$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3da68968-5361-3d99-8bb1-67f7b297d001.roa File: 3da68968-5361-3d99-8bb1-67f7b297d001.roa (raw, json) Hash identifier: pSblm9+C+LMT/ouCQTpsznf7nSwHXfBoYULEyiA6Zes= Subject key identifier: 75:9C:45:00:37:13:08:84:48:0B:6C:93:61:4E:7A:04:2F:40:DD:36 Certificate issuer: /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Certificate serial: 010D0C9F4328584F6F2315E596C6FF8213FB4000 Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3da68968-5361-3d99-8bb1-67f7b297d001.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 33504 IP address blocks: 104.153.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:15:e5:96:c6:ff:82:13:fb:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=412b3577-d985-4083-a712-2f0757623528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6d:3a:0c:06:f1:92:53:2f:5f:5c:db:61:5d: 7f:98:55:f6:a0:9b:9b:ce:c6:f9:2d:cf:15:32:ba: 44:c6:99:4f:e5:7f:c0:8e:6c:c5:ff:46:56:03:32: 8a:af:6f:12:4d:02:28:7d:70:03:d3:d9:b1:ac:e0: ae:94:0e:8f:95:b1:91:4f:2d:82:52:96:88:3b:d9: f9:0c:9b:5f:7f:e8:aa:00:73:dd:34:fc:1f:b2:4d: 25:81:10:8d:26:3f:a4:f1:28:5d:b0:8a:a3:25:fc: 2c:b4:15:cd:ca:21:08:f8:ed:7e:f7:00:cb:9c:2e: eb:71:7f:ec:d5:63:24:73:6c:45:31:b3:8b:de:3a: 0e:f4:7c:df:73:23:ca:cb:3e:b9:b1:b5:e2:8f:eb: c6:12:e8:0c:36:eb:a5:66:81:e0:19:62:51:2f:94: 7a:72:8e:15:fc:1d:81:6f:b4:ad:c3:6d:ab:f2:a8: 12:eb:21:6a:c4:1f:c2:5e:33:a5:4c:db:01:fa:96: 16:34:ea:15:24:56:94:b0:e4:c6:34:f2:b9:ba:63: 07:44:97:01:47:ed:31:83:4a:eb:09:f0:e5:32:ec: 81:2f:2d:a6:42:42:ca:de:44:eb:87:21:c6:e4:44: 3f:29:71:a6:6e:93:f1:8e:ec:d8:70:a0:75:df:89: ca:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9C:45:00:37:13:08:84:48:0B:6C:93:61:4E:7A:04:2F:40:DD:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3da68968-5361-3d99-8bb1-67f7b297d001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl X509v3 Authority Key Identifier: keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer sbgp-ipAddrBlock: critical IPv4: 104.153.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:26:d1:4f:b6:ed:ee:13:76:c9:5d:7e:68:33:6b:a7:e0:d0: cc:59:92:6b:51:35:d6:a7:e7:6e:5e:a8:f4:7f:25:b9:ab:9b: 61:f9:81:48:9d:6c:96:12:b4:ac:cd:49:cf:25:f3:90:27:ba: 05:65:b7:2b:cb:df:85:5c:99:03:f3:19:7c:74:54:ba:9f:35: 11:cf:d1:29:43:46:f5:3e:f5:a9:d0:f2:44:4b:e3:fa:4f:a4: 15:e2:89:c2:c2:98:1f:06:c3:d0:4d:d3:cb:d9:08:3d:ba:8e: 12:c4:ff:82:45:49:bd:e8:b6:32:88:ef:7a:ce:74:20:95:06: 6b:0c:ab:01:d2:dd:bf:5a:e9:a7:84:ee:97:ac:83:e9:88:c3: 7c:24:2e:d7:38:f5:a1:33:70:84:77:7d:0e:13:7a:84:17:15: e6:dd:91:93:98:48:1d:67:97:36:0f:49:d0:09:40:27:c3:8b: 37:83:42:23:1a:96:8c:b2:99:d4:45:9b:71:40:12:f4:34:8c: 46:70:2f:22:f7:86:51:24:35:0e:39:7e:a3:51:e3:de:a4:e6: cd:63:94:ca:af:91:6e:7b:aa:6a:54:c2:72:0b:40:34:99:8f: c1:09:d0:df:37:26:a3:b1:7b:f7:88:ab:7c:0d:d2:c3:d4:48: 4a:f5:0b:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIxXllsb/ghP7QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2 YzYzMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NDEyYjM1NzctZDk4NS00MDgzLWE3MTItMmYwNzU3NjIzNTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm06DAbxklMvX1zbYV1/mFX2oJubzsb5Lc8V MrpExplP5X/AjmzF/0ZWAzKKr28STQIofXAD09mxrOCulA6PlbGRTy2CUpaIO9n5 DJtff+iqAHPdNPwfsk0lgRCNJj+k8ShdsIqjJfwstBXNyiEI+O1+9wDLnC7rcX/s 1WMkc2xFMbOL3joO9HzfcyPKyz65sbXij+vGEugMNuulZoHgGWJRL5R6co4V/B2B b7Stw22r8qgS6yFqxB/CXjOlTNsB+pYWNOoVJFaUsOTGNPK5umMHRJcBR+0xg0rr CfDlMuyBLy2mQkLK3kTrhyHG5EQ/KXGmbpPxjuzYcKB134nKbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWcRQA3EwiESAtsk2FOegQvQN02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5 YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvM2RhNjg5NjgtNTM2MS0z ZDk5LThiYjEtNjdmN2IyOTdkMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3 Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJm9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgm0U+27e4Tdsldfmgza6fg0MxZkmtRNdan525eqPR/Jbmrm2H5gUid bJYStKzNSc8l85AnugVltyvL34VcmQPzGXx0VLqfNRHP0SlDRvU+9anQ8kRL4/pP pBXiicLCmB8Gw9BN08vZCD26jhLE/4JFSb3otjKI73rOdCCVBmsMqwHS3b9a6aeE 7pesg+mIw3wkLtc49aEzcIR3fQ4TeoQXFebdkZOYSB1nlzYPSdAJQCfDizeDQiMa loyymdRFm3FAEvQ0jEZwLyL3hlEkNQ45fqNR496k5s1jlMqvkW57qmpUwnILQDSZ j8EJ0N83JqOxe/eIq3wN0sPUSEr1C+o= -----END CERTIFICATE-----Generated at Sun Oct 11 21:59:04 2026 by rpki-client