$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/945dede8-9a3a-3dd6-9674-4e267b6fa176.roa File: 945dede8-9a3a-3dd6-9674-4e267b6fa176.roa (raw, json) Hash identifier: nZ2vab0zwcNuLkzEhk3CrfVB6fgJIJqtyqckxfd4I50= Subject key identifier: 96:CE:AE:FD:8B:DE:FD:0F:84:16:49:D7:D9:C6:B4:01:48:33:61:D7 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E8FFA7FE60450182FACA02C80 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/945dede8-9a3a-3dd6-9674-4e267b6fa176.roa Signing time: Mon 20 Jul 2026 14:33:50 +0000 ROA not before: Mon 20 Jul 2026 14:33:50 +0000 ROA not after: Sun 18 Oct 2026 14:33:50 +0000 asID: 10279 IP address blocks: 164.153.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:fa:7f:e6:04:50:18:2f:ac:a0:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 20 14:33:50 2026 GMT Not After : Oct 18 14:33:50 2026 GMT Subject: CN=268c5c3f-8bef-4cbd-b4bb-1909090520f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:54:10:a9:86:3f:b4:b6:34:76:fa:42:2b:29: f9:60:90:c1:86:e0:b3:82:f6:02:68:b2:d5:02:5e: fb:61:6f:bd:6a:0a:ec:76:af:cb:c9:c7:70:5d:c7: 2c:7c:b9:2b:a4:0c:d8:d4:d5:47:c7:88:28:84:7f: 48:9d:02:d9:19:64:19:2c:4c:b6:de:23:1d:a8:7b: 38:72:44:3f:39:f1:db:4e:7e:af:01:0f:d0:ba:c8: 34:00:63:39:51:f0:5d:61:20:f2:99:91:f2:af:97: 76:da:28:ee:41:69:34:a2:00:d8:d5:d7:8c:d0:c4: 04:9e:0e:d5:18:8b:4c:d9:44:24:14:36:7d:43:9b: 9b:e4:50:9a:ac:93:01:1f:d9:f3:a2:fc:a6:1a:2a: 7b:71:68:e0:8f:b7:9d:52:65:ed:8e:ae:ff:a7:f9: 81:35:7d:2e:c2:05:a2:87:5b:82:63:b3:17:eb:c8: 2f:3c:ce:fd:b7:5c:9a:e0:7a:6b:2e:93:73:42:eb: 3e:14:85:82:e9:c2:1f:76:da:35:e5:f7:4d:d1:21: 63:77:61:e6:12:03:57:a6:4f:48:2b:bb:8e:60:d6: e0:03:b1:ff:a6:9d:b4:de:c4:19:f9:ef:27:d5:8b: 3c:ad:05:88:26:49:9c:44:da:eb:13:99:70:c1:30: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CE:AE:FD:8B:DE:FD:0F:84:16:49:D7:D9:C6:B4:01:48:33:61:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/945dede8-9a3a-3dd6-9674-4e267b6fa176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:af:77:fd:30:33:5b:2f:24:5c:8b:da:23:61:bf:fb:07:ce: eb:a1:1b:85:96:af:f9:75:f6:a0:54:bf:c5:31:f6:ab:4a:d4: 02:c6:37:fa:94:7e:ac:dc:b5:4d:89:6f:06:11:cd:cc:de:8a: 63:1c:ed:f5:f4:cb:74:84:1d:5a:1c:13:c5:bd:35:93:a6:c7: 5f:1c:fb:0e:31:37:cc:f0:7e:1f:de:69:06:75:73:91:a0:11: 2a:2a:a3:16:5b:49:99:f2:5d:65:b1:b2:b2:55:a6:05:75:4d: 8f:0d:2a:1c:45:99:32:2a:96:6e:c9:e4:e5:67:c2:b1:4d:2d: c1:37:b8:8c:d2:9b:5d:67:d3:58:99:3f:7d:61:1b:90:f1:6f: 6e:65:62:48:a3:77:ec:82:35:3c:a8:af:bf:0a:5d:87:48:b1: c1:0d:63:c2:f4:9b:aa:a4:3e:97:0d:9e:a5:8d:25:d1:ff:cf: 36:c4:2b:91:c2:51:68:de:c0:50:b3:87:d7:af:34:0a:16:76: 82:48:dc:c6:96:5e:e3:27:5a:e3:2d:e9:78:e4:7e:bc:6b:df: bd:c6:eb:4c:65:5b:71:b3:26:c9:44:64:5e:7b:ec:3d:25:d0: e1:a6:f9:68:cf:0d:db:cc:7a:89:57:f8:85:ce:b0:10:6d:17: 71:9f:80:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6P+n/mBFAYL6ygLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcyMDE0MzM1MFoXDTI2MTAxODE0MzM1MFowLzEtMCsGA1UEAxMk MjY4YzVjM2YtOGJlZi00Y2JkLWI0YmItMTkwOTA5MDUyMGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VQQqYY/tLY0dvpCKyn5YJDBhuCzgvYCaLLV Al77YW+9agrsdq/LycdwXccsfLkrpAzY1NVHx4gohH9InQLZGWQZLEy23iMdqHs4 ckQ/OfHbTn6vAQ/Qusg0AGM5UfBdYSDymZHyr5d22ijuQWk0ogDY1deM0MQEng7V GItM2UQkFDZ9Q5ub5FCarJMBH9nzovymGip7cWjgj7edUmXtjq7/p/mBNX0uwgWi h1uCY7MX68gvPM79t1ya4HprLpNzQus+FIWC6cIfdto15fdN0SFjd2HmEgNXpk9I K7uOYNbgA7H/pp203sQZ+e8n1Ys8rQWIJkmcRNrrE5lwwTCLgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbOrv2L3v0PhBZJ19nGtAFIM2HXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvOTQ1ZGVkZTgtOWEzYS0z ZGQ2LTk2NzQtNGUyNjdiNmZhMTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJk3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2vd/0wM1svJFyL2iNhv/sHzuuhG4WWr/l19qBUv8Ux9qtK1ALGN/qU fqzctU2JbwYRzczeimMc7fX0y3SEHVocE8W9NZOmx18c+w4xN8zwfh/eaQZ1c5Gg ESoqoxZbSZnyXWWxsrJVpgV1TY8NKhxFmTIqlm7J5OVnwrFNLcE3uIzSm11n01iZ P31hG5Dxb25lYkijd+yCNTyor78KXYdIscENY8L0m6qkPpcNnqWNJdH/zzbEK5HC UWjewFCzh9evNAoWdoJI3MaWXuMnWuMt6Xjkfrxr373G60xlW3GzJslEZF577D0l 0OGm+WjPDdvMeolX+IXOsBBtF3GfgDI= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:08 2026 by rpki-client