:2a:3e:b5:94:c0:bc:83: bd:d3:07:f9:3e:91:75:a7:1f:50:13:6a:cb:17:45: bb:4c:7f:19:e3:d9:32:88:5b:1b:2c:b4:a2:b6:c6: 91:40:16:5f:66:11:db:6b:0e:fb:f6:45:6d:77:ce: df:8e:a7:87:c7:f0:8a:ce:96:17:24:f9:9b:a3:46: 5d:ae:ec:55:ca:f4:85:b0:91:ef:5e:d5:13:69:aa: a5:47:9b:5c:fc:e6:31:ba:47:4e:d3:4b:8b:07:dd: 15:a9:f0:ef:7c:5c:bb:69:f8:7a:f4:3d:27:35:4e: e3:a7:37:97:41:9e:69:26:1e:62:39:9c:bf:e9:9e: d8:03:d9:a9:13:1a:85:ee:2b:42:08:83:33:9d:38: 8e:e1:f4:ac:91:6a:c8:26:60:2e:8f:65:a9:87:2d: 78:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D2:06:3D:50:9B:64:94:BD:00:6B:FF:16:79:7A:4B:92:AB:DD:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/32c5dc2d-cd82-38f9-9eed-463371c750d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:20:4e:38:26:2e:64:52:10:3b:38:c4:1e:d5:29:4d:a6:e3: 4a:ab:fb:0e:70:8d:c9:42:da:64:df:3f:69:b4:03:d6:e9:9b: bd:15:20:6a:9c:df:f7:40:3b:b6:a6:4e:6e:97:08:22:d4:bd: f2:94:e9:ee:aa:52:59:5b:0c:05:82:54:b5:cb:22:08:09:67: 2d:ff:da:b9:34:2b:aa:54:1c:d1:c9:60:36:a0:28:cd:96:af: 8c:e1:8c:d0:2c:26:22:f0:f6:0d:f1:85:c8:f5:3f:94:3f:d3: 3f:a6:43:91:d7:db:c4:12:de:6b:8a:f6:10:ab:ed:62:0e:ed: 3f:af:50:3c:92:88:ad:76:22:1d:70:24:bc:e1:c0:98:b1:3e: 1b:e0:10:9e:1e:f1:93:69:74:27:10:35:f0:af:20:ff:6e:8d: 8a:92:43:06:99:1f:03:cf:87:1e:3f:a3:45:7b:36:55:5b:81: 75:b4:75:bc:46:d7:36:71:99:cb:df:cb:3b:14:92:31:ce:2c: a6:da:5c:6a:ba:b7:37:40:db:31:7c:59:df:82:2a:39:b7:8f: 0c:a2:b5:e7:07:a2:72:fd:b6:dc:33:70:c6:fc:04:d8:94:76: f4:3b:0a:ba:48:d3:69:64:f7:dd:9f:c0:b7:99:63:99:b1:13: f7:d2:89:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQEzIQfW8Aaz3+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk M2Q3YThkMzktYWZmMi00MjhmLWI1ZGMtOTMwMWRjMmU3OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktldXVx/PnzFyO1qnCUF/j6KkkDBibn1u9Ew K9tpT/WWh6N9WHCdz5l9ZWDHhtkPWDoruHv3VIVDe9Ew2qOkPy/upI+xAqY5r275 73KjRO0JYJebz3T1RF8YrsxGlOVAgCo+tZTAvIO90wf5PpF1px9QE2rLF0W7TH8Z 49kyiFsbLLSitsaRQBZfZhHbaw779kVtd87fjqeHx/CKzpYXJPmbo0ZdruxVyvSF sJHvXtUTaaqlR5tc/OYxukdO00uLB90VqfDvfFy7afh69D0nNU7jpzeXQZ5pJh5i OZy/6Z7YA9mpExqF7itCCIMznTiO4fSskWrIJmAuj2Wphy14BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzSBj1Qm2SUvQBr/xZ5ekuSq912MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvMzJjNWRjMmQtY2Q4Mi0z OGY5LTllZWQtNDYzMzcxYzc1MGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4gTjgmLmRSEDs4xB7VKU2m40qr+w5wjclC2mTfP2m0A9bpm70VIGqc 3/dAO7amTm6XCCLUvfKU6e6qUllbDAWCVLXLIggJZy3/2rk0K6pUHNHJYDagKM2W r4zhjNAsJiLw9g3xhcj1P5Q/0z+mQ5HX28QS3muK9hCr7WIO7T+vUDySiK12Ih1w JLzhwJixPhvgEJ4e8ZNpdCcQNfCvIP9ujYqSQwaZHwPPhx4/o0V7NlVbgXW0dbxG 1zZxmcvfyzsUkjHOLKbaXGq6tzdA2zF8Wd+CKjm3jwyitecHonL9ttwzcMb8BNiU dvQ7CrpI02lk992fwLeZY5mxE/fSiW4= -----END CERTIFICATE-----Generated at Fri Sep 25 18:48:13 2026 by rpki-client