$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa File: a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa (raw, json) Hash identifier: 7zxLaxLfKfoEToJNRmPuY/g3afmyzQEpvuDD5C2pfIM= Subject key identifier: D4:A6:D4:55:2E:1D:16:9E:5A:63:B9:71:41:83:43:30:AB:A9:AB:96 Certificate issuer: /CN=0215b589-0229-401c-98ef-53194fd5e2a5 Certificate serial: 010D0C9F4328584E2D9F28E43F11DD3FDB9D52C0 Authority key identifier: 7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 46455 IP address blocks: 104.255.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:28:e4:3f:11:dd:3f:db:9d:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0215b589-0229-401c-98ef-53194fd5e2a5 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=1d25bbf0-4cfd-42aa-a6ee-367a8a7da251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4f:91:02:e1:13:27:e7:72:5f:ad:f9:ef:1e: b8:26:87:bf:0f:de:0b:bb:ee:35:31:dc:25:c3:d4: 3f:51:46:7f:68:e4:d5:ef:a1:0c:c3:8a:fa:e4:3d: a4:1e:b8:f8:69:bf:a8:03:0f:6a:b5:46:11:24:b8: 8a:16:09:b8:13:d4:5d:82:9b:a5:e8:ff:39:e7:e4: cb:64:d6:d1:01:68:c8:85:27:25:47:f1:f4:2e:06: 47:bb:9b:69:31:ed:50:21:f0:8d:b2:0a:63:3c:11: 85:dd:c0:4d:bb:7e:02:c3:c3:d3:54:69:53:60:6f: 2f:7c:b9:e6:ea:f2:5e:15:af:1d:47:f9:c9:02:c3: ee:25:cf:32:7b:aa:75:6f:7b:b1:20:51:a0:01:63: 55:13:2f:13:38:54:82:e0:0d:26:28:d5:62:31:fe: 73:f3:eb:0d:41:db:0e:c8:63:c9:e8:6c:93:4e:8d: bf:dd:4e:c7:37:25:ee:e3:03:75:e3:94:7b:57:45: 9e:70:0b:2a:59:a3:e2:98:89:1f:fb:f1:66:1c:b5: 31:b0:01:4a:e3:ab:9f:0a:fd:06:a4:2a:1f:ea:fc: 22:57:56:22:5e:18:6d:f4:6b:bf:9d:3e:b4:9c:b1: c9:2b:4a:a6:ce:44:82:78:94:c3:fe:ba:92:20:8e: a6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A6:D4:55:2E:1D:16:9E:5A:63:B9:71:41:83:43:30:AB:A9:AB:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl X509v3 Authority Key Identifier: keyid:7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer sbgp-ipAddrBlock: critical IPv4: 104.255.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:bb:56:b1:53:20:35:cc:69:d8:17:db:0d:c0:91:1c:45:2c: 02:c2:c1:e3:17:55:fd:f3:76:ba:e4:1b:d6:ad:51:9f:2a:d2: 7b:ce:2b:27:fa:b5:d5:b9:97:ae:48:96:e8:19:d5:16:c8:8e: 65:3e:56:55:67:d4:68:16:8c:9a:d5:ab:1f:b0:18:bd:3b:6a: 82:0b:86:cc:80:70:82:ab:b0:b7:31:4c:56:7e:1b:83:f2:ec: 8d:97:32:d9:28:8b:60:ad:fa:bf:ef:6b:1e:7c:a7:86:2b:94: 52:f4:09:65:b2:ba:0f:92:0c:3d:0e:72:e9:2f:8a:86:a5:92: c7:a4:a7:a4:e9:e9:d1:f3:f9:e3:1c:7f:7e:f1:da:6e:3b:ed: 18:2c:46:c4:09:69:eb:e5:68:61:d3:9b:09:ba:61:ed:aa:fa: a0:af:11:36:fc:ce:46:bd:d0:00:02:4d:0a:88:07:b2:a1:7c: 9b:9b:09:11:64:2d:31:ae:39:bb:56:f3:dd:18:a9:ef:3a:50: 33:10:5d:56:51:d4:53:56:c5:a1:21:70:be:8a:55:40:bc:18: f5:10:4a:bd:65:94:8c:5a:7a:83:53:a7:b2:41:27:da:c5:38: 8f:7a:fe:90:34:89:d9:08:ce:2f:ec:5b:1e:6b:e3:4d:e7:b6: b5:13:83:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnyjkPxHdP9udUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDIxNWI1ODktMDIyOS00MDFjLTk4ZWYtNTMxOTRmZDVl MmE1MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk MWQyNWJiZjAtNGNmZC00MmFhLWE2ZWUtMzY3YThhN2RhMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0+RAuETJ+dyX6357x64Joe/D94Lu+41Mdwl w9Q/UUZ/aOTV76EMw4r65D2kHrj4ab+oAw9qtUYRJLiKFgm4E9Rdgpul6P855+TL ZNbRAWjIhSclR/H0LgZHu5tpMe1QIfCNsgpjPBGF3cBNu34Cw8PTVGlTYG8vfLnm 6vJeFa8dR/nJAsPuJc8ye6p1b3uxIFGgAWNVEy8TOFSC4A0mKNViMf5z8+sNQdsO yGPJ6GyTTo2/3U7HNyXu4wN145R7V0WecAsqWaPimIkf+/FmHLUxsAFK46ufCv0G pCof6vwiV1YiXhht9Gu/nT60nLHJK0qmzkSCeJTD/rqSII6mfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSm1FUuHRaeWmO5cUGDQzCrqauWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wMjE1 YjU4OS0wMjI5LTQwMWMtOThlZi01MzE5NGZkNWUyYTUvYTg5NmE5ZjMtYWZkMi0z OGZiLTllMTAtMmU3MzhlYTcxYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDIxNWI1ODktMDIyOS00MDFjLTk4 ZWYtNTMxOTRmZDVlMmE1LzAyMTViNTg5LTAyMjktNDAxYy05OGVmLTUzMTk0ZmQ1 ZTJhNS5jcmwwHwYDVR0jBBgwFoAUe8gz7ChQSd7f4d559jko4CRIuAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wMjE1YjU4OS0wMjI5LTQwMWMtOThlZi01MzE5 NGZkNWUyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC7VrFTIDXMadgX2w3AkRxFLALCweMXVf3zdrrkG9atUZ8q0nvOKyf6 tdW5l65IlugZ1RbIjmU+VlVn1GgWjJrVqx+wGL07aoILhsyAcIKrsLcxTFZ+G4Py 7I2XMtkoi2Ct+r/vax58p4YrlFL0CWWyug+SDD0Ocukvioalksekp6Tp6dHz+eMc f37x2m477RgsRsQJaevlaGHTmwm6Ye2q+qCvETb8zka90AACTQqIB7KhfJubCRFk LTGuObtW890Yqe86UDMQXVZR1FNWxaEhcL6KVUC8GPUQSr1llIxaeoNTp7JBJ9rF OI96/pA0idkIzi/sWx5r403ntrUTg48= -----END CERTIFICATE-----Generated at Thu Jul 16 20:54:26 2026 by rpki-client