$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d52f0d18-8889-3a47-b2b3-46c19e9e43ed.roa File: d52f0d18-8889-3a47-b2b3-46c19e9e43ed.roa (raw, json) Hash identifier: wJD37gqr7PItq1w/AXgSJiLLULz4vdmS/0mcr8vKT50= Subject key identifier: 84:4C:22:BE:14:C8:04:81:96:1F:18:67:9B:AE:7F:0A:92:57:6E:C2 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E8FFACCB6B916FB80EF675F00 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d52f0d18-8889-3a47-b2b3-46c19e9e43ed.roa Signing time: Mon 20 Jul 2026 14:34:26 +0000 ROA not before: Mon 20 Jul 2026 14:34:26 +0000 ROA not after: Sun 18 Oct 2026 14:34:26 +0000 asID: 10279 IP address blocks: 164.153.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:fa:cc:b6:b9:16:fb:80:ef:67:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 20 14:34:26 2026 GMT Not After : Oct 18 14:34:26 2026 GMT Subject: CN=0aa8b6b1-9358-4d2f-a246-ad6be2ab256a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cd:18:f4:b2:f5:d6:34:19:66:fe:6b:3a:80: 5a:ef:cb:51:d5:a0:57:00:44:cc:cb:a0:86:02:29: 3e:5b:be:6d:db:77:3c:46:4e:1a:3f:c7:5e:e2:af: 82:18:28:a6:be:63:7d:80:19:11:da:99:71:a4:09: 6b:97:98:cc:59:4f:68:38:31:87:f5:29:50:5a:57: 58:e2:7a:70:51:20:ff:2b:12:1a:28:9b:50:15:f8: fa:a6:e4:3a:ff:52:33:80:9c:33:4e:7e:32:56:c8: 1d:37:ca:5b:27:55:b6:8c:6d:89:e7:7a:9c:33:12: 70:7e:e1:1b:01:aa:84:86:4d:d7:14:5d:cb:f3:e2: 0c:5b:1f:a1:70:0e:d3:e3:39:44:de:39:6c:d1:10: a6:51:67:0c:fe:b1:ad:b5:b6:23:ed:82:95:31:59: 1c:4e:0a:8d:49:9d:1f:02:eb:48:e0:f5:6d:75:5b: 3a:6d:e6:bd:2c:83:10:35:4f:63:77:43:d9:63:e8: e3:67:43:95:5c:e0:2f:3f:5a:34:07:ab:c0:d3:ed: 18:0a:8f:fb:24:a3:f9:68:3e:c1:44:5d:05:32:97: 71:8f:58:71:4a:60:90:9c:c9:d3:c3:4e:87:5c:37: bb:8f:bb:5a:e0:fc:b1:b0:db:c4:8d:17:99:66:c2: 69:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4C:22:BE:14:C8:04:81:96:1F:18:67:9B:AE:7F:0A:92:57:6E:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d52f0d18-8889-3a47-b2b3-46c19e9e43ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:04:86:72:f6:96:03:06:cc:22:ca:80:23:81:fe:90:90:86: 59:7a:76:f5:ad:9a:70:0b:cf:84:7b:09:8b:6c:97:29:57:ba: d8:b4:a3:29:2c:fe:fd:ae:d8:9b:9b:22:b3:a5:76:29:6b:95: 7f:42:1c:69:4d:81:8e:6c:fd:b3:85:7b:09:88:f2:b1:74:cb: 55:32:32:0b:c8:58:3a:93:6c:de:0e:07:51:93:52:78:80:0a: a1:11:30:ea:e1:5d:25:0b:69:41:c8:1a:1a:a2:25:73:52:0a: 02:1d:93:ec:15:50:bc:f3:5f:75:93:1f:3c:40:94:00:e7:a9: 2d:0a:d3:05:0f:d2:55:e9:55:73:00:f5:81:b6:52:da:56:dc: 17:00:04:a6:56:ad:a3:81:66:37:05:ea:15:fa:aa:41:33:7e: 26:c9:66:10:cb:a2:7d:03:05:40:f9:2f:d4:24:1b:a4:5a:54: bd:73:ce:9d:cc:6d:78:20:1b:04:71:4e:9d:50:5b:77:a3:02: 7a:61:72:27:3a:9b:b8:4b:e3:2f:a2:41:58:93:3d:73:69:d0: 74:b1:c1:b5:78:fe:d2:de:b2:86:a5:91:d7:f3:0f:ce:5c:29: a1:1f:97:00:ca:be:cd:ea:46:6e:be:4d:57:3f:fe:89:e8:67: 96:70:e5:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6P+sy2uRb7gO9nXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcyMDE0MzQyNloXDTI2MTAxODE0MzQyNlowLzEtMCsGA1UEAxMk MGFhOGI2YjEtOTM1OC00ZDJmLWEyNDYtYWQ2YmUyYWIyNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA380Y9LL11jQZZv5rOoBa78tR1aBXAETMy6CG Aik+W75t23c8Rk4aP8de4q+CGCimvmN9gBkR2plxpAlrl5jMWU9oODGH9SlQWldY 4npwUSD/KxIaKJtQFfj6puQ6/1IzgJwzTn4yVsgdN8pbJ1W2jG2J53qcMxJwfuEb AaqEhk3XFF3L8+IMWx+hcA7T4zlE3jls0RCmUWcM/rGttbYj7YKVMVkcTgqNSZ0f AutI4PVtdVs6bea9LIMQNU9jd0PZY+jjZ0OVXOAvP1o0B6vA0+0YCo/7JKP5aD7B RF0FMpdxj1hxSmCQnMnTw06HXDe7j7ta4PyxsNvEjReZZsJpewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRMIr4UyASBlh8YZ5uufwqSV27CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZDUyZjBkMTgtODg4OS0z YTQ3LWIyYjMtNDZjMTllOWU0M2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJk5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQEhnL2lgMGzCLKgCOB/pCQhll6dvWtmnALz4R7CYtslylXuti0oyks /v2u2JubIrOldilrlX9CHGlNgY5s/bOFewmI8rF0y1UyMgvIWDqTbN4OB1GTUniA CqERMOrhXSULaUHIGhqiJXNSCgIdk+wVULzzX3WTHzxAlADnqS0K0wUP0lXpVXMA 9YG2UtpW3BcABKZWraOBZjcF6hX6qkEzfibJZhDLon0DBUD5L9QkG6RaVL1zzp3M bXggGwRxTp1QW3ejAnphcic6m7hL4y+iQViTPXNp0HSxwbV4/tLesoalkdfzD85c KaEflwDKvs3qRm6+TVc//onoZ5Zw5V0= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:12 2026 by rpki-client