$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa File: b040a988-fc2f-3b79-b962-453ddd2ae85a.roa (raw, json) Hash identifier: dflT2ncx/aMLdCyiKOeHsyro9vg6Xt5I1LhGXEFFlSc= Subject key identifier: 51:94:58:FD:22:DF:8F:0A:E5:0A:F2:72:97:89:DB:B9:7A:B9:A6:80 Certificate issuer: /CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Certificate serial: 010D0C9F4328584E4559F3FFF3AD441865D5F900 Authority key identifier: 85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 16676 IP address blocks: 104.243.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:f3:ff:f3:ad:44:18:65:d5:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=03f2b0a8-5e4d-4f07-99f2-4dc1b6b92463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ab:a4:aa:08:77:81:01:92:1e:1d:38:8a:42: 95:67:9d:67:00:6d:cd:45:07:7f:5d:69:a9:83:6a: e0:cc:7c:7b:03:ee:d9:1a:e7:32:20:44:d6:3b:88: 62:f0:16:46:35:f2:54:1a:c9:63:b3:56:4d:26:c2: 26:32:bb:db:ae:13:d3:3c:58:dc:ce:8a:da:ba:ea: 32:6d:c0:44:46:9c:d1:0f:23:92:e0:73:2f:69:0c: c2:23:92:ea:05:64:8b:4c:91:f6:99:65:64:bc:db: b7:f7:52:b9:23:3b:28:cb:98:42:c2:43:fe:58:82: 48:a3:6d:c5:76:ea:85:98:ae:b5:f1:65:c7:1b:5d: a6:83:18:60:51:ae:04:2c:28:8a:49:34:3c:fb:35: e5:82:00:38:b2:b8:1d:5d:34:1d:d8:27:61:ac:18: 09:15:e2:ff:22:f1:f4:47:03:b6:94:43:a1:a3:68: fd:e4:54:c2:d6:61:a2:2d:26:cd:8c:be:49:e0:44: ff:fd:84:84:84:1d:0b:0c:3d:2a:8a:1b:68:61:ee: 85:19:7a:5d:86:2b:ee:47:5c:84:a8:85:74:07:64: 4c:57:69:61:8d:7a:e3:7f:9d:a3:6f:d4:bf:a4:c9: b7:53:35:10:7f:15:02:05:13:36:fc:94:c6:12:ba: e1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:94:58:FD:22:DF:8F:0A:E5:0A:F2:72:97:89:DB:B9:7A:B9:A6:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl X509v3 Authority Key Identifier: keyid:85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer sbgp-ipAddrBlock: critical IPv4: 104.243.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:86:90:c4:e0:85:3b:f6:24:3f:49:d1:87:ab:6f:d1:e9:e8: 88:e9:ea:55:9d:28:a1:47:ba:09:d9:ae:91:57:96:0a:68:d7: d1:f2:29:7c:3e:a6:d4:2e:2f:f3:e1:fb:39:8c:7c:0a:d0:ed: bf:8c:40:95:b6:2e:e8:4b:fd:90:f1:e7:92:e9:d6:4e:71:ab: 30:b7:20:5e:6c:27:78:1a:15:1b:dc:2e:5f:69:9d:a7:47:0e: df:9b:8c:b1:a9:1a:d6:67:31:d6:81:01:82:96:4f:37:8c:9d: 1d:62:6e:95:b3:2e:5b:a6:52:e8:6c:01:93:a7:63:29:61:a3: c3:83:f3:0f:0d:17:19:44:d2:dd:13:ba:a5:f1:05:3f:28:47: 75:00:de:83:d5:62:35:ae:6c:62:0f:aa:3d:80:17:19:f8:53: b4:8f:04:3b:85:2e:c6:6d:f7:df:5f:45:4a:a0:9e:2d:23:11: 49:e5:df:cc:38:f6:10:cd:08:1b:45:8d:ae:9c:ab:c7:c0:4f: 2f:ee:47:f1:2d:54:c9:9a:c9:84:ec:a2:bf:f1:60:25:6b:a4: 39:e2:7f:f6:8f:14:92:a0:7e:c8:de:13:68:ee:64:fa:36:e6: 41:15:56:33:f2:72:c0:15:90:9d:e9:36:07:11:d1:a2:28:9f: ec:a9:58:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWfP/861EGGXV+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU3YjVlNWYtMDY5OS00MjlmLThjODMtYTM5YzlhN2Ew MzIyMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk MDNmMmIwYTgtNWU0ZC00ZjA3LTk5ZjItNGRjMWI2YjkyNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKukqgh3gQGSHh04ikKVZ51nAG3NRQd/XWmp g2rgzHx7A+7ZGucyIETWO4hi8BZGNfJUGsljs1ZNJsImMrvbrhPTPFjczorauuoy bcBERpzRDyOS4HMvaQzCI5LqBWSLTJH2mWVkvNu391K5Izsoy5hCwkP+WIJIo23F duqFmK618WXHG12mgxhgUa4ELCiKSTQ8+zXlggA4srgdXTQd2CdhrBgJFeL/IvH0 RwO2lEOho2j95FTC1mGiLSbNjL5J4ET//YSEhB0LDD0qihtoYe6FGXpdhivuR1yE qIV0B2RMV2lhjXrjf52jb9S/pMm3UzUQfxUCBRM2/JTGErrhLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGUWP0i348K5QrycpeJ27l6uaaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NTdi NWU1Zi0wNjk5LTQyOWYtOGM4My1hMzljOWE3YTAzMjIvYjA0MGE5ODgtZmMyZi0z Yjc5LWI5NjItNDUzZGRkMmFlODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjU3YjVlNWYtMDY5OS00MjlmLThj ODMtYTM5YzlhN2EwMzIyLzY1N2I1ZTVmLTA2OTktNDI5Zi04YzgzLWEzOWM5YTdh MDMyMi5jcmwwHwYDVR0jBBgwFoAUhSb8rQNqMi+Cj148GAC/WbmIDswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NTdiNWU1Zi0wNjk5LTQyOWYtOGM4My1hMzlj OWE3YTAzMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWGkMTghTv2JD9J0Yerb9Hp6Ijp6lWdKKFHugnZrpFXlgpo19HyKXw+ ptQuL/Ph+zmMfArQ7b+MQJW2LuhL/ZDx55Lp1k5xqzC3IF5sJ3gaFRvcLl9pnadH Dt+bjLGpGtZnMdaBAYKWTzeMnR1ibpWzLlumUuhsAZOnYylho8OD8w8NFxlE0t0T uqXxBT8oR3UA3oPVYjWubGIPqj2AFxn4U7SPBDuFLsZt999fRUqgni0jEUnl38w4 9hDNCBtFja6cq8fATy/uR/EtVMmayYTsor/xYCVrpDnif/aPFJKgfsjeE2juZPo2 5kEVVjPycsAVkJ3pNgcR0aIon+ypWCo= -----END CERTIFICATE-----Generated at Wed Jun 24 22:37:55 2026 by rpki-client