$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/95594a93-aada-3b86-809d-b02922f2e009.roa File: 95594a93-aada-3b86-809d-b02922f2e009.roa (raw, json) Hash identifier: hwyEIiePfpEQlc68D4V5n8JoM5PxvSprGmbuRJRqdfs= Subject key identifier: 8F:A7:1B:B6:13:48:BC:03:FB:A3:6B:29:DA:18:36:A5:23:98:87:67 Certificate issuer: /CN=265b0641-047d-4787-a12d-159370bfcdb1 Certificate serial: 010D0C9F4328584E0005DDC4432AC7C7B46A8D80 Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/95594a93-aada-3b86-809d-b02922f2e009.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 20473 IP address blocks: 104.171.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:dd:c4:43:2a:c7:c7:b4:6a:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=963e712d-7da9-42a0-9a8b-69dff8d4a3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5a:99:b6:4a:06:ca:12:32:dc:e2:b0:7d:38: 05:2d:95:cc:9d:e7:7c:1f:a8:26:5d:80:d3:3a:d6: 32:01:a7:fb:78:c8:1b:6d:4b:ec:40:3f:7f:ac:23: 2d:a4:d2:58:8c:fa:59:d8:cb:c5:34:63:b4:5f:bf: fb:2b:ca:c1:f5:ab:75:bd:24:1a:f5:c2:7d:df:c8: 11:02:e8:fd:ef:a1:7c:34:e2:14:53:c9:e1:fe:ab: 95:2d:12:6c:94:0c:0b:d9:97:07:46:ad:d9:82:61: 63:be:35:66:a7:00:54:58:d4:56:bf:d6:59:36:8c: dd:10:21:02:8e:65:6b:b1:46:e9:84:4f:5a:da:b5: 48:d0:5e:2d:c2:fc:03:22:e8:c4:2a:ce:d7:1f:01: 16:5a:6c:75:57:1a:47:25:33:a3:df:01:90:67:50: d8:07:65:4c:a3:bd:b7:9f:9d:1b:2f:73:c2:ea:9b: 94:fc:43:54:5d:5e:99:c5:c1:c5:d5:9d:bc:93:05: b1:00:21:71:e9:62:5d:59:2d:19:38:9c:5b:76:d1: 13:cd:ca:e5:30:13:93:57:b9:14:30:27:a8:45:e6: 05:bf:f9:ef:f5:38:14:6f:38:02:5d:fd:e1:52:3f: a2:fb:9a:3d:20:64:3e:50:fd:16:e0:88:93:a4:d8: c4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A7:1B:B6:13:48:BC:03:FB:A3:6B:29:DA:18:36:A5:23:98:87:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/95594a93-aada-3b86-809d-b02922f2e009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl X509v3 Authority Key Identifier: keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer sbgp-ipAddrBlock: critical IPv4: 104.171.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:02:aa:46:92:42:49:da:ec:78:fe:6b:03:df:06:2b:ad:6a: fc:d0:71:01:13:2c:e6:d5:04:6a:ed:27:dc:39:8b:e6:86:bb: 63:0f:3d:5b:2a:c4:cb:b0:64:0f:5a:c4:5a:13:7a:0d:1c:60: b8:39:94:2f:d5:e4:04:7d:c1:7c:75:a8:0b:9d:83:b5:2a:40: 05:b7:52:e1:01:2f:c3:32:62:66:e3:ed:ae:28:6f:61:6a:94: 97:83:3f:bd:54:0f:87:5d:03:f4:ab:f1:e0:25:09:0a:f7:20: ed:6a:85:01:9f:73:bc:77:31:ee:da:6f:35:36:b1:96:f0:66: 8a:e9:ea:35:98:f8:17:79:56:e3:ca:57:b1:7e:26:da:a2:e7: 6e:63:5f:aa:9e:e7:29:a6:2a:c2:6f:b9:2f:a8:e2:43:4d:77: f2:bd:2a:e8:ff:be:47:1d:40:d2:78:5c:bc:d4:22:95:b8:e3: f3:af:fb:6c:85:90:ec:4f:bc:28:85:df:67:d1:6e:20:d0:26: 7f:c0:56:68:e6:55:5f:5a:76:d0:c4:12:29:ae:15:b7:b4:f6: 5f:33:af:c0:02:79:85:66:2c:f8:df:7d:62:32:54:d1:f3:c7: f6:9b:52:dd:3b:cb:19:89:2b:47:dd:b5:93:7b:a5:da:b2:9c: b3:69:be:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABd3EQyrHx7RqjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY1YjA2NDEtMDQ3ZC00Nzg3LWExMmQtMTU5MzcwYmZj ZGIxMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk OTYzZTcxMmQtN2RhOS00MmEwLTlhOGItNjlkZmY4ZDRhM2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklqZtkoGyhIy3OKwfTgFLZXMned8H6gmXYDT OtYyAaf7eMgbbUvsQD9/rCMtpNJYjPpZ2MvFNGO0X7/7K8rB9at1vSQa9cJ938gR Auj976F8NOIUU8nh/quVLRJslAwL2ZcHRq3ZgmFjvjVmpwBUWNRWv9ZZNozdECEC jmVrsUbphE9a2rVI0F4twvwDIujEKs7XHwEWWmx1VxpHJTOj3wGQZ1DYB2VMo723 n50bL3PC6puU/ENUXV6ZxcHF1Z28kwWxACFx6WJdWS0ZOJxbdtETzcrlMBOTV7kU MCeoReYFv/nv9TgUbzgCXf3hUj+i+5o9IGQ+UP0W4IiTpNjEiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+nG7YTSLwD+6NrKdoYNqUjmIdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNjVi MDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkzNzBiZmNkYjEvOTU1OTRhOTMtYWFkYS0z Yjg2LTgwOWQtYjAyOTIyZjJlMDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjY1YjA2NDEtMDQ3ZC00Nzg3LWEx MmQtMTU5MzcwYmZjZGIxLzI2NWIwNjQxLTA0N2QtNDc4Ny1hMTJkLTE1OTM3MGJm Y2RiMS5jcmwwHwYDVR0jBBgwFoAUJmxHOadzqCMYoLfPmvtjcpFUCyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNjViMDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkz NzBiZmNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEECqkaSQkna7Hj+awPfBiutavzQcQETLObVBGrtJ9w5i+aGu2MPPVsq xMuwZA9axFoTeg0cYLg5lC/V5AR9wXx1qAudg7UqQAW3UuEBL8MyYmbj7a4ob2Fq lJeDP71UD4ddA/Sr8eAlCQr3IO1qhQGfc7x3Me7abzU2sZbwZorp6jWY+Bd5VuPK V7F+Jtqi525jX6qe5ymmKsJvuS+o4kNNd/K9Kuj/vkcdQNJ4XLzUIpW44/Ov+2yF kOxPvCiF32fRbiDQJn/AVmjmVV9adtDEEimuFbe09l8zr8ACeYVmLPjffWIyVNHz x/abUt07yxmJK0fdtZN7pdqynLNpvlE= -----END CERTIFICATE-----Generated at Sat Jun 6 08:32:16 2026 by rpki-client