$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ddc09969-b3e3-3aaa-b1d4-777ced47002c.roa File: ddc09969-b3e3-3aaa-b1d4-777ced47002c.roa (raw, json) Hash identifier: rYPnu9YE0WzUYCd0Fgl3C4cg1AY8Mrap4DmAivErxkg= Subject key identifier: EE:85:A5:72:5F:03:D6:97:0C:39:07:34:4D:AF:EF:8C:08:FE:D4:71 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F2ABD00EF632A4C0CF6283200 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ddc09969-b3e3-3aaa-b1d4-777ced47002c.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 164.153.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:00:ef:63:2a:4c:0c:f6:28:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=f6597e4e-c83c-4aec-97ef-86f9ff45401b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8b:68:f3:2f:80:4a:fa:b9:76:19:29:f8:c6: 74:79:94:80:a1:da:01:bc:5d:4d:32:b9:18:b7:e8: ba:01:3d:96:32:f3:7a:b4:20:75:42:dc:9a:31:79: c0:a7:91:63:f9:be:2a:9f:c7:10:c9:fe:66:46:8e: 49:f4:4f:71:88:a5:0b:93:d7:c2:4d:aa:26:9d:06: d9:ab:0f:b7:05:4b:f3:d1:f4:4a:75:fd:8e:60:6d: 60:e8:97:07:87:3e:c8:12:b8:29:fd:7d:11:8a:0c: 35:9d:04:d3:ad:31:0e:6c:03:3a:04:82:b9:6a:95: cf:78:db:d6:47:cf:6f:0d:ff:df:e0:c9:5b:e4:3a: ea:78:87:4c:b3:52:64:ff:39:11:6f:7c:22:4e:c2: d0:15:1d:eb:67:25:dd:46:c2:f1:3d:c2:f8:e4:89: db:f7:20:06:c8:0c:f8:0d:f6:b2:1a:2c:07:36:bf: 0b:e7:8e:fe:d1:f7:ee:b9:a8:5b:03:57:dc:91:2f: 2f:74:47:d3:db:32:23:00:7a:1c:69:7a:68:8c:d9: ae:51:a4:af:dc:bc:62:2f:35:14:bc:87:5e:38:ff: 44:2a:6c:87:c8:ca:33:dc:51:d7:13:a7:9b:5c:32: 8c:41:9a:3a:1e:3a:8a:c2:dd:77:a6:85:70:b6:68: 40:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:85:A5:72:5F:03:D6:97:0C:39:07:34:4D:AF:EF:8C:08:FE:D4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ddc09969-b3e3-3aaa-b1d4-777ced47002c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:30:08:21:be:10:16:43:79:ae:da:6c:92:eb:39:3a:f2:6e: 6a:05:a4:81:5a:bd:bf:e5:a7:00:0a:92:4b:b9:aa:02:ec:77: d0:39:c6:71:59:5c:63:58:16:81:93:20:38:9e:34:08:7a:5f: 2e:0d:82:b6:e0:4e:8a:6a:82:c8:eb:7b:85:58:4f:32:f6:5d: 47:65:58:f1:65:49:ce:b5:1a:c8:55:61:fe:43:83:07:75:ae: 18:84:ab:b1:97:80:43:86:4f:df:4c:94:df:c9:1c:87:aa:a9: 3a:9a:c1:56:3e:ce:57:26:f6:29:c0:54:96:66:8e:b7:90:62: a8:79:b5:cf:57:03:a9:ce:58:82:8d:c6:ac:3f:c7:93:43:37: 22:8e:b4:45:ad:31:f2:f3:a2:b6:f5:87:5c:35:68:8e:8c:13: 0d:22:0d:eb:88:05:d1:c0:d4:34:a7:79:6f:75:56:81:91:b1: c7:47:94:d0:63:cb:0f:5c:7e:0a:d8:9e:9f:00:24:cd:5a:95: 52:2d:25:62:49:a6:b4:b2:4b:3b:20:a1:cb:75:7b:5f:97:be: d8:69:12:45:ac:a6:9d:55:9e:98:5b:fc:13:01:66:1e:89:82: 6c:e8:d8:fe:9f:0e:52:91:0c:c7:33:1d:3a:a5:ab:88:e2:30: d1:9f:71:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQDvYypMDPYoMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk ZjY1OTdlNGUtYzgzYy00YWVjLTk3ZWYtODZmOWZmNDU0MDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYto8y+ASvq5dhkp+MZ0eZSAodoBvF1NMrkY t+i6AT2WMvN6tCB1QtyaMXnAp5Fj+b4qn8cQyf5mRo5J9E9xiKULk9fCTaomnQbZ qw+3BUvz0fRKdf2OYG1g6JcHhz7IErgp/X0Rigw1nQTTrTEObAM6BIK5apXPeNvW R89vDf/f4Mlb5DrqeIdMs1Jk/zkRb3wiTsLQFR3rZyXdRsLxPcL45Inb9yAGyAz4 DfayGiwHNr8L547+0ffuuahbA1fckS8vdEfT2zIjAHocaXpojNmuUaSv3LxiLzUU vIdeOP9EKmyHyMoz3FHXE6ebXDKMQZo6HjqKwt13poVwtmhAmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6FpXJfA9aXDDkHNE2v74wI/tRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZGRjMDk5NjktYjNlMy0z YWFhLWIxZDQtNzc3Y2VkNDcwMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0wCCG+EBZDea7abJLrOTrybmoFpIFavb/lpwAKkku5qgLsd9A5xnFZ XGNYFoGTIDieNAh6Xy4NgrbgTopqgsjre4VYTzL2XUdlWPFlSc61GshVYf5Dgwd1 rhiEq7GXgEOGT99MlN/JHIeqqTqawVY+zlcm9inAVJZmjreQYqh5tc9XA6nOWIKN xqw/x5NDNyKOtEWtMfLzorb1h1w1aI6MEw0iDeuIBdHA1DSneW91VoGRscdHlNBj yw9cfgrYnp8AJM1alVItJWJJprSySzsgoct1e1+XvthpEkWspp1Vnphb/BMBZh6J gmzo2P6fDlKRDMczHTqlq4jiMNGfcaA= -----END CERTIFICATE-----Generated at Sat Sep 26 07:37:24 2026 by rpki-client