$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/899fae21-fa2d-3995-9804-e288a337300f.roa File: 899fae21-fa2d-3995-9804-e288a337300f.roa (raw, json) Hash identifier: 3RSANVrUgaW4M5QZF/yLPEO3fDWDSzWmJLzR4soP4DU= Subject key identifier: AE:13:60:F2:84:A8:E0:09:0A:CF:0E:1D:9A:05:20:30:8D:7B:E9:CD Certificate issuer: /CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2 Certificate serial: 010D0C9F4328584E534F3A3C320FAE76C8052380 Authority key identifier: D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/899fae21-fa2d-3995-9804-e288a337300f.roa Signing time: Sun 28 Jun 2026 21:00:11 +0000 ROA not before: Sun 28 Jun 2026 21:00:11 +0000 ROA not after: Sat 26 Sep 2026 21:00:11 +0000 asID: 25816 IP address blocks: 104.254.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:53:4f:3a:3c:32:0f:ae:76:c8:05:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2 Validity Not Before: Jun 28 21:00:11 2026 GMT Not After : Sep 26 21:00:11 2026 GMT Subject: CN=8eb8f42d-45e8-4a69-aebe-7f9a7631a6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:51:1b:55:dc:b7:54:a9:77:cb:88:8b:af:51: d0:9a:d4:0d:b8:2b:58:7f:dc:25:d0:8f:06:e6:ff: 17:f1:5c:8b:a6:b6:2b:a3:af:ea:ae:48:81:c2:c7: 19:14:c2:e2:f6:b6:03:4c:9d:12:e3:f3:3c:37:d7: 08:4a:fb:ce:b5:cb:04:aa:cf:a0:d5:55:bb:bf:e1: 17:b8:42:bb:58:19:48:84:a8:ba:d9:bf:37:e8:12: f5:94:bf:94:57:2c:20:3f:14:82:6c:42:c0:5b:3f: 7d:e9:0e:ee:ae:ff:94:c1:4f:84:20:44:67:1a:af: ac:24:d3:25:2a:84:af:3f:af:3d:9a:7b:d6:2b:c1: 0a:0e:f4:3a:96:48:63:6e:7d:01:20:9e:f0:56:7e: 38:a2:4d:db:1b:07:88:e5:dd:a4:aa:ef:82:91:9b: 84:ef:2b:4d:85:11:56:50:37:25:1d:81:74:73:d2: 2a:f3:7f:b3:b9:a9:b5:6c:d4:b0:5f:53:24:42:49: 76:63:e4:68:60:37:09:4d:4f:9e:4f:c6:0e:e0:68: 0d:36:eb:4c:91:89:da:fa:22:7e:10:35:9a:33:2f: 9f:1d:5e:1d:82:5f:60:de:13:69:36:0d:94:59:89: 1a:e9:3b:65:66:a3:0f:ec:9f:4b:cc:e0:b7:46:5b: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:13:60:F2:84:A8:E0:09:0A:CF:0E:1D:9A:05:20:30:8D:7B:E9:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/899fae21-fa2d-3995-9804-e288a337300f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl X509v3 Authority Key Identifier: keyid:D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer sbgp-ipAddrBlock: critical IPv4: 104.254.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:aa:ce:e6:40:3d:27:28:d7:99:77:8c:f5:79:18:c8:1f:d5: e8:42:dc:5b:86:6a:1e:ec:c5:b1:0f:73:2f:d5:37:2e:44:ce: 3b:ae:aa:7d:77:93:a9:04:94:da:e3:93:7d:b7:b9:78:76:41: 5c:d5:5b:9e:08:1d:46:45:3b:3b:06:1d:10:2b:f0:c6:57:38: e2:c3:17:23:8c:bb:e8:a3:25:cb:ae:59:06:bd:73:e1:ed:fb: f7:37:47:bd:50:90:85:37:12:d9:2c:d1:4a:47:d4:36:46:56: 3f:3b:dc:4a:9f:91:f2:c4:9b:22:f0:da:42:d6:ff:0f:48:d4: 96:dc:07:8c:89:e9:d1:e1:96:37:cb:0a:79:47:f0:d6:da:2d: b9:43:48:fc:03:87:52:06:03:09:66:2b:91:ce:14:ad:bb:93: 26:e8:9d:a1:72:50:f1:7a:c8:45:73:a3:62:bc:de:3b:52:83: fc:7a:87:35:00:20:d8:70:84:3c:6d:42:91:13:bf:40:2e:0a: 25:a8:ba:1a:02:97:29:3e:1f:5a:87:7a:c4:6e:b6:be:86:8f: 28:b3:68:8b:62:51:61:a0:64:f5:f4:f7:0f:7b:fd:b5:41:07: 9a:6c:19:6c:6a:30:ff:eb:e3:26:b5:0c:9e:ce:d9:d5:da:c8: 7c:0a:1c:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5TTzo8Mg+udsgFI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBmYjZlZmUtZGJjMS00NWE4LWIyNjYtY2E3MmY3ZTA3 OWMyMB4XDTI2MDYyODIxMDAxMVoXDTI2MDkyNjIxMDAxMVowLzEtMCsGA1UEAxMk OGViOGY0MmQtNDVlOC00YTY5LWFlYmUtN2Y5YTc2MzFhNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllEbVdy3VKl3y4iLr1HQmtQNuCtYf9wl0I8G 5v8X8VyLprYro6/qrkiBwscZFMLi9rYDTJ0S4/M8N9cISvvOtcsEqs+g1VW7v+EX uEK7WBlIhKi62b836BL1lL+UVywgPxSCbELAWz996Q7urv+UwU+EIERnGq+sJNMl KoSvP689mnvWK8EKDvQ6lkhjbn0BIJ7wVn44ok3bGweI5d2kqu+CkZuE7ytNhRFW UDclHYF0c9Iq83+zuam1bNSwX1MkQkl2Y+RoYDcJTU+eT8YO4GgNNutMkYna+iJ+ EDWaMy+fHV4dgl9g3hNpNg2UWYka6TtlZqMP7J9LzOC3Rlt7GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4TYPKEqOAJCs8OHZoFIDCNe+nNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMGZi NmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcyZjdlMDc5YzIvODk5ZmFlMjEtZmEyZC0z OTk1LTk4MDQtZTI4OGEzMzczMDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDBmYjZlZmUtZGJjMS00NWE4LWIy NjYtY2E3MmY3ZTA3OWMyLzAwZmI2ZWZlLWRiYzEtNDVhOC1iMjY2LWNhNzJmN2Uw NzljMi5jcmwwHwYDVR0jBBgwFoAU14UfqvYVcCEgV1iLHNHDvrrS9HcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMGZiNmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcy ZjdlMDc5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP4tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyqzuZAPSco15l3jPV5GMgf1ehC3FuGah7sxbEPcy/VNy5Ezjuuqn13 k6kElNrjk323uXh2QVzVW54IHUZFOzsGHRAr8MZXOOLDFyOMu+ijJcuuWQa9c+Ht +/c3R71QkIU3Etks0UpH1DZGVj873EqfkfLEmyLw2kLW/w9I1JbcB4yJ6dHhljfL CnlH8NbaLblDSPwDh1IGAwlmK5HOFK27kybonaFyUPF6yEVzo2K83jtSg/x6hzUA INhwhDxtQpETv0AuCiWouhoClyk+H1qHesRutr6GjyizaItiUWGgZPX09w97/bVB B5psGWxqMP/r4ya1DJ7O2dXayHwKHDU= -----END CERTIFICATE-----Generated at Tue Jul 21 15:34:33 2026 by rpki-client