$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/b14869c7-afee-3ae0-83b3-19efd564e2f0.roa File: b14869c7-afee-3ae0-83b3-19efd564e2f0.roa (raw, json) Hash identifier: IR4AumY3Zy8Add1ZbNZLDEjWPElp3OOBL5mdvh2tSrc= Subject key identifier: F2:66:10:89:E3:1F:CB:F6:79:F7:96:7E:41:14:E6:98:F0:BA:4A:76 Certificate issuer: /CN=afa70384-20ce-4e0a-b42a-581d05c70079 Certificate serial: 010D0C9F4328584EC63C6EB7B2E7DDCAA0CED180 Authority key identifier: 6A:3F:DF:49:CB:0D:84:9D:16:C2:8B:30:9A:BB:45:B0:1D:83:B3:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/b14869c7-afee-3ae0-83b3-19efd564e2f0.roa Signing time: Sun 09 Aug 2026 01:00:12 +0000 ROA not before: Sun 09 Aug 2026 01:00:12 +0000 ROA not after: Sat 07 Nov 2026 02:00:12 +0000 asID: 3356 IP address blocks: 104.219.104.0/21 maxlen: 21 104.219.104.0/24 maxlen: 24 104.219.105.0/24 maxlen: 24 104.219.106.0/24 maxlen: 24 104.219.107.0/24 maxlen: 24 104.219.108.0/24 maxlen: 24 104.219.109.0/24 maxlen: 24 104.219.110.0/24 maxlen: 24 104.219.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c6:3c:6e:b7:b2:e7:dd:ca:a0:ce:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa70384-20ce-4e0a-b42a-581d05c70079 Validity Not Before: Aug 9 01:00:12 2026 GMT Not After : Nov 7 02:00:12 2026 GMT Subject: CN=c297a71b-e970-495e-a2fe-26edb767f34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2f:28:b4:ae:72:d2:00:9c:e8:1d:5d:ef:87: 76:8e:c1:68:5e:ca:c9:ea:e8:34:7f:05:93:2d:68: 30:46:b8:71:e4:18:4c:ab:98:c0:39:e6:e2:f1:e6: 38:d6:e2:02:45:37:d8:49:4b:5f:c9:d8:41:15:df: bd:ed:3a:40:78:31:ef:41:da:ab:fb:48:4c:19:54: 63:6a:98:3a:83:aa:08:d7:6f:87:9c:d1:5f:50:83: 37:d8:91:96:45:51:41:9d:0b:ea:d8:f5:5a:2a:93: 1b:70:c0:c1:3d:dc:87:4a:a6:62:84:bd:3a:0b:58: c4:8e:77:93:ed:1f:d6:99:bc:59:37:3b:70:bd:19: 0d:e6:0b:74:e1:2b:14:37:15:3f:3e:a3:6a:49:42: b8:5e:c1:ff:6b:af:ff:b9:20:fb:48:8a:1b:41:24: 17:3b:e3:42:88:c9:94:0f:2b:db:96:19:c5:fb:7f: 73:c1:f7:e5:20:08:3e:90:8a:4e:ae:e9:da:86:56: e8:ad:ca:90:17:40:7c:25:9a:11:91:b3:5c:03:0d: 81:43:30:1b:b3:c9:0c:a6:5d:71:43:b1:d9:9e:1d: 7a:40:bf:0a:18:3a:da:43:2b:5d:1f:b1:07:d8:47: e4:52:a4:d2:f6:c0:75:68:e9:7f:15:d2:60:b8:09: 6b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:66:10:89:E3:1F:CB:F6:79:F7:96:7E:41:14:E6:98:F0:BA:4A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/b14869c7-afee-3ae0-83b3-19efd564e2f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.crl X509v3 Authority Key Identifier: keyid:6A:3F:DF:49:CB:0D:84:9D:16:C2:8B:30:9A:BB:45:B0:1D:83:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer sbgp-ipAddrBlock: critical IPv4: 104.219.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:0c:cc:27:bb:a2:2c:df:34:e8:f7:01:e0:07:fc:b0:f1:24: e4:87:49:65:12:d7:0c:90:0e:21:fe:90:bf:d6:42:96:16:5f: 7a:b0:9a:c0:47:15:aa:3d:67:e5:d0:ff:bb:f0:71:8e:82:e0: 35:55:65:b8:a8:ef:b9:a0:ab:da:34:cd:ce:4e:ab:69:d7:88: 16:1b:55:6b:ea:10:29:9b:b5:0b:44:36:b5:a3:02:f1:19:4c: e7:01:7f:f5:9f:5e:5b:32:b3:e6:f0:a7:b5:b5:f3:4c:23:b6: 7b:48:89:d3:42:51:6b:57:79:77:8d:62:3d:77:2e:5a:5e:3e: f7:5b:27:6a:ca:6e:3a:16:46:94:65:cc:55:1b:22:23:c8:cf: 5f:c3:3c:01:e7:24:4d:37:4a:8f:be:4d:57:b0:86:93:b3:eb: d9:0a:df:c4:fb:26:91:db:ea:51:6c:f1:35:3f:a9:80:1c:c0: d8:f7:a2:33:84:55:e1:29:51:ae:21:21:b9:81:9f:db:8b:1a: 6f:3f:a0:2f:2d:15:3f:f1:b9:a9:ab:21:9a:83:4f:6f:87:ba: 3f:95:14:e6:d2:db:53:82:ad:5c:be:ab:0b:67:be:47:c8:e0: 18:93:c6:8d:4e:58:f3:d7:72:9b:21:c7:b8:e2:41:6b:62:ec: 8e:f2:bc:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7GPG63sufdyqDO0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNzAzODQtMjBjZS00ZTBhLWI0MmEtNTgxZDA1Yzcw MDc5MB4XDTI2MDgwOTAxMDAxMloXDTI2MTEwNzAyMDAxMlowLzEtMCsGA1UEAxMk YzI5N2E3MWItZTk3MC00OTVlLWEyZmUtMjZlZGI3NjdmMzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC8otK5y0gCc6B1d74d2jsFoXsrJ6ug0fwWT LWgwRrhx5BhMq5jAOebi8eY41uICRTfYSUtfydhBFd+97TpAeDHvQdqr+0hMGVRj apg6g6oI12+HnNFfUIM32JGWRVFBnQvq2PVaKpMbcMDBPdyHSqZihL06C1jEjneT 7R/WmbxZNztwvRkN5gt04SsUNxU/PqNqSUK4XsH/a6//uSD7SIobQSQXO+NCiMmU DyvblhnF+39zwfflIAg+kIpOrunahlborcqQF0B8JZoRkbNcAw2BQzAbs8kMpl1x Q7HZnh16QL8KGDraQytdH7EH2EfkUqTS9sB1aOl/FdJguAlr0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJmEInjH8v2efeWfkEU5pjwukp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hZmE3 MDM4NC0yMGNlLTRlMGEtYjQyYS01ODFkMDVjNzAwNzkvYjE0ODY5YzctYWZlZS0z YWUwLTgzYjMtMTllZmQ1NjRlMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWZhNzAzODQtMjBjZS00ZTBhLWI0 MmEtNTgxZDA1YzcwMDc5L2FmYTcwMzg0LTIwY2UtNGUwYS1iNDJhLTU4MWQwNWM3 MDA3OS5jcmwwHwYDVR0jBBgwFoAUaj/fScsNhJ0WwoswmrtFsB2Ds34wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hZmE3MDM4NC0yMGNlLTRlMGEtYjQyYS01ODFk MDVjNzAwNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaNtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsMzCe7oizfNOj3AeAH/LDxJOSHSWUS1wyQDiH+kL/WQpYWX3qwmsBH Fao9Z+XQ/7vwcY6C4DVVZbio77mgq9o0zc5Oq2nXiBYbVWvqECmbtQtENrWjAvEZ TOcBf/WfXlsys+bwp7W180wjtntIidNCUWtXeXeNYj13LlpePvdbJ2rKbjoWRpRl zFUbIiPIz1/DPAHnJE03So++TVewhpOz69kK38T7JpHb6lFs8TU/qYAcwNj3ojOE VeEpUa4hIbmBn9uLGm8/oC8tFT/xuamrIZqDT2+Huj+VFObS21OCrVy+qwtnvkfI 4BiTxo1OWPPXcpshx7jiQWti7I7yvLM= -----END CERTIFICATE-----Generated at Sat Sep 5 02:39:33 2026 by rpki-client