$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa File: dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa (raw, json) Hash identifier: A6Bh9iXqt/Wp7dQ9RAkUKe+lQ9L3GDTWYwKZv95I3UY= Subject key identifier: 4C:6E:8B:32:20:4B:B2:93:AA:92:F7:23:CE:F3:80:CF:CE:67:D6:51 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584F6F230BD725665369DF20C800 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 26512 IP address blocks: 168.245.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:0b:d7:25:66:53:69:df:20:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=6b205538-d0bd-4eb2-99d9-fd01ca95abff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:08:cc:9d:9a:59:a1:e3:bc:d3:ef:46:45:84: eb:a3:8d:6e:59:1b:d7:69:47:9a:8d:35:f6:b7:b3: 20:be:c3:f9:b7:d6:48:96:f7:97:29:d0:29:ef:5e: 83:3e:09:3b:8d:14:09:52:cd:a1:c5:fc:d3:8c:c9: f3:58:a2:be:fc:6c:c1:fe:69:27:40:28:01:cd:a6: 9e:b7:a8:f2:af:37:c6:f3:8d:bc:d4:8d:a2:b8:f2: 83:bd:92:7d:de:d7:87:a4:dc:12:01:8e:2a:71:b7: 9e:07:b5:fc:6e:19:72:b0:22:e9:c6:44:49:20:bb: 9a:4e:3d:58:b2:7a:f9:e8:40:4f:fa:06:69:0d:9f: fd:87:de:6b:5d:2b:34:38:e8:13:3d:7e:33:a0:1c: ea:93:82:87:81:35:f3:aa:c0:d1:3d:ea:f3:57:51: ee:63:18:fd:78:6d:12:dc:9d:b5:1d:99:6d:6f:69: 48:cb:d4:2a:07:72:30:c9:cc:0b:67:7c:e8:71:52: 51:93:39:9d:17:9f:a2:7c:81:1e:ad:23:62:07:8d: b2:eb:83:49:a7:29:57:c5:e7:79:5c:41:a6:90:a1: d6:47:48:2d:f4:55:4a:bb:69:2b:3e:9e:86:14:ef: 65:89:92:8d:1d:7c:f4:b9:40:b4:2a:49:65:6f:22: 1b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6E:8B:32:20:4B:B2:93:AA:92:F7:23:CE:F3:80:CF:CE:67:D6:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 168.245.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ea:b9:fa:f8:98:c3:72:93:af:da:a5:60:69:0d:69:cc:7c: 86:c6:a5:2c:2e:11:2b:81:a9:03:70:17:f7:b4:5b:2b:d4:fe: 86:b1:77:fb:33:8a:bc:ed:c5:8c:42:fd:4d:25:0e:64:45:ef: 2b:b4:59:6c:ea:11:5d:8f:74:03:3b:9c:ad:3b:f3:a4:aa:77: 5d:fd:07:65:8d:02:68:83:2e:4a:97:80:c5:3f:c4:16:fe:ef: 7d:ab:76:8a:d1:06:32:22:e5:09:75:8e:5f:0e:fd:4d:7a:17: 91:6c:f4:50:d9:7a:08:f2:af:e5:62:e1:f0:d7:08:58:2f:b6: b7:18:90:72:b8:0b:c2:e9:06:40:03:ad:a4:55:1f:1b:03:a8: b9:ee:4e:e3:69:cf:37:48:76:93:2a:cb:a6:4a:a0:bd:40:bc: 7a:4b:94:72:7c:c3:fe:16:ca:6a:6b:98:53:09:a0:d3:f2:08: 43:44:c2:48:ef:dd:f1:d5:95:6f:b2:6d:0a:a0:0c:00:98:d6: d1:fc:05:9c:8b:d3:b8:ef:d0:24:f6:0e:55:9f:96:8e:c8:68: dc:c6:e8:77:a4:15:92:29:79:62:63:38:0a:80:03:a6:a0:43: 05:f4:b2:f6:2c:c5:97:67:9b:09:a4:36:80:1a:b2:85:9a:d0: 49:08:56:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIwvXJWZTad8gyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NmIyMDU1MzgtZDBiZC00ZWIyLTk5ZDktZmQwMWNhOTVhYmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QjMnZpZoeO80+9GRYTro41uWRvXaUeajTX2 t7MgvsP5t9ZIlveXKdAp716DPgk7jRQJUs2hxfzTjMnzWKK+/GzB/mknQCgBzaae t6jyrzfG84281I2iuPKDvZJ93teHpNwSAY4qcbeeB7X8bhlysCLpxkRJILuaTj1Y snr56EBP+gZpDZ/9h95rXSs0OOgTPX4zoBzqk4KHgTXzqsDRPerzV1HuYxj9eG0S 3J21HZltb2lIy9QqB3IwycwLZ3zocVJRkzmdF5+ifIEerSNiB42y64NJpylXxed5 XEGmkKHWR0gt9FVKu2krPp6GFO9liZKNHXz0uUC0KkllbyIbgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExuizIgS7KTqpL3I87zgM/OZ9ZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvZGQ2ZDU5MjAtZmZlYi0z Y2IwLTlmNGYtNDJmYTZlNjk3NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADqufr4mMNyk6/apWBpDWnMfIbGpSwuESuBqQNwF/e0WyvU/oaxd/sz irztxYxC/U0lDmRF7yu0WWzqEV2PdAM7nK0786Sqd139B2WNAmiDLkqXgMU/xBb+ 732rdorRBjIi5Ql1jl8O/U16F5Fs9FDZegjyr+Vi4fDXCFgvtrcYkHK4C8LpBkAD raRVHxsDqLnuTuNpzzdIdpMqy6ZKoL1AvHpLlHJ8w/4WymprmFMJoNPyCENEwkjv 3fHVlW+ybQqgDACY1tH8BZyL07jv0CT2DlWflo7IaNzG6HekFZIpeWJjOAqAA6ag QwX0svYsxZdnmwmkNoAasoWa0EkIVqQ= -----END CERTIFICATE-----Generated at Tue Oct 27 09:22:16 2026 by rpki-client