$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/f709a13d-6869-3756-95ef-4cc323e2e3c4.roa File: f709a13d-6869-3756-95ef-4cc323e2e3c4.roa (raw, json) Hash identifier: iIBSgdw0DgtBwn/DqhrKDUABGr5hPLramlFP2d3qkBs= Subject key identifier: D0:F8:42:DC:BB:EA:02:E8:FA:91:A5:9C:52:06:90:43:37:73:01:74 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E8788CB40C21E5EAD7E166840 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/f709a13d-6869-3756-95ef-4cc323e2e3c4.roa Signing time: Fri 17 Jul 2026 13:58:16 +0000 ROA not before: Fri 17 Jul 2026 13:58:16 +0000 ROA not after: Thu 15 Oct 2026 13:58:16 +0000 asID: 10279 IP address blocks: 164.153.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:87:88:cb:40:c2:1e:5e:ad:7e:16:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 17 13:58:16 2026 GMT Not After : Oct 15 13:58:16 2026 GMT Subject: CN=7c9ec868-240a-4651-b065-601b91af9e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:5d:9a:22:53:55:42:de:43:c1:6f:a4:de: 4d:b5:36:d1:e3:a5:6b:cb:54:ab:fe:ed:e0:d9:69: 2f:9a:03:ae:0d:d9:e2:8f:ae:c6:b2:6b:dd:d2:2a: f8:db:e1:56:6b:66:82:83:6b:e3:5c:25:95:c4:a3: e9:4f:4c:66:86:26:d7:8b:8d:a8:e9:ed:76:f4:0d: 44:36:e3:8b:5b:8e:f5:34:ef:db:c1:a7:e1:de:20: 5d:73:73:a4:b8:61:d5:7b:08:c8:17:46:c3:df:d0: 94:20:80:8c:f9:f3:60:c3:ff:67:04:85:60:36:43: e6:31:e7:67:76:ad:ed:b5:76:55:aa:7c:3a:49:80: 5c:e4:b9:09:95:c9:31:19:23:7a:07:ce:34:f0:57: 0c:ee:f8:2a:df:aa:72:df:5d:2f:0d:6f:c4:6a:47: be:3d:23:37:45:67:70:ba:ce:08:2e:ec:a0:00:5f: 6d:f2:1d:23:2b:3e:14:5e:5f:96:e9:c9:34:54:53: f5:ec:7c:48:b1:5f:43:d7:21:8c:82:2f:01:3d:ff: b9:6f:01:1b:b6:b5:c8:89:49:38:e9:cb:3a:d9:ca: a0:99:b8:32:09:5e:89:c4:f6:d1:ba:c0:14:ef:d4: 01:16:52:0b:fc:b6:b7:37:b1:11:7d:4f:be:24:d2: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F8:42:DC:BB:EA:02:E8:FA:91:A5:9C:52:06:90:43:37:73:01:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/f709a13d-6869-3756-95ef-4cc323e2e3c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:6f:cb:c8:1a:04:bd:11:1e:f1:5d:e6:53:ca:89:84:4e:79: b7:09:ce:2f:00:24:f0:5a:07:d4:74:4b:77:88:98:90:d2:bd: 3c:35:79:19:04:68:f2:eb:59:cc:34:46:4d:23:73:35:92:2b: 84:87:6c:10:e8:a9:81:90:46:3a:5f:2e:4a:3f:dc:8b:0e:e7: 11:b0:34:3f:b5:b9:89:03:dd:2c:0c:4d:f8:52:c5:46:99:58: a6:c9:94:31:f8:4a:12:04:d5:de:1d:f1:c0:b9:7b:af:a0:1e: a3:04:aa:0c:c0:43:f9:20:57:12:61:fe:df:e0:8e:5f:c0:25: 6a:68:a7:3f:7b:06:93:4b:4e:19:8b:db:e0:7d:22:bb:05:60: 06:ca:27:f2:91:27:08:14:b8:92:48:db:05:ea:18:73:25:51: 0a:91:84:24:20:21:66:f2:e7:43:cb:1e:5f:65:30:ad:b0:56: a4:5d:e8:be:c5:79:39:73:d7:2f:6c:c9:04:25:d5:89:ce:1d: a1:08:d5:fd:ac:db:11:04:bf:92:3a:8d:ba:1b:0b:36:d8:d0: f2:80:75:c7:c8:70:d6:40:bf:8b:a8:4f:98:fb:07:51:a2:35: ed:18:e1:b6:74:c0:b3:c6:2f:73:ec:ce:06:7f:54:16:3c:07: 5f:3a:59:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6HiMtAwh5erX4WaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcxNzEzNTgxNloXDTI2MTAxNTEzNTgxNlowLzEtMCsGA1UEAxMk N2M5ZWM4NjgtMjQwYS00NjUxLWIwNjUtNjAxYjkxYWY5ZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+ZdmiJTVULeQ8FvpN5NtTbR46Vry1Sr/u3g 2WkvmgOuDdnij67Gsmvd0ir42+FWa2aCg2vjXCWVxKPpT0xmhibXi42o6e129A1E NuOLW471NO/bwafh3iBdc3OkuGHVewjIF0bD39CUIICM+fNgw/9nBIVgNkPmMedn dq3ttXZVqnw6SYBc5LkJlckxGSN6B8408FcM7vgq36py310vDW/Eake+PSM3RWdw us4ILuygAF9t8h0jKz4UXl+W6ck0VFP17HxIsV9D1yGMgi8BPf+5bwEbtrXIiUk4 6cs62cqgmbgyCV6JxPbRusAU79QBFlIL/La3N7ERfU++JNLzbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFND4Qty76gLo+pGlnFIGkEM3cwF0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZjcwOWExM2QtNjg2OS0z NzU2LTk1ZWYtNGNjMzIzZTJlM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdvy8gaBL0RHvFd5lPKiYROebcJzi8AJPBaB9R0S3eImJDSvTw1eRkE aPLrWcw0Rk0jczWSK4SHbBDoqYGQRjpfLko/3IsO5xGwND+1uYkD3SwMTfhSxUaZ WKbJlDH4ShIE1d4d8cC5e6+gHqMEqgzAQ/kgVxJh/t/gjl/AJWpopz97BpNLThmL 2+B9IrsFYAbKJ/KRJwgUuJJI2wXqGHMlUQqRhCQgIWby50PLHl9lMK2wVqRd6L7F eTlz1y9syQQl1YnOHaEI1f2s2xEEv5I6jbobCzbY0PKAdcfIcNZAv4uoT5j7B1Gi Ne0Y4bZ0wLPGL3PszgZ/VBY8B186WUg= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:02 2026 by rpki-client