$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/9c584d07-17f8-35b5-8da9-e3156221158a.roa File: 9c584d07-17f8-35b5-8da9-e3156221158a.roa (raw, json) Hash identifier: CdsjaEJJeTcfTaXQvEjuIq+EoEy/iX39vCDZo8iCV4E= Subject key identifier: 8C:E2:AE:99:6A:B7:50:E1:7E:85:74:E1:0A:AD:27:6B:AE:6D:88:5C Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E878CEB78A90F6561D422CA80 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/9c584d07-17f8-35b5-8da9-e3156221158a.roa Signing time: Fri 17 Jul 2026 14:06:35 +0000 ROA not before: Fri 17 Jul 2026 14:06:35 +0000 ROA not after: Thu 15 Oct 2026 14:06:35 +0000 asID: 10279 IP address blocks: 164.153.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:87:8c:eb:78:a9:0f:65:61:d4:22:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 17 14:06:35 2026 GMT Not After : Oct 15 14:06:35 2026 GMT Subject: CN=1a1ad27a-af8a-4442-8c0a-8bf9dcc631d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b7:29:2c:67:1c:e3:67:54:6b:b1:aa:a4:30: fb:ff:57:6f:45:80:46:3a:1d:ab:d2:37:4e:a6:0c: e1:72:42:5c:e1:45:0d:a4:ae:8e:ca:16:5c:46:2b: 6a:08:e4:fd:9d:3f:ac:b5:f6:92:5e:30:10:b0:69: b0:db:f7:9b:da:f4:57:33:b2:95:ec:9b:1c:ab:1b: 02:2b:96:60:4a:a3:f9:c4:b2:06:7a:f7:5c:a8:86: ed:53:d6:a6:66:c1:b9:4c:4d:94:ee:92:34:60:96: c7:10:ac:67:c3:aa:e6:f5:ac:d8:29:12:9f:59:bf: bf:fe:a5:0e:fb:3e:94:3e:7e:be:06:d0:6f:c9:d9: 21:a6:fa:50:8c:4f:77:9f:b5:5e:6c:24:5a:75:64: 52:bc:5d:bb:aa:a4:d5:68:0f:b8:70:23:7d:5f:77: c1:c3:e8:b6:4e:fc:b8:e0:d3:84:77:86:5b:70:db: 27:5e:ec:ff:1a:69:7b:61:a5:6d:71:bb:8d:75:63: 1b:ac:81:0c:e6:4b:4b:62:75:2d:c6:09:c1:59:42: f3:dc:f5:99:4b:43:78:4d:12:87:7d:fb:39:0e:83: 04:6d:fd:f4:c2:56:eb:5d:ff:a2:8e:0f:99:cd:d1: 57:29:4a:10:1a:ec:26:01:48:29:28:d9:c2:b8:c4: a2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E2:AE:99:6A:B7:50:E1:7E:85:74:E1:0A:AD:27:6B:AE:6D:88:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/9c584d07-17f8-35b5-8da9-e3156221158a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:63:98:5c:7e:a1:ae:ca:18:0d:26:38:b0:f0:6b:d3:c5:24: 2e:47:17:7f:af:89:d6:7e:0e:52:c5:1b:98:88:ed:8e:1d:86: fc:75:d7:2d:0d:3c:7b:77:8a:2f:c8:50:7a:2e:b9:39:62:2e: ea:90:4e:dd:58:2d:f9:5b:ab:93:38:a5:11:48:e7:d0:cd:d4: a9:9f:d7:ed:92:7c:a7:95:fa:4c:83:16:9b:ca:fe:9a:53:40: a8:1c:6b:63:18:ef:ea:4a:a3:3e:97:35:c8:4f:de:12:06:cc: ad:81:92:aa:be:c2:b1:38:5e:09:5b:9f:c4:19:98:0c:72:4b: 58:b7:9b:1b:52:35:0f:c4:d8:74:2b:da:50:0e:54:dc:4f:eb: aa:ac:87:39:75:64:57:fc:95:1e:0d:b2:1c:77:76:dd:e2:0f: d8:a0:80:82:eb:e2:a9:d3:3a:a4:9c:d7:d6:52:3a:40:96:bd: f9:72:8d:ff:59:dc:f5:91:be:1f:c9:50:10:c4:00:11:b5:32: 65:e4:40:8b:04:43:d9:70:cd:83:eb:a7:29:2b:f2:01:a2:7f: 63:7c:75:86:ed:65:63:c0:d3:da:1b:e7:10:27:05:08:fc:67: 18:a0:d0:3f:b9:ed:e6:7d:d9:0b:0a:66:64:c9:47:2d:40:a5: 4b:e6:75:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6HjOt4qQ9lYdQiyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcxNzE0MDYzNVoXDTI2MTAxNTE0MDYzNVowLzEtMCsGA1UEAxMk MWExYWQyN2EtYWY4YS00NDQyLThjMGEtOGJmOWRjYzYzMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7cpLGcc42dUa7GqpDD7/1dvRYBGOh2r0jdO pgzhckJc4UUNpK6OyhZcRitqCOT9nT+stfaSXjAQsGmw2/eb2vRXM7KV7JscqxsC K5ZgSqP5xLIGevdcqIbtU9amZsG5TE2U7pI0YJbHEKxnw6rm9azYKRKfWb+//qUO +z6UPn6+BtBvydkhpvpQjE93n7VebCRadWRSvF27qqTVaA+4cCN9X3fBw+i2Tvy4 4NOEd4ZbcNsnXuz/Gml7YaVtcbuNdWMbrIEM5ktLYnUtxgnBWULz3PWZS0N4TRKH ffs5DoMEbf30wlbrXf+ijg+ZzdFXKUoQGuwmAUgpKNnCuMSiiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzirplqt1DhfoV04QqtJ2uubYhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvOWM1ODRkMDctMTdmOC0z NWI1LThkYTktZTMxNTYyMjExNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdjmFx+oa7KGA0mOLDwa9PFJC5HF3+vidZ+DlLFG5iI7Y4dhvx11y0N PHt3ii/IUHouuTliLuqQTt1YLflbq5M4pRFI59DN1Kmf1+2SfKeV+kyDFpvK/ppT QKgca2MY7+pKoz6XNchP3hIGzK2Bkqq+wrE4Xglbn8QZmAxyS1i3mxtSNQ/E2HQr 2lAOVNxP66qshzl1ZFf8lR4Nshx3dt3iD9iggILr4qnTOqSc19ZSOkCWvflyjf9Z 3PWRvh/JUBDEABG1MmXkQIsEQ9lwzYPrpykr8gGif2N8dYbtZWPA09ob5xAnBQj8 Zxig0D+57eZ92QsKZmTJRy1ApUvmdX4= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:02 2026 by rpki-client