$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa File: 954248a7-1747-37a2-8e59-18157153fb0f.roa (raw, json) Hash identifier: TddWXrWSMNhBFRXmr02kHfUjbzFOSpUCdfB73gHDaLg= Subject key identifier: F0:99:09:97:5F:28:FE:D0:07:9B:DF:7E:BD:46:00:05:2E:6D:0C:B6 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584F8578649A5B655E5F916D3100 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 16509 IP address blocks: 170.176.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:64:9a:5b:65:5e:5f:91:6d:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=afa5a8f1-c181-4f89-b89f-caf17d0a87b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f2:e2:0f:b2:9a:5a:d8:21:fa:5a:b6:54:a9: cc:d9:14:d3:f4:ed:21:d4:b1:e4:bc:0e:1c:2e:7b: e9:83:f5:6b:0e:c4:14:c3:78:34:d1:b6:5c:8b:4b: 9a:00:20:99:7d:3d:07:bb:e7:85:e4:5f:3b:69:9e: c0:b7:a3:a9:86:7f:c1:bc:50:c7:84:2d:30:f8:9e: d2:8f:55:de:e5:a3:eb:82:a1:dd:69:b6:8e:8f:ca: a1:21:56:a7:56:ac:88:0b:27:c0:2a:5a:6d:76:bc: 08:c0:d6:74:e3:2a:4d:d2:a7:a4:5d:3f:be:51:21: 42:e9:59:76:29:96:bf:d5:b0:b5:32:ba:0f:e9:ab: d7:c0:54:00:79:97:99:26:ba:c2:59:50:fd:01:91: 3e:60:e4:f7:8e:e2:b7:a6:22:a9:4a:d7:ee:fe:5c: ac:b6:43:94:19:05:bb:af:2d:ec:d4:cf:46:d6:0b: ef:e5:4e:7a:57:4b:7f:62:4c:4d:c0:a0:6c:81:e9: 56:6e:15:0b:ac:84:5e:f9:4d:fb:17:f5:c2:dd:51: 3a:a7:aa:ea:1e:ae:f3:c1:b4:ef:39:18:11:4d:53: 48:1f:4b:80:dd:12:ce:31:18:e8:a7:c5:34:21:09: d5:c8:86:bf:40:39:6e:e7:36:b2:3f:0c:48:81:51: 40:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:99:09:97:5F:28:FE:D0:07:9B:DF:7E:BD:46:00:05:2E:6D:0C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c2:78:a0:f3:bd:e5:90:d1:fd:09:d3:a7:a5:c5:03:57:b3: 25:d3:a4:d0:1e:4d:6f:09:f9:ef:c4:43:a3:32:87:32:fa:ad: 7f:a0:35:57:11:e4:4e:7a:68:b6:e4:8f:57:6e:ac:bb:0c:d4: 06:7d:a7:56:46:6a:6f:4d:d0:98:83:87:ea:37:df:dc:11:21: 10:e9:91:c4:79:0d:20:a3:db:d5:86:26:1c:e7:f4:a8:6e:00: 28:6f:67:cd:28:c9:c4:59:48:69:ad:be:63:66:6e:2d:d4:2c: 0a:7c:05:d0:53:8f:51:3e:68:a6:00:04:da:4e:71:2e:9d:15: 2a:8b:0b:06:a2:8c:17:6f:7c:c3:d2:ce:08:d8:ca:68:0a:f9: 35:92:4d:54:d6:4a:66:ee:f8:b8:d6:43:a1:f7:42:e9:9f:05: db:2a:08:f2:9c:c7:91:17:de:a1:51:04:87:93:c2:b0:29:a3: 4a:dc:ed:0b:8c:26:29:04:55:d6:98:f7:d4:26:8b:ff:ba:5f: 9a:9d:ce:a9:ab:51:e4:6f:3a:ce:1e:b6:6f:73:2f:39:9e:d2: 38:bf:d3:d4:8a:2d:07:13:70:1f:1a:a1:1e:78:bf:0f:be:4c: 28:92:e6:df:5d:ad:3d:68:e4:99:ef:3f:7d:90:12:c6:0e:7d: 74:01:3d:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeGSaW2VeX5FtMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk YWZhNWE4ZjEtYzE4MS00Zjg5LWI4OWYtY2FmMTdkMGE4N2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPLiD7KaWtgh+lq2VKnM2RTT9O0h1LHkvA4c Lnvpg/VrDsQUw3g00bZci0uaACCZfT0Hu+eF5F87aZ7At6Ophn/BvFDHhC0w+J7S j1Xe5aPrgqHdabaOj8qhIVanVqyICyfAKlptdrwIwNZ04ypN0qekXT++USFC6Vl2 KZa/1bC1MroP6avXwFQAeZeZJrrCWVD9AZE+YOT3juK3piKpStfu/lystkOUGQW7 ry3s1M9G1gvv5U56V0t/YkxNwKBsgelWbhULrIRe+U37F/XC3VE6p6rqHq7zwbTv ORgRTVNIH0uA3RLOMRjop8U0IQnVyIa/QDlu5zayPwxIgVFAsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCZCZdfKP7QB5vffr1GAAUubQy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvOTU0MjQ4YTctMTc0Ny0z N2EyLThlNTktMTgxNTcxNTNmYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPCeKDzveWQ0f0J06elxQNXsyXTpNAeTW8J+e/EQ6MyhzL6rX+gNVcR 5E56aLbkj1durLsM1AZ9p1ZGam9N0JiDh+o339wRIRDpkcR5DSCj29WGJhzn9Khu AChvZ80oycRZSGmtvmNmbi3ULAp8BdBTj1E+aKYABNpOcS6dFSqLCwaijBdvfMPS zgjYymgK+TWSTVTWSmbu+LjWQ6H3QumfBdsqCPKcx5EX3qFRBIeTwrApo0rc7QuM JikEVdaY99Qmi/+6X5qdzqmrUeRvOs4etm9zLzme0ji/09SKLQcTcB8aoR54vw++ TCiS5t9drT1o5JnvP32QEsYOfXQBPRQ= -----END CERTIFICATE-----Generated at Wed Oct 21 23:28:14 2026 by rpki-client