$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/091a6d78-f799-3b33-b72b-1660f4a11fe6.roa File: 091a6d78-f799-3b33-b72b-1660f4a11fe6.roa (raw, json) Hash identifier: /a/0M4XWDVlyzzC4SAIKKOysV5ZU2OCX2Uf73QLfS80= Subject key identifier: 00:54:03:5F:13:BF:0D:3D:FC:92:5A:7B:1E:62:54:0C:7A:84:76:B6 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA2369D9765A6902AEADB40 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/091a6d78-f799-3b33-b72b-1660f4a11fe6.roa Signing time: Sun 19 Jul 2026 18:24:20 +0000 ROA not before: Sun 19 Jul 2026 18:24:20 +0000 ROA not after: Sat 17 Oct 2026 18:24:20 +0000 asID: 54858 IP address blocks: 104.244.220.0/22 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:36:9d:97:65:a6:90:2a:ea:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:20 2026 GMT Not After : Oct 17 18:24:20 2026 GMT Subject: CN=0f914516-1e10-483d-8db1-fa152a213cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:05:34:77:58:55:bb:c6:f5:1f:5c:23:e3:d9: ed:76:dc:f5:a8:f0:82:bd:0f:eb:b8:22:58:07:a9: 38:8f:e0:a4:2c:af:26:9b:30:fd:fe:f8:5e:2f:67: 6f:24:16:4f:5f:e0:2c:ca:b1:a5:e3:48:12:dd:79: 12:13:28:4f:64:61:20:2b:34:da:85:49:02:d1:0b: 2d:3b:9c:77:d3:9b:02:1a:12:e1:a0:0b:77:f8:e2: af:c3:4c:2f:55:6e:1b:f6:b6:ed:cf:0b:61:55:82: f2:36:7b:6e:c4:f3:fa:88:df:26:6b:12:aa:2e:a2: ac:30:74:c5:90:f5:c4:c0:56:23:69:55:77:56:6d: bc:15:03:25:7f:19:f7:cc:f3:70:8e:7b:f1:0f:ca: b6:66:93:a5:92:54:07:e0:5e:51:10:5b:73:91:b5: 65:44:fc:9a:69:e4:68:e4:e5:bf:9d:1c:8a:26:0d: dd:b8:34:b5:69:37:81:be:43:1f:06:1a:60:3e:49: 18:3c:94:e4:7d:bc:b8:21:92:2b:0b:b7:00:d0:6c: 70:fb:49:c6:04:99:86:b9:45:7c:32:6f:d7:a9:6d: 2f:e4:23:10:63:da:d5:cf:1f:cb:08:80:c1:8a:70: cf:34:ed:2d:2d:7c:8c:65:c5:95:ae:13:2b:5c:3e: 26:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:54:03:5F:13:BF:0D:3D:FC:92:5A:7B:1E:62:54:0C:7A:84:76:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/091a6d78-f799-3b33-b72b-1660f4a11fe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.244.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ce:c9:d8:c8:02:e6:62:92:21:c5:e8:d5:63:81:09:a2:ff: ff:9d:9d:e8:58:d0:1b:a6:98:dd:c1:cc:49:ed:e8:75:86:15: 63:31:a7:70:02:78:e4:91:58:19:19:6e:1a:16:fe:e1:f2:a8: e2:b9:0e:df:09:a8:29:e4:38:c7:a8:14:40:4d:1c:ae:a8:34: 9a:25:37:65:ea:1e:02:d9:cd:42:54:c6:15:2d:84:c0:ef:b8: 8d:19:d6:10:9a:3d:01:79:aa:d8:dc:d3:bc:5c:fc:a0:2c:5d: 2d:47:46:fa:b7:2f:d1:be:e2:a9:26:a6:53:35:39:5f:ca:df: 03:fe:f6:8c:40:c6:db:5e:cb:04:22:c2:05:7b:82:b0:89:82: ba:31:8f:67:81:04:13:1c:a5:04:95:e5:3d:5d:1d:c8:54:d9: b8:02:e1:b2:11:e9:47:47:ea:72:7e:9b:cb:46:69:b3:0e:f7: cc:52:f6:1e:43:83:22:51:1d:85:b3:33:53:da:e4:af:77:8b: c6:cb:af:10:d7:94:f9:f1:c8:59:4f:74:07:53:dd:56:7d:11: 12:9d:10:21:3f:a6:e8:6e:99:6d:99:c4:1e:a7:e7:61:15:5e: c0:18:87:32:e3:7d:35:69:7a:a6:fa:61:a6:ce:8d:e6:4f:3f: 10:6b:24:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Nojadl2WmkCrq20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQyMFoXDTI2MTAxNzE4MjQyMFowLzEtMCsGA1UEAxMk MGY5MTQ1MTYtMWUxMC00ODNkLThkYjEtZmExNTJhMjEzY2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigU0d1hVu8b1H1wj49ntdtz1qPCCvQ/ruCJY B6k4j+CkLK8mmzD9/vheL2dvJBZPX+AsyrGl40gS3XkSEyhPZGEgKzTahUkC0Qst O5x305sCGhLhoAt3+OKvw0wvVW4b9rbtzwthVYLyNntuxPP6iN8maxKqLqKsMHTF kPXEwFYjaVV3Vm28FQMlfxn3zPNwjnvxD8q2ZpOlklQH4F5REFtzkbVlRPyaaeRo 5OW/nRyKJg3duDS1aTeBvkMfBhpgPkkYPJTkfby4IZIrC7cA0Gxw+0nGBJmGuUV8 Mm/XqW0v5CMQY9rVzx/LCIDBinDPNO0tLXyMZcWVrhMrXD4mSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABUA18Tvw09/JJaex5iVAx6hHa2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMDkxYTZkNzgtZjc5OS0z YjMzLWI3MmItMTY2MGY0YTExZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrOydjIAuZikiHF6NVjgQmi//+dnehY0BummN3BzEnt6HWGFWMxp3AC eOSRWBkZbhoW/uHyqOK5Dt8JqCnkOMeoFEBNHK6oNJolN2XqHgLZzUJUxhUthMDv uI0Z1hCaPQF5qtjc07xc/KAsXS1HRvq3L9G+4qkmplM1OV/K3wP+9oxAxtteywQi wgV7grCJgroxj2eBBBMcpQSV5T1dHchU2bgC4bIR6UdH6nJ+m8tGabMO98xS9h5D gyJRHYWzM1Pa5K93i8bLrxDXlPnxyFlPdAdT3VZ9ERKdECE/puhumW2ZxB6n52EV XsAYhzLjfTVpeqb6YabOjeZPPxBrJA4= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:19 2026 by rpki-client