$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/a1cff476-7509-34bc-b0b3-5ba1d0d2afed.roa File: a1cff476-7509-34bc-b0b3-5ba1d0d2afed.roa (raw, json) Hash identifier: vK9RW43x14TaPvYyB5DibnCq2TZyVi3cm0R3jI+Bd24= Subject key identifier: 9D:7C:8A:A2:03:34:5B:39:32:44:9A:C0:F0:95:86:F4:EE:6F:1E:8A Certificate issuer: /CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87 Certificate serial: 010D0C9F4328584E9D4A69CFB1435D5D164C0D40 Authority key identifier: 59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/a1cff476-7509-34bc-b0b3-5ba1d0d2afed.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 55280 IP address blocks: 104.250.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:69:cf:b1:43:5d:5d:16:4c:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=ca74d2f6-9367-475d-8397-e2cd7cdcbd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9d:c9:4f:f8:f0:92:b5:41:d0:7a:76:ea:58: 48:f9:23:a9:b9:56:30:87:41:d2:0d:ce:c8:27:1e: 5e:af:93:a6:d4:a1:0c:b7:2f:41:3f:4a:e9:2e:eb: b2:00:a1:a0:78:1a:83:fe:ef:15:8c:2c:4b:43:1f: 86:d7:11:85:a2:10:7c:4a:a5:51:af:88:d7:b9:8b: 83:2e:86:b0:b5:19:93:9f:96:c4:28:e8:55:3c:c2: 09:7b:63:e5:55:4e:40:fa:74:07:24:6f:50:0a:a1: 04:64:e0:e1:01:43:9c:e6:b3:37:67:50:bb:38:f3: fa:a8:c9:0e:30:9a:01:30:b9:4d:bd:ed:74:14:b9: c8:83:f4:89:4e:34:4c:25:cf:7a:ba:fc:67:df:82: 38:47:71:6b:89:51:ce:66:71:84:98:f5:bc:37:ce: 42:59:95:27:f7:0b:3a:aa:22:58:c6:96:28:43:47: 32:63:08:6f:09:8e:2e:2c:82:6c:eb:5c:fc:7e:4c: e1:3d:a3:77:21:60:b2:2a:30:4e:87:05:6e:06:b0: fd:01:7a:ee:f7:b3:16:a1:c6:c7:01:62:ce:e7:aa: d2:d8:ca:0d:9e:6f:12:1d:a6:5c:15:40:18:e1:5d: eb:9a:c7:9d:c3:3d:a2:8a:15:8e:c8:4c:9b:e1:cf: 20:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7C:8A:A2:03:34:5B:39:32:44:9A:C0:F0:95:86:F4:EE:6F:1E:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/a1cff476-7509-34bc-b0b3-5ba1d0d2afed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.crl X509v3 Authority Key Identifier: keyid:59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer sbgp-ipAddrBlock: critical IPv4: 104.250.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:46:76:ad:84:8c:b0:77:3d:f8:7a:c9:19:9a:d7:58:c7:35: 6a:75:ae:a0:b4:ee:2e:44:4a:c6:6b:c5:84:69:ab:23:d2:f6: 5b:d1:1e:9a:2d:61:14:81:90:54:f7:2c:c6:41:00:91:2e:c9: 31:85:a4:8f:33:70:99:9e:ad:a2:96:21:c2:86:39:fb:17:de: ee:96:39:79:ce:d1:20:b8:5b:12:61:c5:c5:ae:42:37:5f:c9: 6b:5e:a1:30:1a:3d:39:d6:a1:9b:e7:02:a8:f4:82:c0:25:8b: 3f:fd:6b:fa:f5:87:3c:80:16:be:72:85:62:d0:c1:e2:ca:d1: ad:ed:bd:85:01:39:17:61:22:1f:fd:70:e2:94:e4:c5:5a:be: 0c:8f:6d:71:e6:74:8f:24:8a:3a:d7:82:ed:bc:fb:ec:f3:e6: cf:24:24:63:29:df:c4:2a:2f:a2:b5:f1:d2:16:3f:b4:bc:8b: 14:89:07:14:78:84:0d:c4:a2:f3:f3:1c:db:6d:5a:37:bf:4d: 95:d6:20:65:a8:1e:03:44:d9:fc:a4:f4:bd:db:d9:7e:30:c3: 6e:06:17:5f:c7:2e:a8:82:17:f9:5c:b9:9d:46:78:0d:6c:87: 1b:06:c7:01:e1:ae:4e:97:ac:2c:90:ba:c9:08:5a:5a:5e:d3: b4:06:57:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSmnPsUNdXRZMDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRlNmQzMWQtMzhmMS00YTlmLTkwYTUtNzhhZDMzZjJm Yzg3MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk Y2E3NGQyZjYtOTM2Ny00NzVkLTgzOTctZTJjZDdjZGNiZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ3JT/jwkrVB0Hp26lhI+SOpuVYwh0HSDc7I Jx5er5Om1KEMty9BP0rpLuuyAKGgeBqD/u8VjCxLQx+G1xGFohB8SqVRr4jXuYuD LoawtRmTn5bEKOhVPMIJe2PlVU5A+nQHJG9QCqEEZODhAUOc5rM3Z1C7OPP6qMkO MJoBMLlNve10FLnIg/SJTjRMJc96uvxn34I4R3FriVHOZnGEmPW8N85CWZUn9ws6 qiJYxpYoQ0cyYwhvCY4uLIJs61z8fkzhPaN3IWCyKjBOhwVuBrD9AXru97MWocbH AWLO56rS2MoNnm8SHaZcFUAY4V3rmsedwz2iihWOyEyb4c8gBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ18iqIDNFs5MkSawPCVhvTubx6KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNGU2 ZDMxZC0zOGYxLTRhOWYtOTBhNS03OGFkMzNmMmZjODcvYTFjZmY0NzYtNzUwOS0z NGJjLWIwYjMtNWJhMWQwZDJhZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTRlNmQzMWQtMzhmMS00YTlmLTkw YTUtNzhhZDMzZjJmYzg3L2U0ZTZkMzFkLTM4ZjEtNGE5Zi05MGE1LTc4YWQzM2Yy ZmM4Ny5jcmwwHwYDVR0jBBgwFoAUWfW09a4gnXfDfny/pflNJLbTeCowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNGU2ZDMxZC0zOGYxLTRhOWYtOTBhNS03OGFk MzNmMmZjODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdGdq2EjLB3Pfh6yRma11jHNWp1rqC07i5ESsZrxYRpqyPS9lvRHpot YRSBkFT3LMZBAJEuyTGFpI8zcJmeraKWIcKGOfsX3u6WOXnO0SC4WxJhxcWuQjdf yWteoTAaPTnWoZvnAqj0gsAliz/9a/r1hzyAFr5yhWLQweLK0a3tvYUBORdhIh/9 cOKU5MVavgyPbXHmdI8kijrXgu28++zz5s8kJGMp38QqL6K18dIWP7S8ixSJBxR4 hA3EovPzHNttWje/TZXWIGWoHgNE2fyk9L3b2X4ww24GF1/HLqiCF/lcuZ1GeA1s hxsGxwHhrk6XrCyQuskIWlpe07QGV0I= -----END CERTIFICATE-----Generated at Mon Jul 27 11:21:04 2026 by rpki-client