$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/35a4a280-a419-3d31-a496-90f9731524db.roa File: 35a4a280-a419-3d31-a496-90f9731524db.roa (raw, json) Hash identifier: JG/mIHHD8noPmiKtBpwpwImqNxChT9egeDI0gazK9xM= Subject key identifier: 01:31:7A:78:AC:F1:23:47:D3:78:5A:1D:D8:00:95:F9:FF:AF:F3:74 Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F4328584EED520334179F9ABD8B832400 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/35a4a280-a419-3d31-a496-90f9731524db.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 3214 IP address blocks: 104.255.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:03:34:17:9f:9a:bd:8b:83:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=d05bc753-11cd-43b4-818e-541eee649ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ca:07:35:5d:a6:ca:72:91:9e:b2:29:c2:8b: e1:3c:01:48:24:0c:e0:61:74:77:e1:04:05:05:b5: f3:64:7f:b5:7e:49:e3:cd:b7:f3:26:5a:31:0d:7d: c1:11:b5:9f:5b:5d:3d:2a:e0:7a:12:4b:cd:86:6c: 8a:1e:bd:93:d7:d9:0b:36:a3:f1:73:8d:99:1e:62: 2e:5e:6b:b0:be:62:cf:c6:9b:1f:25:48:69:3f:2e: 5a:5b:dc:92:3d:a5:e7:25:7d:51:cf:65:fe:98:c3: aa:17:ed:b7:10:ca:f3:71:9e:56:ce:7e:2c:44:89: d1:1a:77:5a:17:d2:27:92:3c:33:a1:f8:91:e8:40: c5:cf:e9:a0:0d:04:43:cd:b3:1f:c3:c4:62:02:f5: 7d:54:7e:7e:4f:07:ea:40:16:95:b8:a7:91:f5:2e: d4:24:26:73:b8:99:20:cc:95:49:f0:90:2a:78:e2: c8:73:5a:22:ff:d4:2a:b6:68:2f:19:ae:8b:23:94: 2e:cb:1a:e6:cd:0e:5c:07:68:a8:5a:ac:d6:76:6e: a8:e6:08:3c:1e:1f:77:ce:17:19:a8:25:74:47:24: e8:00:ae:a9:f7:d8:de:af:b9:98:49:90:c8:27:92: a1:e1:d1:89:3e:a8:36:7a:16:c3:ab:22:08:64:49: c5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:31:7A:78:AC:F1:23:47:D3:78:5A:1D:D8:00:95:F9:FF:AF:F3:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/35a4a280-a419-3d31-a496-90f9731524db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: 104.255.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:4c:2f:e1:b5:a1:02:9e:2f:5e:67:fe:61:b2:87:5e:65:c9: d4:53:53:6c:4d:29:e7:ee:17:a2:54:17:ba:a7:83:48:38:22: 61:ca:58:f0:f1:f2:9a:30:88:9b:7a:93:2c:ea:da:ae:44:3c: 6c:26:93:fd:cd:c0:f5:8b:d8:c8:f2:21:13:98:aa:a3:32:fa: 1c:30:1c:39:00:33:d5:57:d5:cc:de:51:40:fe:34:36:82:26: 3c:3a:25:44:e1:74:42:8b:f9:a8:b2:7d:75:36:9f:3f:b8:a6: 21:89:21:e9:77:66:67:2e:70:03:f3:fa:ce:49:59:51:8c:02: 58:67:8e:47:90:27:da:c0:05:2f:18:e6:c8:bc:88:b9:38:d0: ae:67:d0:47:c8:27:9f:00:a6:de:4e:fa:61:a7:90:1d:8c:e4: a3:d9:31:0b:38:1b:4c:08:81:75:ce:a9:89:18:8f:63:af:76: 1b:d9:6f:e3:95:1d:b8:23:f4:17:f3:23:29:58:ad:fc:c3:1a: 62:f0:98:85:5f:50:de:82:17:0a:45:a1:a0:8c:4a:77:13:99: 01:0d:c7:30:74:0d:15:61:00:06:42:2f:41:4d:10:80:f6:b8: 2c:03:46:6c:60:d9:62:7b:67:7f:5e:53:e4:af:91:61:cd:3a: c7:0b:cf:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUgM0F5+avYuDJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZDA1YmM3NTMtMTFjZC00M2I0LTgxOGUtNTQxZWVlNjQ5ZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsoHNV2mynKRnrIpwovhPAFIJAzgYXR34QQF BbXzZH+1fknjzbfzJloxDX3BEbWfW109KuB6EkvNhmyKHr2T19kLNqPxc42ZHmIu XmuwvmLPxpsfJUhpPy5aW9ySPaXnJX1Rz2X+mMOqF+23EMrzcZ5Wzn4sRInRGnda F9InkjwzofiR6EDFz+mgDQRDzbMfw8RiAvV9VH5+TwfqQBaVuKeR9S7UJCZzuJkg zJVJ8JAqeOLIc1oi/9QqtmgvGa6LI5QuyxrmzQ5cB2ioWqzWdm6o5gg8Hh93zhcZ qCV0RyToAK6p99jer7mYSZDIJ5Kh4dGJPqg2ehbDqyIIZEnFpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAExenis8SNH03haHdgAlfn/r/N0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvMzVhNGEyODAtYTQxOS0z ZDMxLWE0OTYtOTBmOTczMTUyNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5ML+G1oQKeL15n/mGyh15lydRTU2xNKefuF6JUF7qng0g4ImHKWPDx 8powiJt6kyzq2q5EPGwmk/3NwPWL2MjyIROYqqMy+hwwHDkAM9VX1czeUUD+NDaC Jjw6JUThdEKL+aiyfXU2nz+4piGJIel3ZmcucAPz+s5JWVGMAlhnjkeQJ9rABS8Y 5si8iLk40K5n0EfIJ58Apt5O+mGnkB2M5KPZMQs4G0wIgXXOqYkYj2OvdhvZb+OV Hbgj9BfzIylYrfzDGmLwmIVfUN6CFwpFoaCMSncTmQENxzB0DRVhAAZCL0FNEID2 uCwDRmxg2WJ7Z39eU+SvkWHNOscLz/E= -----END CERTIFICATE-----Generated at Thu Sep 10 17:38:39 2026 by rpki-client