$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/9c584d07-17f8-35b5-8da9-e3156221158a.roa File: 9c584d07-17f8-35b5-8da9-e3156221158a.roa (raw, json) Hash identifier: W2VgS9dCdUqOIKXYEz2Lx2fuW64Hg8kfkVyQZnzoclw= Subject key identifier: AF:38:A9:11:F1:15:04:95:E2:9F:89:0F:99:8D:11:23:07:E7:95:81 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F2ABD01731EF162850076C600 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/9c584d07-17f8-35b5-8da9-e3156221158a.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 164.153.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:01:73:1e:f1:62:85:00:76:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=66e80f14-fed9-4fc9-91dc-a807b6b45aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b8:77:81:42:75:d1:79:7b:6f:6c:23:75:12: 99:76:c1:ae:96:06:73:68:0b:47:18:0e:1f:fc:2c: 74:60:03:30:a8:3c:6c:6b:f7:41:34:d7:8b:19:fd: 13:b7:51:4f:24:db:c9:00:32:cd:a5:01:16:cb:11: a7:d0:0a:cd:77:72:3b:ad:dd:98:03:3b:15:20:bb: 44:3f:4c:0c:4c:20:c4:7f:3f:a8:0b:d3:44:8b:a8: 99:bc:5a:91:e5:0b:20:f5:4e:88:be:b6:96:42:ce: 63:44:6f:3b:7a:8b:88:7d:e8:2f:2f:4f:1f:d7:cc: e8:e5:d3:01:e0:db:92:66:92:82:17:c3:42:16:00: 20:99:6a:86:b3:ea:a1:21:b5:8f:ec:d5:bb:29:bc: e4:85:3f:14:83:3c:93:12:07:8d:16:de:11:d9:e0: 21:43:1f:e5:76:3d:27:69:2d:d1:79:29:0b:86:da: d4:87:f8:88:a7:8d:09:85:9c:30:af:7e:e0:39:78: 13:04:13:28:2a:64:67:b3:c0:e4:ff:06:20:c4:93: 0c:3a:fb:0b:58:1b:b0:b5:2f:bc:3d:43:94:96:b1: 68:00:e6:fb:9a:73:f3:8a:c8:c8:ef:1e:24:77:89: b9:fb:29:83:1c:48:05:27:be:66:9c:8f:db:d6:d7: 00:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:38:A9:11:F1:15:04:95:E2:9F:89:0F:99:8D:11:23:07:E7:95:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/9c584d07-17f8-35b5-8da9-e3156221158a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d4:de:f0:b1:1f:ac:b6:2b:19:65:e6:90:9d:66:98:72:33: 19:dd:75:45:36:47:fa:d6:cc:9b:bd:d4:f8:e2:c6:57:55:b4: 98:4b:b1:d9:95:0e:3b:b0:9a:24:a4:99:1e:8d:eb:b3:03:e6: b4:05:5e:ab:77:31:18:6b:94:ec:8d:c3:b1:be:fe:5f:4a:04: e5:47:e1:f9:8f:a4:7e:eb:61:bf:17:1d:41:65:f2:01:05:84: 7d:af:46:9f:55:44:1b:c7:e0:a3:1c:e8:19:3d:2e:89:0a:e4: 50:f1:00:eb:54:5e:14:37:4e:43:f0:70:83:b0:b1:77:f3:c1: 1c:7b:8f:dc:c5:cb:4f:c4:9a:e9:2b:76:ad:1f:0e:3b:c4:25: ab:dd:c2:c6:9e:55:8e:dc:3d:bd:3e:44:aa:f7:92:07:f4:7f: 94:74:75:2f:78:a6:03:4e:2a:5b:38:b8:32:ec:f4:3c:06:61: 6c:1c:7e:46:d8:1c:5a:90:d7:45:0c:3d:87:64:9d:2a:2e:f0: 38:50:59:75:47:f1:79:8a:2e:c2:9f:12:24:0f:dd:58:bf:87: 7b:67:cb:16:51:15:b6:ed:4c:88:2f:2a:84:ac:98:4a:5a:81: a1:1f:e7:72:a7:09:54:38:db:dd:8f:a0:16:1a:64:1f:bf:ae: 80:a5:e4:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQFzHvFihQB2xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NjZlODBmMTQtZmVkOS00ZmM5LTkxZGMtYTgwN2I2YjQ1YWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7h3gUJ10Xl7b2wjdRKZdsGulgZzaAtHGA4f /Cx0YAMwqDxsa/dBNNeLGf0Tt1FPJNvJADLNpQEWyxGn0ArNd3I7rd2YAzsVILtE P0wMTCDEfz+oC9NEi6iZvFqR5Qsg9U6IvraWQs5jRG87eouIfegvL08f18zo5dMB 4NuSZpKCF8NCFgAgmWqGs+qhIbWP7NW7KbzkhT8UgzyTEgeNFt4R2eAhQx/ldj0n aS3ReSkLhtrUh/iIp40JhZwwr37gOXgTBBMoKmRns8Dk/wYgxJMMOvsLWBuwtS+8 PUOUlrFoAOb7mnPzisjI7x4kd4m5+ymDHEgFJ75mnI/b1tcAAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK84qRHxFQSV4p+JD5mNESMH55WBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvOWM1ODRkMDctMTdmOC0z NWI1LThkYTktZTMxNTYyMjExNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/U3vCxH6y2Kxll5pCdZphyMxnddUU2R/rWzJu91PjixldVtJhLsdmV DjuwmiSkmR6N67MD5rQFXqt3MRhrlOyNw7G+/l9KBOVH4fmPpH7rYb8XHUFl8gEF hH2vRp9VRBvH4KMc6Bk9LokK5FDxAOtUXhQ3TkPwcIOwsXfzwRx7j9zFy0/Emukr dq0fDjvEJavdwsaeVY7cPb0+RKr3kgf0f5R0dS94pgNOKls4uDLs9DwGYWwcfkbY HFqQ10UMPYdknSou8DhQWXVH8XmKLsKfEiQP3Vi/h3tnyxZRFbbtTIgvKoSsmEpa gaEf53KnCVQ4292PoBYaZB+/roCl5Mw= -----END CERTIFICATE-----Generated at Sun Sep 27 23:54:09 2026 by rpki-client