$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/3f2cb853-b682-3954-a30c-f36a2d2f7b8d.roa File: 3f2cb853-b682-3954-a30c-f36a2d2f7b8d.roa (raw, json) Hash identifier: g5IU+iocKxaNlq8LoiTd1KktsPAu8q6dFO/GxYiUK1o= Subject key identifier: 7A:A6:14:FC:7F:A2:7C:08:BF:7B:CD:05:CF:3A:89:45:5E:40:6D:0C Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E8FF9DCF71DE5319225F07700 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/3f2cb853-b682-3954-a30c-f36a2d2f7b8d.roa Signing time: Mon 20 Jul 2026 14:32:33 +0000 ROA not before: Mon 20 Jul 2026 14:32:33 +0000 ROA not after: Sun 18 Oct 2026 14:32:33 +0000 asID: 10279 IP address blocks: 164.153.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:f9:dc:f7:1d:e5:31:92:25:f0:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 20 14:32:33 2026 GMT Not After : Oct 18 14:32:33 2026 GMT Subject: CN=fec8256d-c455-475a-bebe-b85fcc4b5948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:b1:06:06:9d:dd:b3:b7:c5:2a:45:b9:f0: 9c:99:4e:21:de:b5:db:6d:94:1c:10:90:42:e0:3d: 61:ec:e1:5d:f3:db:f6:0f:91:a7:f8:be:45:a3:66: 03:b1:6e:91:0c:fd:e4:86:ef:5c:93:07:89:0a:82: b2:2b:27:93:15:5d:71:8a:e2:68:49:f3:c1:36:39: ac:9c:75:99:17:d7:90:bd:d9:96:36:e1:74:3f:3c: e0:b0:a7:ae:28:f1:28:21:d1:95:2a:e4:37:69:17: 8d:c5:35:2c:3a:98:8d:c8:89:b8:f6:32:12:ac:58: e0:82:e7:19:fc:2c:02:6b:33:75:bb:cb:fb:6d:d7: 6c:fb:fc:9e:a9:27:17:8b:06:cb:7c:6f:fa:28:37: 04:0f:d5:20:09:6a:92:47:04:ad:74:56:74:bf:38: 0b:85:c9:49:ba:cb:46:46:5e:c9:1f:54:89:e1:38: fd:8d:84:49:f4:ee:d9:28:11:e4:27:48:e0:f1:c5: 82:a9:9f:55:d3:c7:90:f8:4a:16:c0:40:e4:e9:0c: 22:ae:74:80:53:da:dd:a7:15:c3:cf:b0:82:61:9f: 8e:6c:85:56:a3:08:22:0b:db:47:74:af:a8:f5:3f: e6:56:47:d8:5a:7b:f1:ed:0c:4e:eb:82:6e:2b:65: 4c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A6:14:FC:7F:A2:7C:08:BF:7B:CD:05:CF:3A:89:45:5E:40:6D:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/3f2cb853-b682-3954-a30c-f36a2d2f7b8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9d:77:01:0a:04:6a:18:f8:97:c4:35:a1:1d:2e:e7:98:95: da:be:7e:d5:14:55:47:4d:49:27:cc:4f:58:48:ae:9d:73:43: 41:f4:0e:cb:a2:50:02:94:de:ea:60:c0:13:6a:e6:e3:88:07: 08:eb:6f:7e:49:aa:5e:70:bd:fa:b2:1f:ce:7a:d9:12:f0:70: 18:bd:b4:d3:70:28:24:5a:dc:af:6b:fa:94:65:29:37:fb:46: 5e:6c:53:67:c0:00:37:a4:a5:e4:a5:3f:3f:a7:e9:42:18:21: 16:8d:47:c6:a8:48:86:1b:30:54:a2:b9:01:d2:06:12:83:a6: ef:a0:e1:97:31:34:87:18:30:3d:91:38:ed:34:1d:71:df:de: ec:27:ca:9d:41:df:94:d2:53:73:1b:af:fe:37:af:64:4c:50: e0:2a:af:44:ad:ff:a3:c1:cf:ad:31:a5:16:e1:53:de:88:fd: 3e:ac:0e:47:1e:da:4f:4c:29:2a:96:c9:a8:33:0d:0a:04:65: 6b:00:ba:7e:bf:86:2a:14:5f:c7:ea:06:01:d0:c0:f9:8d:f7: 4b:16:0e:ab:73:21:dc:0f:fb:ca:49:c4:08:3a:e8:6d:4d:49: 49:bf:31:1a:4c:50:a8:21:cd:2c:4a:68:ef:3f:99:36:28:80: 80:67:53:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6P+dz3HeUxkiXwdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcyMDE0MzIzM1oXDTI2MTAxODE0MzIzM1owLzEtMCsGA1UEAxMk ZmVjODI1NmQtYzQ1NS00NzVhLWJlYmUtYjg1ZmNjNGI1OTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvyxBgad3bO3xSpFufCcmU4h3rXbbZQcEJBC 4D1h7OFd89v2D5Gn+L5Fo2YDsW6RDP3khu9ckweJCoKyKyeTFV1xiuJoSfPBNjms nHWZF9eQvdmWNuF0PzzgsKeuKPEoIdGVKuQ3aReNxTUsOpiNyIm49jISrFjggucZ /CwCazN1u8v7bdds+/yeqScXiwbLfG/6KDcED9UgCWqSRwStdFZ0vzgLhclJustG Rl7JH1SJ4Tj9jYRJ9O7ZKBHkJ0jg8cWCqZ9V08eQ+EoWwEDk6QwirnSAU9rdpxXD z7CCYZ+ObIVWowgiC9tHdK+o9T/mVkfYWnvx7QxO64JuK2VM+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqmFPx/onwIv3vNBc86iUVeQG0MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvM2YyY2I4NTMtYjY4Mi0z OTU0LWEzMGMtZjM2YTJkMmY3YjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyddwEKBGoY+JfENaEdLueYldq+ftUUVUdNSSfMT1hIrp1zQ0H0Dsui UAKU3upgwBNq5uOIBwjrb35Jql5wvfqyH8562RLwcBi9tNNwKCRa3K9r+pRlKTf7 Rl5sU2fAADekpeSlPz+n6UIYIRaNR8aoSIYbMFSiuQHSBhKDpu+g4ZcxNIcYMD2R OO00HXHf3uwnyp1B35TSU3Mbr/43r2RMUOAqr0St/6PBz60xpRbhU96I/T6sDkce 2k9MKSqWyagzDQoEZWsAun6/hioUX8fqBgHQwPmN90sWDqtzIdwP+8pJxAg66G1N SUm/MRpMUKghzSxKaO8/mTYogIBnU9o= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:04 2026 by rpki-client