$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/faef3fec-8d86-3ab9-81a7-0efa87802c3f.roa File: faef3fec-8d86-3ab9-81a7-0efa87802c3f.roa (raw, json) Hash identifier: h8tN8sJn0YZyiIlvD7Bkc+J5hRjJSk9yZV9VArXoDJw= Subject key identifier: F3:0E:C1:36:E8:EF:D2:DF:C3:E2:A4:19:9A:A8:3B:89:55:8D:2B:9F Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E878D0D041140583D23101EE0 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/faef3fec-8d86-3ab9-81a7-0efa87802c3f.roa Signing time: Fri 17 Jul 2026 14:06:50 +0000 ROA not before: Fri 17 Jul 2026 14:06:50 +0000 ROA not after: Thu 15 Oct 2026 14:06:50 +0000 asID: 10279 IP address blocks: 164.153.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:87:8d:0d:04:11:40:58:3d:23:10:1e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 17 14:06:50 2026 GMT Not After : Oct 15 14:06:50 2026 GMT Subject: CN=be5e00de-d4a7-49e7-9ad0-7dab5e73f097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:68:1c:83:b3:3c:bd:56:6f:e5:f8:a0:4a:6c: 4e:37:c6:f9:63:ff:8d:27:51:ec:70:eb:21:7f:c6: 7e:78:5e:24:73:29:90:27:cc:77:87:1f:95:5a:50: 7f:bf:28:6c:24:cc:52:d6:50:73:2d:ee:3a:83:73: 02:72:78:7a:97:f1:35:00:0e:33:b4:b9:24:94:05: a1:fa:97:d5:9e:85:e4:5c:10:b0:e4:d8:fb:94:3c: 21:96:08:2c:22:d2:fc:7c:ad:8b:5e:2b:b8:b1:8d: 50:ca:e1:8f:37:3c:f2:28:5b:ed:a9:3f:a3:09:16: 40:d8:7e:32:b2:38:f7:a4:d1:83:b3:fa:8d:97:8a: 69:d6:4f:cd:bf:fc:56:a8:66:21:71:57:dc:23:79: 45:f1:a7:ab:14:e2:a6:fa:82:6c:2d:fe:8e:8f:2b: 87:a3:49:33:35:6a:c5:29:d7:02:8d:e8:26:64:43: 65:dc:cc:0f:e8:e9:91:82:21:a3:db:d4:69:1c:1b: 80:1b:46:30:bd:47:36:51:40:4e:60:34:7c:e0:f0: 2f:6b:e4:01:80:9f:d7:57:a7:86:aa:f5:3c:4c:b2: 28:44:62:8a:ac:e8:83:cc:88:29:d9:2b:8a:7f:bc: 20:67:f5:f6:79:47:3c:cc:fa:8e:c8:82:71:bf:2b: db:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0E:C1:36:E8:EF:D2:DF:C3:E2:A4:19:9A:A8:3B:89:55:8D:2B:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/faef3fec-8d86-3ab9-81a7-0efa87802c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 164.153.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:0a:72:0d:e1:db:3e:9a:08:b1:6d:34:f9:f3:79:78:57:1f: e2:0c:c7:75:1e:0e:07:27:cc:ca:ba:f0:0b:ac:ff:e7:8e:52: 87:f1:75:59:b5:91:a5:18:f6:2f:72:16:ee:35:d3:c8:dd:f4: 8b:e0:b4:68:18:4b:98:7a:d3:36:23:b1:03:b6:8f:d0:ca:5f: d1:0c:13:37:ae:0c:68:f5:55:e1:f5:f2:be:bd:e8:e8:05:b4: a6:de:15:0c:b4:ce:fd:be:3c:d1:75:ca:f5:d4:26:b0:b6:1e: 81:05:b9:dd:16:8e:5b:5c:00:96:3f:5d:b5:43:5c:26:48:8b: c4:63:64:28:bb:0a:d1:af:9b:13:53:f7:fe:d8:2d:8e:88:87: de:28:40:bc:ba:03:62:96:b5:93:6b:7b:1e:96:79:31:1c:cb: bf:52:c2:64:9d:df:1e:d8:a1:a6:8c:1a:0b:73:b4:35:2a:3d: e5:1e:2d:18:84:64:db:ca:01:89:ce:96:c6:13:b5:1c:49:10: ea:3d:c2:84:66:74:42:c1:51:68:b1:5a:af:d8:3d:24:62:66: 83:b9:82:20:ab:1f:d2:d4:2a:2c:cc:1f:15:96:36:dc:13:b6: 29:87:59:c6:6e:13:c2:14:d4:c8:97:bd:04:a4:21:c6:b9:5d: 33:b8:f6:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6HjQ0EEUBYPSMQHuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcxNzE0MDY1MFoXDTI2MTAxNTE0MDY1MFowLzEtMCsGA1UEAxMk YmU1ZTAwZGUtZDRhNy00OWU3LTlhZDAtN2RhYjVlNzNmMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWgcg7M8vVZv5figSmxON8b5Y/+NJ1HscOsh f8Z+eF4kcymQJ8x3hx+VWlB/vyhsJMxS1lBzLe46g3MCcnh6l/E1AA4ztLkklAWh +pfVnoXkXBCw5Nj7lDwhlggsItL8fK2LXiu4sY1QyuGPNzzyKFvtqT+jCRZA2H4y sjj3pNGDs/qNl4pp1k/Nv/xWqGYhcVfcI3lF8aerFOKm+oJsLf6OjyuHo0kzNWrF KdcCjegmZENl3MwP6OmRgiGj29RpHBuAG0YwvUc2UUBOYDR84PAva+QBgJ/XV6eG qvU8TLIoRGKKrOiDzIgp2SuKf7wgZ/X2eUc8zPqOyIJxvyvbXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMOwTbo79Lfw+KkGZqoO4lVjSufMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZmFlZjNmZWMtOGQ4Ni0z YWI5LTgxYTctMGVmYTg3ODAyYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJkrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYKcg3h2z6aCLFtNPnzeXhXH+IMx3UeDgcnzMq68Aus/+eOUofxdVm1 kaUY9i9yFu4108jd9IvgtGgYS5h60zYjsQO2j9DKX9EMEzeuDGj1VeH18r696OgF tKbeFQy0zv2+PNF1yvXUJrC2HoEFud0WjltcAJY/XbVDXCZIi8RjZCi7CtGvmxNT 9/7YLY6Ih94oQLy6A2KWtZNrex6WeTEcy79SwmSd3x7YoaaMGgtztDUqPeUeLRiE ZNvKAYnOlsYTtRxJEOo9woRmdELBUWixWq/YPSRiZoO5giCrH9LUKizMHxWWNtwT timHWcZuE8IU1MiXvQSkIca5XTO49jc= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:12 2026 by rpki-client