$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/4107624b-20aa-32db-a283-7fb5f300cb08.roa File: 4107624b-20aa-32db-a283-7fb5f300cb08.roa (raw, json) Hash identifier: XWjel2Faziie/stp09YR77kJRVgw2Pml9QEejgYo4o8= Subject key identifier: A7:64:91:9E:DB:49:BB:B6:F3:0D:73:DE:BA:54:9B:65:33:59:5E:B2 Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584E6F3A405ABC2390CEFC765E00 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/4107624b-20aa-32db-a283-7fb5f300cb08.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 26548 IP address blocks: 104.128.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:40:5a:bc:23:90:ce:fc:76:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=86a4e094-ab8c-4d74-a2e6-6c86ad5ed018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:28:36:de:9a:9e:97:66:72:4f:0f:af:31: 6c:95:c7:72:8c:58:79:6b:1f:92:4a:61:1c:cf:07: 9f:b1:23:b5:e1:e4:ad:6b:f2:01:69:fa:be:44:0b: 37:d6:ad:b5:f7:ff:f6:10:41:9c:4a:16:3d:84:14: ae:6d:40:2b:d2:aa:c4:39:70:8f:a8:58:17:35:84: 87:9e:0b:7f:11:fc:ac:fa:e6:32:76:05:03:38:ee: 09:3b:fb:5b:f3:60:59:3a:e9:ca:c9:c3:09:49:48: b4:93:83:13:02:b9:4a:7a:1b:cc:90:6f:88:76:53: bc:e8:79:fd:20:5a:aa:03:9c:02:76:75:da:89:6f: 7a:cf:fb:08:ec:9f:e0:0a:fd:25:10:3d:08:c2:be: 60:13:0d:c8:a6:f3:c2:15:69:c8:90:21:35:a2:16: f1:5d:1a:49:8d:64:a2:20:42:69:08:9b:35:8c:46: 1d:19:ea:d6:9c:e3:b9:eb:09:69:87:c9:2a:a9:c7: cf:63:8d:dd:a4:27:e2:7a:c6:07:8c:c8:e7:97:96: 6e:fc:31:e8:b2:0d:b4:0f:48:c7:6a:1c:cd:59:77: 73:93:e1:ca:a2:5a:27:34:5d:2c:f5:b1:59:78:fa: 57:45:b2:a0:5d:7b:f6:a8:37:b6:f8:52:2a:4b:38: ff:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:64:91:9E:DB:49:BB:B6:F3:0D:73:DE:BA:54:9B:65:33:59:5E:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/4107624b-20aa-32db-a283-7fb5f300cb08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 104.128.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:0b:47:32:6e:b0:d7:27:f2:36:58:63:82:42:36:b3:4b:bf: 8a:74:0f:b3:c7:40:2d:2b:45:fd:34:00:13:af:53:59:36:5b: b5:06:cc:18:43:0a:5b:96:09:4c:92:e1:04:0a:b6:83:1b:55: d7:fe:2a:6f:06:28:0d:24:59:48:68:e5:12:d1:d2:89:f8:dd: 19:ad:65:87:3f:57:69:99:2b:9e:05:b6:f1:1d:87:34:ba:12: 33:84:2a:fd:ab:77:fc:4c:46:12:a8:f3:b8:f2:ae:7d:22:b3: a1:9b:fb:4c:88:23:95:23:06:b3:d4:29:a9:30:49:7e:eb:33: 49:25:25:77:c0:ae:21:c3:68:b6:ed:0d:a3:a2:4c:39:61:6e: 1a:22:52:de:21:d1:77:31:07:8b:0d:4e:0f:bc:d5:32:cb:44: db:e4:b7:79:99:64:7f:a5:ba:a7:dd:93:5e:b5:63:93:69:96: d1:e8:c5:d3:0f:c4:92:bc:c9:46:93:53:02:77:c0:96:9c:d3: 75:36:aa:02:ec:91:5d:d2:a7:c9:12:48:7d:1a:32:a3:ba:8e: ec:fc:b0:99:8f:2f:d9:00:f7:c0:4b:11:a7:b4:ec:19:e2:c6: 14:23:17:80:58:75:5f:de:72:e8:aa:ba:9d:f4:f5:e9:bc:d0: 9b:56:bb:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOkBavCOQzvx2XgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ODZhNGUwOTQtYWI4Yy00ZDc0LWEyZTYtNmM4NmFkNWVkMDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpMoNt6anpdmck8PrzFslcdyjFh5ax+SSmEc zwefsSO14eSta/IBafq+RAs31q219//2EEGcShY9hBSubUAr0qrEOXCPqFgXNYSH ngt/Efys+uYydgUDOO4JO/tb82BZOunKycMJSUi0k4MTArlKehvMkG+IdlO86Hn9 IFqqA5wCdnXaiW96z/sI7J/gCv0lED0Iwr5gEw3IpvPCFWnIkCE1ohbxXRpJjWSi IEJpCJs1jEYdGerWnOO56wlph8kqqcfPY43dpCfiesYHjMjnl5Zu/DHosg20D0jH ahzNWXdzk+HKolonNF0s9bFZePpXRbKgXXv2qDe2+FIqSzj/vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdkkZ7bSbu28w1z3rpUm2UzWV6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvNDEwNzYyNGItMjBhYS0z MmRiLWEyODMtN2ZiNWYzMDBjYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIDnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcLRzJusNcn8jZYY4JCNrNLv4p0D7PHQC0rRf00ABOvU1k2W7UGzBhD CluWCUyS4QQKtoMbVdf+Km8GKA0kWUho5RLR0on43RmtZYc/V2mZK54FtvEdhzS6 EjOEKv2rd/xMRhKo87jyrn0is6Gb+0yII5UjBrPUKakwSX7rM0klJXfAriHDaLbt DaOiTDlhbhoiUt4h0XcxB4sNTg+81TLLRNvkt3mZZH+luqfdk161Y5NpltHoxdMP xJK8yUaTUwJ3wJac03U2qgLskV3Sp8kSSH0aMqO6juz8sJmPL9kA98BLEae07Bni xhQjF4BYdV/ecuiqup309em80JtWu8Q= -----END CERTIFICATE-----Generated at Tue Jul 21 01:34:41 2026 by rpki-client