$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/faef3fec-8d86-3ab9-81a7-0efa87802c3f.roa File: faef3fec-8d86-3ab9-81a7-0efa87802c3f.roa (raw, json) Hash identifier: QRemHqxB5YKG0b7x0qWgruwaB7En+m3KTso8F7qP5Jo= Subject key identifier: DE:A4:E1:CC:95:0E:6E:9F:25:87:79:EA:9F:A4:CD:59:4E:AD:3F:51 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F2ABD01836237A9BB41949C80 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/faef3fec-8d86-3ab9-81a7-0efa87802c3f.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 164.153.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:01:83:62:37:a9:bb:41:94:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=6bf39984-b86a-4b7f-96e4-988daa788365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:32:aa:34:79:11:32:f5:74:b9:c7:8a:92:06: 6e:a2:47:ce:29:c9:a0:58:95:79:03:38:08:4a:31: da:df:77:bb:95:d4:52:86:53:82:5e:a4:d2:d6:8e: 4d:68:d6:ab:20:16:d6:5d:ba:dc:ff:de:d1:6f:f9: 76:55:cc:93:d4:a2:5d:cd:15:cb:53:80:1e:f4:be: e2:0a:11:6e:fa:4d:a0:f6:a9:cd:4a:3b:af:f9:31: 0d:48:8c:77:0f:97:6e:a7:65:31:df:10:c0:7b:9f: 92:c1:7b:8b:2f:ab:df:b8:d5:3e:15:63:05:80:2c: c4:18:53:2a:5b:ee:db:d0:75:1e:7f:1b:c9:89:05: 9b:40:05:22:65:5f:69:b1:85:6b:23:cf:e8:aa:d9: 36:49:35:39:c7:6b:4e:75:f1:01:f1:e3:a6:9d:c3: d4:50:da:ed:9b:b9:7e:2a:ad:0a:b4:78:4a:ce:d2: 23:4a:2f:29:cb:a7:35:c9:6e:78:7b:e5:6a:1f:8d: 5b:b1:84:9e:f3:2a:85:1c:85:66:cf:f3:ee:62:55: 57:c6:1e:17:57:a2:1c:53:17:88:04:77:09:05:0e: 28:73:43:b7:90:70:f7:34:f6:0c:9a:fc:1f:1d:b0: 8d:8f:8b:11:76:68:69:d1:2a:65:43:0c:40:07:f8: 09:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A4:E1:CC:95:0E:6E:9F:25:87:79:EA:9F:A4:CD:59:4E:AD:3F:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/faef3fec-8d86-3ab9-81a7-0efa87802c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:20:99:ac:31:1c:a9:93:2e:bb:17:84:ff:6a:7a:bd:3a:7f: 95:19:12:3f:81:75:57:5b:9d:9a:45:42:ae:2b:14:27:5b:d3: da:2b:0b:82:8f:5d:20:14:dc:c3:38:62:20:53:1e:af:db:ca: 38:60:98:22:5b:0b:ca:d3:d9:7c:2b:38:7f:de:48:d2:f8:9f: 93:f1:83:15:04:2a:d2:ae:14:57:fa:44:f3:95:6c:88:c2:c5: fa:b0:38:ef:3a:87:0a:26:f1:e4:5b:fd:6a:4f:af:70:3e:ce: ef:15:6a:84:c3:e9:30:8d:7f:bb:7a:8f:31:46:c0:28:ee:7d: 15:ed:00:20:37:fd:ff:db:7e:86:b2:d4:ea:86:77:e7:0b:64: cb:86:d2:f5:1d:98:e0:75:9d:02:fb:08:5e:82:72:25:db:c7: 4f:48:84:d5:47:62:c9:b7:c2:81:6d:0e:2e:f0:39:7e:79:6c: 80:2c:44:ba:88:b1:e5:53:b0:a6:f4:bc:d6:41:d8:90:a5:83: fa:60:ef:3b:b9:ac:90:84:2a:31:b4:35:95:8e:bc:7a:86:87: 59:36:1d:6f:47:ad:a7:e7:70:6c:12:be:98:b4:48:83:a8:48: 24:49:8e:3b:cb:7f:6c:e9:28:0a:e6:95:89:3a:54:4c:14:85: 72:6e:ba:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQGDYjepu0GUnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NmJmMzk5ODQtYjg2YS00YjdmLTk2ZTQtOTg4ZGFhNzg4MzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTKqNHkRMvV0uceKkgZuokfOKcmgWJV5AzgI SjHa33e7ldRShlOCXqTS1o5NaNarIBbWXbrc/97Rb/l2VcyT1KJdzRXLU4Ae9L7i ChFu+k2g9qnNSjuv+TENSIx3D5dup2Ux3xDAe5+SwXuLL6vfuNU+FWMFgCzEGFMq W+7b0HUefxvJiQWbQAUiZV9psYVrI8/oqtk2STU5x2tOdfEB8eOmncPUUNrtm7l+ Kq0KtHhKztIjSi8py6c1yW54e+VqH41bsYSe8yqFHIVmz/PuYlVXxh4XV6IcUxeI BHcJBQ4oc0O3kHD3NPYMmvwfHbCNj4sRdmhp0SplQwxAB/gJ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6k4cyVDm6fJYd56p+kzVlOrT9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZmFlZjNmZWMtOGQ4Ni0z YWI5LTgxYTctMGVmYTg3ODAyYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8gmawxHKmTLrsXhP9qer06f5UZEj+BdVdbnZpFQq4rFCdb09orC4KP XSAU3MM4YiBTHq/byjhgmCJbC8rT2XwrOH/eSNL4n5PxgxUEKtKuFFf6RPOVbIjC xfqwOO86hwom8eRb/WpPr3A+zu8VaoTD6TCNf7t6jzFGwCjufRXtACA3/f/bfoay 1OqGd+cLZMuG0vUdmOB1nQL7CF6CciXbx09IhNVHYsm3woFtDi7wOX55bIAsRLqI seVTsKb0vNZB2JClg/pg7zu5rJCEKjG0NZWOvHqGh1k2HW9HrafncGwSvpi0SIOo SCRJjjvLf2zpKArmlYk6VEwUhXJuumQ= -----END CERTIFICATE-----Generated at Sat Sep 26 15:54:13 2026 by rpki-client