$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/db0aea73-2726-3172-98d5-6aa0f2b18513.roa File: db0aea73-2726-3172-98d5-6aa0f2b18513.roa (raw, json) Hash identifier: JeiK9wiU1w3EuIykKhCzK0BBaelBjiz3t/9BrpDIIxg= Subject key identifier: 7C:06:86:F9:C8:FD:22:FF:09:38:D5:0A:3E:BA:99:E4:88:C9:79:2D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA2362DEB7F081372328100 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/db0aea73-2726-3172-98d5-6aa0f2b18513.roa Signing time: Sun 19 Jul 2026 18:24:20 +0000 ROA not before: Sun 19 Jul 2026 18:24:20 +0000 ROA not after: Sat 17 Oct 2026 18:24:20 +0000 asID: 54858 IP address blocks: 104.152.104.0/22 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:36:2d:eb:7f:08:13:72:32:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:20 2026 GMT Not After : Oct 17 18:24:20 2026 GMT Subject: CN=c09f2ce0-20fa-48ee-83cc-8768f4dbae65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:30:02:cb:bd:dc:59:39:03:a7:62:a4:0a:3b: 51:e9:e7:07:51:2d:94:67:f3:f2:4f:b1:65:b3:ad: f0:04:42:8d:fa:9c:63:50:99:bc:9d:ed:f2:24:da: d6:2e:34:29:c5:59:66:42:72:8f:ba:24:75:00:a8: 4e:d8:8f:37:3d:ac:69:0c:d8:2e:c4:90:1a:48:3e: c1:ce:81:03:07:87:5d:eb:9d:43:53:18:67:3b:35: d0:a4:eb:b2:14:0e:75:76:56:d6:7a:6e:af:45:54: a6:27:13:28:e4:03:f9:ef:dc:2a:df:4a:b2:75:47: a1:a3:88:cc:73:79:14:73:fd:4b:4e:fe:66:a7:5e: 53:67:30:d6:c4:b2:da:24:f1:86:1d:eb:3e:4c:4c: e4:6b:f2:fe:51:a2:7e:94:92:9e:77:e3:78:60:0a: 33:ce:c0:d2:5a:b9:69:4f:4f:8b:41:50:b9:a1:13: 7e:19:94:79:18:3c:49:43:a4:5d:d1:ee:26:7f:c9: e1:e0:a5:da:90:4e:50:6b:42:df:05:5e:84:ff:66: 67:71:73:46:ab:1f:2a:e7:6c:cc:b5:a1:b6:7a:ea: c7:7d:a0:82:16:34:16:89:f5:f3:f6:02:04:21:65: 78:3d:4e:cf:ba:8a:8e:8c:af:a9:2c:80:9b:46:c1: f5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:06:86:F9:C8:FD:22:FF:09:38:D5:0A:3E:BA:99:E4:88:C9:79:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/db0aea73-2726-3172-98d5-6aa0f2b18513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.152.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:df:cd:40:82:56:b0:78:97:a4:3b:cc:9b:9e:6d:6b:2c:61: a9:c8:76:f3:c4:08:4e:d7:c2:fd:a5:d8:49:db:cf:fb:d9:9e: ad:60:0a:74:ef:73:34:37:69:fd:8a:4f:a0:f2:c7:6e:57:1f: f2:d0:d2:58:5e:41:b9:11:f7:09:e1:79:6b:8d:88:f9:e3:9b: 51:da:84:fe:5d:86:f5:33:d0:2e:83:51:38:d0:17:59:8f:c7: ae:cd:26:25:8c:a7:0e:b2:4f:f9:eb:8f:07:74:e0:d0:ee:20: 61:31:8e:d3:c5:c1:09:a0:ca:99:4a:7f:07:53:0e:9a:72:b8: 9d:a2:af:36:6e:bd:aa:ed:5e:ff:ef:40:38:a6:e0:46:e2:5e: 67:ec:61:a8:cd:83:ef:f5:72:4f:fa:7a:62:8a:9b:8b:79:de: 89:8f:b2:a4:5b:16:40:0c:1e:e0:06:42:bf:fe:47:d6:c0:0d: ba:1c:8d:8d:35:f6:45:e0:da:c5:38:ce:bb:91:98:ff:6d:82: 74:42:ea:bb:a9:1f:09:a5:c3:a5:3d:0d:a1:a5:4c:b5:cb:b2: d6:9f:bf:51:18:ac:fd:27:b8:b3:eb:01:03:62:86:31:0f:60: 3a:6a:ca:0b:91:db:d8:ac:b2:51:67:70:c7:b6:2f:f9:21:fb: 39:b7:f8:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6NojYt638IE3IygQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQyMFoXDTI2MTAxNzE4MjQyMFowLzEtMCsGA1UEAxMk YzA5ZjJjZTAtMjBmYS00OGVlLTgzY2MtODc2OGY0ZGJhZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzACy73cWTkDp2KkCjtR6ecHUS2UZ/PyT7Fl s63wBEKN+pxjUJm8ne3yJNrWLjQpxVlmQnKPuiR1AKhO2I83PaxpDNguxJAaSD7B zoEDB4dd651DUxhnOzXQpOuyFA51dlbWem6vRVSmJxMo5AP579wq30qydUeho4jM c3kUc/1LTv5mp15TZzDWxLLaJPGGHes+TEzka/L+UaJ+lJKed+N4YAozzsDSWrlp T0+LQVC5oRN+GZR5GDxJQ6Rd0e4mf8nh4KXakE5Qa0LfBV6E/2ZncXNGqx8q52zM taG2eurHfaCCFjQWifXz9gIEIWV4PU7PuoqOjK+pLICbRsH1qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwGhvnI/SL/CTjVCj66meSIyXktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZGIwYWVhNzMtMjcyNi0z MTcyLTk4ZDUtNmFhMGYyYjE4NTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHfzUCCVrB4l6Q7zJuebWssYanIdvPECE7Xwv2l2Enbz/vZnq1gCnTv czQ3af2KT6Dyx25XH/LQ0lheQbkR9wnheWuNiPnjm1HahP5dhvUz0C6DUTjQF1mP x67NJiWMpw6yT/nrjwd04NDuIGExjtPFwQmgyplKfwdTDppyuJ2irzZuvartXv/v QDim4EbiXmfsYajNg+/1ck/6emKKm4t53omPsqRbFkAMHuAGQr/+R9bADbocjY01 9kXg2sU4zruRmP9tgnRC6rupHwmlw6U9DaGlTLXLstafv1EYrP0nuLPrAQNihjEP YDpqyguR29isslFncMe2L/kh+zm3+Pc= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:26 2026 by rpki-client