$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa File: 86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa (raw, json) Hash identifier: run/4xO+42km9xltlbNgPtISiR/c1gl2CbbbIYWVAdU= Subject key identifier: 3A:B8:1E:83:B7:B2:93:ED:FD:DC:47:53:1C:17:D2:42:60:C9:35:59 Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F4328584EC20C67C58492F852503C1A00 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 1403 IP address blocks: 104.163.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:67:c5:84:92:f8:52:50:3c:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=89cd4baa-2d10-4a51-8642-2502ecb67f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f6:5b:78:06:c9:8c:81:97:32:12:10:a6:e4: de:ae:b0:e7:d2:67:ba:ed:94:36:5c:4a:a0:f5:b4: 32:da:5f:7c:c0:63:06:c7:ff:d1:7f:79:e8:08:06: 2b:77:8f:7f:d7:9f:61:2b:1d:1f:2f:77:a9:de:0a: 65:fe:07:16:2d:97:51:ba:4a:2f:66:e7:fb:7e:b2: 9c:a4:8c:13:e4:86:08:7a:54:c2:21:4c:37:72:5b: 16:3c:5b:21:6e:d9:97:23:ea:2f:cf:4a:c5:44:93: cc:19:96:1b:d4:85:27:71:d8:e9:9c:90:c8:55:27: c6:27:fc:c1:9c:ef:ef:90:d7:4c:14:54:75:b6:29: b0:86:04:19:42:73:b3:87:b0:e8:bd:c8:17:05:5b: 65:c3:ae:7f:5c:4c:2a:de:9c:e4:9b:50:81:94:af: 09:5f:55:40:66:ac:db:3a:96:9c:2d:cf:59:7e:37: 39:eb:17:30:f3:a6:15:c9:a8:78:c5:e8:9a:c9:25: 26:5a:f1:f8:4f:f0:bc:5a:09:2d:d3:6c:db:c4:20: 7a:47:67:33:f6:01:89:06:12:26:f6:6c:e9:92:fd: c9:81:b9:33:c7:c0:c6:3c:1d:8f:f1:e5:a1:93:06: 2d:81:f4:89:98:0d:14:96:29:84:79:5e:39:13:55: 13:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B8:1E:83:B7:B2:93:ED:FD:DC:47:53:1C:17:D2:42:60:C9:35:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 104.163.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5a:bd:03:af:d4:2f:e0:ee:5d:20:74:21:48:bf:7c:99:58: a7:9a:da:38:f4:1f:7a:e0:2d:ea:d0:c0:37:b2:26:27:8e:e8: 8c:2e:2f:98:17:60:24:1c:23:4e:ae:d3:c6:22:5b:f9:2e:21: 17:7c:8b:ba:0a:ce:12:f4:1f:5a:23:90:fe:f1:78:8a:a1:4c: 95:c0:c1:ed:5c:9d:59:76:c3:a0:27:ac:bf:53:88:08:7c:3b: c5:ec:59:9b:58:c6:e3:e4:e1:5b:d0:bd:9c:81:af:f8:71:b7: 96:b6:71:6e:0a:3d:a2:91:f3:7c:bb:9b:57:1a:80:59:59:7c: 15:ac:bc:76:5b:da:0b:f7:af:5d:6a:b5:68:9c:ff:fd:9e:c8: 06:f9:cc:8f:8d:ab:78:9f:21:d9:d0:5a:26:ea:aa:7b:79:ee: e8:75:c8:7f:b7:c6:ea:c8:fd:08:3e:97:c4:ef:80:78:a7:19: 06:af:28:3d:c4:e0:c8:ac:2b:16:ac:39:67:3c:b0:bf:58:a6: 20:fe:a2:ab:d9:71:35:8c:9c:fb:72:07:61:ea:9c:4e:a6:88: ff:d5:6b:4a:86:6b:ad:65:1c:2f:ab:53:18:1a:c6:c4:38:77: 36:37:7c:3d:3a:67:9f:aa:77:2d:50:89:5c:f1:94:09:e7:1c: d6:21:c9:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDGfFhJL4UlA8GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk ODljZDRiYWEtMmQxMC00YTUxLTg2NDItMjUwMmVjYjY3ZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfZbeAbJjIGXMhIQpuTerrDn0me67ZQ2XEqg 9bQy2l98wGMGx//Rf3noCAYrd49/159hKx0fL3ep3gpl/gcWLZdRukovZuf7frKc pIwT5IYIelTCIUw3clsWPFshbtmXI+ovz0rFRJPMGZYb1IUncdjpnJDIVSfGJ/zB nO/vkNdMFFR1timwhgQZQnOzh7DovcgXBVtlw65/XEwq3pzkm1CBlK8JX1VAZqzb OpacLc9Zfjc56xcw86YVyah4xeiaySUmWvH4T/C8Wgkt02zbxCB6R2cz9gGJBhIm 9mzpkv3Jgbkzx8DGPB2P8eWhkwYtgfSJmA0UlimEeV45E1UTkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDq4HoO3spPt/dxHUxwX0kJgyTVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvODZkMWFhODItY2EzMC0z NjRiLTk5NjQtYzBmZGRiNWIwYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHaKOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBavQOv1C/g7l0gdCFIv3yZWKea2jj0H3rgLerQwDeyJieO6IwuL5gX YCQcI06u08YiW/kuIRd8i7oKzhL0H1ojkP7xeIqhTJXAwe1cnVl2w6AnrL9TiAh8 O8XsWZtYxuPk4VvQvZyBr/hxt5a2cW4KPaKR83y7m1cagFlZfBWsvHZb2gv3r11q tWic//2eyAb5zI+Nq3ifIdnQWibqqnt57uh1yH+3xurI/Qg+l8TvgHinGQavKD3E 4MisKxasOWc8sL9YpiD+oqvZcTWMnPtyB2HqnE6miP/Va0qGa61lHC+rUxgaxsQ4 dzY3fD06Z5+qdy1QiVzxlAnnHNYhycA= -----END CERTIFICATE-----Generated at Thu Aug 13 10:58:49 2026 by rpki-client