$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d4441743-1181-3c78-aca1-bfe3d5680510.roa File: d4441743-1181-3c78-aca1-bfe3d5680510.roa (raw, json) Hash identifier: aLjqlTDYnQ/nARiW0BqBSyJ5ZaffkJsDpDgNWkWrp8g= Subject key identifier: 7E:B8:40:57:77:E9:35:36:9C:E7:A6:60:60:9C:A0:A8:A1:12:E6:5C Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584EEEB752BAD30199DC8AA80200 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d4441743-1181-3c78-aca1-bfe3d5680510.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 19437 IP address blocks: 104.254.237.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:52:ba:d3:01:99:dc:8a:a8:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=503a0e9a-c944-4f7b-80ac-05c14fe8e395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e7:97:cf:63:8a:60:d4:42:56:9d:98:4b:12: a3:43:3b:00:62:b8:59:64:a7:a8:af:da:e5:5b:e5: ab:2b:63:a8:71:1c:8c:a9:56:62:20:bf:94:d2:e2: 95:91:8a:06:75:94:c3:7c:18:8c:7c:84:26:71:d1: 46:a8:76:10:1f:95:66:cb:a4:dc:3a:19:69:9b:ec: bf:36:07:c7:ac:59:d1:34:41:74:d6:3f:20:6e:0b: db:16:41:b4:c4:fe:e4:92:93:79:51:a7:c8:73:11: 81:62:66:35:bc:03:70:a4:36:de:9e:68:fe:5d:29: 56:83:13:8e:f8:dd:b5:9b:83:5c:05:f1:f7:8c:6d: fb:b7:7d:3f:4c:92:f8:d2:32:fc:f4:db:c0:2a:91: 02:4c:d8:01:a2:6a:95:83:f3:7f:57:77:ea:90:b4: af:c9:65:27:88:42:09:cc:aa:e9:c6:de:7a:ae:8f: 9e:c4:55:95:99:06:9d:57:49:99:bc:df:5b:8e:16: a1:13:62:23:3b:02:97:e8:a6:38:41:8e:cf:8f:c3: e6:b0:b9:5f:30:3b:c5:06:91:32:3d:aa:5a:7a:5b: 68:cf:5c:7a:9a:5e:70:60:a3:43:4d:ae:5f:b2:e8: 58:a6:49:5c:ea:40:76:16:d7:d2:f9:8d:92:db:25: f5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B8:40:57:77:E9:35:36:9C:E7:A6:60:60:9C:A0:A8:A1:12:E6:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d4441743-1181-3c78-aca1-bfe3d5680510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 104.254.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e4:27:eb:87:e9:91:44:2e:d0:9f:f1:67:0d:a9:2c:63:25: 5d:67:1a:9b:91:73:d1:09:73:81:0b:7a:83:dd:34:8f:c7:25: 4f:b3:56:79:30:62:b9:48:de:0b:ae:b8:7c:17:93:c2:c8:eb: 9f:0c:0c:3e:30:37:ee:35:a6:48:43:01:c3:d3:59:1a:bd:8a: 8a:1f:a4:15:ef:af:08:0a:46:4a:43:68:1e:6c:71:e7:0c:85: ed:15:0b:62:17:45:34:62:fd:ae:ec:b1:d3:ce:1a:2e:ab:0e: 4f:45:71:ed:49:ee:dc:f2:e4:40:44:d8:1a:c9:bd:a9:12:65: 9c:f1:2c:bd:f0:cb:14:4d:eb:5f:54:ed:3e:ca:ef:0e:d8:29: f4:66:57:ba:af:3c:a6:0c:5c:68:af:89:d8:ae:ee:f1:76:0e: 81:ca:8e:01:d4:a9:f1:a4:73:36:d5:2a:e4:84:42:b1:58:7d: 2e:d6:e8:3a:7e:5a:a9:03:c5:3d:b6:fd:d8:34:46:6a:d6:aa: 4c:00:1d:0b:b8:74:ed:95:d0:24:03:b9:97:89:ff:51:8f:33: 46:3a:90:a7:0d:b0:60:2f:6b:25:84:49:e1:c1:ef:9e:c5:29: 71:4d:34:8e:dd:b7:37:9c:1c:ac:77:de:87:4b:8e:df:45:40: dd:d6:0d:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut1K60wGZ3IqoAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk NTAzYTBlOWEtYzk0NC00ZjdiLTgwYWMtMDVjMTRmZThlMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjueXz2OKYNRCVp2YSxKjQzsAYrhZZKeor9rl W+WrK2OocRyMqVZiIL+U0uKVkYoGdZTDfBiMfIQmcdFGqHYQH5Vmy6TcOhlpm+y/ NgfHrFnRNEF01j8gbgvbFkG0xP7kkpN5UafIcxGBYmY1vANwpDbenmj+XSlWgxOO +N21m4NcBfH3jG37t30/TJL40jL89NvAKpECTNgBomqVg/N/V3fqkLSvyWUniEIJ zKrpxt56ro+exFWVmQadV0mZvN9bjhahE2IjOwKX6KY4QY7Pj8PmsLlfMDvFBpEy Papaeltoz1x6ml5wYKNDTa5fsuhYpklc6kB2FtfS+Y2S2yX1dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH64QFd36TU2nOemYGCcoKihEuZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDQ0NDE3NDMtMTE4MS0z Yzc4LWFjYTEtYmZlM2Q1NjgwNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP7tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3kJ+uH6ZFELtCf8WcNqSxjJV1nGpuRc9EJc4ELeoPdNI/HJU+zVnkw YrlI3guuuHwXk8LI658MDD4wN+41pkhDAcPTWRq9ioofpBXvrwgKRkpDaB5scecM he0VC2IXRTRi/a7ssdPOGi6rDk9Fce1J7tzy5EBE2BrJvakSZZzxLL3wyxRN619U 7T7K7w7YKfRmV7qvPKYMXGividiu7vF2DoHKjgHUqfGkczbVKuSEQrFYfS7W6Dp+ WqkDxT22/dg0RmrWqkwAHQu4dO2V0CQDuZeJ/1GPM0Y6kKcNsGAvayWESeHB757F KXFNNI7dtzecHKx33odLjt9FQN3WDR0= -----END CERTIFICATE-----Generated at Sat Sep 5 06:10:51 2026 by rpki-client