$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa File: b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa (raw, json) Hash identifier: prVGWA+XaSdt0ur8Yq3V4z8SPShYKyTmsAEpkKQgIIw= Subject key identifier: 59:CE:C2:56:10:7D:9F:7E:7E:33:ED:B7:A0:B8:3B:D0:7A:C2:09:32 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584F549D45B19CD40633E1999700 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 16570 IP address blocks: 164.153.164.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:45:b1:9c:d4:06:33:e1:99:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=5665a2c3-fd5a-4ef5-bcb5-f7e7e5287a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:23:9c:7f:5d:82:9c:1d:9b:c2:14:13:75:f7: e6:2e:cc:47:84:17:b0:01:d0:14:d5:59:da:ef:b0: fb:a9:e6:cf:a9:0d:37:ac:b8:34:b9:4e:1f:f7:51: df:df:06:14:68:2a:5e:12:ae:05:ef:25:db:7f:4f: d8:db:85:b7:86:f6:e1:b8:c4:5e:1c:64:3b:1b:0e: 91:1a:4f:8f:47:4a:f2:09:4e:f6:d7:0f:98:7c:44: a8:57:fe:10:06:b2:bc:40:8e:4e:53:89:3c:8a:1b: d5:48:65:28:3b:68:d5:f4:0d:49:01:6b:c9:27:7a: 02:a0:7c:b2:12:80:fa:7e:b7:65:6f:88:2d:87:d8: 36:e3:3f:16:a6:bc:ea:6b:7b:fc:e8:b5:46:71:77: df:49:eb:59:9d:06:ab:df:50:79:b9:e3:bc:e6:e2: 66:53:0b:bb:5f:3b:67:5d:80:bd:75:62:60:bb:83: e5:f4:80:a8:20:0b:15:e9:d4:f4:44:ad:4e:57:8a: f3:1f:3a:e8:7e:64:9e:27:93:fc:5f:53:1b:3c:b0: 2a:ad:5d:73:fa:dc:6e:0e:95:a6:7c:a8:c4:95:3c: 2f:fe:82:90:c6:31:9d:90:9d:0e:75:41:ff:d9:45: 00:99:2e:02:9d:57:36:93:07:52:46:24:2d:bd:f0: 2a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CE:C2:56:10:7D:9F:7E:7E:33:ED:B7:A0:B8:3B:D0:7A:C2:09:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a3:2e:9c:75:83:69:90:28:9e:e1:10:4e:72:3e:c2:a5:e3: 1e:9e:e7:0d:52:42:ba:2e:e2:94:60:87:45:23:75:b0:eb:bb: c3:b2:05:4d:58:f2:7b:ec:e3:a7:3b:6c:bd:32:3d:5d:fc:2c: 15:ad:f7:36:e9:03:10:0f:a6:1c:87:ad:d9:c8:b8:bd:cb:51: 74:a4:8c:28:cd:a6:74:e2:3f:9a:6d:3c:ac:86:3c:46:75:1e: 49:b7:18:91:02:1b:0d:20:e5:d1:29:e6:1b:df:c2:d7:8c:f7: 26:4c:19:fa:fc:0c:7f:4a:92:4e:e8:4e:35:bc:44:93:3a:7e: 72:3e:e9:1a:54:46:1c:2d:64:e9:e2:6a:31:9e:b9:ff:f6:92: 4e:96:31:00:b7:60:06:e4:8b:88:4c:03:ed:e6:98:d9:69:62: 99:91:65:18:54:0b:ad:f0:a6:c0:67:88:0f:9f:8b:6b:be:df: a1:be:80:72:2f:75:fa:47:5e:71:e6:7e:54:fb:ab:55:a1:9d: ae:c9:16:c1:44:24:65:a0:6c:61:d9:e4:21:c6:50:2d:e3:20: 29:1f:66:1f:d7:54:2c:05:c0:39:84:bc:16:dd:5a:58:7f:62: 21:f6:c3:93:38:ef:cf:3f:d5:2c:0a:b1:10:6c:5c:e5:0f:b2: 68:63:4c:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnUWxnNQGM+GZlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NTY2NWEyYzMtZmQ1YS00ZWY1LWJjYjUtZjdlN2U1Mjg3YTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyOcf12CnB2bwhQTdffmLsxHhBewAdAU1Vna 77D7qebPqQ03rLg0uU4f91Hf3wYUaCpeEq4F7yXbf0/Y24W3hvbhuMReHGQ7Gw6R Gk+PR0ryCU721w+YfESoV/4QBrK8QI5OU4k8ihvVSGUoO2jV9A1JAWvJJ3oCoHyy EoD6frdlb4gth9g24z8Wprzqa3v86LVGcXffSetZnQar31B5ueO85uJmUwu7Xztn XYC9dWJgu4Pl9ICoIAsV6dT0RK1OV4rzHzrofmSeJ5P8X1MbPLAqrV1z+txuDpWm fKjElTwv/oKQxjGdkJ0OdUH/2UUAmS4CnVc2kwdSRiQtvfAqiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnOwlYQfZ9+fjPtt6C4O9B6wgkyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvYjJkZTVkYTItZTYyZS0z ZDc4LWJkOTItMGYxYjFiNDIwNmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGajLpx1g2mQKJ7hEE5yPsKl4x6e5w1SQrou4pRgh0UjdbDru8OyBU1Y 8nvs46c7bL0yPV38LBWt9zbpAxAPphyHrdnIuL3LUXSkjCjNpnTiP5ptPKyGPEZ1 Hkm3GJECGw0g5dEp5hvfwteM9yZMGfr8DH9Kkk7oTjW8RJM6fnI+6RpURhwtZOni ajGeuf/2kk6WMQC3YAbki4hMA+3mmNlpYpmRZRhUC63wpsBniA+fi2u+36G+gHIv dfpHXnHmflT7q1Whna7JFsFEJGWgbGHZ5CHGUC3jICkfZh/XVCwFwDmEvBbdWlh/ YiH2w5M4788/1SwKsRBsXOUPsmhjTFQ= -----END CERTIFICATE-----Generated at Thu Oct 8 20:57:16 2026 by rpki-client