$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f40cd14-7d2d-35ce-a344-5a292fd3882e.roa File: 9f40cd14-7d2d-35ce-a344-5a292fd3882e.roa (raw, json) Hash identifier: k5Oaw/tvXl1iVQytfTl2LsXoHYZTfIPeLmW9ix/ckNw= Subject key identifier: B4:13:64:47:2F:13:06:B0:2E:8B:46:01:8D:AD:B5:80:A2:A0:4F:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E736A36CF0556BC3B3D427C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f40cd14-7d2d-35ce-a344-5a292fd3882e.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 20940 IP address blocks: 104.76.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:36:cf:05:56:bc:3b:3d:42:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=626f08e7-f098-4957-b998-757ee5f86d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:60:70:62:96:bb:0e:1a:d4:1d:ab:fa:ec:e6: 85:44:ee:45:1f:50:46:77:f0:86:c2:4b:7d:67:40: e3:ee:bf:2b:ce:a1:2b:3f:13:3b:43:68:b9:f2:00: df:1f:1f:e1:ec:91:b2:e2:e3:f9:0f:79:67:2e:41: 6b:13:4b:19:85:da:1f:d9:b7:31:a7:ae:c9:05:1d: df:9f:27:e1:dc:5a:cd:6c:8b:30:7d:d0:d0:ab:32: 73:18:52:de:55:42:8f:b2:70:f1:da:72:34:b5:17: 3c:9a:ae:6f:fd:82:5c:23:cf:ce:14:06:f3:af:43: 00:0c:dd:ee:a0:5a:12:90:32:d3:90:95:09:fc:e5: 13:3e:8f:52:e7:1b:9a:d9:28:b9:2b:7e:de:a5:c3: 75:24:e3:fc:41:b5:5f:33:8d:71:12:8c:3a:f6:fb: 68:47:10:0b:e6:2d:58:67:57:88:8f:74:84:b7:d7: 81:42:42:39:02:63:d0:95:18:c4:4e:20:85:4f:70: ba:16:19:37:e5:aa:ba:ab:b1:87:3a:50:01:f2:c9: 22:08:2d:37:52:7c:5d:02:0b:bd:e9:de:df:cb:98: 61:1d:5d:77:a6:f9:26:39:72:34:76:5b:79:97:0b: e4:46:b6:69:c7:30:82:d9:f1:43:6e:12:3c:3a:f9: 1e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:13:64:47:2F:13:06:B0:2E:8B:46:01:8D:AD:B5:80:A2:A0:4F:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f40cd14-7d2d-35ce-a344-5a292fd3882e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.76.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:fd:9c:28:47:63:84:3f:dd:a3:b1:d4:ef:e8:c7:1c:3e:c3: 26:8e:8b:44:95:e9:58:3c:20:9c:2b:1b:bd:d9:92:cb:4a:b8: 3f:44:b7:22:08:16:8a:7a:10:78:7d:90:cb:1a:c6:48:b2:5c: 6b:b1:2c:13:a8:ca:3f:d5:e9:4b:a1:12:d6:ff:a7:2d:e5:71: 0a:2f:a9:a6:81:a8:4c:96:15:5e:24:57:2f:aa:3c:09:23:ae: 20:d6:fa:19:74:90:f5:36:03:92:2b:d1:38:cd:9d:53:88:71: 25:1d:b5:e4:ce:fb:d7:3a:6b:89:de:4c:bf:54:6d:bb:e8:22: 7f:26:96:7e:64:e9:ef:b4:94:7d:0a:c0:c6:50:f8:1a:84:0d: 21:9a:1f:0a:0c:56:94:5f:6c:93:fc:94:9d:b1:bd:76:ea:ea: 1c:d6:5d:26:5f:c2:4e:b5:79:e6:a5:0e:11:68:10:db:26:2c: 95:77:5f:44:a0:61:a5:84:cd:6e:44:62:1d:46:8c:c3:1b:c4: ee:05:38:61:fc:9b:a2:0f:65:05:77:1d:0a:f3:4b:df:7c:9f: 3a:d3:ea:f5:ad:ac:7d:bc:e3:ab:78:e0:ba:15:3a:ff:73:47: c7:d9:43:45:f5:04:ac:8e:21:cf:7a:90:ac:46:d2:6c:50:c4: 90:f4:34:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zajbPBVa8Oz1CfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk NjI2ZjA4ZTctZjA5OC00OTU3LWI5OTgtNzU3ZWU1Zjg2ZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmBwYpa7DhrUHav67OaFRO5FH1BGd/CGwkt9 Z0Dj7r8rzqErPxM7Q2i58gDfHx/h7JGy4uP5D3lnLkFrE0sZhdof2bcxp67JBR3f nyfh3FrNbIswfdDQqzJzGFLeVUKPsnDx2nI0tRc8mq5v/YJcI8/OFAbzr0MADN3u oFoSkDLTkJUJ/OUTPo9S5xua2Si5K37epcN1JOP8QbVfM41xEow69vtoRxAL5i1Y Z1eIj3SEt9eBQkI5AmPQlRjETiCFT3C6Fhk35aq6q7GHOlAB8skiCC03UnxdAgu9 6d7fy5hhHV13pvkmOXI0dlt5lwvkRrZpxzCC2fFDbhI8OvkeWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQTZEcvEwawLotGAY2ttYCioE8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWY0MGNkMTQtN2QyZC0z NWNlLWEzNDQtNWEyOTJmZDM4ODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEzFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf9nChHY4Q/3aOx1O/oxxw+wyaOi0SV6Vg8IJwrG73ZkstKuD9EtyII Fop6EHh9kMsaxkiyXGuxLBOoyj/V6UuhEtb/py3lcQovqaaBqEyWFV4kVy+qPAkj riDW+hl0kPU2A5Ir0TjNnVOIcSUdteTO+9c6a4neTL9UbbvoIn8mln5k6e+0lH0K wMZQ+BqEDSGaHwoMVpRfbJP8lJ2xvXbq6hzWXSZfwk61eealDhFoENsmLJV3X0Sg YaWEzW5EYh1GjMMbxO4FOGH8m6IPZQV3HQrzS998nzrT6vWtrH2846t44LoVOv9z R8fZQ0X1BKyOIc96kKxG0mxQxJD0NEI= -----END CERTIFICATE-----Generated at Tue Jul 21 20:51:46 2026 by rpki-client