$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ddb04251-90f5-3588-956d-3043b86ff3dd.roa File: ddb04251-90f5-3588-956d-3043b86ff3dd.roa (raw, json) Hash identifier: JapDZ3UBOD4nSh+NyrKkukqZomTIcrSFq3/xjtOm7u8= Subject key identifier: 2B:33:72:74:50:A9:D4:ED:FA:3D:03:74:4C:47:D4:7C:F2:8A:E7:ED Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F331D0F4D25CDF23254135700 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ddb04251-90f5-3588-956d-3043b86ff3dd.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 10279 IP address blocks: 164.153.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:0f:4d:25:cd:f2:32:54:13:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=0c4a81f0-2590-4312-9634-0e3eaedef37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7e:25:a8:e7:51:19:4d:30:25:f6:98:ef:fa: 51:c6:7d:8b:53:67:60:89:01:aa:9e:8d:f9:65:15: c9:5e:0b:07:18:6e:2b:ec:3d:bc:67:f3:7f:d3:7d: 63:06:a2:df:f1:3a:4b:3c:5c:bb:18:15:46:27:67: 2a:5f:17:24:13:24:8c:f9:27:e4:57:00:2c:cb:49: d3:3f:db:80:3c:f5:f5:8b:40:a0:68:6d:dc:71:34: 0b:ef:f9:b2:1d:80:3c:ea:34:dc:0b:d1:41:fd:51: a3:67:f5:6b:6b:00:86:9a:c4:68:2b:6a:a4:f2:86: 40:b2:48:c5:d7:28:ba:6d:f7:8c:e0:56:74:96:b6: d6:2c:92:4d:60:00:60:2d:e8:04:40:b7:c1:7b:89: ad:fe:53:84:d5:21:ef:7c:b3:b6:89:92:24:41:03: a3:f2:f8:4c:46:d5:af:96:3c:14:a2:a1:f0:82:d8: fd:be:fc:6e:51:5b:09:22:28:78:49:cb:24:9f:01: 5c:c3:0d:8e:65:4a:b4:14:6a:00:11:78:d1:76:e7: 1a:a4:a4:12:d4:2e:a5:96:f7:31:54:20:3e:ff:a5: b5:eb:1a:e5:21:a7:f2:87:05:93:a2:62:b4:5c:73: 33:01:1d:09:fc:f1:8b:d6:39:0f:e3:55:c3:01:17: 9d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:33:72:74:50:A9:D4:ED:FA:3D:03:74:4C:47:D4:7C:F2:8A:E7:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ddb04251-90f5-3588-956d-3043b86ff3dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:6a:ec:8e:58:65:3b:3c:6d:49:3e:61:18:ca:7c:af:67:ef: 66:c3:72:46:4e:f4:a2:1f:fa:ee:a0:02:fa:f0:88:4f:95:59: 44:6d:82:ec:b0:24:ba:b1:01:63:d0:80:36:2e:87:db:83:40: 49:9e:8e:51:90:fe:64:cd:59:38:9d:ad:8c:f6:c6:78:6a:3b: 14:23:87:3d:fb:9b:2d:28:b8:9f:01:c9:51:d3:a0:b5:02:62: 04:61:f7:2a:90:f7:d4:5d:ff:c3:50:52:c7:98:a3:a6:67:76: 35:a6:78:7a:7b:be:e5:a5:a2:fa:a4:f4:af:71:1a:02:d2:d9: 31:2f:f8:66:55:b3:f4:7e:43:81:09:f7:df:f3:ce:d7:73:26: 0d:03:71:98:86:34:4d:65:e5:68:2e:44:4b:e7:62:bc:38:82: a6:a4:0d:c6:fc:fc:dc:c8:c2:0e:72:b0:dd:2a:7f:74:5b:4e: 37:fe:03:c2:75:1b:d2:b4:e6:75:c4:bf:24:d3:9c:35:cb:a7: 85:74:2a:51:28:2b:c0:be:82:b4:c3:13:5f:fa:62:eb:57:dd: 57:9e:d4:ad:ab:f3:82:9f:47:47:a7:b4:05:4c:52:06:1d:5e: 59:51:0a:90:ce:62:65:c0:69:70:6c:a3:75:55:84:fd:7a:83: 9e:e9:34:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHQ9NJc3yMlQTVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk MGM0YTgxZjAtMjU5MC00MzEyLTk2MzQtMGUzZWFlZGVmMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX4lqOdRGU0wJfaY7/pRxn2LU2dgiQGqno35 ZRXJXgsHGG4r7D28Z/N/031jBqLf8TpLPFy7GBVGJ2cqXxckEySM+SfkVwAsy0nT P9uAPPX1i0CgaG3ccTQL7/myHYA86jTcC9FB/VGjZ/VrawCGmsRoK2qk8oZAskjF 1yi6bfeM4FZ0lrbWLJJNYABgLegEQLfBe4mt/lOE1SHvfLO2iZIkQQOj8vhMRtWv ljwUoqHwgtj9vvxuUVsJIih4ScsknwFcww2OZUq0FGoAEXjRducapKQS1C6llvcx VCA+/6W16xrlIafyhwWTomK0XHMzAR0J/PGL1jkP41XDARedKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCszcnRQqdTt+j0DdExH1HzyiuftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZGRiMDQyNTEtOTBmNS0z NTg4LTk1NmQtMzA0M2I4NmZmM2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJk8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdq7I5YZTs8bUk+YRjKfK9n72bDckZO9KIf+u6gAvrwiE+VWURtguyw JLqxAWPQgDYuh9uDQEmejlGQ/mTNWTidrYz2xnhqOxQjhz37my0ouJ8ByVHToLUC YgRh9yqQ99Rd/8NQUseYo6ZndjWmeHp7vuWlovqk9K9xGgLS2TEv+GZVs/R+Q4EJ 99/zztdzJg0DcZiGNE1l5WguREvnYrw4gqakDcb8/NzIwg5ysN0qf3RbTjf+A8J1 G9K05nXEvyTTnDXLp4V0KlEoK8C+grTDE1/6YutX3Vee1K2r84KfR0entAVMUgYd XllRCpDOYmXAaXBso3VVhP16g57pNE4= -----END CERTIFICATE-----Generated at Sat Sep 26 18:58:47 2026 by rpki-client