$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/ad3cac97-50c6-306d-a306-8a017943b7f3.roa File: ad3cac97-50c6-306d-a306-8a017943b7f3.roa (raw, json) Hash identifier: pClMfe4bhuXIc+aHChNQxalRciwqDzDmSFqLNbVhx14= Subject key identifier: DA:40:13:5C:C8:F9:A6:73:89:3B:F9:63:6A:8B:BE:E3:38:06:AA:DA Certificate issuer: /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Certificate serial: 010D0C9F4328584EA7875C7023EA9FEC83089340 Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/ad3cac97-50c6-306d-a306-8a017943b7f3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40244 IP address blocks: 104.129.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:5c:70:23:ea:9f:ec:83:08:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=13390f91-699e-4042-90fc-812f62f56b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:15:ad:b1:7a:dc:70:56:b2:0b:3d:dd:75:df: a7:b4:29:4e:c5:48:b7:03:fd:67:bb:13:53:6c:9e: 03:c0:6e:5a:b1:16:7c:cb:2d:96:a5:27:23:b8:8a: e9:67:f1:81:70:1e:60:c9:c5:c0:e7:b4:b5:77:ea: 88:69:5a:ac:a6:4c:6e:e1:50:5e:55:53:ed:b4:3d: 77:f6:60:2e:c0:2b:41:5c:d9:6f:6d:60:4b:60:50: 6c:8d:93:5e:57:8e:f8:0a:45:ba:f8:cb:0b:a9:e2: 9d:35:c7:5a:f3:9c:5d:f3:07:40:41:a9:0b:e2:31: 9f:50:ff:1a:6b:fa:d9:4b:28:26:8c:8d:6e:9d:37: 25:6c:2c:ba:b9:b8:b0:29:c7:9f:76:66:72:51:5f: 01:2c:c8:e4:b2:00:9d:0f:96:ab:94:91:b1:da:9b: ae:62:ab:2c:39:c7:0a:99:3b:77:d4:4b:b5:aa:ad: 97:3a:7f:63:12:c0:de:2f:6f:08:ef:57:15:bf:9e: fc:c5:a5:af:30:5c:a8:4c:43:cb:b7:30:74:3f:d1: cc:de:37:73:0b:df:14:72:41:3c:11:00:4f:f1:90: ff:db:72:92:80:35:e8:1f:0a:a9:03:86:6f:60:5f: 16:a2:3d:23:69:96:a7:51:3a:ff:c2:73:60:9e:70: 40:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:40:13:5C:C8:F9:A6:73:89:3B:F9:63:6A:8B:BE:E3:38:06:AA:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/ad3cac97-50c6-306d-a306-8a017943b7f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl X509v3 Authority Key Identifier: keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer sbgp-ipAddrBlock: critical IPv4: 104.129.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:eb:c3:aa:c8:cc:61:9b:0a:26:99:ce:d0:03:a8:86:6e:cf: d6:3e:87:47:b2:4a:24:8a:08:a5:90:4a:8b:63:22:b1:a7:e8: d2:bc:bc:64:42:8f:b6:7a:9a:42:a9:15:67:96:c7:ea:bb:53: 09:e1:6a:76:4d:04:aa:66:f6:fa:6a:13:63:c6:f1:11:07:9a: f0:a7:63:fd:66:57:62:7e:1f:37:6d:f3:d0:9f:ab:c8:25:a5: 7b:00:ae:f1:59:1f:cf:c0:7a:1f:fd:16:43:9c:89:14:47:f3: 13:84:66:51:12:38:38:a3:95:80:fb:ae:f2:de:8b:03:23:1b: 39:79:20:a2:49:c0:00:e1:8f:1e:fb:04:cb:ed:0f:24:f7:88: c8:b0:ce:8e:5a:92:66:1b:8b:4e:fd:9b:b3:fb:7f:71:a5:b4: 14:d1:10:d4:4e:0a:bb:81:a7:37:fc:a1:de:99:22:39:f6:65: aa:a9:ba:20:97:d5:c5:12:8e:c2:09:be:1b:d1:23:9e:94:8a: da:33:78:6f:91:d3:9d:b6:e3:f3:f6:a1:5b:0f:34:0f:ac:3e: 5c:b7:84:67:e3:f5:b8:f3:39:4e:8e:de:31:24:90:e7:1a:f1: ed:2a:e5:55:51:17:f9:ad:48:bc:a5:67:15:92:df:01:c0:75: 5f:c6:d4:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh1xwI+qf7IMIk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc0OTdhM2ItYTBmOS00NWJkLWFiMGItNGU3MzdjODgw NjNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTMzOTBmOTEtNjk5ZS00MDQyLTkwZmMtODEyZjYyZjU2Yjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhWtsXrccFayCz3ddd+ntClOxUi3A/1nuxNT bJ4DwG5asRZ8yy2WpScjuIrpZ/GBcB5gycXA57S1d+qIaVqspkxu4VBeVVPttD13 9mAuwCtBXNlvbWBLYFBsjZNeV474CkW6+MsLqeKdNcda85xd8wdAQakL4jGfUP8a a/rZSygmjI1unTclbCy6ubiwKcefdmZyUV8BLMjksgCdD5arlJGx2puuYqssOccK mTt31Eu1qq2XOn9jEsDeL28I71cVv578xaWvMFyoTEPLtzB0P9HM3jdzC98UckE8 EQBP8ZD/23KSgDXoHwqpA4ZvYF8Woj0jaZanUTr/wnNgnnBA9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpAE1zI+aZziTv5Y2qLvuM4BqraMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5 N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTczN2M4ODA2M2MvYWQzY2FjOTctNTBjNi0z MDZkLWEzMDYtOGEwMTc5NDNiN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjc0OTdhM2ItYTBmOS00NWJkLWFi MGItNGU3MzdjODgwNjNjL2I3NDk3YTNiLWEwZjktNDViZC1hYjBiLTRlNzM3Yzg4 MDYzYy5jcmwwHwYDVR0jBBgwFoAU5diIGp8HiJED/JAy72HfTKkW/RYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTcz N2M4ODA2M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7rw6rIzGGbCiaZztADqIZuz9Y+h0eySiSKCKWQSotjIrGn6NK8vGRC j7Z6mkKpFWeWx+q7UwnhanZNBKpm9vpqE2PG8REHmvCnY/1mV2J+Hzdt89Cfq8gl pXsArvFZH8/Aeh/9FkOciRRH8xOEZlESODijlYD7rvLeiwMjGzl5IKJJwADhjx77 BMvtDyT3iMiwzo5akmYbi079m7P7f3GltBTRENROCruBpzf8od6ZIjn2ZaqpuiCX 1cUSjsIJvhvRI56UitozeG+R05224/P2oVsPNA+sPly3hGfj9bjzOU6O3jEkkOca 8e0q5VVRF/mtSLylZxWS3wHAdV/G1Jc= -----END CERTIFICATE-----Generated at Fri Sep 11 01:14:50 2026 by rpki-client