$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/e06fa70e-b4a7-395b-817c-b9dfa047b608.roa File: e06fa70e-b4a7-395b-817c-b9dfa047b608.roa (raw, json) Hash identifier: qY00MHw0QsU4CyM4EaJ08Kg8/zaGKOtzozw9z7H1i6o= Subject key identifier: F7:AF:5A:C2:02:B0:5E:47:24:C5:5A:1A:14:16:E1:34:21:EE:85:18 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E8FFBD43093D267E3B58F6D00 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/e06fa70e-b4a7-395b-817c-b9dfa047b608.roa Signing time: Mon 20 Jul 2026 14:36:31 +0000 ROA not before: Mon 20 Jul 2026 14:36:31 +0000 ROA not after: Sun 18 Oct 2026 14:36:31 +0000 asID: 10279 IP address blocks: 164.153.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:fb:d4:30:93:d2:67:e3:b5:8f:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 20 14:36:31 2026 GMT Not After : Oct 18 14:36:31 2026 GMT Subject: CN=5873b554-599c-46d5-9091-959103cb2f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:09:56:99:26:b7:c4:56:7d:81:69:93:d5: 9a:38:5a:f3:ee:5b:c6:cd:1b:44:df:f8:14:0f:89: 91:ba:da:40:28:d0:04:a4:4c:f3:9f:b3:48:9e:33: d3:4d:01:74:76:cb:a2:4a:88:0e:84:26:fc:06:bf: ae:28:5a:cf:8b:c9:5d:a4:1e:10:e3:c9:fd:df:1d: 64:6e:7e:b8:16:bf:97:77:dc:f6:ac:d4:28:28:f9: 01:92:09:26:28:dc:ce:41:e7:07:7b:de:97:95:b1: 71:02:64:5c:a6:8b:63:f4:cc:90:ac:09:9f:16:43: 0b:f5:c9:61:f2:71:b8:d9:64:3f:ab:3a:3f:30:45: 5b:33:f0:ea:7e:9d:c2:b6:2f:44:4d:d1:89:b4:26: c7:8c:38:d8:c9:80:bf:92:0f:fa:a3:5f:66:d4:69: 7d:65:0e:99:fc:20:9f:27:ef:9e:cf:77:10:a7:ec: bd:1c:a7:4e:8a:32:42:b9:29:9e:34:c7:e1:0f:2d: 73:3b:59:7a:e0:78:bb:8e:64:ec:40:fa:12:3c:bb: 42:1c:dd:e9:58:1a:11:0b:f2:bd:0a:79:a2:4a:96: 65:67:59:2c:ce:05:d4:50:53:3b:19:a9:49:c5:7e: c1:e0:95:db:bf:01:36:70:16:41:b2:20:b1:d9:f8: d3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AF:5A:C2:02:B0:5E:47:24:C5:5A:1A:14:16:E1:34:21:EE:85:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/e06fa70e-b4a7-395b-817c-b9dfa047b608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:49:da:c4:27:39:d7:a1:73:1d:8b:54:f6:f9:bd:47:7a:51: 74:06:4f:6e:34:21:41:92:a8:8b:0e:3d:49:b0:37:69:de:b7: 8a:e7:2f:4a:a0:82:24:58:03:e6:3d:65:7d:b4:38:bc:92:31: 80:ed:08:de:b9:43:41:b2:b0:12:dc:2b:60:aa:f3:bc:26:7b: f9:1a:88:64:48:93:8a:71:ea:53:54:d2:b9:e3:c7:c9:e6:08: d9:b0:64:ef:40:4c:9f:fc:51:cc:73:30:25:45:a9:d1:aa:89: 94:ae:d6:72:a4:99:26:95:f2:c3:7e:d3:ed:8b:f3:09:b4:d8: ac:68:d0:97:8d:e6:43:05:73:9d:4f:e8:8c:fe:7b:e8:19:37: 3d:db:aa:1b:f2:0e:7c:0c:6a:cc:c6:0e:26:f9:ed:dc:4a:97: b5:1a:c4:7c:95:f9:9e:1f:d2:83:0b:98:7d:7b:90:bb:f0:f1: 3e:13:29:f2:cb:b2:5d:f4:1a:ea:f8:41:06:de:2f:16:5b:fc: d0:b3:77:a4:10:0e:9f:99:9f:fe:b2:58:5f:75:04:55:fb:d2: b5:f9:d4:1c:02:9e:0f:33:8a:27:02:f2:6d:b3:2e:55:f0:4c: 9a:c4:f5:27:6b:4c:df:62:46:d8:0d:b8:d5:5e:34:15:e0:d5: 44:b3:12:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6P+9Qwk9Jn47WPbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcyMDE0MzYzMVoXDTI2MTAxODE0MzYzMVowLzEtMCsGA1UEAxMk NTg3M2I1NTQtNTk5Yy00NmQ1LTkwOTEtOTU5MTAzY2IyZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsAJVpkmt8RWfYFpk9WaOFrz7lvGzRtE3/gU D4mRutpAKNAEpEzzn7NInjPTTQF0dsuiSogOhCb8Br+uKFrPi8ldpB4Q48n93x1k bn64Fr+Xd9z2rNQoKPkBkgkmKNzOQecHe96XlbFxAmRcpotj9MyQrAmfFkML9clh 8nG42WQ/qzo/MEVbM/Dqfp3Cti9ETdGJtCbHjDjYyYC/kg/6o19m1Gl9ZQ6Z/CCf J++ez3cQp+y9HKdOijJCuSmeNMfhDy1zO1l64Hi7jmTsQPoSPLtCHN3pWBoRC/K9 CnmiSpZlZ1kszgXUUFM7GalJxX7B4JXbvwE2cBZBsiCx2fjTJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPevWsICsF5HJMVaGhQW4TQh7oUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZTA2ZmE3MGUtYjRhNy0z OTViLTgxN2MtYjlkZmEwNDdiNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJk/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5J2sQnOdehcx2LVPb5vUd6UXQGT240IUGSqIsOPUmwN2net4rnL0qg giRYA+Y9ZX20OLySMYDtCN65Q0GysBLcK2Cq87wme/kaiGRIk4px6lNU0rnjx8nm CNmwZO9ATJ/8UcxzMCVFqdGqiZSu1nKkmSaV8sN+0+2L8wm02Kxo0JeN5kMFc51P 6Iz+e+gZNz3bqhvyDnwMaszGDib57dxKl7UaxHyV+Z4f0oMLmH17kLvw8T4TKfLL sl30Gur4QQbeLxZb/NCzd6QQDp+Zn/6yWF91BFX70rX51BwCng8ziicC8m2zLlXw TJrE9SdrTN9iRtgNuNVeNBXg1USzEko= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:07 2026 by rpki-client