$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/bc9d9c23-b44e-3c4b-b81f-6c7d18ed6d9f.roa File: bc9d9c23-b44e-3c4b-b81f-6c7d18ed6d9f.roa (raw, json) Hash identifier: UpTgZALlyHxrwY25nCjrmouUnaZYuDl4cXIwW89qwxo= Subject key identifier: 92:04:EE:B7:AE:A9:1B:44:C8:92:1A:1B:E6:88:09:A1:F5:12:45:F8 Certificate issuer: /CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e Certificate serial: 010D0C9F4328584EA78794B5F01917FF8BE95A20 Authority key identifier: 1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/bc9d9c23-b44e-3c4b-b81f-6c7d18ed6d9f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 26077 IP address blocks: 104.255.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:94:b5:f0:19:17:ff:8b:e9:5a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8a7b2945-1bf9-4419-812d-e8297016895d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:62:aa:44:10:31:a0:68:fc:f7:58:cd:be: d3:82:23:22:93:5d:a3:e8:f9:fd:65:57:f3:0c:d6: 24:37:4d:a4:6f:c5:1c:f2:bc:43:e8:95:fd:6b:01: a9:57:ab:c1:86:4b:0e:54:17:03:d9:62:4b:37:fd: d3:08:85:5a:30:f9:54:46:94:d3:7a:9a:11:b4:13: d7:9f:79:aa:aa:67:25:0e:00:07:f4:ec:f2:ca:87: 1d:ab:ae:a1:a3:9b:29:b0:9f:be:fb:c9:69:59:17: be:f3:e1:4d:fe:7d:03:a5:f0:ca:ff:98:3b:39:1f: 2d:88:69:8d:e8:54:97:62:81:cf:da:48:d2:63:92: 4e:8d:b6:22:c0:be:59:ea:a6:73:6a:b9:09:5a:ce: 00:3e:63:fe:a9:b4:12:cb:1a:72:34:40:e4:35:29: 35:29:50:62:89:9d:8c:43:f6:dd:c0:00:c9:80:96: 6c:5a:a2:7a:ae:4c:b2:d3:2a:5c:ea:16:87:58:d3: e9:04:7e:14:70:1d:a7:c0:07:d8:d6:5b:42:a4:df: ca:b7:11:c7:9e:e7:86:b4:33:c4:bc:d3:b7:c6:6c: d9:f9:f9:8e:4d:e4:a4:c3:09:7d:e6:77:7a:06:6e: 66:d7:9e:8b:48:fa:a5:51:2e:58:9a:53:61:dc:0e: 73:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:04:EE:B7:AE:A9:1B:44:C8:92:1A:1B:E6:88:09:A1:F5:12:45:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/bc9d9c23-b44e-3c4b-b81f-6c7d18ed6d9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl X509v3 Authority Key Identifier: keyid:1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer sbgp-ipAddrBlock: critical IPv4: 104.255.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0e:0c:6c:41:f2:69:7a:2c:7e:6f:c1:ce:2c:dc:4f:77:fb: 9d:d6:3e:51:c7:c6:e4:e3:4a:9d:ec:ea:1e:39:00:49:d7:41: 03:2c:38:b1:42:4b:cc:e8:7b:a5:12:9d:9c:e5:82:84:dd:7b: 47:81:7a:8e:26:a3:43:c9:fc:b0:f6:a5:e6:e4:3e:7f:cb:d2: ec:fe:26:37:64:c0:fd:ef:38:ee:88:a9:1b:07:eb:68:33:b4: d6:46:e6:98:89:5e:b6:26:2c:ca:d1:71:e0:67:65:24:d1:3b: 20:9e:0c:be:ca:09:c3:59:1b:b2:d2:23:bf:e9:77:90:b4:33: d1:52:d8:2c:76:da:50:ce:57:cb:35:dc:ca:82:d6:52:05:24: b4:f9:9b:1a:73:52:0e:63:bb:f4:62:cd:76:9c:56:12:81:5e: 43:51:e3:e2:5a:99:d4:9e:0d:3f:58:a5:ab:55:11:5b:9f:28: 6b:3f:1e:9a:91:c5:66:ab:3f:51:75:17:50:75:1d:65:af:f9: ae:a7:62:c7:31:e3:d6:79:64:5a:af:9a:df:81:57:21:9a:ea: 07:42:19:58:79:fa:d5:cf:9f:16:87:de:aa:66:2d:0d:c8:c0: d1:d2:ab:e6:6f:35:32:2c:4c:6a:a0:84:23:c7:b7:f6:35:fd: d7:8e:94:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh5S18BkX/4vpWiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk4ZDQ2ZmQtM2IxYy00NmE3LWIzNjktMzViNzUzZTZj NjBlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGE3YjI5NDUtMWJmOS00NDE5LTgxMmQtZTgyOTcwMTY4OTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfliqkQQMaBo/PdYzb7TgiMik12j6Pn9ZVfz DNYkN02kb8Uc8rxD6JX9awGpV6vBhksOVBcD2WJLN/3TCIVaMPlURpTTepoRtBPX n3mqqmclDgAH9Ozyyocdq66ho5spsJ+++8lpWRe+8+FN/n0DpfDK/5g7OR8tiGmN 6FSXYoHP2kjSY5JOjbYiwL5Z6qZzarkJWs4APmP+qbQSyxpyNEDkNSk1KVBiiZ2M Q/bdwADJgJZsWqJ6rkyy0ypc6haHWNPpBH4UcB2nwAfY1ltCpN/KtxHHnueGtDPE vNO3xmzZ+fmOTeSkwwl95nd6Bm5m156LSPqlUS5YmlNh3A5zuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIE7reuqRtEyJIaG+aICaH1EkX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jOThk NDZmZC0zYjFjLTQ2YTctYjM2OS0zNWI3NTNlNmM2MGUvYmM5ZDljMjMtYjQ0ZS0z YzRiLWI4MWYtNmM3ZDE4ZWQ2ZDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzk4ZDQ2ZmQtM2IxYy00NmE3LWIz NjktMzViNzUzZTZjNjBlL2M5OGQ0NmZkLTNiMWMtNDZhNy1iMzY5LTM1Yjc1M2U2 YzYwZS5jcmwwHwYDVR0jBBgwFoAUGjV+Z895QlcO2thDy7EV6h3WAw4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jOThkNDZmZC0zYjFjLTQ2YTctYjM2OS0zNWI3 NTNlNmM2MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMODGxB8ml6LH5vwc4s3E93+53WPlHHxuTjSp3s6h45AEnXQQMsOLFC S8zoe6USnZzlgoTde0eBeo4mo0PJ/LD2pebkPn/L0uz+JjdkwP3vOO6IqRsH62gz tNZG5piJXrYmLMrRceBnZSTROyCeDL7KCcNZG7LSI7/pd5C0M9FS2Cx22lDOV8s1 3MqC1lIFJLT5mxpzUg5ju/RizXacVhKBXkNR4+JamdSeDT9YpatVEVufKGs/HpqR xWarP1F1F1B1HWWv+a6nYscx49Z5ZFqvmt+BVyGa6gdCGVh5+tXPnxaH3qpmLQ3I wNHSq+ZvNTIsTGqghCPHt/Y1/deOlOw= -----END CERTIFICATE-----Generated at Wed Jul 29 20:37:08 2026 by rpki-client