$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/8c75af8d-2c5d-3a8a-b197-e9553a1c22dd.roa File: 8c75af8d-2c5d-3a8a-b197-e9553a1c22dd.roa (raw, json) Hash identifier: pKJLTYl+WHYqSqZNLcOzx6fyFoUIdVovUWkmFe9fJyI= Subject key identifier: 20:A7:28:49:58:D3:DE:A0:A3:1E:40:3A:F5:9D:39:92:D3:9C:7F:E8 Certificate issuer: /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Certificate serial: 010D0C9F4328584E84B534BC9BB00E34B43B5F10 Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/8c75af8d-2c5d-3a8a-b197-e9553a1c22dd.roa Signing time: Thu 16 Jul 2026 13:40:19 +0000 ROA not before: Thu 16 Jul 2026 13:40:19 +0000 ROA not after: Wed 14 Oct 2026 13:40:19 +0000 asID: 7352 IP address blocks: 104.166.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:b5:34:bc:9b:b0:0e:34:b4:3b:5f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Validity Not Before: Jul 16 13:40:19 2026 GMT Not After : Oct 14 13:40:19 2026 GMT Subject: CN=ce62ddd3-2414-44e8-950b-7ee9c8ad4d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:29:21:a7:e0:19:c6:4a:b6:a6:03:62:31: 04:cc:bd:6f:71:0e:b2:03:c7:36:7e:76:18:f1:d9: 4a:49:e0:ff:0e:26:5c:32:e4:61:23:41:37:b7:76: 33:c6:41:2f:37:b2:90:d9:48:5b:1f:38:0b:9f:66: 40:2c:6e:70:70:b6:28:20:07:c4:e1:4a:85:12:c4: 82:47:d3:41:8b:b1:b1:11:b0:76:cd:bd:ba:98:5b: 11:66:45:dc:81:f8:fc:3c:05:ed:0d:e2:6a:e4:64: 41:df:9b:70:36:be:04:a8:ff:3a:2b:81:89:56:4c: cc:39:1e:61:4a:56:5c:2e:f1:5e:11:b8:ef:1b:fb: 66:0a:20:8c:7b:99:fd:a7:ec:df:90:91:4f:a6:08: 50:32:77:75:09:14:6f:ce:61:b2:d0:6b:9b:c9:79: 54:4d:31:80:d3:62:15:99:4c:2e:6b:ee:89:cf:0a: 96:ef:d8:3a:b5:b8:42:5b:1b:4c:4d:c3:08:b6:f9: 78:39:eb:eb:85:02:b1:9e:0b:0d:f9:5e:93:68:8b: 1e:1f:a5:a8:3a:38:1a:db:5d:5e:6f:29:8e:d8:cb: f9:f1:73:05:93:50:39:5f:11:3e:c1:8b:f8:8f:27: 1b:e5:91:13:2f:27:aa:0d:1e:55:15:30:38:97:68: c8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A7:28:49:58:D3:DE:A0:A3:1E:40:3A:F5:9D:39:92:D3:9C:7F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/8c75af8d-2c5d-3a8a-b197-e9553a1c22dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl X509v3 Authority Key Identifier: keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer sbgp-ipAddrBlock: critical IPv4: 104.166.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:5d:44:32:72:11:1b:3a:b2:76:e9:26:ec:1a:2c:a3:ed:19: 7a:45:06:72:c3:d2:c5:3a:2a:8e:42:e5:c9:c9:f9:91:fc:8a: 99:a9:7b:e4:04:90:7c:c3:c5:bc:db:67:98:d8:b2:c8:e8:7c: c7:d6:e9:30:8b:3f:97:83:18:8a:a6:f0:72:7e:a8:13:e3:5d: 54:06:30:19:52:a4:93:7c:da:c7:11:06:16:bf:4c:40:9d:b2: e1:39:72:be:d7:69:78:f6:93:45:44:f0:33:0a:ae:bb:dc:41: 9a:eb:b2:0e:51:73:78:cf:d3:ac:e9:57:c2:99:61:f4:eb:e8: c2:1e:72:f7:1d:df:3e:a4:72:dc:83:31:5c:55:84:5c:c9:27: 57:f9:02:2e:83:38:29:01:40:d6:30:7b:9e:14:a6:12:e0:d8: 3d:e3:1c:5f:e4:a5:a2:d9:09:d4:0d:1e:e3:2c:49:ad:2a:9e: c8:6f:f2:a8:3a:d7:3e:51:5c:d5:d3:2b:72:9a:39:52:d3:17: 55:89:c2:94:0b:4f:9b:af:ec:65:ac:19:77:07:d9:ab:4f:cc: c7:8f:33:7d:80:f3:73:4d:e5:95:a8:39:d1:9d:23:5a:2b:92: fe:12:9e:a0:75:73:5d:71:3f:13:c8:b0:ed:8b:b4:98:9e:6f: f9:92:f8:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EtTS8m7AONLQ7XxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUyM2Y4MmItZGZkNS00MzI4LTgyNTYtOGQ3YWJiODg2 YjIwMB4XDTI2MDcxNjEzNDAxOVoXDTI2MTAxNDEzNDAxOVowLzEtMCsGA1UEAxMk Y2U2MmRkZDMtMjQxNC00NGU4LTk1MGItN2VlOWM4YWQ0ZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJopIafgGcZKtqYDYjEEzL1vcQ6yA8c2fnYY 8dlKSeD/DiZcMuRhI0E3t3YzxkEvN7KQ2UhbHzgLn2ZALG5wcLYoIAfE4UqFEsSC R9NBi7GxEbB2zb26mFsRZkXcgfj8PAXtDeJq5GRB35twNr4EqP86K4GJVkzMOR5h SlZcLvFeEbjvG/tmCiCMe5n9p+zfkJFPpghQMnd1CRRvzmGy0GubyXlUTTGA02IV mUwua+6JzwqW79g6tbhCWxtMTcMItvl4OevrhQKxngsN+V6TaIseH6WoOjga211e bymO2Mv58XMFk1A5XxE+wYv4jycb5ZETLyeqDR5VFTA4l2jI2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCnKElY096gox5AOvWdOZLTnH/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZTIz ZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdhYmI4ODZiMjAvOGM3NWFmOGQtMmM1ZC0z YThhLWIxOTctZTk1NTNhMWMyMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmUyM2Y4MmItZGZkNS00MzI4LTgy NTYtOGQ3YWJiODg2YjIwLzJlMjNmODJiLWRmZDUtNDMyOC04MjU2LThkN2FiYjg4 NmIyMC5jcmwwHwYDVR0jBBgwFoAUUvNQHn5BkIQkCln5w3tQA2NaaykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZTIzZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdh YmI4ODZiMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKYMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZdRDJyERs6snbpJuwaLKPtGXpFBnLD0sU6Ko5C5cnJ+ZH8ipmpe+QE kHzDxbzbZ5jYssjofMfW6TCLP5eDGIqm8HJ+qBPjXVQGMBlSpJN82scRBha/TECd suE5cr7XaXj2k0VE8DMKrrvcQZrrsg5Rc3jP06zpV8KZYfTr6MIecvcd3z6kctyD MVxVhFzJJ1f5Ai6DOCkBQNYwe54UphLg2D3jHF/kpaLZCdQNHuMsSa0qnshv8qg6 1z5RXNXTK3KaOVLTF1WJwpQLT5uv7GWsGXcH2atPzMePM32A83NN5ZWoOdGdI1or kv4SnqB1c11xPxPIsO2LtJieb/mS+CQ= -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:33 2026 by rpki-client