$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22c4f8ef-8f51-3375-9fb1-e83f110aeee8.roa File: 22c4f8ef-8f51-3375-9fb1-e83f110aeee8.roa (raw, json) Hash identifier: t7Nk7+ZnIE3JPYabb1DDyPzxx52OUEhQaA68lzal7hs= Subject key identifier: 31:C7:37:B0:F3:6D:86:73:FE:C9:8F:BF:EB:AD:36:D0:84:B1:B8:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7634E560F9B52C0B3938BF40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22c4f8ef-8f51-3375-9fb1-e83f110aeee8.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 20940 IP address blocks: 104.84.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:e5:60:f9:b5:2c:0b:39:38:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=3ddda4f5-b749-4864-bad6-14db99929b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d2:85:2e:fb:e0:45:44:05:d8:78:58:15:a5: c9:f3:ac:34:69:41:3b:a2:ff:64:81:3a:a8:8b:c0: 77:ee:ad:42:84:63:11:29:77:6f:d4:5a:a8:3e:0d: 82:06:08:87:e4:90:ee:9e:74:26:61:9e:65:a3:8b: d5:f9:38:ed:9f:09:8f:60:03:5d:06:c2:91:63:d4: d9:c6:ed:79:90:0e:31:96:48:53:6f:97:29:92:7f: 44:bf:d9:fe:cb:de:9f:31:e6:0f:83:82:12:09:3d: d3:b5:42:b8:8f:39:cb:0f:ba:8e:a8:dc:55:f7:80: 28:a5:5b:b4:15:72:3f:10:ef:24:fc:59:f0:73:b2: 82:fe:93:c3:bc:45:b2:ea:f4:58:f0:a6:00:68:cd: 35:26:1b:52:a7:8b:89:04:b7:5e:61:d0:37:c6:bf: ae:32:c7:e9:0b:64:63:af:fe:74:63:76:f1:b1:b7: 65:df:bb:b6:56:05:88:cf:76:84:74:b1:de:b5:72: af:61:98:be:a0:47:8f:a6:90:e5:bf:6a:6b:76:bf: 44:06:ee:48:46:ef:ef:d8:c0:fe:d4:5e:b4:99:bc: d5:0b:2d:aa:20:c9:a1:46:c8:a6:ce:73:4c:63:dd: 9e:27:a8:e5:e7:c2:44:53:83:aa:7e:e6:07:8a:b2: e2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C7:37:B0:F3:6D:86:73:FE:C9:8F:BF:EB:AD:36:D0:84:B1:B8:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22c4f8ef-8f51-3375-9fb1-e83f110aeee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.84.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:eb:db:2b:35:de:0a:21:3b:68:e4:16:99:fa:bd:d9:8e:91: d6:e3:b6:5d:23:5c:b9:54:4a:02:f6:aa:b3:b9:30:ed:34:5a: 4e:c4:b8:b0:ee:e9:7b:1a:e8:28:47:0c:16:2b:85:2b:8c:ca: 1f:23:e7:a8:03:a5:80:6a:1d:70:2c:6f:a6:e5:bf:1a:da:7e: 3c:d2:82:99:08:8a:bf:14:6c:b3:00:a7:54:24:fe:05:0c:9a: 26:e2:e6:dc:72:be:06:68:b4:79:91:be:9a:ef:6b:1f:90:94: ab:d3:a4:78:14:6a:ce:72:44:2f:d0:cd:f7:fd:9a:5b:80:51: a3:2b:3f:d6:cd:02:c2:e9:7d:85:fb:4e:ba:35:bb:fe:40:1d: 92:55:38:fd:3a:8c:b1:f9:d6:4b:2b:cb:7a:c6:f1:bc:03:36: 4d:fa:37:37:9e:fa:cd:23:64:5f:1e:51:8f:a4:f3:51:88:8c: 55:dc:53:a7:d2:70:8a:c8:ea:f9:5b:20:13:1c:1d:e1:7e:32: eb:e9:6b:7e:85:e2:8e:17:f1:0c:55:4b:ec:85:82:4f:10:37: 6c:19:d7:9a:79:06:d4:67:00:8b:e3:e2:d3:15:41:8d:8d:b6: 65:5b:5c:5d:92:ff:84:d0:21:6c:ad:7b:02:a5:55:34:e2:99: 07:8a:72:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NOVg+bUsCzk4v0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk M2RkZGE0ZjUtYjc0OS00ODY0LWJhZDYtMTRkYjk5OTI5YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNKFLvvgRUQF2HhYFaXJ86w0aUE7ov9kgTqo i8B37q1ChGMRKXdv1FqoPg2CBgiH5JDunnQmYZ5lo4vV+TjtnwmPYANdBsKRY9TZ xu15kA4xlkhTb5cpkn9Ev9n+y96fMeYPg4ISCT3TtUK4jznLD7qOqNxV94AopVu0 FXI/EO8k/Fnwc7KC/pPDvEWy6vRY8KYAaM01JhtSp4uJBLdeYdA3xr+uMsfpC2Rj r/50Y3bxsbdl37u2VgWIz3aEdLHetXKvYZi+oEePppDlv2prdr9EBu5IRu/v2MD+ 1F60mbzVCy2qIMmhRsimznNMY92eJ6jl58JEU4OqfuYHirLiaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHHN7DzbYZz/smPv+utNtCEsbiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjJjNGY4ZWYtOGY1MS0z Mzc1LTlmYjEtZTgzZjExMGFlZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFTnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPr2ys13gohO2jkFpn6vdmOkdbjtl0jXLlUSgL2qrO5MO00Wk7EuLDu 6Xsa6ChHDBYrhSuMyh8j56gDpYBqHXAsb6blvxrafjzSgpkIir8UbLMAp1Qk/gUM mibi5txyvgZotHmRvprvax+QlKvTpHgUas5yRC/Qzff9mluAUaMrP9bNAsLpfYX7 Tro1u/5AHZJVOP06jLH51ksry3rG8bwDNk36Nzee+s0jZF8eUY+k81GIjFXcU6fS cIrI6vlbIBMcHeF+Muvpa36F4o4X8QxVS+yFgk8QN2wZ15p5BtRnAIvj4tMVQY2N tmVbXF2S/4TQIWytewKlVTTimQeKcnA= -----END CERTIFICATE-----Generated at Tue Jul 21 20:50:18 2026 by rpki-client