$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ddc09969-b3e3-3aaa-b1d4-777ced47002c.roa File: ddc09969-b3e3-3aaa-b1d4-777ced47002c.roa (raw, json) Hash identifier: U0M0J2PnyNiHZcMDQ+85MuDDrwspeFBO6sL0+G2i6kw= Subject key identifier: 8F:C1:6B:82:8B:0E:D4:CD:69:44:C2:03:55:8A:31:A9:CF:3B:0B:39 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E878BF763E43FAC530248FE3A Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ddc09969-b3e3-3aaa-b1d4-777ced47002c.roa Signing time: Fri 17 Jul 2026 14:04:39 +0000 ROA not before: Fri 17 Jul 2026 14:04:39 +0000 ROA not after: Thu 15 Oct 2026 14:04:39 +0000 asID: 10279 IP address blocks: 164.153.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:87:8b:f7:63:e4:3f:ac:53:02:48:fe:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 17 14:04:39 2026 GMT Not After : Oct 15 14:04:39 2026 GMT Subject: CN=1acdcc62-853c-477b-8c3b-e80d0cd552c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fa:c4:0f:7a:e9:91:82:48:10:da:3f:ac:a3: fc:54:03:5e:f3:cd:2d:6e:a2:76:0c:f3:f2:b3:83: 0c:80:f8:33:d3:6c:b5:c8:c5:30:a7:62:2c:ce:0e: ca:6f:d7:48:bc:c9:af:6d:04:a5:94:c3:d1:8c:18: f3:f3:6d:8a:e1:fd:af:c1:dd:3a:d7:90:79:c3:e8: 7b:37:e8:11:20:c4:a4:b3:e3:8d:39:be:4a:bd:4b: 78:10:77:8d:ce:62:51:49:0d:05:d9:fb:03:e5:d1: 5b:97:de:89:95:c1:19:f1:12:55:ea:89:17:24:93: b4:a5:3c:f1:f9:03:9d:5a:85:2a:ea:20:0f:03:59: 1e:21:84:09:3e:1d:aa:8e:d7:2c:93:29:4e:d6:2e: 20:a7:2a:78:4c:ab:36:7c:83:6c:dc:0a:da:a2:ef: 15:7f:cb:2d:f0:a7:10:81:c6:af:72:0b:77:80:1c: 17:7e:1d:2d:85:f9:cc:9c:f7:86:9d:17:fd:bc:4e: 89:b6:23:15:05:ec:80:dd:92:51:22:36:98:e4:27: d8:8e:b4:04:ac:4d:e1:ea:4e:40:b1:70:f2:86:1d: 38:d8:20:ec:ac:f4:38:fb:82:49:d1:7d:74:90:03: 19:60:27:b1:d6:7c:97:86:96:1a:83:be:10:60:2c: d9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C1:6B:82:8B:0E:D4:CD:69:44:C2:03:55:8A:31:A9:CF:3B:0B:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ddc09969-b3e3-3aaa-b1d4-777ced47002c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:61:60:b3:b4:d2:ba:55:4f:c7:cd:fb:fa:97:f9:90:de:a9: 2f:d4:33:98:df:56:13:da:02:57:38:5a:32:e5:0b:9e:46:4c: d7:df:4a:74:13:2e:66:fc:06:52:53:b9:eb:7f:68:82:7e:d8: ff:e6:33:de:8b:67:b1:3b:8e:f0:ba:0f:db:de:51:57:31:0e: 21:78:2f:81:94:d7:a0:35:11:b7:3c:a1:72:02:e9:bf:bf:de: 61:67:84:4a:81:f9:bb:fc:4b:3d:42:9b:5e:e5:a2:f1:84:45: 41:66:1e:c5:71:67:71:b7:f0:1c:03:5e:74:bf:b2:00:30:c9: 1e:95:80:98:78:ae:f9:7a:7c:be:ae:69:2b:8f:e6:8f:f2:b8: 00:73:10:db:94:ea:be:7c:88:03:a2:19:53:67:46:45:e5:80: 15:a8:a4:af:ea:09:2e:be:df:bf:5f:13:be:d7:25:fd:c3:92: 04:bd:9f:c4:ff:88:fc:86:71:43:7b:95:54:19:59:cc:dc:8c: d8:08:8d:70:23:bf:ca:ef:72:02:6e:e7:61:11:e3:b8:ec:97: 48:30:2e:22:f2:dc:19:de:f5:7c:9e:f1:81:e5:51:2f:b3:4a: 28:80:33:12:f8:3b:57:c3:23:33:2c:60:56:62:32:9f:5d:92: 80:a0:8b:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Hi/dj5D+sUwJI/jowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcxNzE0MDQzOVoXDTI2MTAxNTE0MDQzOVowLzEtMCsGA1UEAxMk MWFjZGNjNjItODUzYy00NzdiLThjM2ItZTgwZDBjZDU1MmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvrED3rpkYJIENo/rKP8VANe880tbqJ2DPPy s4MMgPgz02y1yMUwp2Iszg7Kb9dIvMmvbQSllMPRjBjz822K4f2vwd0615B5w+h7 N+gRIMSks+ONOb5KvUt4EHeNzmJRSQ0F2fsD5dFbl96JlcEZ8RJV6okXJJO0pTzx +QOdWoUq6iAPA1keIYQJPh2qjtcskylO1i4gpyp4TKs2fINs3Araou8Vf8st8KcQ gcavcgt3gBwXfh0thfnMnPeGnRf9vE6JtiMVBeyA3ZJRIjaY5CfYjrQErE3h6k5A sXDyhh042CDsrPQ4+4JJ0X10kAMZYCex1nyXhpYag74QYCzZtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/Ba4KLDtTNaUTCA1WKManPOws5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZGRjMDk5NjktYjNlMy0z YWFhLWIxZDQtNzc3Y2VkNDcwMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdhYLO00rpVT8fN+/qX+ZDeqS/UM5jfVhPaAlc4WjLlC55GTNffSnQT Lmb8BlJTuet/aIJ+2P/mM96LZ7E7jvC6D9veUVcxDiF4L4GU16A1Ebc8oXIC6b+/ 3mFnhEqB+bv8Sz1Cm17lovGERUFmHsVxZ3G38BwDXnS/sgAwyR6VgJh4rvl6fL6u aSuP5o/yuABzENuU6r58iAOiGVNnRkXlgBWopK/qCS6+379fE77XJf3DkgS9n8T/ iPyGcUN7lVQZWczcjNgIjXAjv8rvcgJu52ER47jsl0gwLiLy3Bne9Xye8YHlUS+z SiiAMxL4O1fDIzMsYFZiMp9dkoCgi+4= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:02 2026 by rpki-client