$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa File: a492bc79-a43d-3b74-a966-215a139f5151.roa (raw, json) Hash identifier: GkOFEfrOOU1tLcgU5u1KPUjb3me198CysjJV/YxPM8w= Subject key identifier: A2:98:2A:6F:52:4B:10:62:DE:50:11:1D:78:DF:C1:95:BD:3E:74:1B Certificate issuer: /CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09 Certificate serial: 010D0C9F4328584E86F4F0BC04BFD696153F7900 Authority key identifier: DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 399833 IP address blocks: 104.250.248.0/22 maxlen: 25 204.144.124.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:f0:bc:04:bf:d6:96:15:3f:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=b89fed6f-72ac-48aa-8bca-5eb574d80f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e2:46:53:d5:89:52:26:59:21:09:bf:c0:79: 06:5c:fc:42:fe:fe:2a:bd:47:8b:d0:30:f5:62:d4: 7d:f0:c5:a4:39:26:3b:66:9d:ea:e1:0e:dd:7d:71: c5:96:2c:a7:14:65:9a:f6:82:50:1e:41:ec:d0:9d: 1a:41:7d:5d:90:30:8d:bc:cc:99:ac:f1:9e:ad:53: 8c:09:f9:44:ad:0d:81:ec:b3:2a:72:c9:0b:8e:e5: 09:9d:60:72:ca:89:c2:5b:e4:4e:c7:c1:42:b5:c4: be:87:56:c6:a9:6a:7d:e9:ba:02:66:af:43:bd:07: 3c:d0:75:b3:a0:13:79:89:d5:36:97:a6:27:1c:e6: 48:59:e7:c7:1e:c1:bf:01:8b:3a:f8:19:b8:d1:e6: 3e:f8:40:7c:86:8d:77:ce:ea:0d:46:2d:6e:f3:e6: 50:06:6e:62:20:9e:74:ba:39:ff:87:5e:cc:95:62: 45:9f:80:75:fa:62:08:c2:01:44:94:dc:84:de:7e: bf:36:84:92:e3:84:a0:03:d0:81:16:a1:81:e7:00: 42:fc:c2:32:61:2b:1c:ff:d0:e6:7d:c3:76:12:fa: a5:05:ed:17:f0:d4:a7:e2:4c:c0:d3:56:5b:77:7f: c9:d6:40:a6:e7:2e:02:9f:c2:21:00:f7:a7:1a:ff: ec:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:98:2A:6F:52:4B:10:62:DE:50:11:1D:78:DF:C1:95:BD:3E:74:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.crl X509v3 Authority Key Identifier: keyid:DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer sbgp-ipAddrBlock: critical IPv4: 104.250.248.0/22 204.144.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ef:bb:8d:3e:58:11:7c:67:fe:73:c3:5b:8b:6a:0a:7b:e9: 78:c8:94:a4:f5:9f:33:94:39:af:a0:b7:57:43:52:8d:d2:da: 3a:fe:82:7b:40:58:c2:d4:65:b9:fd:49:8c:64:6e:09:07:47: 33:8a:f5:57:2c:f1:98:f3:95:12:c2:bb:61:37:1d:da:62:f6: 32:c9:e2:a2:d1:a9:00:56:71:db:17:0d:f7:21:41:78:62:fc: b0:dc:aa:18:e0:ec:e7:1b:90:49:b1:39:1a:e8:af:bb:c9:1e: 94:87:39:db:5b:a7:a4:07:95:9d:af:41:25:e8:e5:2f:85:19: 12:f3:6d:23:e7:fa:56:66:8a:ea:29:08:50:91:31:a1:42:4e: d6:67:45:fe:ee:d8:3d:74:e6:7a:9f:49:08:36:ac:39:9f:42: 6d:62:7d:1b:c7:b3:40:fd:7a:9e:c9:b5:8f:18:2d:35:7b:a7: e7:f8:7c:7c:1a:bb:2a:c5:44:3c:94:3c:6b:be:29:6b:61:15: a4:ae:2a:a3:2f:de:87:da:bc:ea:48:b3:a7:80:ce:87:70:a0: b2:68:b6:ff:59:0b:8b:dd:2b:18:85:aa:38:b5:30:3c:62:31: 9d:c7:06:f8:66:6c:62:e6:b9:bb:b9:ef:61:98:2c:24:f3:95: ea:9a:0c:db -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6G9PC8BL/WlhU/eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxY2U2YjAtMTc5MS00NGRkLWI3ZjctZjBiMzhiYjMw YzA5MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk Yjg5ZmVkNmYtNzJhYy00OGFhLThiY2EtNWViNTc0ZDgwZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeJGU9WJUiZZIQm/wHkGXPxC/v4qvUeL0DD1 YtR98MWkOSY7Zp3q4Q7dfXHFliynFGWa9oJQHkHs0J0aQX1dkDCNvMyZrPGerVOM CflErQ2B7LMqcskLjuUJnWByyonCW+ROx8FCtcS+h1bGqWp96boCZq9DvQc80HWz oBN5idU2l6YnHOZIWefHHsG/AYs6+Bm40eY++EB8ho13zuoNRi1u8+ZQBm5iIJ50 ujn/h17MlWJFn4B1+mIIwgFElNyE3n6/NoSS44SgA9CBFqGB5wBC/MIyYSsc/9Dm fcN2EvqlBe0X8NSn4kzA01Zbd3/J1kCm5y4Cn8IhAPenGv/sgwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKKYKm9SSxBi3lARHXjfwZW9PnQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NzFj ZTZiMC0xNzkxLTQ0ZGQtYjdmNy1mMGIzOGJiMzBjMDkvYTQ5MmJjNzktYTQzZC0z Yjc0LWE5NjYtMjE1YTEzOWY1MTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODcxY2U2YjAtMTc5MS00NGRkLWI3 ZjctZjBiMzhiYjMwYzA5Lzg3MWNlNmIwLTE3OTEtNDRkZC1iN2Y3LWYwYjM4YmIz MGMwOS5jcmwwHwYDVR0jBBgwFoAU3z/H11IEIJx7JuUPfsAY2zqMdnswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NzFjZTZiMC0xNzkxLTQ0ZGQtYjdmNy1mMGIz OGJiMzBjMDkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCaPr4AwQC zJB8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB3vu40+WBF8Z/5zw1uLagp76XjIlKT1nzOUOa+gt1dDUo3S 2jr+gntAWMLUZbn9SYxkbgkHRzOK9Vcs8ZjzlRLCu2E3Hdpi9jLJ4qLRqQBWcdsX DfchQXhi/LDcqhjg7OcbkEmxORror7vJHpSHOdtbp6QHlZ2vQSXo5S+FGRLzbSPn +lZmiuopCFCRMaFCTtZnRf7u2D105nqfSQg2rDmfQm1ifRvHs0D9ep7JtY8YLTV7 p+f4fHwauyrFRDyUPGu+KWthFaSuKqMv3ofavOpIs6eAzodwoLJotv9ZC4vdKxiF qji1MDxiMZ3HBvhmbGLmubu572GYLCTzleqaDNs= -----END CERTIFICATE-----Generated at Tue Jul 21 08:12:24 2026 by rpki-client