$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa File: dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa (raw, json) Hash identifier: xRn1tuxnbz8OqaR6ylAjqn/Wo2RUzSP1oykXx4ticc8= Subject key identifier: 94:CC:27:D4:45:73:D7:90:CE:A9:16:D7:76:E3:D6:E5:5A:F6:8C:0C Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584ECD3729E4E01574DA4D69B440 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 26512 IP address blocks: 168.245.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:29:e4:e0:15:74:da:4d:69:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=d50cafd5-6896-47ad-af73-f9ec2ad7116c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:14:96:5e:63:93:35:a1:6d:23:33:96:76:6a: 84:d6:74:f0:8e:52:d8:d3:35:e0:05:53:2b:8e:54: bd:54:71:86:d2:e2:28:b6:4d:f5:03:c5:92:12:c2: b8:3b:ce:d9:2a:f9:a8:d5:eb:a4:40:73:36:19:7b: 37:ea:8d:6d:21:f8:d2:e4:83:dd:5b:a8:70:cf:42: 98:64:30:d4:c1:88:6c:7d:81:4b:c0:0a:92:e6:58: f1:e4:f4:eb:4f:21:5c:09:62:ef:21:65:73:41:65: 3f:84:86:be:23:7c:0d:ff:33:e0:34:11:0b:8b:95: 11:4d:a6:03:80:c6:76:37:b9:04:95:c4:ca:9d:34: a4:42:b1:3c:43:2b:22:05:cd:b1:d9:70:92:f1:64: 13:3c:c4:9f:2c:35:e8:00:ea:af:0a:b8:6e:4e:6d: fa:07:0a:8d:23:7e:59:0a:39:50:ec:d7:24:7b:a8: c5:0f:f1:39:fa:14:d9:09:61:0b:ff:db:48:77:87: d6:72:5b:3b:ec:80:d7:04:84:d1:5e:6a:3d:8a:e1: 51:cc:5b:7b:22:3d:07:86:d7:34:26:e0:c1:f4:ab: e8:cf:d5:aa:21:f4:f4:17:4f:3d:76:a5:ee:88:25: d8:e8:af:c1:98:a9:da:f6:f9:32:4a:f4:3e:e0:f6: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CC:27:D4:45:73:D7:90:CE:A9:16:D7:76:E3:D6:E5:5A:F6:8C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 168.245.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:5d:57:e5:ac:f9:64:bc:80:7f:80:ca:7f:4d:87:31:2e:ed: 68:59:60:8e:3b:a9:f7:b3:68:32:d8:de:3b:47:47:55:85:84: 86:16:8a:3a:b0:37:36:b7:95:8f:27:1d:c1:44:e9:8f:a2:cf: e9:59:51:01:66:04:d5:dc:77:8e:e9:0a:ad:4b:7b:7d:7e:39: 06:c6:9b:3e:f8:a0:21:fb:41:3a:21:29:27:00:97:93:02:3c: 49:c0:54:d1:55:2d:51:73:b2:b9:f6:10:ee:e1:ab:cb:48:2c: da:64:e5:08:8d:5a:79:f4:e6:f4:85:ec:4a:5f:d1:4d:75:5a: 52:71:a5:98:c2:ec:84:cf:33:62:1d:12:e8:94:1f:0c:9a:ea: 7d:44:cd:63:da:c6:04:d8:e0:f7:17:8f:1b:60:84:d1:8d:2d: 5e:b5:60:12:48:75:5b:f6:0c:62:80:29:f2:5a:f5:96:b4:15: 1f:70:f2:82:cf:29:9b:8a:e7:45:90:3a:61:66:0a:3b:e0:a9: e8:30:24:af:80:d1:40:4a:82:a4:7e:61:44:28:f9:10:15:d7: 60:2c:23:a1:b6:86:07:6a:c7:48:36:26:81:27:1f:40:17:3d: 6e:4e:17:a6:de:17:7b:b5:83:ef:4c:9c:83:91:a8:c9:b6:65: 51:03:4f:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNynk4BV02k1ptEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk ZDUwY2FmZDUtNjg5Ni00N2FkLWFmNzMtZjllYzJhZDcxMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBSWXmOTNaFtIzOWdmqE1nTwjlLY0zXgBVMr jlS9VHGG0uIotk31A8WSEsK4O87ZKvmo1eukQHM2GXs36o1tIfjS5IPdW6hwz0KY ZDDUwYhsfYFLwAqS5ljx5PTrTyFcCWLvIWVzQWU/hIa+I3wN/zPgNBELi5URTaYD gMZ2N7kElcTKnTSkQrE8QysiBc2x2XCS8WQTPMSfLDXoAOqvCrhuTm36BwqNI35Z CjlQ7Ncke6jFD/E5+hTZCWEL/9tId4fWcls77IDXBITRXmo9iuFRzFt7Ij0Hhtc0 JuDB9Kvoz9WqIfT0F089dqXuiCXY6K/BmKna9vkySvQ+4PbTNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTMJ9RFc9eQzqkW13bj1uVa9owMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvZGQ2ZDU5MjAtZmZlYi0z Y2IwLTlmNGYtNDJmYTZlNjk3NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApdV+Ws+WS8gH+Ayn9NhzEu7WhZYI47qfezaDLY3jtHR1WFhIYWijqw Nza3lY8nHcFE6Y+iz+lZUQFmBNXcd47pCq1Le31+OQbGmz74oCH7QTohKScAl5MC PEnAVNFVLVFzsrn2EO7hq8tILNpk5QiNWnn05vSF7Epf0U11WlJxpZjC7ITPM2Id EuiUHwya6n1EzWPaxgTY4PcXjxtghNGNLV61YBJIdVv2DGKAKfJa9Za0FR9w8oLP KZuK50WQOmFmCjvgqegwJK+A0UBKgqR+YUQo+RAV12AsI6G2hgdqx0g2JoEnH0AX PW5OF6beF3u1g+9MnIORqMm2ZVEDTwY= -----END CERTIFICATE-----Generated at Thu Aug 20 00:06:03 2026 by rpki-client