$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/18b9e4aa-b51e-3122-812e-657954d6f3f7.roa File: 18b9e4aa-b51e-3122-812e-657954d6f3f7.roa (raw, json) Hash identifier: wsttsM2QVb7VA+9M0g/xyGuzRjDkMzSwzrU0pV62Y+I= Subject key identifier: BA:AF:94:18:9A:8D:8C:A7:71:CB:CC:57:07:86:0F:D4:3C:2E:B0:2A Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E878C152AF45BEC4110330280 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/18b9e4aa-b51e-3122-812e-657954d6f3f7.roa Signing time: Fri 17 Jul 2026 14:04:53 +0000 ROA not before: Fri 17 Jul 2026 14:04:53 +0000 ROA not after: Thu 15 Oct 2026 14:04:53 +0000 asID: 10279 IP address blocks: 164.153.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:87:8c:15:2a:f4:5b:ec:41:10:33:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 17 14:04:53 2026 GMT Not After : Oct 15 14:04:53 2026 GMT Subject: CN=ec27af7c-9d38-4cc2-b36d-064800d5b402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:42:cf:40:13:82:b3:86:c9:a2:a0:47:58:75: 7d:92:8d:a4:68:63:08:ee:44:6e:81:05:9a:ec:db: 15:7f:68:06:5d:ff:c5:c4:d6:dc:68:2b:d3:2c:ea: 12:3d:95:a3:70:b0:06:96:e1:df:49:c8:15:d1:28: eb:b9:0e:5b:05:7f:8b:61:e1:62:fc:bc:f3:e6:d0: e3:1c:af:91:8d:0c:28:50:0b:d2:29:7d:8c:32:34: e5:fe:d4:bb:b0:b7:5d:95:0e:2d:e8:18:25:4d:fd: 07:10:56:ea:1f:2c:3d:63:2d:04:71:e4:18:a4:b7: 50:79:04:70:e4:a9:21:65:fe:96:05:6b:10:af:02: cd:fb:21:98:be:c8:fe:a6:96:6e:6b:0f:75:73:72: 67:c6:ef:3d:60:f4:89:7e:94:d1:f3:cc:1e:43:ff: 56:0d:78:11:ec:0e:82:1a:82:34:63:1c:ac:3b:2b: e1:97:92:e3:e4:71:03:6a:02:04:0d:04:64:f1:21: 20:ba:cf:06:81:45:45:b8:c9:38:7c:02:da:0e:5f: 91:74:93:a2:4a:88:e9:49:0a:27:9a:e8:84:a2:d4: ff:6a:29:62:eb:c7:a5:7b:e0:e7:fc:b2:73:2a:1a: db:6d:bc:cf:0f:32:9b:94:df:c0:fb:b5:ef:cd:1b: 84:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AF:94:18:9A:8D:8C:A7:71:CB:CC:57:07:86:0F:D4:3C:2E:B0:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/18b9e4aa-b51e-3122-812e-657954d6f3f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1b:3a:60:2a:35:ec:04:e0:e3:32:03:9c:58:97:f1:0b:80: 56:44:d0:07:a3:dd:b5:ae:bc:16:3b:9c:00:f1:92:37:6f:0a: e3:fc:c7:65:76:2d:91:cd:3f:e7:09:7d:31:9d:75:ea:d8:b5: 81:35:6a:85:e5:18:8c:06:b4:49:84:f0:4d:34:88:75:6c:e4: cb:fe:04:d2:ec:8c:41:b5:90:f8:2b:0b:33:b3:01:52:67:98: 57:ec:c1:40:9c:09:06:21:42:ea:36:8e:5a:c5:2e:e4:ae:e7: bf:c2:1f:62:83:3c:ba:7e:1c:31:e1:10:55:02:77:f9:7d:e5: 2d:71:36:41:59:61:da:b8:cf:10:7f:c5:df:df:d3:bf:af:05: 47:51:17:6a:1b:67:2a:c6:c1:d9:33:cc:9f:df:01:4c:71:e8: 77:d9:70:d7:bf:9a:14:19:d5:ce:a4:15:14:cd:fa:bc:3c:66: 70:c0:d8:8a:5a:b7:a1:2f:97:b8:f5:ca:88:7d:8c:90:22:62: b1:64:70:18:71:88:4b:29:0e:05:77:81:85:a6:a2:bd:29:fd: 12:f8:4c:13:d0:42:ef:62:ab:15:29:30:7e:aa:dc:93:ca:60: ec:18:2b:24:b8:1a:36:b0:21:54:3b:48:52:c6:99:2f:e2:0a: d0:39:65:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6HjBUq9FvsQRAzAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcxNzE0MDQ1M1oXDTI2MTAxNTE0MDQ1M1owLzEtMCsGA1UEAxMk ZWMyN2FmN2MtOWQzOC00Y2MyLWIzNmQtMDY0ODAwZDViNDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjULPQBOCs4bJoqBHWHV9ko2kaGMI7kRugQWa 7NsVf2gGXf/FxNbcaCvTLOoSPZWjcLAGluHfScgV0SjruQ5bBX+LYeFi/Lzz5tDj HK+RjQwoUAvSKX2MMjTl/tS7sLddlQ4t6BglTf0HEFbqHyw9Yy0EceQYpLdQeQRw 5KkhZf6WBWsQrwLN+yGYvsj+ppZuaw91c3Jnxu89YPSJfpTR88weQ/9WDXgR7A6C GoI0YxysOyvhl5Lj5HEDagIEDQRk8SEgus8GgUVFuMk4fALaDl+RdJOiSojpSQon muiEotT/aili68ele+Dn/LJzKhrbbbzPDzKblN/A+7XvzRuELwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqvlBiajYynccvMVweGD9Q8LrAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvMThiOWU0YWEtYjUxZS0z MTIyLTgxMmUtNjU3OTU0ZDZmM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8bOmAqNewE4OMyA5xYl/ELgFZE0Aej3bWuvBY7nADxkjdvCuP8x2V2 LZHNP+cJfTGdderYtYE1aoXlGIwGtEmE8E00iHVs5Mv+BNLsjEG1kPgrCzOzAVJn mFfswUCcCQYhQuo2jlrFLuSu57/CH2KDPLp+HDHhEFUCd/l95S1xNkFZYdq4zxB/ xd/f07+vBUdRF2obZyrGwdkzzJ/fAUxx6HfZcNe/mhQZ1c6kFRTN+rw8ZnDA2Ipa t6Evl7j1yoh9jJAiYrFkcBhxiEspDgV3gYWmor0p/RL4TBPQQu9iqxUpMH6q3JPK YOwYKyS4GjawIVQ7SFLGmS/iCtA5ZRU= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:05 2026 by rpki-client