$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d71fa5fb-a31a-3350-8832-5a55f3607a83.roa File: d71fa5fb-a31a-3350-8832-5a55f3607a83.roa (raw, json) Hash identifier: c5s6bpfOKDvUhAsAhjbXkNMJDE5yfbjGH8W9ENQmeWI= Subject key identifier: F8:52:4A:73:06:2E:9C:78:16:8B:DB:72:A2:74:81:DD:E7:E9:AD:20 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F331D0ED071FA125528995E40 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d71fa5fb-a31a-3350-8832-5a55f3607a83.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 10279 IP address blocks: 164.153.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:0e:d0:71:fa:12:55:28:99:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=6b3679f8-f575-4fa2-82d2-5031826dbb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:d7:14:8e:d1:e6:81:80:70:29:cf:57:a3: 59:0d:d7:dc:70:d8:a9:78:16:16:53:c4:f7:70:9a: f1:27:d0:55:03:4f:54:98:61:60:3e:45:44:fa:c5: 21:95:9c:4f:a5:74:9e:03:0b:1b:a6:8a:d7:a7:36: 23:73:0a:85:04:5f:7f:e7:43:e5:a9:24:46:62:93: 65:92:53:6a:aa:36:24:41:cc:15:3f:5b:be:77:c9: 61:f9:e4:47:8b:80:ba:ae:a7:c7:c2:6c:0e:73:d8: dd:b1:f4:2f:15:a1:9b:cc:d8:cb:4d:e8:5c:73:45: fe:7c:fb:2a:2b:bd:7e:a0:e0:9a:02:e5:a6:b4:95: 9a:24:4d:93:c3:e7:46:8f:13:fc:4b:5d:d2:c8:91: 6e:e9:66:93:a8:95:ec:58:a5:6e:bb:4a:f0:73:4e: 73:ff:47:f3:f5:99:df:ad:3a:74:eb:57:a8:cb:7d: 93:05:a4:49:78:51:39:fd:a4:9b:6b:97:a3:b2:d4: 11:2a:44:8b:99:0c:fd:bf:f3:36:cf:c7:53:a4:bc: a2:71:16:f9:3b:65:98:42:eb:58:bd:b7:ee:a9:d6: b3:3f:3c:a2:ef:85:f8:54:65:de:70:f4:8d:4f:c4: fe:52:8b:2d:7c:78:aa:eb:ea:ea:b3:af:6c:e4:71: 36:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:52:4A:73:06:2E:9C:78:16:8B:DB:72:A2:74:81:DD:E7:E9:AD:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d71fa5fb-a31a-3350-8832-5a55f3607a83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:36:97:50:51:bd:d1:b4:0b:67:48:65:cf:27:e4:35:10:60: c1:32:8f:82:0e:13:95:7a:85:85:ce:28:0c:0d:3b:ce:2e:8b: a9:7e:08:80:d1:fe:b8:76:b9:cf:e7:87:3a:6b:0f:dd:92:66: d7:5f:7a:5f:89:76:0b:01:b4:2c:87:06:29:f6:55:48:a1:f1: 04:08:16:23:a4:06:8a:94:51:3e:8f:4e:e2:30:8a:ce:2c:19: 6e:48:d8:23:db:4e:79:bc:22:55:82:fa:f5:fe:69:be:3e:f9: 13:74:31:81:ca:d6:dc:e0:03:8e:71:45:02:22:34:53:e3:cf: 7a:c2:ac:6e:68:16:58:94:f3:38:fa:a7:87:25:14:45:4a:30: 68:af:f1:20:c5:9e:07:96:5f:01:49:2a:34:25:ab:29:e9:76: 0f:a9:68:8e:6a:34:1e:ff:d6:bb:9e:f5:5f:06:65:6a:20:90: 0e:b8:47:44:6e:df:23:f1:9a:e2:51:f9:ac:01:5b:ea:8b:d8: 25:02:55:86:67:b1:6c:59:66:b5:d0:3e:82:69:24:7a:f6:1d: 73:54:e5:6b:a6:19:7a:43:93:af:2f:f1:52:e2:79:37:9e:7f: b3:4e:38:6e:fb:4b:74:9b:e2:71:92:25:d7:a7:0e:b4:77:d7: 6c:b2:80:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHQ7QcfoSVSiZXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk NmIzNjc5ZjgtZjU3NS00ZmEyLTgyZDItNTAzMTgyNmRiYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEnXFI7R5oGAcCnPV6NZDdfccNipeBYWU8T3 cJrxJ9BVA09UmGFgPkVE+sUhlZxPpXSeAwsbporXpzYjcwqFBF9/50PlqSRGYpNl klNqqjYkQcwVP1u+d8lh+eRHi4C6rqfHwmwOc9jdsfQvFaGbzNjLTehcc0X+fPsq K71+oOCaAuWmtJWaJE2Tw+dGjxP8S13SyJFu6WaTqJXsWKVuu0rwc05z/0fz9Znf rTp061eoy32TBaRJeFE5/aSba5ejstQRKkSLmQz9v/M2z8dTpLyicRb5O2WYQutY vbfuqdazPzyi74X4VGXecPSNT8T+UostfHiq6+rqs69s5HE28wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhSSnMGLpx4FovbcqJ0gd3n6a0gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZDcxZmE1ZmItYTMxYS0z MzUwLTg4MzItNWE1NWYzNjA3YTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg2l1BRvdG0C2dIZc8n5DUQYMEyj4IOE5V6hYXOKAwNO84ui6l+CIDR /rh2uc/nhzprD92SZtdfel+JdgsBtCyHBin2VUih8QQIFiOkBoqUUT6PTuIwis4s GW5I2CPbTnm8IlWC+vX+ab4++RN0MYHK1tzgA45xRQIiNFPjz3rCrG5oFliU8zj6 p4clFEVKMGiv8SDFngeWXwFJKjQlqynpdg+paI5qNB7/1rue9V8GZWogkA64R0Ru 3yPxmuJR+awBW+qL2CUCVYZnsWxZZrXQPoJpJHr2HXNU5WumGXpDk68v8VLieTee f7NOOG77S3Sb4nGSJdenDrR312yygEA= -----END CERTIFICATE-----Generated at Sat Oct 3 19:52:17 2026 by rpki-client