$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/3e90970f-dd28-30ac-83fd-9f25160e4d92.roa File: 3e90970f-dd28-30ac-83fd-9f25160e4d92.roa (raw, json) Hash identifier: 5iODNjCbSMLfWZ+CoAjc23PrtbnKc8VZehvM4CpJ9ZI= Subject key identifier: 65:6E:F1:AD:F6:9C:CE:88:4A:D2:4A:1F:C0:53:67:D8:77:1B:AC:37 Certificate issuer: /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483 Certificate serial: 010D0C9F4328584E54B491DD03CE6180DA98B780 Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/3e90970f-dd28-30ac-83fd-9f25160e4d92.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 26863 IP address blocks: 104.143.2.0/23 maxlen: 32 104.238.229.0/24 maxlen: 32 208.52.152.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:91:dd:03:ce:61:80:da:98:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=9c3b80f5-8018-4b9e-975c-88d8487d889f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:39:15:bc:12:91:09:d4:5b:5d:8a:6a:e2:4e: fa:85:94:d7:25:54:1e:b0:eb:b9:12:ff:7a:c2:5d: af:97:29:f7:69:a8:24:c1:48:76:2a:0b:74:48:4c: 39:82:47:2f:23:bb:5e:db:b3:bb:c7:ac:16:39:ae: c2:28:4e:f3:9c:20:e4:7e:81:1b:df:5a:f9:fe:24: 7e:72:9b:58:09:3f:58:c6:d7:f2:e1:8c:f6:76:ec: f1:be:f6:cd:3e:d4:06:39:2c:bb:48:3a:36:1d:65: 28:6c:15:b7:75:a7:88:e2:51:ed:f4:ce:2b:2d:f9: d6:b9:ea:06:a4:d7:55:f2:39:e7:7f:e2:e4:34:4d: bf:3e:d2:b3:92:2e:54:ac:96:82:86:71:17:4d:62: 53:f5:d6:b9:7f:b5:99:68:bf:ae:7a:d6:f9:fa:b1: 19:82:6b:bd:6e:22:39:bb:af:bb:fc:3a:27:c8:02: a5:bb:6d:c2:58:74:e8:7d:bf:53:57:21:c0:93:36: 1c:fd:f2:81:43:04:32:d3:da:51:89:89:d9:66:ac: b1:c5:90:36:86:6c:37:93:65:51:4f:87:72:4c:87: 0d:a9:ea:4d:cf:57:de:57:59:cb:93:8b:86:fe:f2: a9:72:01:a2:a4:3b:50:5a:5c:66:8b:ec:07:4d:8b: 7d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6E:F1:AD:F6:9C:CE:88:4A:D2:4A:1F:C0:53:67:D8:77:1B:AC:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/3e90970f-dd28-30ac-83fd-9f25160e4d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl X509v3 Authority Key Identifier: keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer sbgp-ipAddrBlock: critical IPv4: 104.143.2.0/23 104.238.229.0/24 208.52.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ae:6b:1f:07:c0:69:98:11:cf:ab:ca:7b:da:64:02:25:ec: 3d:d9:1d:18:38:3c:9c:57:de:89:f1:47:94:4c:e1:24:6e:e4: 3c:2d:08:d9:ee:fb:1a:40:b7:aa:0c:db:74:4b:d8:16:38:1d: 07:9a:b4:59:ed:86:a7:51:06:be:8c:86:86:fc:38:84:75:1d: 6c:b0:9e:c9:f5:8f:c7:88:6a:dc:bd:fa:b8:43:3c:bf:e5:43: 59:15:2d:f1:3f:a8:ba:fa:e6:39:28:1f:96:c0:f2:96:fe:55: f4:71:0d:fd:00:dd:7c:1c:5e:4d:24:9c:31:7e:43:e0:57:6b: 54:1b:12:d8:d2:da:b0:4e:92:a9:f9:10:9b:55:dd:55:14:04: 6c:a9:0d:5c:85:80:fe:1b:37:a8:09:5f:fb:bb:b8:40:a8:37: 7f:e6:bb:b8:13:ff:62:0b:20:d7:fe:12:ff:7b:75:58:7b:04: ad:1d:9d:ea:7d:4f:f6:ec:1e:62:98:d5:8d:e3:ca:b2:9e:94: 22:ca:68:f1:d5:23:d9:5c:a7:d0:1b:d1:a0:51:28:04:26:94: 9c:f2:b5:19:ed:48:06:e0:85:84:06:f9:9f:a7:00:81:dc:38: 31:d4:7f:0e:47:a0:0b:5a:51:2c:c6:2b:50:2a:ff:4e:a0:47: aa:13:4c:90 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE5UtJHdA85hgNqYt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFjMTllNTctYTZmNS00YzQ4LWI0ZGYtYjhkNDJkN2I3 NDgzMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk OWMzYjgwZjUtODAxOC00YjllLTk3NWMtODhkODQ4N2Q4ODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDkVvBKRCdRbXYpq4k76hZTXJVQesOu5Ev96 wl2vlyn3aagkwUh2Kgt0SEw5gkcvI7te27O7x6wWOa7CKE7znCDkfoEb31r5/iR+ cptYCT9Yxtfy4Yz2duzxvvbNPtQGOSy7SDo2HWUobBW3daeI4lHt9M4rLfnWueoG pNdV8jnnf+LkNE2/PtKzki5UrJaChnEXTWJT9da5f7WZaL+uetb5+rEZgmu9biI5 u6+7/DonyAKlu23CWHTofb9TVyHAkzYc/fKBQwQy09pRiYnZZqyxxZA2hmw3k2VR T4dyTIcNqepNz1feV1nLk4uG/vKpcgGipDtQWlxmi+wHTYt9MQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGVu8a32nM6IStJKH8BTZ9h3G6w3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMx OWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0MmQ3Yjc0ODMvM2U5MDk3MGYtZGQyOC0z MGFjLTgzZmQtOWYyNTE2MGU0ZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzFjMTllNTctYTZmNS00YzQ4LWI0 ZGYtYjhkNDJkN2I3NDgzLzMxYzE5ZTU3LWE2ZjUtNGM0OC1iNGRmLWI4ZDQyZDdi NzQ4My5jcmwwHwYDVR0jBBgwFoAU/pJi5eJ2pwPKSRroNOSF02JXoFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMxOWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0 MmQ3Yjc0ODMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBaI8CAwQA aO7lAwQB0DSYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAH6uax8HwGmYEc+rynvaZAIl7D3ZHRg4PJxX3onx R5RM4SRu5DwtCNnu+xpAt6oM23RL2BY4HQeatFnthqdRBr6Mhob8OIR1HWywnsn1 j8eIaty9+rhDPL/lQ1kVLfE/qLr65jkoH5bA8pb+VfRxDf0A3XwcXk0knDF+Q+BX a1QbEtjS2rBOkqn5EJtV3VUUBGypDVyFgP4bN6gJX/u7uECoN3/mu7gT/2ILINf+ Ev97dVh7BK0dnep9T/bsHmKY1Y3jyrKelCLKaPHVI9lcp9Ab0aBRKAQmlJzytRnt SAbghYQG+Z+nAIHcODHUfw5HoAtaUSzGK1Aq/06gR6oTTJA= -----END CERTIFICATE-----Generated at Mon Jul 13 15:02:23 2026 by rpki-client