$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa File: ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa (raw, json) Hash identifier: 3URqGWuwkEyy46dZu6H9rlxCSNr2PT//k0WkIcNj9Jg= Subject key identifier: 9E:1B:4B:8E:8A:0A:33:1D:65:56:CB:92:EE:A1:E3:AC:45:F4:D2:45 Certificate issuer: /CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Certificate serial: 010D0C9F4328584EC20C60E91A5B54B4C5D229C0 Authority key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 395516 IP address blocks: 153.65.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:60:e9:1a:5b:54:b4:c5:d2:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=0aff3d80-d5a7-4a71-8b11-ee95cf003783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:40:ca:ae:6a:02:d6:6c:8e:80:ab:7d:19:30: fb:fc:c8:8b:ec:03:ec:7e:7f:62:a2:c1:a9:65:0d: 33:b4:8a:d9:c9:79:28:e3:0a:51:dd:1a:e5:b9:f0: a7:17:0c:0c:97:f1:84:63:a8:62:9d:a3:40:7c:63: 48:0c:64:54:8b:52:26:83:00:8c:2d:83:bf:a5:52: b7:af:f1:0a:f0:92:f8:f0:9b:36:ba:bf:8a:92:b5: b2:78:3b:f1:35:c5:20:be:28:0f:06:f5:5e:4c:a6: 5a:31:e9:7d:eb:b6:66:78:a7:72:e5:c4:3c:27:48: 02:56:41:d9:05:f1:06:5d:2c:8d:3d:6d:17:98:e4: 79:b8:66:28:50:89:f6:2a:22:a5:eb:27:09:70:c8: f1:73:5a:35:dd:3d:ad:57:3b:b5:47:c3:41:ad:fc: 43:77:31:34:4a:06:e1:4a:12:5d:41:7e:58:18:26: 10:20:10:70:bf:d2:e1:37:15:33:e0:00:31:30:52: 64:50:ea:9e:6b:cf:b0:15:81:71:9b:6d:ee:1f:7b: 2d:21:30:ac:bf:56:1a:ff:6e:79:bf:0f:9b:fd:22: 6d:05:1b:64:87:6d:79:e3:a2:a7:3d:19:f8:9a:97: d1:1a:0e:6b:62:81:09:3c:b4:10:13:85:e7:ad:7e: 5d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1B:4B:8E:8A:0A:33:1D:65:56:CB:92:EE:A1:E3:AC:45:F4:D2:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl X509v3 Authority Key Identifier: keyid:1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer sbgp-ipAddrBlock: critical IPv4: 153.65.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c2:20:62:73:d0:2f:e9:2b:6a:78:6a:10:78:42:56:d9:de: bd:95:fd:1d:ca:9a:79:16:1b:ac:b8:22:50:c3:cf:f2:0e:25: 8d:f7:b5:60:9f:88:4a:4e:af:d4:89:2b:22:3c:2a:cb:01:ae: 02:24:09:9c:45:c4:8e:cc:3e:33:d5:5f:c3:06:1c:a1:59:0e: 01:4a:be:d3:6e:11:9b:12:24:c6:c9:c9:73:48:b3:28:51:19: b1:48:5a:81:38:81:cc:36:86:08:5c:a7:76:5c:91:3a:e7:8d: 10:99:bd:00:63:b7:31:09:51:7f:40:74:90:85:75:92:7b:c8: f8:14:0a:5e:5e:94:12:b3:37:fb:a9:db:cf:ac:25:eb:54:4c: 4c:df:63:e0:94:ac:d0:d8:11:37:d1:f0:dd:10:ea:5a:11:a2: 78:c0:c9:eb:5e:d7:59:05:0b:e1:f8:3f:10:78:8c:90:2d:c3: c8:74:bf:e1:3c:bf:15:88:ae:44:79:c7:4a:9a:35:ee:b6:a6: ed:b0:0c:83:f6:4d:82:5a:85:47:f0:ba:d1:90:bf:ac:e6:6c: 6d:a7:e5:5f:b6:4b:52:42:87:0f:cb:b2:d2:97:fc:91:bf:4a: c6:0e:11:32:a8:ca:77:63:dd:89:8c:99:97:01:c2:fd:0f:53: 56:7d:e3:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDGDpGltUtMXSKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyN2JlM2UtNTY2My00MTk2LWJiOGEtOTY2ZThhNmJm NTcxMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk MGFmZjNkODAtZDVhNy00YTcxLThiMTEtZWU5NWNmMDAzNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EDKrmoC1myOgKt9GTD7/MiL7APsfn9iosGp ZQ0ztIrZyXko4wpR3RrlufCnFwwMl/GEY6hinaNAfGNIDGRUi1ImgwCMLYO/pVK3 r/EK8JL48Js2ur+KkrWyeDvxNcUgvigPBvVeTKZaMel967ZmeKdy5cQ8J0gCVkHZ BfEGXSyNPW0XmOR5uGYoUIn2KiKl6ycJcMjxc1o13T2tVzu1R8NBrfxDdzE0Sgbh ShJdQX5YGCYQIBBwv9LhNxUz4AAxMFJkUOqea8+wFYFxm23uH3stITCsv1Ya/255 vw+b/SJtBRtkh21546KnPRn4mpfRGg5rYoEJPLQQE4XnrX5dnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4bS46KCjMdZVbLku6h46xF9NJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3 YmUzZS01NjYzLTQxOTYtYmI4YS05NjZlOGE2YmY1NzEvYWQzNjhmMGEtNDQ4Ny0z ZWM1LWFjZTEtMTUxMmZkNmYzN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEyN2JlM2UtNTY2My00MTk2LWJi OGEtOTY2ZThhNmJmNTcxL2FhMjdiZTNlLTU2NjMtNDE5Ni1iYjhhLTk2NmU4YTZi ZjU3MS5jcmwwHwYDVR0jBBgwFoAUG5CFrukXfW06zWMhpYfluAl2X+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3YmUzZS01NjYzLTQxOTYtYmI4YS05NjZl OGE2YmY1NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmUFHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvCIGJz0C/pK2p4ahB4QlbZ3r2V/R3KmnkWG6y4IlDDz/IOJY33tWCf iEpOr9SJKyI8KssBrgIkCZxFxI7MPjPVX8MGHKFZDgFKvtNuEZsSJMbJyXNIsyhR GbFIWoE4gcw2hghcp3ZckTrnjRCZvQBjtzEJUX9AdJCFdZJ7yPgUCl5elBKzN/up 28+sJetUTEzfY+CUrNDYETfR8N0Q6loRonjAyete11kFC+H4PxB4jJAtw8h0v+E8 vxWIrkR5x0qaNe62pu2wDIP2TYJahUfwutGQv6zmbG2n5V+2S1JChw/LstKX/JG/ SsYOETKoyndj3YmMmZcBwv0PU1Z94/0= -----END CERTIFICATE-----Generated at Sat Sep 5 04:08:44 2026 by rpki-client