$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa File: 2ca1fafd-5784-383a-86a2-45ab028896d0.roa (raw, json) Hash identifier: lmA8HyVWqsm9jRbdJnPDzzvIifNfdhTQfL4KJ1DtMQU= Subject key identifier: E0:69:51:DF:4E:ED:1B:27:7A:94:E1:02:F0:E0:A0:0F:88:F1:F1:32 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584EA79B5F098911AF1FDBD8E980 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 931 IP address blocks: 104.224.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:5f:09:89:11:af:1f:db:d8:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4fa3e40e-3b67-4ae6-ad8b-86b8d1070b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:82:51:80:d9:5f:83:d0:b4:1a:d4:b4:94: 69:71:50:2c:7b:3d:d7:73:39:27:1a:ec:60:97:ba: 9d:a6:98:cd:08:ed:25:09:31:60:62:59:be:e4:27: 81:02:1f:4c:e9:cb:77:55:ac:ac:f9:a9:2f:e7:e2: db:e7:5e:b7:02:fe:4d:ad:00:6a:00:68:4f:0e:13: bc:f4:13:a0:9c:c5:15:ca:55:57:b4:49:0c:dc:66: f1:28:e8:fa:75:9f:63:b0:58:60:74:2a:91:c9:35: 67:ac:53:f8:b4:76:6b:98:3d:a3:3b:c4:84:4e:52: 8d:cb:e4:4f:a6:01:96:f0:07:46:9b:c2:ca:40:d5: 57:30:87:a1:55:03:af:1d:3a:9d:a6:26:39:5e:4a: 1f:43:91:ec:8c:a4:73:fc:0a:1a:b3:ed:f3:e5:c8: fe:7d:3a:2d:a9:ca:60:49:2f:dc:96:e0:70:1c:18: bc:bc:7c:93:be:70:a7:d1:37:a9:f6:61:b3:c5:1f: 97:ef:b3:2f:76:56:00:41:c5:d8:9f:43:3a:ca:4e: 33:81:8c:21:17:3c:29:71:27:6d:0d:a8:6f:58:8a: be:0f:ff:4a:77:23:b6:af:b3:17:02:26:a9:b6:4f: 1d:8e:db:6c:1d:c5:52:77:2e:14:9f:d3:eb:b3:26: d2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:69:51:DF:4E:ED:1B:27:7A:94:E1:02:F0:E0:A0:0F:88:F1:F1:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:7a:75:c3:ae:e1:df:f8:77:77:e8:26:af:3e:4e:b6:09:b9: 58:46:03:9a:40:12:58:37:42:0e:98:a7:9d:85:a4:6f:d9:be: 00:77:2e:6c:2d:77:df:2a:68:d1:7d:9f:32:e2:76:ba:ed:e3: fd:9d:6b:db:09:de:5f:92:aa:d1:3f:03:4f:b3:e1:37:d1:cc: ea:e9:14:9e:32:a8:da:c2:de:6d:9d:de:77:53:a0:76:b6:74: 4c:0e:84:ad:3e:e0:31:1e:a6:29:9b:20:77:33:80:04:fb:da: 90:64:3b:05:e3:24:5d:4f:84:d0:a4:97:45:46:ff:1b:4f:c3: b8:eb:0b:1b:7b:38:3f:56:90:15:ba:fb:3e:ee:43:98:e2:da: bb:fb:ca:97:b7:28:b6:97:25:51:c7:fb:55:f2:8c:99:5e:31: 7c:93:f2:4d:ec:33:e4:4d:ee:ac:38:f4:74:c0:68:5b:78:8d: c2:c4:3f:d3:21:b5:9a:ba:52:7d:bb:e2:46:b3:0b:6a:93:e3: f1:e3:27:5f:09:39:88:a9:95:7e:9c:2b:70:ca:f2:f0:a3:e6: 00:df:6b:e0:15:9d:05:e3:0b:9a:e6:53:fa:7f:81:7b:3a:e1: d2:1f:f4:49:a9:14:ba:14:0b:5f:04:85:6e:be:d6:01:aa:91: 3d:48:b9:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm18JiRGvH9vY6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGZhM2U0MGUtM2I2Ny00YWU2LWFkOGItODZiOGQxMDcwYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw06CUYDZX4PQtBrUtJRpcVAsez3XczknGuxg l7qdppjNCO0lCTFgYlm+5CeBAh9M6ct3Vays+akv5+Lb5163Av5NrQBqAGhPDhO8 9BOgnMUVylVXtEkM3GbxKOj6dZ9jsFhgdCqRyTVnrFP4tHZrmD2jO8SETlKNy+RP pgGW8AdGm8LKQNVXMIehVQOvHTqdpiY5XkofQ5HsjKRz/Aoas+3z5cj+fTotqcpg SS/cluBwHBi8vHyTvnCn0Tep9mGzxR+X77MvdlYAQcXYn0M6yk4zgYwhFzwpcSdt DahvWIq+D/9KdyO2r7MXAiaptk8djttsHcVSdy4Un9PrsybSZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBpUd9O7RsnepThAvDgoA+I8fEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMmNhMWZhZmQtNTc4NC0z ODNhLTg2YTItNDVhYjAyODg5NmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR6dcOu4d/4d3foJq8+TrYJuVhGA5pAElg3Qg6Yp52FpG/ZvgB3Lmwt d98qaNF9nzLidrrt4/2da9sJ3l+SqtE/A0+z4TfRzOrpFJ4yqNrC3m2d3ndToHa2 dEwOhK0+4DEepimbIHczgAT72pBkOwXjJF1PhNCkl0VG/xtPw7jrCxt7OD9WkBW6 +z7uQ5ji2rv7ype3KLaXJVHH+1XyjJleMXyT8k3sM+RN7qw49HTAaFt4jcLEP9Mh tZq6Un274kazC2qT4/HjJ18JOYiplX6cK3DK8vCj5gDfa+AVnQXjC5rmU/p/gXs6 4dIf9EmpFLoUC18EhW6+1gGqkT1IubM= -----END CERTIFICATE-----Generated at Tue Aug 11 06:54:30 2026 by rpki-client