$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/df9c1dcf-d3dc-3548-9fed-49571009249b.roa File: df9c1dcf-d3dc-3548-9fed-49571009249b.roa (raw, json) Hash identifier: pLaYq/7yN3w+aguWYQgj3QtBHeW3/5Ld62t3RUw+etg= Subject key identifier: D1:A6:70:D9:6D:6A:75:7F:3D:1A:3F:BA:36:FE:66:B0:12:71:C7:38 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E8FFAA2A80CB44403840B4A80 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/df9c1dcf-d3dc-3548-9fed-49571009249b.roa Signing time: Mon 20 Jul 2026 14:34:06 +0000 ROA not before: Mon 20 Jul 2026 14:34:06 +0000 ROA not after: Sun 18 Oct 2026 14:34:06 +0000 asID: 10279 IP address blocks: 164.153.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:fa:a2:a8:0c:b4:44:03:84:0b:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 20 14:34:06 2026 GMT Not After : Oct 18 14:34:06 2026 GMT Subject: CN=8de3b0b1-945b-4495-9520-12d4c3d42518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:54:85:e0:a1:29:64:d4:02:de:46:34:f3: b7:05:b0:44:65:0b:48:45:18:a5:1f:50:45:c0:7f: 01:5f:23:e9:37:78:18:86:0b:82:63:6c:f6:b9:86: 2a:f4:77:4b:3e:56:8f:c4:a8:50:7e:e8:db:a7:ba: 60:c1:ae:9f:78:bf:e7:b8:04:c1:f4:d6:9a:b3:21: 57:45:77:f9:bb:a2:a4:3e:be:94:e5:3e:1c:cd:f3: 02:56:ca:19:37:6e:11:b9:44:33:60:ca:75:0e:d3: 11:00:18:3f:25:92:1c:98:af:23:20:1d:fe:45:f2: 12:6f:b1:bd:78:0f:9a:b5:95:33:8a:f9:ad:54:b7: cb:25:99:3b:a6:21:df:89:7c:fc:e1:cf:1d:f6:b6: fd:d9:73:44:e0:fb:85:13:0f:91:0a:47:ac:ac:98: 92:d9:a7:5d:d8:9d:ec:fb:cd:a7:1e:bb:92:50:01: 0d:74:f6:ed:32:7d:af:6e:96:16:ff:f0:19:39:2b: 09:ec:fb:f4:54:37:ca:23:8f:79:32:63:38:87:4f: 77:3c:34:4f:8f:00:23:ac:fa:14:36:fb:08:d6:62: dd:e2:58:c1:d0:ab:9a:7b:c1:aa:3f:75:c0:dc:2b: 1b:27:6a:6d:96:15:6f:41:d3:86:09:c7:2c:da:89: c2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A6:70:D9:6D:6A:75:7F:3D:1A:3F:BA:36:FE:66:B0:12:71:C7:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/df9c1dcf-d3dc-3548-9fed-49571009249b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:96:cf:c1:67:8e:93:71:7e:d0:e5:21:93:03:79:e7:35:11: 64:2c:b9:4b:33:3d:21:86:59:90:e2:96:7e:c1:4a:92:41:62: 3b:df:f2:52:a4:10:bb:2b:7a:5e:59:ff:7f:f0:8f:ec:10:a0: a6:b2:aa:17:67:04:bc:24:42:d2:ed:b4:71:34:3f:cc:40:b5: a4:7a:03:e3:59:d8:98:02:5f:b0:c6:9e:87:a2:6e:6e:bb:d6: 00:30:f7:5c:4d:ab:8d:8a:fd:b8:33:90:39:08:32:fb:ae:eb: b0:f8:5c:87:66:fa:5a:d1:e6:d1:84:fc:c2:33:9f:77:75:19: 5c:16:0d:4e:e7:04:f4:e8:77:a2:b4:c6:12:e6:12:e7:9d:cc: d2:c6:aa:89:b6:58:6b:c0:19:20:5e:a0:08:04:b1:82:a6:61: 82:42:2c:ca:ad:a8:a7:69:4f:18:ce:60:5d:9f:95:13:a6:24: b9:ee:f9:d4:e8:e2:5b:12:35:2a:f8:d0:ad:ea:61:9d:6a:d4: 39:53:dd:e3:ed:e1:1b:ad:55:ef:48:f4:ad:80:72:9e:d5:99: 45:0c:55:58:d4:fb:7a:37:b7:3d:c3:63:17:99:c8:ff:cb:5e: e9:6e:1d:71:bb:65:8f:16:5a:95:e2:04:8a:63:ed:ff:ea:26: 50:25:03:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6P+qKoDLREA4QLSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcyMDE0MzQwNloXDTI2MTAxODE0MzQwNlowLzEtMCsGA1UEAxMk OGRlM2IwYjEtOTQ1Yi00NDk1LTk1MjAtMTJkNGMzZDQyNTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQhUheChKWTUAt5GNPO3BbBEZQtIRRilH1BF wH8BXyPpN3gYhguCY2z2uYYq9HdLPlaPxKhQfujbp7pgwa6feL/nuATB9NaasyFX RXf5u6KkPr6U5T4czfMCVsoZN24RuUQzYMp1DtMRABg/JZIcmK8jIB3+RfISb7G9 eA+atZUzivmtVLfLJZk7piHfiXz84c8d9rb92XNE4PuFEw+RCkesrJiS2add2J3s +82nHruSUAENdPbtMn2vbpYW//AZOSsJ7Pv0VDfKI495MmM4h093PDRPjwAjrPoU NvsI1mLd4ljB0Kuae8GqP3XA3CsbJ2ptlhVvQdOGCccs2onCOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGmcNltanV/PRo/ujb+ZrASccc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZGY5YzFkY2YtZDNkYy0z NTQ4LTlmZWQtNDk1NzEwMDkyNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOWz8FnjpNxftDlIZMDeec1EWQsuUszPSGGWZDiln7BSpJBYjvf8lKk ELsrel5Z/3/wj+wQoKayqhdnBLwkQtLttHE0P8xAtaR6A+NZ2JgCX7DGnoeibm67 1gAw91xNq42K/bgzkDkIMvuu67D4XIdm+lrR5tGE/MIzn3d1GVwWDU7nBPTod6K0 xhLmEuedzNLGqom2WGvAGSBeoAgEsYKmYYJCLMqtqKdpTxjOYF2flROmJLnu+dTo 4lsSNSr40K3qYZ1q1DlT3ePt4RutVe9I9K2Acp7VmUUMVVjU+3o3tz3DYxeZyP/L XuluHXG7ZY8WWpXiBIpj7f/qJlAlA7E= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:05 2026 by rpki-client