$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf568f2e-a0e6-3097-8ecc-0bfe96bbc867.roa File: bf568f2e-a0e6-3097-8ecc-0bfe96bbc867.roa (raw, json) Hash identifier: f4llqMJd8mOf7N5rN2oJCM+lcJy6OVjXe1sxlL5O7F4= Subject key identifier: F5:B1:4F:17:59:D1:66:AB:63:A8:7D:C6:E2:0E:8A:B2:BE:5F:A5:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E736A2BB912014EEF95BD3B70 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf568f2e-a0e6-3097-8ecc-0bfe96bbc867.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 20940 IP address blocks: 104.74.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:2b:b9:12:01:4e:ef:95:bd:3b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=0d0e87b2-2d63-4831-8231-aad7e4cdb338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:5f:0f:96:d5:bb:99:8b:97:af:ab:b2:c0: e8:a9:ba:41:cc:b3:45:2e:19:f8:17:14:8f:e4:4e: 60:d3:a4:0c:40:9e:6a:d5:09:6f:99:da:63:45:6a: 0a:41:92:b6:ad:c0:d5:5f:8a:fe:d9:2f:20:27:95: 79:90:2a:21:10:5f:24:0d:51:a0:83:5b:b3:22:57: 34:9c:20:67:1a:63:3b:54:d5:dc:51:99:2e:21:40: 3c:63:77:d6:59:f4:9d:fc:c3:64:38:41:ec:f3:fe: 0d:fa:34:40:91:ec:c4:36:e4:fd:ba:be:72:f7:63: 01:f6:6c:32:16:3f:c6:bd:42:3a:dd:53:7c:88:48: 20:0d:3b:de:12:28:b9:36:5e:98:c9:57:57:49:32: 29:a6:20:3c:ae:4a:01:0b:d4:f1:a3:71:41:c9:13: 3d:2f:3b:5a:34:b4:5e:d6:09:76:cc:0c:bd:f2:b4: 7c:8d:5f:ed:90:1e:e2:f7:ac:e9:74:ec:99:7a:32: 3b:0d:28:7b:66:13:99:c6:dd:48:33:26:ff:6a:66: 9c:6b:ea:56:c8:9d:66:9a:d3:28:6d:5b:5c:2e:84: da:a9:97:af:bf:c8:d6:c2:e4:e1:16:04:fd:23:08: d9:e4:10:9c:23:bd:04:99:72:27:21:5b:92:a5:93: 83:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B1:4F:17:59:D1:66:AB:63:A8:7D:C6:E2:0E:8A:B2:BE:5F:A5:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf568f2e-a0e6-3097-8ecc-0bfe96bbc867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.74.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:28:16:b9:93:d9:15:14:8c:cc:e8:11:09:d9:2f:1b:12:f6: 0f:75:65:b1:da:98:fa:cf:0c:59:33:e1:95:79:02:2b:71:17: 3b:d7:0a:e0:b0:a6:07:44:9e:46:eb:14:11:a1:b7:e4:b3:42: d9:16:87:dc:05:ae:a5:63:ec:28:cb:59:93:4d:c7:32:df:0a: 23:30:f1:06:8b:e5:52:f6:44:0f:84:77:72:ba:40:8f:a1:93: b8:7b:bd:d5:d8:eb:83:30:bd:d0:90:4a:97:fc:69:1f:c2:36: e0:a8:90:81:e7:56:5a:9a:12:95:38:c8:fd:84:89:d4:b7:c4: 4c:71:94:3f:1e:0b:40:a5:27:8d:aa:49:b8:11:90:77:db:3e: b0:06:b2:88:db:49:4a:90:2b:7c:05:a7:61:a2:51:41:36:5a: 7f:9f:87:f3:17:08:71:21:2a:7a:80:4c:df:40:68:92:fc:04: 20:44:b5:0a:4e:ff:71:3f:5a:3a:35:5d:b0:b1:de:99:b8:12: 06:de:3d:f7:e9:c0:b0:cb:a6:45:f1:4f:82:d3:c3:67:15:41: a0:bb:6c:2f:1d:55:a8:5c:56:0f:e5:94:54:26:b6:89:f2:d6: e9:a5:6f:66:9f:6e:da:bb:f2:f4:90:99:2c:3b:ee:c9:64:00: 27:35:25:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zaiu5EgFO75W9O3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk MGQwZTg3YjItMmQ2My00ODMxLTgyMzEtYWFkN2U0Y2RiMzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO1fD5bVu5mLl6+rssDoqbpBzLNFLhn4FxSP 5E5g06QMQJ5q1QlvmdpjRWoKQZK2rcDVX4r+2S8gJ5V5kCohEF8kDVGgg1uzIlc0 nCBnGmM7VNXcUZkuIUA8Y3fWWfSd/MNkOEHs8/4N+jRAkezENuT9ur5y92MB9mwy Fj/GvUI63VN8iEggDTveEii5Nl6YyVdXSTIppiA8rkoBC9Txo3FByRM9LztaNLRe 1gl2zAy98rR8jV/tkB7i96zpdOyZejI7DSh7ZhOZxt1IMyb/amaca+pWyJ1mmtMo bVtcLoTaqZevv8jWwuThFgT9IwjZ5BCcI70EmXInIVuSpZODsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWxTxdZ0WarY6h9xuIOirK+X6UGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmY1NjhmMmUtYTBlNi0z MDk3LThlY2MtMGJmZTk2YmJjODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaEoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgoFrmT2RUUjMzoEQnZLxsS9g91ZbHamPrPDFkz4ZV5AitxFzvXCuCw pgdEnkbrFBGht+SzQtkWh9wFrqVj7CjLWZNNxzLfCiMw8QaL5VL2RA+Ed3K6QI+h k7h7vdXY64MwvdCQSpf8aR/CNuCokIHnVlqaEpU4yP2EidS3xExxlD8eC0ClJ42q SbgRkHfbPrAGsojbSUqQK3wFp2GiUUE2Wn+fh/MXCHEhKnqATN9AaJL8BCBEtQpO /3E/Wjo1XbCx3pm4EgbePffpwLDLpkXxT4LTw2cVQaC7bC8dVahcVg/llFQmtony 1umlb2afbtq78vSQmSw77slkACc1Jcs= -----END CERTIFICATE-----Generated at Tue Jul 21 20:50:18 2026 by rpki-client