$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8e8b4958-6832-3cfc-b4b6-c6ee69655908.roa File: 8e8b4958-6832-3cfc-b4b6-c6ee69655908.roa (raw, json) Hash identifier: YOPEP7Xwy0R6TnF1uzgOnGdoV3TZaVIZqx90B898DmU= Subject key identifier: 89:7D:41:4E:3E:A1:58:5F:19:BD:4B:68:E9:30:14:BB:AD:8D:7F:06 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA22F861DC018263DE00B80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8e8b4958-6832-3cfc-b4b6-c6ee69655908.roa Signing time: Sun 19 Jul 2026 18:24:16 +0000 ROA not before: Sun 19 Jul 2026 18:24:16 +0000 ROA not after: Sat 17 Oct 2026 18:24:16 +0000 asID: 11404 IP address blocks: 104.152.104.0/22 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:2f:86:1d:c0:18:26:3d:e0:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:16 2026 GMT Not After : Oct 17 18:24:16 2026 GMT Subject: CN=70bb3468-e5e1-49b6-9185-f0801a8ec105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:39:8e:b6:db:dd:de:c1:e4:c4:80:46:1e:a8: b0:3f:3b:d4:10:77:2a:42:71:c9:de:de:23:a8:08: f5:22:54:15:1a:17:f1:af:b3:40:05:75:f0:a2:bd: 21:bd:9a:c2:58:77:8f:96:83:19:30:38:ca:0c:7f: ca:82:97:4e:02:3f:a4:9e:37:cc:c3:b4:48:94:24: 1a:d5:7d:82:20:c5:5c:39:38:9c:25:a2:60:a6:63: 00:9a:56:2d:85:00:dc:25:fe:56:f6:e7:02:5a:d7: 92:d4:e7:a1:8d:dd:90:15:c6:70:11:ca:26:6a:a3: 6c:b2:45:0f:da:86:1d:8a:0e:fc:c3:a4:1b:67:c7: 57:1e:3b:6b:cb:72:94:c8:91:47:70:54:17:b2:17: 7b:ec:a5:e2:71:53:a6:77:19:0b:87:6a:8a:a4:87: 79:76:7e:14:16:c1:ba:c6:7a:bf:5e:65:05:43:d1: 12:87:c0:37:f9:5e:dc:7b:ab:ab:51:09:01:92:5f: ba:3e:bf:b9:16:38:06:44:25:d1:d6:d7:ac:95:70: 57:71:1e:80:c3:7d:ff:9d:e0:f5:af:38:06:40:2d: 37:53:3c:22:3d:a2:50:3a:57:53:45:0c:87:a1:b3: 84:ba:d4:6c:3e:bf:4f:36:f5:42:9f:b3:8b:9b:47: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7D:41:4E:3E:A1:58:5F:19:BD:4B:68:E9:30:14:BB:AD:8D:7F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8e8b4958-6832-3cfc-b4b6-c6ee69655908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.152.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:30:07:eb:84:b6:8b:4c:dd:72:ad:24:da:4f:b7:fb:05:8f: 37:09:32:6b:a6:52:a7:6c:bb:54:c5:1e:aa:04:2b:44:7d:3c: 00:c0:e0:e3:da:31:3c:3c:fd:84:54:00:62:17:cc:d7:7c:be: 12:b2:ce:6a:23:75:ea:4d:6b:b2:80:c6:ea:9b:7d:4f:9d:46: 2d:ba:e5:eb:80:bd:b0:40:7b:8d:2f:83:a5:7b:6e:a2:43:14: 57:94:b5:68:4c:db:59:0e:1b:6d:23:ba:6b:00:06:cc:6f:9e: 10:ee:a7:ee:43:14:c7:13:e8:c3:d4:62:57:9a:bf:30:e5:4c: ce:5c:74:13:b5:f4:c3:0e:c7:58:bf:dd:75:2a:1a:06:c5:a2: 0f:03:fa:69:4f:82:92:b8:7c:36:56:28:be:2e:ea:73:f9:03: b0:a3:94:88:24:e1:6b:6d:d3:65:f0:c5:1c:86:e2:d1:31:e8: c5:ad:9a:0b:66:eb:04:16:e9:72:e2:9d:8e:82:48:50:7d:82: 5d:51:b7:cc:26:8a:77:64:17:76:d9:9d:10:b0:aa:96:e2:61: 98:c3:59:3c:77:9b:6b:02:b9:a2:2f:a0:64:d2:e6:52:a2:4f: ca:90:a8:45:d9:82:40:24:f8:3d:97:bb:9a:2e:bd:08:c2:6d: 85:e9:50:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Noi+GHcAYJj3gC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQxNloXDTI2MTAxNzE4MjQxNlowLzEtMCsGA1UEAxMk NzBiYjM0NjgtZTVlMS00OWI2LTkxODUtZjA4MDFhOGVjMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjmOttvd3sHkxIBGHqiwPzvUEHcqQnHJ3t4j qAj1IlQVGhfxr7NABXXwor0hvZrCWHePloMZMDjKDH/KgpdOAj+knjfMw7RIlCQa 1X2CIMVcOTicJaJgpmMAmlYthQDcJf5W9ucCWteS1Oehjd2QFcZwEcomaqNsskUP 2oYdig78w6QbZ8dXHjtry3KUyJFHcFQXshd77KXicVOmdxkLh2qKpId5dn4UFsG6 xnq/XmUFQ9ESh8A3+V7ce6urUQkBkl+6Pr+5FjgGRCXR1teslXBXcR6Aw33/neD1 rzgGQC03UzwiPaJQOldTRQyHobOEutRsPr9PNvVCn7OLm0c5LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIl9QU4+oVhfGb1LaOkwFLutjX8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOGU4YjQ5NTgtNjgzMi0z Y2ZjLWI0YjYtYzZlZTY5NjU1OTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUwB+uEtotM3XKtJNpPt/sFjzcJMmumUqdsu1TFHqoEK0R9PADA4OPa MTw8/YRUAGIXzNd8vhKyzmojdepNa7KAxuqbfU+dRi265euAvbBAe40vg6V7bqJD FFeUtWhM21kOG20jumsABsxvnhDup+5DFMcT6MPUYleavzDlTM5cdBO19MMOx1i/ 3XUqGgbFog8D+mlPgpK4fDZWKL4u6nP5A7CjlIgk4Wtt02XwxRyG4tEx6MWtmgtm 6wQW6XLinY6CSFB9gl1Rt8wmindkF3bZnRCwqpbiYZjDWTx3m2sCuaIvoGTS5lKi T8qQqEXZgkAk+D2Xu5ouvQjCbYXpUFE= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:33 2026 by rpki-client