$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/f709a13d-6869-3756-95ef-4cc323e2e3c4.roa File: f709a13d-6869-3756-95ef-4cc323e2e3c4.roa (raw, json) Hash identifier: PpXoGsbcMnBI37Yyo+UyyFS1QXcLtladuEX2yOxKRB0= Subject key identifier: 65:F2:2F:AA:36:3D:88:07:91:85:E9:22:D3:B9:F7:D0:22:B0:81:D7 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F2ABD00B9B41CFD358A59B400 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/f709a13d-6869-3756-95ef-4cc323e2e3c4.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 164.153.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:00:b9:b4:1c:fd:35:8a:59:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=abd0c750-daa5-4baf-8918-1acbbf112081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:39:32:2c:0e:18:d9:7f:5a:b0:9c:e3:eb: cd:98:5e:94:fe:c0:77:29:10:f6:c1:5f:58:87:b4: 0d:19:d1:f6:9f:c9:fe:e0:65:10:d9:37:fb:75:67: 1c:9f:f3:62:98:c7:bf:14:bb:2d:1d:f0:c1:5a:90: 81:8c:09:43:a7:1e:9d:bc:c4:6d:e2:a4:8f:2b:b6: 95:f1:0e:ea:67:59:3e:ae:ea:a8:ad:f4:b0:ea:34: d1:b9:93:e9:30:a9:38:af:5f:de:df:6a:53:bc:21: a6:cf:f3:01:ce:0c:f3:77:95:7d:b9:55:63:bc:53: 23:cf:c1:a0:ec:d4:2f:bd:3a:a2:d0:04:99:fd:de: 66:e4:6c:cd:6d:1c:16:d1:81:bb:e3:73:e6:80:df: c5:5d:77:32:cf:28:b2:f2:37:7a:de:2f:a5:76:88: 3d:b2:db:d8:aa:a2:7d:90:65:b1:39:1f:d9:7d:8b: 25:f3:6e:1a:b5:36:33:a0:87:c0:5f:79:0c:2b:28: 59:d2:63:26:12:a5:ab:51:16:1d:bf:e4:f3:58:4d: dd:e6:dc:4e:d8:e5:9f:ce:4a:1f:13:7e:32:49:f9: d2:95:71:c6:e2:a8:d5:76:49:05:2c:83:38:d0:1c: 42:82:46:c9:9c:64:ba:5d:bd:d2:a5:4f:d1:c7:4f: 65:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F2:2F:AA:36:3D:88:07:91:85:E9:22:D3:B9:F7:D0:22:B0:81:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/f709a13d-6869-3756-95ef-4cc323e2e3c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5c:52:2b:44:b3:84:54:97:55:76:27:59:1f:6e:ec:fc:01: a9:2f:43:44:ec:3c:56:55:a1:2b:3c:eb:98:33:08:e6:04:d4: 75:68:6a:26:f7:db:55:af:39:dc:c0:56:71:33:fd:59:4d:59: f1:9c:46:e8:bd:3d:ec:e5:13:1e:23:fd:fa:72:93:f3:c3:1b: 57:2c:97:c1:3e:d7:a1:68:2e:7c:68:7a:e7:cd:76:47:ad:3a: 55:37:b0:76:01:11:a5:d0:60:95:21:fd:a8:46:96:5d:22:f7: a8:10:99:0b:8c:9e:37:14:a8:3f:b7:57:f0:5a:31:a4:33:26: 28:fd:ed:07:75:6d:ea:a8:83:94:8c:12:20:5a:17:60:a2:bc: d7:09:13:e5:d2:73:76:88:e0:d8:76:23:66:2f:77:68:c8:98: 83:95:26:dc:59:41:4c:11:ea:d6:03:d2:cb:1d:f4:5b:82:a2: 69:f7:f2:8f:ca:e6:e3:f0:0a:93:e2:08:6a:2b:44:7e:f1:05: fa:cb:e7:90:8f:dd:7d:a5:f3:cb:23:2c:60:cc:b1:04:0f:7c: 1d:20:3d:5e:5e:9e:50:6e:c9:31:b1:1f:ce:2c:4a:62:0e:13: 58:16:3c:1e:c1:d0:d5:f5:76:b6:2c:ab:4d:78:13:2e:d9:f4: bc:73:42:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQC5tBz9NYpZtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YWJkMGM3NTAtZGFhNS00YmFmLTg5MTgtMWFjYmJmMTEyMDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPg5MiwOGNl/WrCc4+vNmF6U/sB3KRD2wV9Y h7QNGdH2n8n+4GUQ2Tf7dWccn/NimMe/FLstHfDBWpCBjAlDpx6dvMRt4qSPK7aV 8Q7qZ1k+ruqorfSw6jTRuZPpMKk4r1/e32pTvCGmz/MBzgzzd5V9uVVjvFMjz8Gg 7NQvvTqi0ASZ/d5m5GzNbRwW0YG743PmgN/FXXcyzyiy8jd63i+ldog9stvYqqJ9 kGWxOR/ZfYsl824atTYzoIfAX3kMKyhZ0mMmEqWrURYdv+TzWE3d5txO2OWfzkof E34ySfnSlXHG4qjVdkkFLIM40BxCgkbJnGS6Xb3SpU/Rx09l8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXyL6o2PYgHkYXpItO599AisIHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZjcwOWExM2QtNjg2OS0z NzU2LTk1ZWYtNGNjMzIzZTJlM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZcUitEs4RUl1V2J1kfbuz8AakvQ0TsPFZVoSs865gzCOYE1HVoaib3 21WvOdzAVnEz/VlNWfGcRui9PezlEx4j/fpyk/PDG1csl8E+16FoLnxoeufNdket OlU3sHYBEaXQYJUh/ahGll0i96gQmQuMnjcUqD+3V/BaMaQzJij97Qd1beqog5SM EiBaF2CivNcJE+XSc3aI4Nh2I2Yvd2jImIOVJtxZQUwR6tYD0ssd9FuComn38o/K 5uPwCpPiCGorRH7xBfrL55CP3X2l88sjLGDMsQQPfB0gPV5enlBuyTGxH84sSmIO E1gWPB7B0NX1drYsq014Ey7Z9LxzQuA= -----END CERTIFICATE-----Generated at Tue Sep 29 11:04:43 2026 by rpki-client