$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/87dd2968-dc94-35d5-962a-ea94c98b34c3.roa File: 87dd2968-dc94-35d5-962a-ea94c98b34c3.roa (raw, json) Hash identifier: h2rdZTIGIvEYHfPahNuKRkoXTX/8w1x5TeDfcIe9gwg= Subject key identifier: 72:92:4F:5C:FD:4F:A5:09:57:FA:A3:BB:AF:7C:3A:34:CE:6F:63:56 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E878CA0A7B52E3AC7863E6580 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/87dd2968-dc94-35d5-962a-ea94c98b34c3.roa Signing time: Fri 17 Jul 2026 14:05:59 +0000 ROA not before: Fri 17 Jul 2026 14:05:59 +0000 ROA not after: Thu 15 Oct 2026 14:05:59 +0000 asID: 10279 IP address blocks: 164.153.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:87:8c:a0:a7:b5:2e:3a:c7:86:3e:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 17 14:05:59 2026 GMT Not After : Oct 15 14:05:59 2026 GMT Subject: CN=41a82c0f-8e78-488e-9031-a3caffcab595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:45:47:af:46:09:89:33:8e:5e:1c:78:95:e4: e1:7f:08:13:ed:8d:7a:05:9d:4a:ae:67:b6:3e:d6: aa:89:cb:8e:99:e4:c0:1c:e0:c6:c9:d8:3c:87:7e: 48:d5:9b:93:93:be:52:6a:fc:35:e6:7c:41:c3:00: 8f:77:64:60:86:e1:19:e7:39:25:b2:69:f4:4c:fd: 0c:8f:4f:9d:e3:b8:7d:3e:14:6e:38:e7:73:a9:9b: a9:ae:ac:a4:8e:6c:8c:35:4b:e4:89:4a:20:a9:20: 44:63:53:76:4f:a2:bc:7d:a8:2b:23:b1:3d:b3:92: b0:44:ce:56:d0:02:cb:f6:1d:89:1e:79:11:22:5b: a4:7c:86:5c:30:62:80:4b:cb:be:41:e2:1a:25:81: 2e:8d:05:7f:69:5b:7c:59:ce:c3:d5:57:e4:ec:ee: 68:be:94:5e:fe:25:0a:a8:3a:18:a4:24:db:fd:3c: d7:86:58:93:77:1f:2c:94:6d:31:ed:7b:97:37:57: 87:fb:81:26:ec:90:65:10:fa:53:8a:89:a1:b5:36: 7f:b6:ee:ff:f0:84:96:f6:2b:7a:b4:b0:98:61:5b: f1:d3:9e:f4:50:e7:26:1d:69:f8:8a:7e:c8:6b:f6: 0a:0a:51:a7:a0:59:d4:78:87:76:78:95:c4:60:0b: e5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:92:4F:5C:FD:4F:A5:09:57:FA:A3:BB:AF:7C:3A:34:CE:6F:63:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/87dd2968-dc94-35d5-962a-ea94c98b34c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ca:5f:d8:4a:33:3f:e0:8a:a9:8a:cd:17:59:de:a7:f4:cf: ee:45:be:e1:46:98:e0:98:37:61:60:9c:f9:d7:c2:cd:41:bb: 5f:ab:dd:c3:6c:65:45:0a:c9:83:ca:e4:85:f5:45:b1:40:d7: 41:45:b8:7f:61:84:d2:28:62:55:d7:6d:17:4d:bd:7c:cb:11: 76:f3:67:04:75:47:d9:6c:92:b4:19:ab:e6:69:60:a3:a2:09: 44:35:86:3f:82:a8:8d:96:d2:86:cc:a8:7a:ee:d8:32:6b:86: e7:c1:6d:d2:45:14:42:3d:62:e7:c1:c0:c8:29:b5:aa:26:a1: f2:44:d3:d2:4e:f8:a4:68:45:32:5a:c3:c3:d5:5a:d5:24:2c: a5:95:30:04:3b:74:da:78:b5:25:93:f9:27:f5:26:22:a2:e0: ab:f8:7f:05:1c:28:29:fb:aa:81:1e:c0:d6:af:9b:e4:6f:7f: ec:3b:0a:07:63:b6:e4:7c:59:0d:01:5b:06:9a:03:99:95:6d: 26:b8:3e:a0:d8:e1:18:c6:e8:f5:36:90:8f:6a:9f:97:fa:03: 12:1d:c3:06:42:ec:a1:3a:b9:67:fd:a1:ff:cc:51:4b:55:cb: 26:ce:e2:37:a9:f0:f4:dc:61:da:3e:74:19:b3:47:2e:0c:67: a3:97:6c:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6HjKCntS46x4Y+ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcxNzE0MDU1OVoXDTI2MTAxNTE0MDU1OVowLzEtMCsGA1UEAxMk NDFhODJjMGYtOGU3OC00ODhlLTkwMzEtYTNjYWZmY2FiNTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkVHr0YJiTOOXhx4leThfwgT7Y16BZ1Krme2 PtaqicuOmeTAHODGydg8h35I1ZuTk75Savw15nxBwwCPd2RghuEZ5zklsmn0TP0M j0+d47h9PhRuOOdzqZuprqykjmyMNUvkiUogqSBEY1N2T6K8fagrI7E9s5KwRM5W 0ALL9h2JHnkRIlukfIZcMGKAS8u+QeIaJYEujQV/aVt8Wc7D1Vfk7O5ovpRe/iUK qDoYpCTb/TzXhliTdx8slG0x7XuXN1eH+4Em7JBlEPpTiomhtTZ/tu7/8ISW9it6 tLCYYVvx0570UOcmHWn4in7Ia/YKClGnoFnUeId2eJXEYAvl9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKST1z9T6UJV/qju698OjTOb2NWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvODdkZDI5NjgtZGM5NC0z NWQ1LTk2MmEtZWE5NGM5OGIzNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJknMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzKX9hKMz/giqmKzRdZ3qf0z+5FvuFGmOCYN2FgnPnXws1Bu1+r3cNs ZUUKyYPK5IX1RbFA10FFuH9hhNIoYlXXbRdNvXzLEXbzZwR1R9lskrQZq+ZpYKOi CUQ1hj+CqI2W0obMqHru2DJrhufBbdJFFEI9YufBwMgptaomofJE09JO+KRoRTJa w8PVWtUkLKWVMAQ7dNp4tSWT+Sf1JiKi4Kv4fwUcKCn7qoEewNavm+Rvf+w7Cgdj tuR8WQ0BWwaaA5mVbSa4PqDY4RjG6PU2kI9qn5f6AxIdwwZC7KE6uWf9of/MUUtV yybO4jep8PTcYdo+dBmzRy4MZ6OXbEc= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:05 2026 by rpki-client