$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/3f2cb853-b682-3954-a30c-f36a2d2f7b8d.roa File: 3f2cb853-b682-3954-a30c-f36a2d2f7b8d.roa (raw, json) Hash identifier: xRGbaIQl44DTI+xw8ppflGZc5yloilvIfDxwkzH/gR8= Subject key identifier: C3:EB:A4:DD:AF:C6:82:81:80:72:FF:AC:54:5D:76:78:00:A4:7E:1B Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F331D0EAFF211381D1B21BA80 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/3f2cb853-b682-3954-a30c-f36a2d2f7b8d.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 10279 IP address blocks: 164.153.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:0e:af:f2:11:38:1d:1b:21:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=e0457af1-d833-438e-9d52-9a4553a8082a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a6:6d:af:9a:cc:40:56:c4:6a:ed:0c:b4:b0: 60:03:89:82:07:c4:d7:b0:f2:3f:c0:9b:3c:ee:11: aa:28:4b:9a:6a:ec:6a:b6:ec:2b:ba:f6:55:40:8c: 2d:16:fc:50:f0:e7:44:73:72:6b:db:c2:c6:48:d6: c1:39:69:fa:98:62:af:67:f6:86:3d:98:31:ee:0c: 2e:59:44:2e:42:71:e1:b9:76:d8:8a:9c:b8:1c:69: d7:89:18:5a:09:78:17:60:3e:a6:84:c1:cb:f4:93: 60:b0:6e:88:03:ef:6f:18:b2:f0:c0:31:3f:ac:9f: 0d:40:0e:60:ca:b3:06:56:08:98:99:aa:f6:a6:70: cd:36:5c:c8:e6:b7:d2:91:bc:ba:be:d1:0f:ae:49: f0:7d:2a:74:e7:40:fa:b0:70:f5:27:36:7b:2c:8c: 4c:87:e8:38:31:b6:2f:72:ff:42:47:eb:46:fb:84: c2:f8:5b:5d:31:bc:93:f1:11:32:cd:2b:f3:90:d6: 29:01:5b:24:ab:68:42:02:c9:e0:a4:66:27:96:30: 13:cc:19:fb:d4:eb:6d:31:eb:55:d0:ea:35:5c:6a: a9:f2:50:1c:3e:79:5a:f8:4f:dc:a6:7f:62:2a:1f: 62:69:16:ca:1a:2b:3c:fb:4c:71:dc:d2:20:e8:ae: ad:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EB:A4:DD:AF:C6:82:81:80:72:FF:AC:54:5D:76:78:00:A4:7E:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/3f2cb853-b682-3954-a30c-f36a2d2f7b8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:95:73:92:eb:06:05:02:d5:1f:91:0f:e6:3c:8f:d9:0c:6e: 81:6f:9f:a8:c6:69:a2:7b:46:b4:50:b0:7b:fd:be:7a:4e:53: 85:e4:84:4d:b6:29:c1:0e:e7:c5:25:84:bf:8a:65:01:fd:a8: d7:1f:58:e8:c5:72:48:26:d7:71:c1:d2:5c:5b:2e:2e:41:16: cd:e1:60:a3:09:a6:c3:28:a2:ec:37:f1:8a:e7:bf:94:c1:9c: 95:74:52:5e:42:bd:29:4b:87:2f:5f:f4:0f:40:9e:24:54:5b: 33:73:7d:62:83:96:b2:87:b1:73:7d:16:9d:6f:7a:69:2a:7d: ca:b0:9e:33:26:88:21:c2:be:5c:10:37:33:fa:63:09:1f:a8: 89:58:a9:ce:20:b3:30:10:2d:16:3a:78:64:5c:00:c1:0b:99: 44:e4:cf:95:7d:8a:24:7d:61:59:a5:e3:a7:b7:5c:02:ac:2a: 1e:f0:cf:95:46:08:ce:44:4a:15:de:5e:aa:f2:31:5d:45:de: b3:d9:bf:76:ac:82:1e:a5:c1:98:00:eb:57:7a:d0:d2:ce:66: fb:24:c9:15:71:b7:f5:d8:67:0d:ef:a2:31:2c:b0:4c:f9:9f: a3:f1:95:8d:c0:10:2c:3b:aa:bf:b9:92:2d:3d:33:4e:fe:2f: 13:25:b0:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHQ6v8hE4HRshuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk ZTA0NTdhZjEtZDgzMy00MzhlLTlkNTItOWE0NTUzYTgwODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaZtr5rMQFbEau0MtLBgA4mCB8TXsPI/wJs8 7hGqKEuaauxqtuwruvZVQIwtFvxQ8OdEc3Jr28LGSNbBOWn6mGKvZ/aGPZgx7gwu WUQuQnHhuXbYipy4HGnXiRhaCXgXYD6mhMHL9JNgsG6IA+9vGLLwwDE/rJ8NQA5g yrMGVgiYmar2pnDNNlzI5rfSkby6vtEPrknwfSp050D6sHD1JzZ7LIxMh+g4MbYv cv9CR+tG+4TC+FtdMbyT8REyzSvzkNYpAVskq2hCAsngpGYnljATzBn71OttMetV 0Oo1XGqp8lAcPnla+E/cpn9iKh9iaRbKGis8+0xx3NIg6K6tWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPrpN2vxoKBgHL/rFRddngApH4bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvM2YyY2I4NTMtYjY4Mi0z OTU0LWEzMGMtZjM2YTJkMmY3YjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2Vc5LrBgUC1R+RD+Y8j9kMboFvn6jGaaJ7RrRQsHv9vnpOU4XkhE22 KcEO58UlhL+KZQH9qNcfWOjFckgm13HB0lxbLi5BFs3hYKMJpsMoouw38Yrnv5TB nJV0Ul5CvSlLhy9f9A9AniRUWzNzfWKDlrKHsXN9Fp1vemkqfcqwnjMmiCHCvlwQ NzP6YwkfqIlYqc4gszAQLRY6eGRcAMELmUTkz5V9iiR9YVml46e3XAKsKh7wz5VG CM5EShXeXqryMV1F3rPZv3asgh6lwZgA61d60NLOZvskyRVxt/XYZw3vojEssEz5 n6PxlY3AECw7qr+5ki09M07+LxMlsIQ= -----END CERTIFICATE-----Generated at Sun Sep 27 19:10:51 2026 by rpki-client