$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/34a1c527-a3b2-39d5-bc49-4fba2ff9861e.roa File: 34a1c527-a3b2-39d5-bc49-4fba2ff9861e.roa (raw, json) Hash identifier: Bza35HK4N8gplC2EFqgV/jXp155BP+YtlzoDc3tbs18= Subject key identifier: FB:2B:D2:86:1A:3E:3D:55:08:BF:10:73:02:F6:A6:A7:D8:10:DF:D9 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E8FFA421015BB77A343200A60 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/34a1c527-a3b2-39d5-bc49-4fba2ff9861e.roa Signing time: Mon 20 Jul 2026 14:33:21 +0000 ROA not before: Mon 20 Jul 2026 14:33:21 +0000 ROA not after: Sun 18 Oct 2026 14:33:21 +0000 asID: 10279 IP address blocks: 164.153.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:fa:42:10:15:bb:77:a3:43:20:0a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 20 14:33:21 2026 GMT Not After : Oct 18 14:33:21 2026 GMT Subject: CN=2c1f7864-9642-4aec-b3cd-997c9554b93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:32:bd:77:cd:5d:c7:a5:7f:5f:2d:7a:ae: fa:88:49:c9:0b:d3:0d:23:66:8f:c1:6f:ab:dd:36: 2e:90:1d:31:fd:4c:3a:50:85:93:ad:90:35:ce:3e: 82:c4:3e:d2:78:a7:ce:f0:c0:94:9b:6b:11:28:84: 83:7b:bb:a7:ad:0a:d7:04:3c:81:eb:d8:bc:70:02: 0d:ec:d9:3a:a2:ba:38:95:ef:75:0a:64:00:52:c6: 4c:16:6b:75:0d:d8:d0:fc:5e:1f:ac:1e:93:8b:a8: 7d:3a:8d:c1:b6:84:20:e2:81:f1:8d:36:64:d9:68: 40:b0:df:a4:8f:c3:0e:e4:5a:01:8e:3a:36:d4:0f: 7a:c6:27:37:32:dc:c6:9e:c3:3c:6d:f2:f5:77:ee: 3a:51:91:54:f3:3d:58:38:ff:96:08:d4:5f:58:43: 5d:c1:e4:c2:e6:15:b7:bb:74:70:7d:78:70:5d:fb: 5e:8a:a9:94:c3:90:b4:a8:f6:e5:36:3f:84:b0:8c: 03:1d:d2:40:79:26:4a:16:5c:e9:17:56:7c:07:26: ad:e2:3d:ef:e0:fe:28:c1:e2:83:0e:06:fd:19:89: cc:5d:63:85:48:fb:f2:9c:67:a8:29:37:fb:eb:7d: 91:ca:ec:a3:6b:ad:a6:07:e7:ed:09:a1:4a:07:bf: 22:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2B:D2:86:1A:3E:3D:55:08:BF:10:73:02:F6:A6:A7:D8:10:DF:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/34a1c527-a3b2-39d5-bc49-4fba2ff9861e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:79:63:56:38:76:bf:0a:93:72:fb:a9:5f:f0:15:d8:9b:04: ba:28:98:69:88:86:cc:9d:0b:7d:0d:96:72:5d:4b:a5:af:85: e7:e9:22:05:36:55:52:e6:d2:7b:ba:58:4e:12:aa:02:8f:89: c3:bf:1e:99:4e:21:48:a1:87:4f:af:9b:85:e2:80:69:eb:0c: 65:a7:42:02:79:0a:c9:f9:59:70:90:f3:d3:4d:a7:05:58:ea: 5e:1e:9a:53:6e:f5:45:f6:aa:23:cc:c1:9b:bc:69:91:f4:cd: 3e:a5:45:be:06:a5:22:db:67:a1:f5:3e:6f:37:9a:0f:b6:35: a5:f5:1a:99:00:00:45:0a:bf:45:96:d9:91:f3:18:ad:7b:d6: 2b:cb:e3:8a:de:b2:80:14:01:b6:90:6f:70:6a:88:43:2d:ec: b4:ae:80:60:10:7e:3c:19:1c:53:bf:9a:cc:2c:d2:f7:0c:81: 40:bd:f0:af:63:08:1a:c0:95:8b:32:45:22:c1:3c:84:ce:09: 0c:30:09:ed:5f:83:f5:3e:71:c9:ff:00:5b:17:43:70:88:bc: f5:ea:e2:44:ad:24:73:1d:4a:be:a9:76:44:c2:ba:6c:63:f5: fb:1b:96:f1:58:5f:64:b7:27:9d:d0:dd:03:3a:86:05:63:2f: b3:0a:91:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6P+kIQFbt3o0MgCmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcyMDE0MzMyMVoXDTI2MTAxODE0MzMyMVowLzEtMCsGA1UEAxMk MmMxZjc4NjQtOTY0Mi00YWVjLWIzY2QtOTk3Yzk1NTRiOTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSAyvXfNXcelf18teq76iEnJC9MNI2aPwW+r 3TYukB0x/Uw6UIWTrZA1zj6CxD7SeKfO8MCUm2sRKISDe7unrQrXBDyB69i8cAIN 7Nk6oro4le91CmQAUsZMFmt1DdjQ/F4frB6Ti6h9Oo3BtoQg4oHxjTZk2WhAsN+k j8MO5FoBjjo21A96xic3MtzGnsM8bfL1d+46UZFU8z1YOP+WCNRfWENdweTC5hW3 u3RwfXhwXfteiqmUw5C0qPblNj+EsIwDHdJAeSZKFlzpF1Z8Byat4j3v4P4oweKD Dgb9GYnMXWOFSPvynGeoKTf7632Ryuyja62mB+ftCaFKB78iyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsr0oYaPj1VCL8QcwL2pqfYEN/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvMzRhMWM1MjctYTNiMi0z OWQ1LWJjNDktNGZiYTJmZjk4NjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJk1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp5Y1Y4dr8Kk3L7qV/wFdibBLoomGmIhsydC30NlnJdS6WvhefpIgU2 VVLm0nu6WE4SqgKPicO/HplOIUihh0+vm4XigGnrDGWnQgJ5Csn5WXCQ89NNpwVY 6l4emlNu9UX2qiPMwZu8aZH0zT6lRb4GpSLbZ6H1Pm83mg+2NaX1GpkAAEUKv0WW 2ZHzGK171ivL44resoAUAbaQb3BqiEMt7LSugGAQfjwZHFO/msws0vcMgUC98K9j CBrAlYsyRSLBPITOCQwwCe1fg/U+ccn/AFsXQ3CIvPXq4kStJHMdSr6pdkTCumxj 9fsblvFYX2S3J53Q3QM6hgVjL7MKkVA= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:07 2026 by rpki-client