$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/aa619ae4-c051-3154-953a-a049c92a68f3.roa File: aa619ae4-c051-3154-953a-a049c92a68f3.roa (raw, json) Hash identifier: JP28k3e5u5uA+/6//MHGexLP5yAin8BUwM1uZuXv7/8= Subject key identifier: 17:F1:88:AC:F0:1A:8F:83:BF:10:82:EA:7A:47:7C:47:53:68:A4:6C Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA22FC83A3CD99B344B79C0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/aa619ae4-c051-3154-953a-a049c92a68f3.roa Signing time: Sun 19 Jul 2026 18:24:17 +0000 ROA not before: Sun 19 Jul 2026 18:24:17 +0000 ROA not after: Sat 17 Oct 2026 18:24:17 +0000 asID: 11404 IP address blocks: 104.220.0.0/16 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:2f:c8:3a:3c:d9:9b:34:4b:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:17 2026 GMT Not After : Oct 17 18:24:17 2026 GMT Subject: CN=4d45e5b7-f4f7-4d55-990e-91075450011e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4c:5b:58:14:d6:ea:78:7f:75:78:af:0f:7f: 4f:fe:ca:52:20:90:03:b7:af:6f:6d:47:8b:4f:90: 8f:01:c1:63:27:c0:4f:90:2f:e8:20:ad:7d:7a:7d: 68:52:38:e4:1b:bd:7c:cb:f6:ad:cf:f8:d4:fc:88: d5:a4:78:f7:50:56:5d:a7:3d:85:d7:91:07:1f:4f: cc:e1:c8:d1:7a:fa:71:46:7d:a6:13:d6:7a:e9:b7: 82:53:5f:91:ec:87:55:fa:b9:be:a6:46:8d:66:45: e2:8c:0e:81:07:e4:cc:60:f4:0c:10:5c:37:06:a8: d8:c7:87:8d:e6:5c:d4:a3:3c:42:37:4a:2e:6e:63: 53:92:39:82:88:a3:a3:29:8d:46:08:dc:31:0c:2f: d3:bc:b9:77:70:e6:25:3d:c2:9c:d7:90:9b:df:ea: 23:03:9c:23:55:01:e9:e6:5b:e5:cb:88:00:d6:9f: a5:83:61:46:7b:dd:91:fd:7a:ff:67:86:41:30:e3: aa:f2:b2:3f:71:f6:97:d6:5a:d7:f2:ca:75:2c:6d: 70:a7:1c:f9:31:ed:a9:de:b5:a0:37:db:16:00:ed: 0f:36:ec:61:0c:df:93:ac:cf:a1:73:b4:c5:ec:c9: 65:27:fa:8c:d6:9b:76:38:fd:21:91:4f:64:8b:de: 80:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F1:88:AC:F0:1A:8F:83:BF:10:82:EA:7A:47:7C:47:53:68:A4:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/aa619ae4-c051-3154-953a-a049c92a68f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:39:30:5e:7b:33:9d:75:65:44:cf:a7:5a:a4:fc:4a:0f:e9: 88:55:6b:20:da:81:2a:7b:5d:7b:7f:30:98:17:1f:4b:24:9b: 7b:10:89:4e:44:24:4f:df:6a:b3:d3:5c:39:41:83:5f:4c:52: 12:ea:a7:18:f3:3a:2b:f8:5e:89:9d:60:04:cf:c1:94:c7:43: fd:d6:76:f9:77:f9:67:80:bf:d8:dd:2d:51:d9:4a:3b:e8:15: e9:07:26:bd:b0:74:46:16:42:9e:a2:cf:12:d1:24:47:a9:f0: 44:cf:80:19:86:31:c1:dc:87:25:f0:52:cb:ff:73:0c:c4:07: 1e:b3:eb:cc:53:a2:bc:1e:f8:93:f7:9c:36:e2:1b:e5:3d:09: 4d:93:fb:de:88:c6:ae:65:11:e8:75:e8:56:e3:67:e4:b9:04: 9d:c2:3b:a7:d0:a4:d6:85:ce:af:09:60:19:71:3f:44:70:8c: d3:58:5c:75:9a:63:3f:24:ff:07:5c:e0:c5:b6:97:e8:2a:f3: 43:50:21:74:15:94:81:ff:dd:9d:fa:0f:2b:01:b0:62:d2:f7: ae:08:21:c4:70:5d:62:df:37:eb:c0:d8:d4:6e:b4:95:01:4e: 31:9b:d6:22:1e:ed:20:2e:16:d1:5d:21:80:bd:23:42:e8:a3: ad:d8:f1:b9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6Noi/IOjzZmzRLecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQxN1oXDTI2MTAxNzE4MjQxN1owLzEtMCsGA1UEAxMk NGQ0NWU1YjctZjRmNy00ZDU1LTk5MGUtOTEwNzU0NTAwMTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0xbWBTW6nh/dXivD39P/spSIJADt69vbUeL T5CPAcFjJ8BPkC/oIK19en1oUjjkG718y/atz/jU/IjVpHj3UFZdpz2F15EHH0/M 4cjRevpxRn2mE9Z66beCU1+R7IdV+rm+pkaNZkXijA6BB+TMYPQMEFw3BqjYx4eN 5lzUozxCN0oubmNTkjmCiKOjKY1GCNwxDC/TvLl3cOYlPcKc15Cb3+ojA5wjVQHp 5lvly4gA1p+lg2FGe92R/Xr/Z4ZBMOOq8rI/cfaX1lrX8sp1LG1wpxz5Me2p3rWg N9sWAO0PNuxhDN+TrM+hc7TF7MllJ/qM1pt2OP0hkU9ki96AGQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBfxiKzwGo+DvxCC6npHfEdTaKRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYWE2MTlhZTQtYzA1MS0z MTU0LTk1M2EtYTA0OWM5MmE2OGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAaNwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABzkwXnsznXVlRM+nWqT8Sg/piFVrINqBKntde38wmBcfSySbexCJTkQk T99qs9NcOUGDX0xSEuqnGPM6K/heiZ1gBM/BlMdD/dZ2+Xf5Z4C/2N0tUdlKO+gV 6QcmvbB0RhZCnqLPEtEkR6nwRM+AGYYxwdyHJfBSy/9zDMQHHrPrzFOivB74k/ec NuIb5T0JTZP73ojGrmUR6HXoVuNn5LkEncI7p9Ck1oXOrwlgGXE/RHCM01hcdZpj PyT/B1zgxbaX6CrzQ1AhdBWUgf/dnfoPKwGwYtL3rgghxHBdYt8368DY1G60lQFO MZvWIh7tIC4W0V0hgL0jQuijrdjxuQ== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:28 2026 by rpki-client