$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4bd70481-a99e-3e31-a2d0-135a2da0b7d3.roa File: 4bd70481-a99e-3e31-a2d0-135a2da0b7d3.roa (raw, json) Hash identifier: dTUC5+VgJc1nLF92tHcs/e50pPcortT/lsbM6sDSj0s= Subject key identifier: 09:94:EF:B7:D5:BD:A0:36:9E:18:95:9D:B2:E4:6A:74:F7:B6:B9:3A Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA2367123EC13B26D6CD980 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4bd70481-a99e-3e31-a2d0-135a2da0b7d3.roa Signing time: Sun 19 Jul 2026 18:24:20 +0000 ROA not before: Sun 19 Jul 2026 18:24:20 +0000 ROA not after: Sat 17 Oct 2026 18:24:20 +0000 asID: 54858 IP address blocks: 104.220.0.0/16 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:36:71:23:ec:13:b2:6d:6c:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:20 2026 GMT Not After : Oct 17 18:24:20 2026 GMT Subject: CN=b02d0931-d962-452a-81df-add3e4b97f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:42:d1:7d:72:b4:54:93:c1:92:4f:2b:75:c4: be:37:c3:7e:67:b1:75:f9:03:f4:74:25:8f:5e:00: 4d:6d:7b:25:46:da:c5:77:1f:68:3b:b1:8a:23:cb: 27:07:a9:f0:27:98:a9:68:3a:f2:a3:62:29:8d:81: 22:d6:c3:c5:db:d0:97:80:aa:84:b5:c3:7c:e2:f8: 83:b2:1d:4a:9e:2d:6d:d8:9b:4d:3f:39:67:c6:df: 9b:da:73:48:c9:c9:66:d7:4c:ae:c6:46:2c:23:20: 17:cf:42:1f:c6:5e:8c:18:81:63:5f:54:76:e0:88: 65:25:af:28:c5:28:64:2c:b4:b7:df:c6:4b:90:2f: b5:2d:04:e6:69:1a:c1:5a:03:70:3f:86:6e:61:ec: 7a:02:3e:11:3c:95:fd:85:e1:6a:6c:3d:36:80:13: 70:24:5c:a6:2e:33:4f:3f:65:dc:8e:8d:80:c7:5d: 66:79:86:64:58:d8:36:6a:50:35:90:de:2f:94:65: 1c:d2:77:a2:90:85:02:7f:84:d0:a2:ae:87:0d:8f: 91:58:a3:70:b4:ef:78:ed:e8:b1:07:28:84:f8:6a: f6:e3:04:68:83:c1:7b:5d:3c:09:b6:8e:47:3d:35: dc:8e:d4:b5:2c:52:d8:68:5c:10:64:83:ce:b2:d3: a9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:94:EF:B7:D5:BD:A0:36:9E:18:95:9D:B2:E4:6A:74:F7:B6:B9:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4bd70481-a99e-3e31-a2d0-135a2da0b7d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a6:59:77:96:a0:a4:02:de:81:4f:26:96:dd:06:2c:77:92: 6f:ce:fc:db:f3:63:61:78:b6:bc:7b:de:4a:21:fb:80:05:f2: e0:77:c5:7f:2c:48:47:19:a0:01:bf:c4:7f:8a:e7:a9:b7:57: cb:e6:ac:b0:47:d4:d2:33:da:cf:2d:bb:8e:c5:98:84:97:c2: 05:fd:b8:0b:9f:7a:76:48:d1:d7:ee:e5:dc:1e:97:a0:d8:ff: 46:6e:82:c2:2f:45:f9:fc:a4:c5:0d:11:a6:e0:f3:00:8c:c1: 91:9c:3d:c2:cd:00:cc:be:f9:11:4b:f1:60:6c:7c:94:e1:20: 5c:17:90:97:14:40:1b:66:e9:46:ad:af:1a:84:27:fa:b1:af: 41:96:b5:78:0d:77:6f:23:46:79:33:86:c4:4a:4c:c3:b3:52: 45:7b:d9:fd:e4:94:39:b5:69:d7:95:f2:0b:87:34:12:7f:48: 9b:5a:8d:b6:60:a0:a3:c1:64:d1:1e:ac:37:c9:93:a3:1b:7e: 3f:84:0e:c0:0a:01:e5:59:06:c8:23:91:99:0c:e1:e6:5e:56: 92:04:9b:da:d7:0e:3f:7e:76:63:6c:c9:67:27:9f:ee:c9:3b: 68:1c:b7:08:dd:15:28:81:36:11:7f:65:9a:09:e3:29:3f:d5: d5:86:c2:aa -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6NojZxI+wTsm1s2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQyMFoXDTI2MTAxNzE4MjQyMFowLzEtMCsGA1UEAxMk YjAyZDA5MzEtZDk2Mi00NTJhLTgxZGYtYWRkM2U0Yjk3ZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhELRfXK0VJPBkk8rdcS+N8N+Z7F1+QP0dCWP XgBNbXslRtrFdx9oO7GKI8snB6nwJ5ipaDryo2IpjYEi1sPF29CXgKqEtcN84viD sh1Kni1t2JtNPzlnxt+b2nNIyclm10yuxkYsIyAXz0Ifxl6MGIFjX1R24IhlJa8o xShkLLS338ZLkC+1LQTmaRrBWgNwP4ZuYex6Aj4RPJX9heFqbD02gBNwJFymLjNP P2Xcjo2Ax11meYZkWNg2alA1kN4vlGUc0neikIUCf4TQoq6HDY+RWKNwtO947eix ByiE+Gr24wRog8F7XTwJto5HPTXcjtS1LFLYaFwQZIPOstOpWwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAmU77fVvaA2nhiVnbLkanT3trk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNGJkNzA0ODEtYTk5ZS0z ZTMxLWEyZDAtMTM1YTJkYTBiN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAaNwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAeKZZd5agpALegU8mlt0GLHeSb8782/NjYXi2vHveSiH7gAXy4HfFfyxI RxmgAb/Ef4rnqbdXy+assEfU0jPazy27jsWYhJfCBf24C596dkjR1+7l3B6XoNj/ Rm6Cwi9F+fykxQ0RpuDzAIzBkZw9ws0AzL75EUvxYGx8lOEgXBeQlxRAG2bpRq2v GoQn+rGvQZa1eA13byNGeTOGxEpMw7NSRXvZ/eSUObVp15XyC4c0En9Im1qNtmCg o8Fk0R6sN8mToxt+P4QOwAoB5VkGyCORmQzh5l5WkgSb2tcOP352Y2zJZyef7sk7 aBy3CN0VKIE2EX9lmgnjKT/V1YbCqg== -----END CERTIFICATE-----Generated at Tue Jul 21 22:36:54 2026 by rpki-client