$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d71fa5fb-a31a-3350-8832-5a55f3607a83.roa File: d71fa5fb-a31a-3350-8832-5a55f3607a83.roa (raw, json) Hash identifier: HvGTSxyywwWbADbIE9HhEP+uBS3DzxCByXpMr4k3jp0= Subject key identifier: FB:28:A6:D6:C2:FD:57:B4:8B:87:F6:79:DE:F0:BB:C0:7C:65:BB:CB Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E8FFA1A2AEF83204C4BD73B80 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d71fa5fb-a31a-3350-8832-5a55f3607a83.roa Signing time: Mon 20 Jul 2026 14:33:02 +0000 ROA not before: Mon 20 Jul 2026 14:33:02 +0000 ROA not after: Sun 18 Oct 2026 14:33:02 +0000 asID: 10279 IP address blocks: 164.153.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:fa:1a:2a:ef:83:20:4c:4b:d7:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 20 14:33:02 2026 GMT Not After : Oct 18 14:33:02 2026 GMT Subject: CN=a471209a-d000-421a-9e1e-9cd4908f3f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f3:f3:66:a5:51:44:54:92:7c:40:32:c2:13: d5:78:d2:93:9d:25:ff:a1:c3:53:45:92:01:f4:26: 4d:e4:a5:db:2c:40:09:87:74:70:d2:b8:e0:04:bc: 5e:87:4d:3a:24:fb:6f:5a:b9:91:87:ce:22:e5:3a: fe:2b:5c:70:86:07:05:e9:62:83:0d:89:1e:f8:9c: cb:3f:0a:6e:5c:6f:e8:a3:fa:ff:43:7f:a3:17:07: 27:9b:4d:9c:58:af:67:83:bd:ef:9b:71:76:a0:71: 20:4f:75:3b:3b:a2:04:f6:9a:93:ce:58:28:83:c9: fc:85:5a:ac:d4:29:dd:df:ed:9f:47:72:29:1c:15: 09:f2:d0:f2:be:eb:3e:1c:d0:4a:3d:f6:04:21:0a: 32:2a:af:bb:24:d1:3d:22:ec:8d:97:d2:61:d5:92: 38:0a:3b:34:a4:4e:19:1a:33:d6:24:37:ea:8d:d7: 96:4c:1b:66:56:96:a5:f1:85:bd:77:7a:82:3f:fc: c4:9c:69:ac:8d:15:b1:73:38:52:f4:71:51:73:4d: ae:6f:d1:d1:0a:5c:96:c9:24:eb:b1:4c:c7:5d:0f: 9c:e4:1a:a4:15:53:81:ae:bf:76:02:20:30:0a:82: d6:04:62:35:a7:16:7b:b0:a7:1e:ab:79:ec:d5:b9: bf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:28:A6:D6:C2:FD:57:B4:8B:87:F6:79:DE:F0:BB:C0:7C:65:BB:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d71fa5fb-a31a-3350-8832-5a55f3607a83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:94:c0:06:c6:f2:ea:4b:35:12:de:74:72:8f:b3:73:4d:aa: cf:75:51:f8:f2:dc:86:6e:d6:86:53:ae:85:56:6f:69:92:29: cc:0d:e9:11:ca:92:e2:c6:b5:4e:55:13:00:44:ab:e7:9c:a1: 64:1c:11:df:5c:64:53:c5:54:bf:e7:33:d3:89:3a:c7:c2:a5: 80:2e:15:9e:5d:13:74:01:52:a7:68:ac:94:5f:40:a5:a4:49: e1:0b:de:d4:c8:f5:54:54:9e:49:c9:f6:33:c7:22:10:6c:b1: f5:01:1c:bc:c3:ee:b2:32:a5:2a:64:e5:5f:f4:a8:9a:8b:32: e8:3c:20:bc:56:27:c2:82:95:7f:65:34:e9:b9:70:a5:e9:45: 5a:61:45:c0:7e:86:bb:13:57:35:6c:0e:a8:d3:5a:64:44:fc: 30:43:0c:6e:b4:c7:89:40:1d:2e:c0:b3:45:27:b2:d7:56:6a: e1:aa:3f:4a:a7:01:8d:5d:a0:08:14:05:18:79:d5:31:4f:63: 76:8e:e1:a7:9b:df:3f:23:06:66:15:ae:9a:8f:6d:59:96:36: d1:63:11:47:72:fb:24:d1:82:f5:7e:2b:b6:7e:df:01:55:8d: 08:c2:2a:84:fd:9b:6a:e2:83:fd:66:ed:3b:ee:ac:d7:af:f4: 5c:f4:4f:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6P+hoq74MgTEvXO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcyMDE0MzMwMloXDTI2MTAxODE0MzMwMlowLzEtMCsGA1UEAxMk YTQ3MTIwOWEtZDAwMC00MjFhLTllMWUtOWNkNDkwOGYzZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfPzZqVRRFSSfEAywhPVeNKTnSX/ocNTRZIB 9CZN5KXbLEAJh3Rw0rjgBLxeh006JPtvWrmRh84i5Tr+K1xwhgcF6WKDDYke+JzL PwpuXG/oo/r/Q3+jFwcnm02cWK9ng73vm3F2oHEgT3U7O6IE9pqTzlgog8n8hVqs 1Cnd3+2fR3IpHBUJ8tDyvus+HNBKPfYEIQoyKq+7JNE9IuyNl9Jh1ZI4Cjs0pE4Z GjPWJDfqjdeWTBtmVpal8YW9d3qCP/zEnGmsjRWxczhS9HFRc02ub9HRClyWySTr sUzHXQ+c5BqkFVOBrr92AiAwCoLWBGI1pxZ7sKceq3ns1bm/hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsoptbC/Ve0i4f2ed7wu8B8ZbvLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZDcxZmE1ZmItYTMxYS0z MzUwLTg4MzItNWE1NWYzNjA3YTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2UwAbG8upLNRLedHKPs3NNqs91Ufjy3IZu1oZTroVWb2mSKcwN6RHK kuLGtU5VEwBEq+ecoWQcEd9cZFPFVL/nM9OJOsfCpYAuFZ5dE3QBUqdorJRfQKWk SeEL3tTI9VRUnknJ9jPHIhBssfUBHLzD7rIypSpk5V/0qJqLMug8ILxWJ8KClX9l NOm5cKXpRVphRcB+hrsTVzVsDqjTWmRE/DBDDG60x4lAHS7As0UnstdWauGqP0qn AY1doAgUBRh51TFPY3aO4aeb3z8jBmYVrpqPbVmWNtFjEUdy+yTRgvV+K7Z+3wFV jQjCKoT9m2rig/1m7TvurNev9Fz0T6Q= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:03 2026 by rpki-client