$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f5927e98-6459-3f19-9b92-7b43a3669617.roa File: f5927e98-6459-3f19-9b92-7b43a3669617.roa (raw, json) Hash identifier: ksqOQoC6/x2gNJUwmQ7FU4IDcrVk3TZ6dr3/XDpiSK0= Subject key identifier: C1:6C:5C:F7:48:5F:58:86:42:02:53:B4:2B:D7:14:71:29:F3:EE:CA Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA23645375F812BDEF78540 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f5927e98-6459-3f19-9b92-7b43a3669617.roa Signing time: Sun 19 Jul 2026 18:24:20 +0000 ROA not before: Sun 19 Jul 2026 18:24:20 +0000 ROA not after: Sat 17 Oct 2026 18:24:20 +0000 asID: 54858 IP address blocks: 104.156.96.0/20 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:36:45:37:5f:81:2b:de:f7:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:20 2026 GMT Not After : Oct 17 18:24:20 2026 GMT Subject: CN=3c97199d-ff59-4051-aca5-158950552a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:08:9a:45:89:89:7b:2b:61:86:11:ca:49: ec:af:0d:94:2b:b4:b4:6b:fe:67:1f:d9:08:b1:c0: 82:eb:a5:1a:99:94:46:ca:57:08:8f:85:61:8c:43: 53:07:47:99:6f:4b:6b:43:35:a5:66:a4:6a:3b:0c: cd:70:9c:a7:54:ed:6e:7b:27:e3:82:b4:c5:3e:6e: 5a:6d:e9:98:53:0d:a3:cf:6c:2e:ed:76:ff:ad:8e: a0:88:b5:cb:c2:2f:0d:d8:ad:53:e7:1e:11:0e:62: f1:7f:91:6c:1a:14:02:c6:08:76:34:8b:c7:17:34: ea:7a:b3:32:f6:f9:68:f1:bc:83:84:54:d3:8d:45: 49:af:be:e6:88:43:98:63:db:95:43:04:0a:35:c2: b4:34:a1:c5:fc:9c:37:cd:48:04:c5:4d:24:f9:8e: 2a:c0:b3:8c:31:da:9c:1f:da:db:7c:6e:45:c3:9c: 73:d8:4d:7c:bd:a1:17:9f:60:20:f5:7b:d4:70:30: c8:f3:cc:47:ae:b7:22:ba:eb:be:5f:53:80:5d:e4: 85:59:e5:67:d6:11:34:2b:2b:27:51:46:5e:80:dc: 82:0d:1d:31:aa:c9:a7:1a:7c:cb:cb:d9:4e:96:29: 10:77:e5:04:2d:6f:2b:1f:aa:a8:0e:25:0c:cc:c6: eb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6C:5C:F7:48:5F:58:86:42:02:53:B4:2B:D7:14:71:29:F3:EE:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f5927e98-6459-3f19-9b92-7b43a3669617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.156.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9a:6e:47:99:81:ca:57:ec:c7:74:28:b0:ca:77:c5:f9:ce: b0:0a:9c:6d:36:5e:ea:50:c2:aa:93:03:74:78:3b:55:49:86: 7a:aa:47:12:13:5a:fe:fb:21:36:5f:32:b5:3e:c9:4f:c2:7d: c8:ad:ad:e8:89:80:e1:6e:92:db:56:fe:76:49:35:90:2f:90: a6:cc:6b:16:63:a5:93:9c:54:fb:1f:d6:52:f6:fa:e9:86:b3: 49:3e:72:10:27:6f:4d:73:80:5a:96:07:a3:20:28:bf:2c:e7: a4:96:0b:31:9b:73:b5:96:5e:73:0c:77:07:c0:2c:7b:7a:ab: 89:56:d2:2b:22:88:67:f9:d1:6c:4a:63:79:2d:2b:bc:38:2c: e9:e4:7f:6f:7a:1f:66:31:c1:55:26:39:bc:48:fc:39:a8:17: 8f:61:1d:ff:5a:0c:e7:41:42:0a:dd:5e:57:e9:0e:74:7b:e3: ae:8f:e4:75:90:8e:4e:f7:c1:0c:78:1c:c4:b2:a5:96:7a:31: cc:89:1c:83:52:c7:a7:73:26:22:2c:fe:60:e2:3a:52:4d:ed: 2c:f8:d2:f4:93:aa:5f:2f:17:14:7b:a0:2a:7a:d4:03:d4:9e: 1d:1a:38:72:ce:d6:76:92:12:bd:40:9a:64:71:ac:bc:b3:ce: b0:42:b2:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6NojZFN1+BK973hUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQyMFoXDTI2MTAxNzE4MjQyMFowLzEtMCsGA1UEAxMk M2M5NzE5OWQtZmY1OS00MDUxLWFjYTUtMTU4OTUwNTUyYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE0ImkWJiXsrYYYRyknsrw2UK7S0a/5nH9kI scCC66UamZRGylcIj4VhjENTB0eZb0trQzWlZqRqOwzNcJynVO1ueyfjgrTFPm5a bemYUw2jz2wu7Xb/rY6giLXLwi8N2K1T5x4RDmLxf5FsGhQCxgh2NIvHFzTqerMy 9vlo8byDhFTTjUVJr77miEOYY9uVQwQKNcK0NKHF/Jw3zUgExU0k+Y4qwLOMMdqc H9rbfG5Fw5xz2E18vaEXn2Ag9XvUcDDI88xHrrciuuu+X1OAXeSFWeVn1hE0Kysn UUZegNyCDR0xqsmnGnzLy9lOlikQd+UELW8rH6qoDiUMzMbrLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFsXPdIX1iGQgJTtCvXFHEp8+7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjU5MjdlOTgtNjQ1OS0z ZjE5LTliOTItN2I0M2EzNjY5NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSabkeZgcpX7Md0KLDKd8X5zrAKnG02XupQwqqTA3R4O1VJhnqqRxIT Wv77ITZfMrU+yU/CfcitreiJgOFukttW/nZJNZAvkKbMaxZjpZOcVPsf1lL2+umG s0k+chAnb01zgFqWB6MgKL8s56SWCzGbc7WWXnMMdwfALHt6q4lW0isiiGf50WxK Y3ktK7w4LOnkf296H2YxwVUmObxI/DmoF49hHf9aDOdBQgrdXlfpDnR7466P5HWQ jk73wQx4HMSypZZ6McyJHINSx6dzJiIs/mDiOlJN7Sz40vSTql8vFxR7oCp61APU nh0aOHLO1naSEr1AmmRxrLyzzrBCsiE= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:22 2026 by rpki-client