$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ea07522b-413c-3092-a0a0-f91743c80959.roa File: ea07522b-413c-3092-a0a0-f91743c80959.roa (raw, json) Hash identifier: bQQtR95ZKXyffnWyDTtg6WO1ZyrlMr3ZG5XPDGz2+I8= Subject key identifier: 39:B0:B4:26:DB:72:77:07:87:99:5A:F9:A6:3A:80:03:FD:5B:F7:35 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E878CBC14FC13D9A700CCEE80 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ea07522b-413c-3092-a0a0-f91743c80959.roa Signing time: Fri 17 Jul 2026 14:06:12 +0000 ROA not before: Fri 17 Jul 2026 14:06:12 +0000 ROA not after: Thu 15 Oct 2026 14:06:12 +0000 asID: 10279 IP address blocks: 164.153.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:87:8c:bc:14:fc:13:d9:a7:00:cc:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 17 14:06:12 2026 GMT Not After : Oct 15 14:06:12 2026 GMT Subject: CN=31c9c957-2c04-4377-840f-4205755e4ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:71:4d:5b:c8:d0:9f:a3:dc:b7:91:d3:e2:7f: 4c:f4:67:13:fa:59:18:de:35:88:82:bb:a6:b8:35: 9e:54:a8:b8:e6:84:a7:ca:51:3d:95:6f:f1:c9:45: 70:53:a9:c2:3d:6e:1e:c8:c7:91:02:e5:2b:59:ab: 49:55:d0:5f:8b:11:41:b1:9e:77:80:69:19:fb:a2: 26:9c:37:bb:57:26:c7:e2:53:38:46:44:c9:78:0c: 4e:5b:8f:54:aa:d6:b2:21:e2:ac:fb:82:1a:20:de: 9f:da:4c:8c:a7:63:5d:ca:ef:c9:06:44:1f:2d:92: 69:27:f7:8a:e0:99:fd:65:94:7a:5c:33:2b:ba:a4: 52:c3:eb:99:90:b2:b5:44:86:50:04:23:9a:02:aa: 62:4f:f1:0d:f4:09:eb:4b:8c:82:87:1a:98:cb:32: b6:d6:71:8a:f5:e3:f6:68:71:2c:b8:a9:9b:b4:c6: 90:67:62:b2:05:5f:18:1d:62:b5:42:4e:7a:9e:ff: 60:51:f7:ac:0c:16:8e:4f:77:97:0c:86:b0:70:bc: 15:4b:c1:18:24:a0:9d:d0:f2:83:a4:ba:47:f8:7b: 06:e2:82:e6:6e:3a:e9:c4:06:d4:d2:b8:e8:14:01: ee:1b:1c:ef:1c:ff:85:80:2d:f2:f9:97:bf:bf:c8: da:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B0:B4:26:DB:72:77:07:87:99:5A:F9:A6:3A:80:03:FD:5B:F7:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ea07522b-413c-3092-a0a0-f91743c80959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c9:fa:23:b2:d2:20:64:8c:e0:19:1a:a6:7f:f9:b0:fb:ee: 80:80:d7:4e:15:65:ec:a5:74:2e:d5:00:9c:96:16:65:3a:e9: 6d:17:64:02:06:21:a1:a9:74:50:9a:22:f7:7e:53:fe:7e:a5: 83:1a:44:7f:5d:f6:29:42:ec:a6:71:de:05:5d:2a:f2:2c:a5: ae:7e:b0:4a:5d:c4:c7:8d:22:32:04:57:18:9c:81:ab:89:9e: 79:92:a8:f2:53:80:e1:1b:c8:1b:b7:21:5b:13:b5:1e:41:b8: 4a:ce:b8:74:b4:80:e0:39:00:b3:05:28:41:dd:a0:5c:ab:ee: a9:3a:30:61:15:69:4d:d1:34:89:18:9c:77:ba:53:17:59:19: 32:72:2c:eb:fe:b4:18:16:dc:88:d6:d5:9b:d7:90:03:57:5d: 5a:4e:dd:b2:82:0a:bc:93:9d:55:2a:c9:6f:8c:46:5e:1f:02: 2e:94:b7:08:68:80:15:bd:69:34:a9:a9:30:a4:0f:bb:21:1a: 90:d6:51:f7:45:5b:c3:61:e8:d6:26:db:43:bc:16:89:b3:a6: 1f:26:91:21:64:1a:c7:a4:72:07:50:c4:02:57:0b:6b:47:e8: 73:4d:a5:35:66:fb:08:57:bd:6e:05:19:e3:1d:0a:e9:e5:cf: 0e:26:9f:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6HjLwU/BPZpwDM7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcxNzE0MDYxMloXDTI2MTAxNTE0MDYxMlowLzEtMCsGA1UEAxMk MzFjOWM5NTctMmMwNC00Mzc3LTg0MGYtNDIwNTc1NWU0Y2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXFNW8jQn6Pct5HT4n9M9GcT+lkY3jWIgrum uDWeVKi45oSnylE9lW/xyUVwU6nCPW4eyMeRAuUrWatJVdBfixFBsZ53gGkZ+6Im nDe7VybH4lM4RkTJeAxOW49UqtayIeKs+4IaIN6f2kyMp2Ndyu/JBkQfLZJpJ/eK 4Jn9ZZR6XDMruqRSw+uZkLK1RIZQBCOaAqpiT/EN9AnrS4yChxqYyzK21nGK9eP2 aHEsuKmbtMaQZ2KyBV8YHWK1Qk56nv9gUfesDBaOT3eXDIawcLwVS8EYJKCd0PKD pLpH+HsG4oLmbjrpxAbU0rjoFAHuGxzvHP+FgC3y+Ze/v8jaIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmwtCbbcncHh5la+aY6gAP9W/c1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZWEwNzUyMmItNDEzYy0z MDkyLWEwYTAtZjkxNzQzYzgwOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDJ+iOy0iBkjOAZGqZ/+bD77oCA104VZeyldC7VAJyWFmU66W0XZAIG IaGpdFCaIvd+U/5+pYMaRH9d9ilC7KZx3gVdKvIspa5+sEpdxMeNIjIEVxicgauJ nnmSqPJTgOEbyBu3IVsTtR5BuErOuHS0gOA5ALMFKEHdoFyr7qk6MGEVaU3RNIkY nHe6UxdZGTJyLOv+tBgW3IjW1ZvXkANXXVpO3bKCCryTnVUqyW+MRl4fAi6Utwho gBW9aTSpqTCkD7shGpDWUfdFW8Nh6NYm20O8Fomzph8mkSFkGsekcgdQxAJXC2tH 6HNNpTVm+whXvW4FGeMdCunlzw4mn8w= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:50 2026 by rpki-client