$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ea07522b-413c-3092-a0a0-f91743c80959.roa File: ea07522b-413c-3092-a0a0-f91743c80959.roa (raw, json) Hash identifier: aUptwoWg5Oi3nbDZAV7CsZ1wEw7Lgr4bF+6XnYF1hCQ= Subject key identifier: 2E:E0:69:15:0C:90:C1:1B:56:8F:48:1E:47:56:17:9D:0A:ED:33:02 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F2ABD0153A69E07A190458570 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ea07522b-413c-3092-a0a0-f91743c80959.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 164.153.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:01:53:a6:9e:07:a1:90:45:85:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=382424a7-4203-48f5-ada7-d32d0abedc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2f:df:ae:b3:26:82:7b:5e:07:e6:b0:6e:e8: 4b:a0:0d:bc:ce:63:89:19:8a:c1:04:e4:c2:2d:ce: 98:cb:48:5e:18:82:14:23:bc:2c:f6:1e:99:fa:cf: 3e:e6:4e:1e:f9:26:21:66:53:30:9d:d3:e0:8e:5d: 7e:f0:fa:20:e5:82:67:04:a0:1f:be:a2:83:c9:a5: 79:84:34:2b:85:06:61:ea:cb:db:e8:31:d1:82:7a: b0:50:bf:ae:36:44:68:56:e1:00:2b:8d:27:81:a2: f0:1b:df:78:99:9e:d5:a8:96:95:ab:3a:67:aa:92: 5a:39:0b:4d:b5:49:17:2d:06:78:66:de:67:25:e5: 21:0d:ad:28:54:21:35:d8:37:32:d5:75:a7:dd:9f: 5a:3f:b5:99:65:5a:42:f4:bb:94:b9:3f:0a:6f:0b: 5f:66:9b:25:9e:a5:27:72:1e:3c:ad:e3:9b:e8:13: 1b:20:91:00:a8:83:7a:62:d2:b3:b6:d4:3e:bf:20: ab:d4:a7:cd:fa:42:b3:03:a9:1f:64:68:41:2c:e6: 07:16:1f:9d:ec:94:43:3e:1b:dc:b9:25:d6:2e:9b: ee:12:a3:93:53:83:67:d8:9d:eb:08:5e:78:79:c3: f9:43:ad:d2:ba:15:0a:41:ba:d0:e7:66:49:27:54: 77:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E0:69:15:0C:90:C1:1B:56:8F:48:1E:47:56:17:9D:0A:ED:33:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ea07522b-413c-3092-a0a0-f91743c80959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:2a:ab:d5:8e:27:98:e4:a6:a8:fc:dd:71:94:f9:70:80:0e: ac:fa:c2:77:f5:a3:54:35:dd:8d:99:18:4e:ac:59:57:34:c7: 4d:73:dc:93:82:36:04:0c:29:ef:10:9d:3e:88:28:76:1d:44: 98:01:2b:40:45:7a:ec:2d:f2:74:ec:5e:e7:80:7d:a2:aa:8a: c7:9b:a1:ef:e3:bf:d0:e8:05:f3:7e:1e:4d:06:e0:1e:7c:0a: 5a:e5:e5:f2:f4:4f:87:70:30:2d:ce:a3:11:49:2c:4c:48:32: 08:97:0f:ce:e9:7c:68:03:b4:c6:61:49:66:94:a0:55:99:bd: a5:67:a1:e2:77:b6:f7:97:fa:9e:5f:2e:1d:50:d6:7a:04:db: 3b:a4:45:35:8c:70:e7:2f:c8:4d:cf:df:cc:6f:44:11:c1:8f: 05:26:8a:66:b7:ea:63:39:a7:ba:90:6e:d3:bb:69:ec:54:46: fd:39:57:a5:df:9b:0c:bc:87:de:7e:bc:81:94:60:82:98:45: 8b:3b:f1:77:52:ef:41:eb:cb:af:2c:2c:f2:3b:f3:c3:1f:3b: 3d:4e:af:7f:3d:c4:6d:7b:b4:b3:ac:35:b6:2a:aa:94:46:e8: 93:5a:bd:4f:4d:1d:a1:ab:52:aa:b0:0c:18:61:d6:9c:95:53: a3:fa:90:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQFTpp4HoZBFhXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MzgyNDI0YTctNDIwMy00OGY1LWFkYTctZDMyZDBhYmVkYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6i/frrMmgnteB+awbuhLoA28zmOJGYrBBOTC Lc6Yy0heGIIUI7ws9h6Z+s8+5k4e+SYhZlMwndPgjl1+8Pog5YJnBKAfvqKDyaV5 hDQrhQZh6svb6DHRgnqwUL+uNkRoVuEAK40ngaLwG994mZ7VqJaVqzpnqpJaOQtN tUkXLQZ4Zt5nJeUhDa0oVCE12Dcy1XWn3Z9aP7WZZVpC9LuUuT8KbwtfZpslnqUn ch48reOb6BMbIJEAqIN6YtKzttQ+vyCr1KfN+kKzA6kfZGhBLOYHFh+d7JRDPhvc uSXWLpvuEqOTU4Nn2J3rCF54ecP5Q63SuhUKQbrQ52ZJJ1R3WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7gaRUMkMEbVo9IHkdWF50K7TMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZWEwNzUyMmItNDEzYy0z MDkyLWEwYTAtZjkxNzQzYzgwOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQqq9WOJ5jkpqj83XGU+XCADqz6wnf1o1Q13Y2ZGE6sWVc0x01z3JOC NgQMKe8QnT6IKHYdRJgBK0BFeuwt8nTsXueAfaKqiseboe/jv9DoBfN+Hk0G4B58 Clrl5fL0T4dwMC3OoxFJLExIMgiXD87pfGgDtMZhSWaUoFWZvaVnoeJ3tveX+p5f Lh1Q1noE2zukRTWMcOcvyE3P38xvRBHBjwUmima36mM5p7qQbtO7aexURv05V6Xf mwy8h95+vIGUYIKYRYs78XdS70Hry68sLPI788MfOz1Or389xG17tLOsNbYqqpRG 6JNavU9NHaGrUqqwDBhh1pyVU6P6kL0= -----END CERTIFICATE-----Generated at Sun Oct 11 17:35:45 2026 by rpki-client