$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/32c5dc2d-cd82-38f9-9eed-463371c750d4.roa File: 32c5dc2d-cd82-38f9-9eed-463371c750d4.roa (raw, json) Hash identifier: lQmKn25kczfum+GRTc0ly+/wndNE2OUdUa1ZIMQ3Jcg= Subject key identifier: 5E:B6:23:D0:01:B0:21:B4:A2:BE:24:E8:79:DF:71:49:AB:F5:3C:F8 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E878C79826C87DABCDAA6F680 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/32c5dc2d-cd82-38f9-9eed-463371c750d4.roa Signing time: Fri 17 Jul 2026 14:05:41 +0000 ROA not before: Fri 17 Jul 2026 14:05:41 +0000 ROA not after: Thu 15 Oct 2026 14:05:41 +0000 asID: 10279 IP address blocks: 164.153.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:87:8c:79:82:6c:87:da:bc:da:a6:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 17 14:05:41 2026 GMT Not After : Oct 15 14:05:41 2026 GMT Subject: CN=e7f8cd38-ab0a-497a-8fe0-49ef2fd5258e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:df:1e:36:e0:22:00:33:ad:6a:c3:69:6d:c4: 4e:03:1a:d5:bd:71:d6:8e:f1:7f:0c:65:33:7a:4e: 86:1d:18:a6:6d:ed:58:6d:ef:38:63:fa:ea:a0:b2: 56:58:3e:a9:f5:53:90:6c:41:19:4b:e9:1f:4c:36: d7:04:1b:14:e6:12:c5:4a:8e:b4:99:09:f1:ca:79: 18:4b:67:8e:79:3f:57:87:c0:2a:0a:6b:e9:77:53: 51:8f:0f:b6:72:59:11:eb:c6:66:4c:9d:2d:27:09: 6c:ac:9b:f9:57:e2:8b:4f:29:2e:29:4f:31:95:ce: 83:fb:cf:6d:28:a4:b2:2a:a1:cc:a3:79:e5:36:b3: f7:7f:b5:06:fc:32:f4:87:09:51:a6:13:a9:75:35: 26:55:83:5d:a3:f4:00:8b:8a:77:26:8a:98:30:af: 56:66:a3:a8:48:98:ad:e3:c3:a2:86:a4:51:50:86: 14:24:77:27:c9:0f:31:90:07:fe:ab:20:37:53:b9: 0a:b5:3c:2e:8a:59:bd:0b:d0:c8:b7:5a:0c:8d:a2: c2:04:d7:d5:a7:0a:c1:87:c1:de:a6:fd:99:6e:3d: 38:d1:b5:f3:d3:6a:ef:ec:75:49:9b:10:85:9b:2a: 86:e9:fc:bd:61:15:1f:3d:c2:95:c5:46:34:83:7f: 2b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B6:23:D0:01:B0:21:B4:A2:BE:24:E8:79:DF:71:49:AB:F5:3C:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/32c5dc2d-cd82-38f9-9eed-463371c750d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:59:49:cb:a6:a6:53:6c:ec:ed:3b:10:9d:07:03:b7:f3:56: bf:aa:9f:ae:72:27:b9:2e:ac:ce:7f:5f:ba:d6:59:b7:e3:2c: e1:22:5f:b7:61:66:8f:6b:96:87:3d:b8:87:40:b5:56:23:70: 3b:9f:5f:b2:eb:3d:8c:72:49:f0:11:ef:7b:2b:40:13:8f:c0: 39:62:9c:a1:81:aa:c5:d1:ee:60:2a:74:ca:52:8a:00:79:77: 69:c8:d7:4f:08:93:f0:82:e5:d9:fc:37:97:d8:98:cd:32:3e: b8:49:0a:f0:6c:62:fd:2c:bb:2d:92:43:18:61:35:41:b4:fb: 56:09:00:aa:99:d1:c0:69:97:69:cf:49:ea:da:47:51:89:ac: 3d:ca:3d:40:61:93:1c:3c:57:6e:b3:8d:21:50:98:95:75:14: aa:54:8d:78:ec:5e:95:4e:67:d3:76:96:b2:c5:d9:9e:e1:3e: d0:f1:82:28:dc:79:17:76:20:7e:70:89:d7:e4:53:44:58:bd: e7:bd:78:79:a4:39:93:42:2b:ed:c2:85:a0:65:01:01:f8:2a: c4:bb:92:fd:6f:f8:68:50:36:b1:27:dc:70:0a:7d:35:b1:bb: bb:e5:fc:c1:61:b3:c1:de:74:c1:1c:e2:f9:d0:66:2b:e8:a6: 66:c8:ed:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6HjHmCbIfavNqm9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcxNzE0MDU0MVoXDTI2MTAxNTE0MDU0MVowLzEtMCsGA1UEAxMk ZTdmOGNkMzgtYWIwYS00OTdhLThmZTAtNDllZjJmZDUyNThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA098eNuAiADOtasNpbcROAxrVvXHWjvF/DGUz ek6GHRimbe1Ybe84Y/rqoLJWWD6p9VOQbEEZS+kfTDbXBBsU5hLFSo60mQnxynkY S2eOeT9Xh8AqCmvpd1NRjw+2clkR68ZmTJ0tJwlsrJv5V+KLTykuKU8xlc6D+89t KKSyKqHMo3nlNrP3f7UG/DL0hwlRphOpdTUmVYNdo/QAi4p3JoqYMK9WZqOoSJit 48OihqRRUIYUJHcnyQ8xkAf+qyA3U7kKtTwuilm9C9DIt1oMjaLCBNfVpwrBh8He pv2Zbj040bXz02rv7HVJmxCFmyqG6fy9YRUfPcKVxUY0g38rDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF62I9ABsCG0or4k6HnfcUmr9Tz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvMzJjNWRjMmQtY2Q4Mi0z OGY5LTllZWQtNDYzMzcxYzc1MGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZZScumplNs7O07EJ0HA7fzVr+qn65yJ7kurM5/X7rWWbfjLOEiX7dh Zo9rloc9uIdAtVYjcDufX7LrPYxySfAR73srQBOPwDlinKGBqsXR7mAqdMpSigB5 d2nI108Ik/CC5dn8N5fYmM0yPrhJCvBsYv0suy2SQxhhNUG0+1YJAKqZ0cBpl2nP SeraR1GJrD3KPUBhkxw8V26zjSFQmJV1FKpUjXjsXpVOZ9N2lrLF2Z7hPtDxgijc eRd2IH5widfkU0RYvee9eHmkOZNCK+3ChaBlAQH4KsS7kv1v+GhQNrEn3HAKfTWx u7vl/MFhs8HedMEc4vnQZivopmbI7cA= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:04 2026 by rpki-client