$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa File: ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa (raw, json) Hash identifier: tfrQ7qlS9DzwBztX4IaTwamnkK1T3B5hNjCMHCeLwYo= Subject key identifier: 0A:82:B1:97:20:5A:E7:28:60:27:8A:3E:C6:96:FA:B3:DD:61:55:88 Certificate issuer: /CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Certificate serial: 010D0C9F4328584F63F81230439CDDFC0D7C3300 Authority key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 395516 IP address blocks: 153.65.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:12:30:43:9c:dd:fc:0d:7c:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=fdccc0b7-033c-40bf-8acd-e4bbf53ab249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:99:48:21:04:7c:2f:18:02:47:bd:97:eb: 33:b8:73:a0:18:eb:2f:26:0e:42:4c:99:73:69:05: d9:9d:d6:9b:e3:7f:3b:74:77:e5:c0:80:e5:e6:33: 52:3c:49:48:de:97:15:b1:a1:a9:f0:48:4d:da:dc: 79:c3:85:b1:d4:7c:03:35:a6:3c:50:c0:ca:a0:fd: c0:e5:6a:da:7a:29:98:cd:cf:db:65:2f:a7:0b:3a: bb:79:9e:ab:3a:c6:8c:72:8d:25:9d:d2:82:e1:c1: a6:95:4c:05:eb:25:d5:2f:53:68:f7:44:57:f7:69: 21:b4:df:ee:26:4c:67:82:53:e8:44:bd:47:42:a7: d5:02:39:be:4e:ec:9d:30:38:97:a4:6d:d7:74:89: 68:31:f8:b1:9c:bc:0e:25:57:5e:da:48:43:a7:59: 5a:0c:ea:cb:7a:37:d0:f8:1d:80:16:52:d9:99:d0: 8e:82:3d:89:8d:e6:8d:b9:0a:99:aa:3e:75:bd:74: 6d:39:aa:34:0e:43:e1:36:66:1b:d2:e8:55:de:0b: d1:c8:12:56:bd:e8:81:bf:24:67:b6:c4:7b:86:03: 84:7d:6f:7e:68:9f:e2:5a:b9:8c:ae:3c:f3:97:c4: a7:0f:4e:88:b5:05:e8:91:79:63:20:58:91:31:c4: e9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:82:B1:97:20:5A:E7:28:60:27:8A:3E:C6:96:FA:B3:DD:61:55:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl X509v3 Authority Key Identifier: keyid:1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer sbgp-ipAddrBlock: critical IPv4: 153.65.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:1f:a8:1b:67:f3:6a:c3:5d:e4:8a:f9:a2:8c:93:cb:a1:75: a1:13:ce:90:48:1a:54:24:47:0c:80:52:cd:6d:0a:a4:da:2a: 19:68:9c:c8:a5:37:db:73:84:95:38:b7:c6:1f:47:23:f4:33: 66:dd:4d:19:65:c7:bf:dc:3e:c2:6a:8f:b1:81:13:8a:69:aa: d1:99:42:fc:11:98:be:3d:3b:91:bc:4f:15:a4:52:2b:bd:ed: bd:f7:4a:0f:46:90:77:fa:7f:7c:6a:8d:a2:9c:e3:ae:31:e1: 99:1b:68:11:0a:25:6c:3e:10:51:d9:0e:c9:7a:0d:a4:fe:b3: 86:f0:cc:2d:01:67:c5:b3:dd:41:98:fd:dd:58:d1:59:34:17: 83:e4:88:00:49:b7:95:99:9e:9e:74:0f:3a:ec:d0:d4:f4:61: c1:5a:25:74:59:01:82:52:8e:37:63:6b:5d:8c:c1:91:b7:20: 51:fa:59:3d:5a:13:fe:20:1b:17:19:0a:e8:bd:e5:99:ce:a1: df:5e:cd:87:cb:3e:70:63:ca:ce:19:03:ee:f5:25:63:06:51: a8:f2:dc:af:96:17:08:29:e1:a7:4f:35:59:49:a6:7c:4b:e5: d0:1e:05:bb:97:3c:d1:40:d8:53:b2:67:f7:c6:c7:b3:e8:aa: e9:58:c8:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+BIwQ5zd/A18MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyN2JlM2UtNTY2My00MTk2LWJiOGEtOTY2ZThhNmJm NTcxMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZmRjY2MwYjctMDMzYy00MGJmLThhY2QtZTRiYmY1M2FiMjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8CZSCEEfC8YAke9l+szuHOgGOsvJg5CTJlz aQXZndab4387dHflwIDl5jNSPElI3pcVsaGp8EhN2tx5w4Wx1HwDNaY8UMDKoP3A 5WraeimYzc/bZS+nCzq7eZ6rOsaMco0lndKC4cGmlUwF6yXVL1No90RX92khtN/u JkxnglPoRL1HQqfVAjm+TuydMDiXpG3XdIloMfixnLwOJVde2khDp1laDOrLejfQ +B2AFlLZmdCOgj2JjeaNuQqZqj51vXRtOao0DkPhNmYb0uhV3gvRyBJWveiBvyRn tsR7hgOEfW9+aJ/iWrmMrjzzl8SnD06ItQXokXljIFiRMcTpQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqCsZcgWucoYCeKPsaW+rPdYVWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3 YmUzZS01NjYzLTQxOTYtYmI4YS05NjZlOGE2YmY1NzEvYWQzNjhmMGEtNDQ4Ny0z ZWM1LWFjZTEtMTUxMmZkNmYzN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEyN2JlM2UtNTY2My00MTk2LWJi OGEtOTY2ZThhNmJmNTcxL2FhMjdiZTNlLTU2NjMtNDE5Ni1iYjhhLTk2NmU4YTZi ZjU3MS5jcmwwHwYDVR0jBBgwFoAUG5CFrukXfW06zWMhpYfluAl2X+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3YmUzZS01NjYzLTQxOTYtYmI4YS05NjZl OGE2YmY1NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmUFHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYfqBtn82rDXeSK+aKMk8uhdaETzpBIGlQkRwyAUs1tCqTaKhlonMil N9tzhJU4t8YfRyP0M2bdTRllx7/cPsJqj7GBE4ppqtGZQvwRmL49O5G8TxWkUiu9 7b33Sg9GkHf6f3xqjaKc464x4ZkbaBEKJWw+EFHZDsl6DaT+s4bwzC0BZ8Wz3UGY /d1Y0Vk0F4PkiABJt5WZnp50Dzrs0NT0YcFaJXRZAYJSjjdja12MwZG3IFH6WT1a E/4gGxcZCui95ZnOod9ezYfLPnBjys4ZA+71JWMGUajy3K+WFwgp4adPNVlJpnxL 5dAeBbuXPNFA2FOyZ/fGx7PoqulYyD0= -----END CERTIFICATE-----Generated at Tue Oct 27 04:39:28 2026 by rpki-client