$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4cee8cb-e264-3ac5-aaac-af9e5feb058f.roa File: a4cee8cb-e264-3ac5-aaac-af9e5feb058f.roa (raw, json) Hash identifier: khmirbnhSzyFo78IGGo0AQPb7oFwjf52ky6A8gjJEWE= Subject key identifier: 81:2C:74:5D:39:E5:F4:90:4D:CA:FE:60:76:65:64:3E:BB:33:D0:33 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E4C54B355D44E6C78614AF220 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4cee8cb-e264-3ac5-aaac-af9e5feb058f.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 212238 IP address blocks: 104.250.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:b3:55:d4:4e:6c:78:61:4a:f2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=14c72a18-ca5f-42e5-be1a-1e6301edb854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:01:dd:32:78:0b:2b:37:c1:3e:c0:03:5d:51: d4:7d:29:f9:bf:49:b1:0d:6a:da:64:f6:dd:5a:e3: d8:00:29:8f:a6:e8:51:ff:b6:2e:12:4a:18:0d:20: 4d:90:35:fd:ef:ff:de:16:89:7e:e4:ff:38:30:8b: 77:9e:b3:65:33:5b:59:20:86:43:54:d1:fa:97:90: e8:cf:b6:46:95:37:69:bf:6b:c6:10:fc:01:f9:ce: 74:eb:e0:fe:06:9c:8e:61:53:04:1c:36:b9:a4:9c: c9:74:19:89:17:7f:96:b7:47:26:81:36:6e:7e:97: 60:ab:a1:79:f4:ff:60:93:82:b0:a0:6f:97:6e:6f: 8d:0a:5e:84:d9:72:a6:e8:28:e4:e4:f3:98:57:db: a7:ff:b2:0f:96:61:42:ad:18:f4:9a:5f:8b:ca:e7: c1:3a:e6:a2:d6:30:18:ac:a2:f1:d1:57:69:83:8a: 08:03:44:07:80:43:83:73:ce:e3:39:6f:ee:f7:bc: 7a:7d:ee:d5:5e:3b:37:04:f5:9b:0a:13:cd:c7:af: 76:d7:c8:c9:e3:72:bf:f2:a9:ce:6b:c7:17:9d:61: 0f:e9:ba:e1:e4:b0:93:84:ff:84:5f:9d:da:47:4a: 24:05:c2:c4:33:a3:97:36:5e:77:1c:0c:35:50:1e: a8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2C:74:5D:39:E5:F4:90:4D:CA:FE:60:76:65:64:3E:BB:33:D0:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4cee8cb-e264-3ac5-aaac-af9e5feb058f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:dd:c2:e1:96:0d:fb:77:7f:d6:84:b8:0c:98:75:ff:f9:af: 8e:af:6c:d8:43:0e:7c:f2:38:18:61:56:1b:04:5e:31:3e:9a: f3:eb:8c:8b:a5:a9:b1:74:cf:e2:ea:a9:87:84:2a:7e:28:f5: 48:78:c7:ce:ff:70:ff:c2:63:fe:a1:2f:e2:e9:28:bb:a9:f2: 55:38:14:e4:78:1d:5c:2e:ff:9b:e1:7c:5b:59:d1:c1:f4:05: ce:c2:98:3e:a3:fc:15:d6:8a:57:d4:3f:ad:90:19:d8:3e:69: 06:ca:82:19:84:c9:7d:41:3a:99:23:c2:7d:08:db:4f:7a:a7: 42:13:24:c3:f4:56:63:d9:ab:bb:7c:e9:74:a0:8a:39:ef:ff: db:3d:03:a5:0e:57:08:da:02:b8:3e:34:4e:bd:40:e7:de:e9: 83:5b:b4:b7:93:69:b5:ea:79:c6:e8:dd:be:9e:f3:92:00:49: 0e:3f:6f:1c:07:f9:0f:b5:c7:0b:ad:d7:8a:3a:9e:2b:c4:31: 38:37:46:e3:75:86:c6:4a:42:6b:fa:81:56:ff:d4:8f:dc:d8: a8:a5:48:28:58:92:c9:dc:60:01:4e:43:61:96:4f:e7:c6:76: 5a:1b:d4:76:d5:c4:1e:51:ba:47:50:5b:4d:42:d7:1c:92:16: 2e:d6:eb:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVLNV1E5seGFK8iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk MTRjNzJhMTgtY2E1Zi00MmU1LWJlMWEtMWU2MzAxZWRiODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQHdMngLKzfBPsADXVHUfSn5v0mxDWraZPbd WuPYACmPpuhR/7YuEkoYDSBNkDX97//eFol+5P84MIt3nrNlM1tZIIZDVNH6l5Do z7ZGlTdpv2vGEPwB+c506+D+BpyOYVMEHDa5pJzJdBmJF3+Wt0cmgTZufpdgq6F5 9P9gk4KwoG+Xbm+NCl6E2XKm6Cjk5POYV9un/7IPlmFCrRj0ml+LyufBOuai1jAY rKLx0Vdpg4oIA0QHgEODc87jOW/u97x6fe7VXjs3BPWbChPNx69218jJ43K/8qnO a8cXnWEP6brh5LCThP+EX53aR0okBcLEM6OXNl53HAw1UB6o1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEsdF055fSQTcr+YHZlZD67M9AzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTRjZWU4Y2ItZTI2NC0z YWM1LWFhYWMtYWY5ZTVmZWIwNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfdwuGWDft3f9aEuAyYdf/5r46vbNhDDnzyOBhhVhsEXjE+mvPrjIul qbF0z+LqqYeEKn4o9Uh4x87/cP/CY/6hL+LpKLup8lU4FOR4HVwu/5vhfFtZ0cH0 Bc7CmD6j/BXWilfUP62QGdg+aQbKghmEyX1BOpkjwn0I2096p0ITJMP0VmPZq7t8 6XSgijnv/9s9A6UOVwjaArg+NE69QOfe6YNbtLeTabXqecbo3b6e85IASQ4/bxwH +Q+1xwut14o6nivEMTg3RuN1hsZKQmv6gVb/1I/c2KilSChYksncYAFOQ2GWT+fG dlob1HbVxB5RukdQW01C1xySFi7W67I= -----END CERTIFICATE-----Generated at Tue Jul 21 14:55:43 2026 by rpki-client