$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ce3a4e33-3697-32c7-a153-815bbe2e6832.roa File: ce3a4e33-3697-32c7-a153-815bbe2e6832.roa (raw, json) Hash identifier: u3AuX+hIA2JV1ULQGF3ACks+lfSQJ6DoGDagGxXzrlw= Subject key identifier: 61:DC:79:89:2E:C5:2C:3A:1E:8C:13:37:45:80:E0:09:D7:89:5D:A2 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F2ABD00DE0D430AAE3CC29A00 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ce3a4e33-3697-32c7-a153-815bbe2e6832.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 164.153.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:00:de:0d:43:0a:ae:3c:c2:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=c3c62340-3b6a-4d38-9ec2-9c17d2483232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f7:94:d7:38:f1:a4:11:97:41:a7:42:a8:82: c9:9e:b4:60:58:1a:bd:3d:ef:fa:1f:cf:8d:46:27: 51:5a:e3:2b:5d:50:94:dd:4e:b4:52:9a:83:31:de: 20:de:e3:c1:eb:1e:57:51:40:ee:db:46:ea:59:77: bb:ab:e6:f4:7e:82:af:d4:6f:a5:d2:47:f4:60:b2: ef:66:62:bb:0b:50:a4:95:d7:70:5a:b0:7a:94:1c: bb:78:fc:26:a3:90:e1:ea:0b:8f:72:53:ff:b9:3c: 75:93:0d:3d:4a:1c:d9:33:75:e7:f6:ab:e3:20:f2: 4f:0a:a9:30:ca:2f:d3:b0:1d:bc:a4:ce:ff:ef:82: e8:c1:2d:37:35:43:f3:96:1b:60:42:a1:ed:2f:5c: bb:6a:73:30:58:1e:7d:d9:7c:5e:9b:6f:f4:69:78: 5d:f6:68:2d:be:1c:e6:15:9f:fe:10:8e:3a:d4:fc: 8d:9f:6e:9a:8d:16:a4:63:d0:5e:de:9f:b6:37:1e: 86:81:d3:bb:96:d1:7b:0e:10:7c:97:b5:8e:59:36: 2a:19:9b:1c:80:d9:df:09:40:30:ea:b9:81:8d:c4: f7:02:4c:19:34:05:df:dc:a5:58:ed:49:21:3b:3b: cd:5b:d5:36:dd:d8:13:35:2a:df:47:a6:e8:24:f6: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DC:79:89:2E:C5:2C:3A:1E:8C:13:37:45:80:E0:09:D7:89:5D:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ce3a4e33-3697-32c7-a153-815bbe2e6832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:2f:20:fe:03:5d:9e:d7:51:5b:c9:b4:82:a1:ce:e3:8a:7b: dd:f2:23:f4:30:e0:a6:d7:b9:44:e3:2b:18:3a:78:6a:74:48: 02:5c:66:4b:0c:c3:82:a6:0c:de:35:af:eb:b6:76:ee:e5:52: c5:2f:4d:47:d9:41:31:7b:30:a7:fb:fc:66:4c:66:f7:90:78: 65:ae:16:61:cb:5f:91:61:89:32:09:12:7b:33:f0:cc:6e:d0: 06:43:f4:b6:a7:f1:b7:ca:30:ea:d4:93:25:2d:c5:21:44:6f: 88:b7:b3:32:dc:96:e0:f5:88:8f:78:cb:94:95:03:e7:e0:75: 60:42:5a:47:3d:6d:79:9e:bb:2e:e0:22:3d:14:b5:c2:fa:69: d3:97:17:96:d0:76:fd:07:73:1f:bc:19:aa:be:60:09:61:49: 00:06:55:e7:88:2d:0f:bd:e4:ab:b9:29:7f:19:79:43:bf:a2: ac:2e:e9:bd:c3:54:01:de:3e:58:c2:33:bc:d5:44:1d:ab:59: cf:5c:78:c2:b9:4f:46:85:0c:11:3a:2a:a4:78:0a:28:72:02: a5:25:73:3f:7b:b7:db:c0:76:1f:28:de:22:01:70:bb:68:df: 31:ea:42:a0:58:3b:dc:0f:a9:ef:1d:fd:00:75:29:8c:0d:94: fc:69:6e:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQDeDUMKrjzCmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YzNjNjIzNDAtM2I2YS00ZDM4LTllYzItOWMxN2QyNDgzMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjveU1zjxpBGXQadCqILJnrRgWBq9Pe/6H8+N RidRWuMrXVCU3U60UpqDMd4g3uPB6x5XUUDu20bqWXe7q+b0foKv1G+l0kf0YLLv ZmK7C1CklddwWrB6lBy7ePwmo5Dh6guPclP/uTx1kw09ShzZM3Xn9qvjIPJPCqkw yi/TsB28pM7/74LowS03NUPzlhtgQqHtL1y7anMwWB592Xxem2/0aXhd9mgtvhzm FZ/+EI461PyNn26ajRakY9Be3p+2Nx6GgdO7ltF7DhB8l7WOWTYqGZscgNnfCUAw 6rmBjcT3AkwZNAXf3KVY7UkhOzvNW9U23dgTNSrfR6boJPbj2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHceYkuxSw6HowTN0WA4AnXiV2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvY2UzYTRlMzMtMzY5Ny0z MmM3LWExNTMtODE1YmJlMmU2ODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIvIP4DXZ7XUVvJtIKhzuOKe93yI/Qw4KbXuUTjKxg6eGp0SAJcZksM w4KmDN41r+u2du7lUsUvTUfZQTF7MKf7/GZMZveQeGWuFmHLX5FhiTIJEnsz8Mxu 0AZD9Lan8bfKMOrUkyUtxSFEb4i3szLcluD1iI94y5SVA+fgdWBCWkc9bXmeuy7g Ij0UtcL6adOXF5bQdv0Hcx+8Gaq+YAlhSQAGVeeILQ+95Ku5KX8ZeUO/oqwu6b3D VAHePljCM7zVRB2rWc9ceMK5T0aFDBE6KqR4CihyAqUlcz97t9vAdh8o3iIBcLto 3zHqQqBYO9wPqe8d/QB1KYwNlPxpbpw= -----END CERTIFICATE-----Generated at Sat Sep 26 10:23:59 2026 by rpki-client