$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa File: 7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa (raw, json) Hash identifier: /inVBqljxu6dwyJAygfS0PKeXaCqRz60j8DkA2LD/RQ= Subject key identifier: 11:AF:38:48:B1:B7:CC:46:AC:83:08:C7:05:59:81:99:98:D2:D8:5C Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584EE7BCA979F7CC4ED4C60BF700 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 11260 IP address blocks: 104.37.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:a9:79:f7:cc:4e:d4:c6:0b:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=a23f2af0-5017-4c56-a21b-95bb2854c53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b1:d7:96:33:c4:96:ec:9b:40:8e:7a:70:7f: f6:dd:30:61:ae:4a:13:8c:8c:af:04:38:98:e4:93: 50:e1:1a:d6:e1:9f:70:86:a1:99:03:29:89:98:ef: a9:ae:cd:bd:44:cd:b1:c3:d1:66:4b:87:ae:cb:be: 5d:f6:b4:28:13:87:bb:ff:e1:ed:45:39:51:41:13: 8e:ad:f8:e6:da:13:e3:50:0a:b8:7c:89:6f:ab:8e: dd:d6:95:e7:f5:27:19:8c:45:84:eb:f8:83:b0:6a: 22:90:82:cd:1e:4c:4f:16:e6:8b:ef:d2:74:86:82: 9e:04:bf:fd:64:29:7a:9f:35:51:28:11:72:7c:ab: 1b:a2:07:ed:37:36:c8:9b:c1:19:c4:cc:25:b9:cc: 8f:c0:55:f2:22:ce:83:28:33:37:3c:06:6e:24:be: 8f:56:03:00:1c:b8:88:59:4b:a9:aa:e2:1b:8a:23: 03:6b:2e:97:a3:bc:b1:d6:4b:8e:e9:d1:0c:f7:3c: 98:e9:00:75:9a:35:a3:fd:cf:c6:81:94:dc:c4:2f: 46:d2:86:40:61:4b:98:01:9a:e9:87:78:50:e5:c6: c3:b7:15:55:d4:fa:3a:db:46:3f:29:95:7f:fe:74: aa:04:e1:90:10:99:fb:95:55:8a:60:44:a3:3d:63: cd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AF:38:48:B1:B7:CC:46:AC:83:08:C7:05:59:81:99:98:D2:D8:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 104.37.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:92:b6:eb:bd:66:c2:e4:49:6e:73:1e:fb:c1:96:0a:aa:0e: 67:fb:ad:fb:39:7a:2d:85:26:47:8e:9d:99:9b:ab:dc:2f:7d: c6:13:b8:f3:72:a3:26:89:2c:56:f0:72:22:d5:86:a7:65:33: eb:32:1f:4d:e6:56:52:02:85:34:72:81:7f:0c:70:48:ee:04: 8a:39:e7:f6:17:06:b5:02:d4:30:fa:14:98:e7:f0:99:0b:76: 16:e4:fc:63:0f:f0:94:06:72:53:ef:87:ef:b2:f2:f7:ce:89: 64:56:ca:fc:ba:67:aa:28:f5:ac:f0:ad:e2:1f:07:a7:1c:82: ec:9a:cc:e1:fa:8d:27:6b:58:e2:75:ac:a5:57:7a:8f:fe:ea: fe:fb:bc:13:99:0b:61:eb:4b:5b:8b:dd:90:53:04:81:7f:7e: 10:b5:11:6d:50:9f:7b:d9:cb:b1:9f:ba:6b:a5:e4:f4:d6:d6: ba:eb:44:6a:32:db:bc:36:e0:a2:6f:f5:e3:b5:3a:73:d8:e2: 56:56:b1:08:92:88:5e:55:01:40:c2:28:71:95:d7:e0:4e:8d: 25:7a:ed:b4:2e:53:ba:2d:3e:5e:08:7b:d6:be:21:77:98:2a: 7a:5c:34:f5:c1:2d:d6:00:41:f0:59:36:dd:82:ef:98:14:67: 63:34:c6:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvKl598xO1MYL9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk YTIzZjJhZjAtNTAxNy00YzU2LWEyMWItOTViYjI4NTRjNTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibHXljPEluybQI56cH/23TBhrkoTjIyvBDiY 5JNQ4RrW4Z9whqGZAymJmO+prs29RM2xw9FmS4euy75d9rQoE4e7/+HtRTlRQROO rfjm2hPjUAq4fIlvq47d1pXn9ScZjEWE6/iDsGoikILNHkxPFuaL79J0hoKeBL/9 ZCl6nzVRKBFyfKsbogftNzbIm8EZxMwlucyPwFXyIs6DKDM3PAZuJL6PVgMAHLiI WUupquIbiiMDay6Xo7yx1kuO6dEM9zyY6QB1mjWj/c/GgZTcxC9G0oZAYUuYAZrp h3hQ5cbDtxVV1Po620Y/KZV//nSqBOGQEJn7lVWKYESjPWPNWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGvOEixt8xGrIMIxwVZgZmY0thcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvNzUyM2ViYjYtNDE1Mi0z NjYyLTgyOGEtNWZiNWQ2ZTUzY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyStuu9ZsLkSW5zHvvBlgqqDmf7rfs5ei2FJkeOnZmbq9wvfcYTuPNy oyaJLFbwciLVhqdlM+syH03mVlIChTRygX8McEjuBIo55/YXBrUC1DD6FJjn8JkL dhbk/GMP8JQGclPvh++y8vfOiWRWyvy6Z6oo9azwreIfB6ccguyazOH6jSdrWOJ1 rKVXeo/+6v77vBOZC2HrS1uL3ZBTBIF/fhC1EW1Qn3vZy7Gfumul5PTW1rrrRGoy 27w24KJv9eO1OnPY4lZWsQiSiF5VAUDCKHGV1+BOjSV67bQuU7otPl4Ie9a+IXeY KnpcNPXBLdYAQfBZNt2C75gUZ2M0xgM= -----END CERTIFICATE-----Generated at Sat Sep 5 16:08:52 2026 by rpki-client