$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa File: 2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa (raw, json) Hash identifier: JV72ogapEitwM64EUB3dNMk6zL75Qx3CwkGiwYAb9I4= Subject key identifier: 1F:C5:0D:68:95:61:84:74:78:26:BF:F4:11:87:9E:CE:84:46:14:79 Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F4328584EA78729618A847888630FD2E0 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399244 IP address blocks: 104.204.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:29:61:8a:84:78:88:63:0f:d2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=dff698dd-8171-4b66-82f0-7bcdc2d67c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:d6:a8:70:3b:8c:d4:03:e6:54:62:c7:22: c8:bc:a9:75:e0:c6:61:21:07:aa:3c:ae:a0:0f:4c: 74:a4:24:2d:94:d6:91:75:4a:26:21:41:65:1c:f8: 64:d1:3b:3b:98:f4:d4:c2:9c:0e:af:b1:93:28:ba: ae:8a:2e:c5:1d:ba:7d:80:ce:5d:db:94:df:dc:ff: ac:8c:68:8d:57:b9:4a:f3:14:2c:bf:43:7d:7c:52: f5:2d:54:f8:fb:91:ce:9a:35:15:5d:ef:77:38:c1: 7d:8e:21:de:e3:5f:fa:ee:f5:2f:59:c2:26:76:d8: a7:99:8f:bc:74:99:6c:aa:fe:4f:00:85:35:15:fa: 06:b9:78:c0:7a:53:7c:f0:05:8c:58:16:19:8d:5d: 6a:17:cb:43:75:60:58:7a:5c:42:38:53:1f:30:20: c0:62:0e:52:c9:25:31:4a:85:69:f7:70:7f:dd:e7: 80:3e:10:97:1d:9a:bc:70:09:57:77:f4:ea:5f:bf: cd:ff:47:57:82:32:e4:84:96:fc:ec:36:04:c9:12: 40:b4:1a:cb:08:ce:29:b3:99:89:3e:df:7c:ca:60: 05:1d:c9:4b:57:7f:75:b7:a1:dd:5d:33:58:fb:43: 05:8a:50:95:1a:b3:f9:1f:48:b0:9d:ca:ca:be:1f: d5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C5:0D:68:95:61:84:74:78:26:BF:F4:11:87:9E:CE:84:46:14:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 104.204.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c1:9a:a8:50:53:fc:54:e2:47:97:24:27:57:e3:b0:ce:e8: 92:f4:dd:1a:ea:18:33:89:24:a3:5c:7b:f8:c5:5c:f7:b5:ae: 54:96:fa:cf:5f:2d:44:c7:75:8a:c7:50:c1:9e:19:12:dd:a6: 9f:9d:ff:f6:e7:28:53:eb:94:e0:e7:6f:65:df:37:6e:db:4a: c2:a3:83:bf:0e:72:56:2b:65:58:9a:40:ad:49:02:e0:bb:8b: cd:81:0e:a2:93:60:c8:14:26:4a:24:91:c9:1d:1c:3d:ec:b1: ca:fb:68:48:5c:0b:62:20:30:e8:eb:67:9e:65:94:75:57:96: 22:9b:e1:c3:60:de:60:64:3f:31:e4:01:bc:0e:32:2b:ee:e6: cd:34:5a:b4:9b:42:72:b9:ff:df:3a:b8:5a:93:4e:2e:95:e1: 58:62:36:f6:6a:7f:27:13:8a:d3:9f:2a:d2:44:5d:2b:54:07: b9:8e:f2:76:b6:7c:37:33:51:00:f2:5f:cb:de:d1:86:ff:48: 21:9d:ad:23:30:77:a2:80:25:da:8f:f8:fd:10:a9:6a:e7:22: 44:e2:ff:c7:44:56:92:ae:82:82:a2:34:5f:2b:3a:47:fd:41: 9e:d8:e8:5d:95:f3:57:f1:5e:48:d1:43:31:3d:7b:c7:41:a3: 1f:8e:bf:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhylhioR4iGMP0uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGZmNjk4ZGQtODE3MS00YjY2LTgyZjAtN2JjZGMyZDY3YzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQfWqHA7jNQD5lRixyLIvKl14MZhIQeqPK6g D0x0pCQtlNaRdUomIUFlHPhk0Ts7mPTUwpwOr7GTKLquii7FHbp9gM5d25Tf3P+s jGiNV7lK8xQsv0N9fFL1LVT4+5HOmjUVXe93OMF9jiHe41/67vUvWcImdtinmY+8 dJlsqv5PAIU1FfoGuXjAelN88AWMWBYZjV1qF8tDdWBYelxCOFMfMCDAYg5SySUx SoVp93B/3eeAPhCXHZq8cAlXd/TqX7/N/0dXgjLkhJb87DYEyRJAtBrLCM4ps5mJ Pt98ymAFHclLV391t6HdXTNY+0MFilCVGrP5H0iwncrKvh/VIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/FDWiVYYR0eCa/9BGHns6ERhR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvMmNmYzA3YTctOTc5MC0z YzFmLThmNGEtNTZlZmMzNWFjNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/BmqhQU/xU4keXJCdX47DO6JL03RrqGDOJJKNce/jFXPe1rlSW+s9f LUTHdYrHUMGeGRLdpp+d//bnKFPrlODnb2XfN27bSsKjg78OclYrZViaQK1JAuC7 i82BDqKTYMgUJkokkckdHD3sscr7aEhcC2IgMOjrZ55llHVXliKb4cNg3mBkPzHk AbwOMivu5s00WrSbQnK5/986uFqTTi6V4VhiNvZqfycTitOfKtJEXStUB7mO8na2 fDczUQDyX8ve0Yb/SCGdrSMwd6KAJdqP+P0QqWrnIkTi/8dEVpKugoKiNF8rOkf9 QZ7Y6F2V81fxXkjRQzE9e8dBox+Ov2c= -----END CERTIFICATE-----Generated at Sat Sep 5 05:09:57 2026 by rpki-client