$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4285a84-02aa-3442-aa77-3424803554f9.roa File: a4285a84-02aa-3442-aa77-3424803554f9.roa (raw, json) Hash identifier: xwYbaCzy/bDvExmAeAEDWYJVPNkpfMM2FI0keSCl6a0= Subject key identifier: C0:B3:EC:CA:10:72:CA:78:54:3C:B1:B4:55:A0:25:85:66:CD:3A:51 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E6B0A241E4629D81301DCC900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4285a84-02aa-3442-aa77-3424803554f9.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 20940 IP address blocks: 104.77.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:24:1e:46:29:d8:13:01:dc:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=bda3501b-768e-4315-b9ec-1e8ee05acdb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:83:16:99:54:32:64:ad:11:71:a9:64:d4:64: 86:63:82:47:42:75:54:73:13:c3:e3:d9:42:95:bd: 9c:f2:80:76:37:c1:a8:c4:37:81:6b:c3:5d:14:2a: 94:bb:c7:c2:df:90:f1:ae:4f:98:b0:af:1c:d5:5e: 38:08:28:e8:e2:84:2a:44:e4:dc:fd:4e:7d:71:17: bd:34:a8:29:c7:04:83:61:da:d1:b9:84:b7:1e:8e: 0f:80:2e:3f:5f:2f:26:d9:ff:e5:cc:a1:57:04:a5: f5:2a:c2:95:20:78:4e:62:dd:37:09:c3:69:dc:73: 07:01:87:99:89:e9:28:7b:8e:99:e9:c3:50:00:2c: 7b:0f:52:15:48:9a:ec:3b:39:26:40:e5:50:4a:66: ab:ce:63:06:84:dc:41:bd:7f:fb:20:ab:2b:cc:79: 7e:01:4b:ec:2b:02:a0:99:93:46:bd:2f:bd:8f:21: 9d:e1:45:34:7a:c9:81:5b:81:34:a3:7c:50:8d:4f: 0f:c3:42:61:a2:14:ca:f9:00:b1:ac:d6:e8:f0:7e: fa:ec:85:a0:e7:5a:40:36:3f:0e:b8:a1:53:ca:d5: 26:35:26:26:5f:f1:5b:2a:25:71:25:1a:b8:dd:fc: ec:69:2a:2a:71:4a:c6:97:cd:21:4e:17:57:e2:55: d0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B3:EC:CA:10:72:CA:78:54:3C:B1:B4:55:A0:25:85:66:CD:3A:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4285a84-02aa-3442-aa77-3424803554f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.77.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9e:7d:f6:8b:01:bb:d6:6d:42:5d:09:7f:37:1b:fd:61:3a: 8b:d6:ee:51:15:c6:97:91:b1:2a:be:c3:bf:2c:db:74:f8:31: 86:40:f5:3b:6b:82:a7:31:e5:5f:98:08:42:24:1b:b0:f3:17: 81:0f:c4:6a:a6:a0:37:12:ae:32:f7:2b:e8:99:83:aa:b9:bf: cd:91:f8:9d:28:df:98:86:04:1c:6d:79:60:27:fb:64:06:08: 27:3d:13:8a:26:f1:bf:d0:4c:b9:ba:00:3f:3f:8b:2f:f2:17: 04:de:03:e7:09:ba:c6:bd:f9:ad:c1:7b:30:4b:35:00:e1:e0: 9a:95:a1:9d:69:3e:44:df:38:46:e4:62:8c:17:9a:3f:88:98: 37:b1:df:48:c1:d0:4f:89:dd:48:28:89:f8:9b:70:51:33:93: 6c:38:55:cc:72:f6:53:10:d2:b9:11:a3:9a:01:27:eb:e5:40: 22:96:f7:0f:54:de:d1:aa:ba:61:f0:ff:97:96:aa:88:b8:98: 78:17:bd:f0:f4:d2:57:cc:cd:e4:fd:b5:8a:0a:5b:cf:9e:09: df:4f:0b:eb:12:71:ed:86:da:f5:cd:32:97:f5:ff:0e:f7:bf: 12:f3:47:a8:93:b9:99:f1:05:fb:c0:a7:d7:46:46:f5:c9:08: 63:42:bc:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCiQeRinYEwHcyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk YmRhMzUwMWItNzY4ZS00MzE1LWI5ZWMtMWU4ZWUwNWFjZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIMWmVQyZK0Rcalk1GSGY4JHQnVUcxPD49lC lb2c8oB2N8GoxDeBa8NdFCqUu8fC35Dxrk+YsK8c1V44CCjo4oQqROTc/U59cRe9 NKgpxwSDYdrRuYS3Ho4PgC4/Xy8m2f/lzKFXBKX1KsKVIHhOYt03CcNp3HMHAYeZ iekoe46Z6cNQACx7D1IVSJrsOzkmQOVQSmarzmMGhNxBvX/7IKsrzHl+AUvsKwKg mZNGvS+9jyGd4UU0esmBW4E0o3xQjU8Pw0JhohTK+QCxrNbo8H767IWg51pANj8O uKFTytUmNSYmX/FbKiVxJRq43fzsaSoqcUrGl80hThdX4lXQKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCz7MoQcsp4VDyxtFWgJYVmzTpRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTQyODVhODQtMDJhYS0z NDQyLWFhNzctMzQyNDgwMzU1NGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaE2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyeffaLAbvWbUJdCX83G/1hOovW7lEVxpeRsSq+w78s23T4MYZA9Ttr gqcx5V+YCEIkG7DzF4EPxGqmoDcSrjL3K+iZg6q5v82R+J0o35iGBBxteWAn+2QG CCc9E4om8b/QTLm6AD8/iy/yFwTeA+cJusa9+a3BezBLNQDh4JqVoZ1pPkTfOEbk YowXmj+ImDex30jB0E+J3UgoifibcFEzk2w4Vcxy9lMQ0rkRo5oBJ+vlQCKW9w9U 3tGqumHw/5eWqoi4mHgXvfD00lfMzeT9tYoKW8+eCd9PC+sSce2G2vXNMpf1/w73 vxLzR6iTuZnxBfvAp9dGRvXJCGNCvFE= -----END CERTIFICATE-----Generated at Tue Jul 21 20:53:29 2026 by rpki-client