$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d443d736-935d-357c-96c4-38fdaeec03e2.roa File: d443d736-935d-357c-96c4-38fdaeec03e2.roa (raw, json) Hash identifier: Ie0Mw2BTHXmPjeU9CuxeNOpE7hI1Na+m3F00HiaQ2ig= Subject key identifier: 6B:EA:45:EB:78:AE:81:35:A2:FE:9E:D8:20:09:FF:34:92:40:68:F5 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F331D0F2D287337A624F90B00 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d443d736-935d-357c-96c4-38fdaeec03e2.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 10279 IP address blocks: 164.153.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:0f:2d:28:73:37:a6:24:f9:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=74e6255b-de96-4ac1-adc3-053762a40414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a2:6c:de:66:43:e6:21:27:b9:d6:cf:d4:c6: db:24:4c:a5:46:b5:27:e4:1d:af:e2:86:5e:42:6f: f6:14:18:ca:79:e6:da:87:8d:63:ea:69:3c:31:a6: 5e:4d:c9:57:7e:35:07:2d:f6:ac:8e:5d:b7:c0:a6: 80:09:52:f2:55:e2:75:bb:da:8e:8e:32:7b:60:b5: 53:7a:6e:bb:95:9a:30:92:de:6c:16:f1:9d:4e:f9: af:bb:a3:7c:d7:79:51:72:8f:e9:b7:ef:bf:e6:b1: 0d:2a:d2:32:cf:34:f9:58:53:88:cd:ad:40:52:a3: a3:ee:1b:05:22:37:e4:f5:46:42:f1:4f:52:48:9b: 74:c5:1e:a6:c2:18:ac:f0:e5:32:da:ed:5f:06:f8: a2:b4:ee:ae:83:96:3f:b7:c0:9c:96:2a:ed:d8:c2: 1c:89:e7:54:5e:55:68:bb:24:16:c2:f9:88:dc:92: bd:64:55:68:36:a5:d9:d0:2a:ef:6a:59:0e:d7:c4: ef:80:c7:63:10:dc:bd:fa:6b:67:a6:cf:4c:6e:ca: 9b:06:5e:7a:5b:54:e8:f7:71:68:63:bd:19:54:61: a0:25:1d:d6:08:7a:de:4a:1e:91:48:17:6c:2a:f2: 43:9d:c5:0f:80:3d:c2:84:88:38:48:c9:56:11:19: 09:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EA:45:EB:78:AE:81:35:A2:FE:9E:D8:20:09:FF:34:92:40:68:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d443d736-935d-357c-96c4-38fdaeec03e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:76:58:e6:bf:95:d2:a7:62:ff:95:67:3b:22:40:9c:06:35: 9c:42:1f:5c:a1:cb:db:eb:4d:90:c7:51:0d:ba:67:61:48:fc: 17:24:74:89:e1:56:82:b9:60:18:1a:69:f0:59:be:b4:91:59: 34:48:08:c1:85:f1:4c:ac:ac:e8:ba:d9:38:e6:75:01:37:d3: 84:f0:ba:df:bd:2e:83:26:a8:b0:14:45:92:fe:ef:d3:ed:fa: e0:15:a9:f0:b2:6f:84:aa:64:e9:e7:e5:76:66:a0:1e:24:2d: 2d:3c:77:0b:16:0b:36:a1:5c:fc:e8:e4:4f:71:51:38:f6:34: c9:4c:fb:62:c6:c6:81:f5:bf:df:5a:3b:91:a2:95:4c:cf:63: 1b:e6:52:c6:b5:82:26:1a:c0:54:31:45:31:05:4f:22:53:05: ca:e7:53:19:47:87:19:a3:d8:7d:9d:ca:d7:0a:8f:a8:1f:24: 41:fc:4f:b3:44:c4:e7:64:f0:19:85:11:0c:22:04:cd:f9:6f: 5f:30:bc:7b:56:5f:8f:48:4f:b1:4c:35:0b:0e:4c:04:8d:b3: 05:e3:b9:21:9f:79:f8:35:c0:37:1b:da:ce:9b:5c:27:47:1b: 23:ef:7e:02:3a:87:1a:58:f1:fe:85:73:34:a6:a8:c9:93:72: a3:66:b5:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHQ8tKHM3piT5CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk NzRlNjI1NWItZGU5Ni00YWMxLWFkYzMtMDUzNzYyYTQwNDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6Js3mZD5iEnudbP1MbbJEylRrUn5B2v4oZe Qm/2FBjKeebah41j6mk8MaZeTclXfjUHLfasjl23wKaACVLyVeJ1u9qOjjJ7YLVT em67lZowkt5sFvGdTvmvu6N813lRco/pt++/5rENKtIyzzT5WFOIza1AUqOj7hsF Ijfk9UZC8U9SSJt0xR6mwhis8OUy2u1fBviitO6ug5Y/t8Cclirt2MIciedUXlVo uyQWwvmI3JK9ZFVoNqXZ0CrvalkO18TvgMdjENy9+mtnps9MbsqbBl56W1To93Fo Y70ZVGGgJR3WCHreSh6RSBdsKvJDncUPgD3ChIg4SMlWERkJ0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvqRet4roE1ov6e2CAJ/zSSQGj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZDQ0M2Q3MzYtOTM1ZC0z NTdjLTk2YzQtMzhmZGFlZWMwM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJk6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHR2WOa/ldKnYv+VZzsiQJwGNZxCH1yhy9vrTZDHUQ26Z2FI/BckdInh VoK5YBgaafBZvrSRWTRICMGF8UysrOi62TjmdQE304Twut+9LoMmqLAURZL+79Pt +uAVqfCyb4SqZOnn5XZmoB4kLS08dwsWCzahXPzo5E9xUTj2NMlM+2LGxoH1v99a O5GilUzPYxvmUsa1giYawFQxRTEFTyJTBcrnUxlHhxmj2H2dytcKj6gfJEH8T7NE xOdk8BmFEQwiBM35b18wvHtWX49IT7FMNQsOTASNswXjuSGfefg1wDcb2s6bXCdH GyPvfgI6hxpY8f6FczSmqMmTcqNmtWw= -----END CERTIFICATE-----Generated at Sat Sep 26 07:08:32 2026 by rpki-client