$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa File: 237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa (raw, json) Hash identifier: xiHbtWEQKT+lLNI6iScQWzGZ5udwLvCV1kHP+CiroGM= Subject key identifier: E3:B0:83:C7:49:56:5D:DC:E6:B2:8D:4F:1D:3E:ED:45:74:0D:6D:4C Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584ED861DD21480DC95D6E713180 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 25649 IP address blocks: 104.153.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:dd:21:48:0d:c9:5d:6e:71:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=62157f53-2af2-4208-aa47-fbc246c40b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:af:bb:5c:dc:62:12:44:a6:68:e2:47:fa: 3f:37:eb:1c:b2:38:0f:96:51:57:1c:41:c1:c2:26: ca:d1:f3:9d:3a:03:71:a4:fd:dd:a9:0e:20:cd:89: 8b:8b:47:36:4f:24:6e:a2:23:2a:bf:8b:42:50:23: 32:af:d7:92:59:dd:e9:27:10:14:6c:98:38:b8:5a: 76:e7:07:c9:80:76:0a:6c:02:4b:b1:38:5d:6a:06: 0c:0c:62:fc:01:60:b6:fa:ba:c7:d0:6c:34:24:87: 13:84:26:17:7f:e4:67:ea:0b:4d:8d:55:a6:0e:49: 27:bc:08:f4:9b:74:26:73:4b:65:a0:71:91:99:84: c7:d3:0c:f8:c2:a4:b2:64:00:6f:0d:9e:64:0b:52: 9e:70:29:2b:fe:ac:cc:d4:14:39:53:71:b6:70:b3: f2:54:42:4c:e2:60:89:d7:87:90:3f:95:83:5f:0c: fb:8a:6b:44:7b:70:7c:18:dc:3c:08:6a:c2:f7:e4: 24:1f:66:17:47:65:6d:53:68:37:58:71:85:23:3c: 74:1d:8d:6c:97:7f:ce:27:4e:d6:cb:6e:a6:44:88: fe:a1:fc:0b:7a:f1:d8:68:f0:72:ba:5b:43:e4:f0: 2d:3f:bd:17:4c:02:28:9f:3a:6f:88:6d:b0:f5:ef: e2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B0:83:C7:49:56:5D:DC:E6:B2:8D:4F:1D:3E:ED:45:74:0D:6D:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 104.153.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c5:f4:d6:83:81:06:a5:95:63:ad:ef:92:fe:67:5e:41:3e: de:eb:48:fd:84:15:b4:d6:c4:a4:a8:da:db:16:6d:a3:2e:78: 4b:11:33:fc:ae:d7:a9:e1:79:25:10:ed:3d:20:8e:55:82:91: 9f:ed:d0:d3:35:c9:8f:86:10:87:68:15:6d:06:0c:ef:48:ce: 29:30:44:21:e2:1d:3a:f0:0d:71:e6:52:1c:8c:a1:8a:5b:d6: 7e:09:d1:72:42:d6:25:5b:a8:12:38:42:4c:08:6b:24:e5:9b: c8:22:97:71:45:79:a8:99:81:39:3e:1e:83:38:f8:e0:22:18: 11:75:46:7d:20:62:53:94:4b:62:c1:c7:e5:cc:f5:e7:49:c3: 13:fb:1d:52:22:08:0f:a3:45:2e:a0:ff:1d:fa:c1:b1:a2:94: 8b:6e:9c:ff:4d:fa:4b:9c:99:8d:6c:86:f7:32:17:3a:bf:c8: c8:17:39:b3:00:b6:fe:68:f2:3b:ad:3b:f2:6f:74:b7:b2:8d: e6:50:17:de:b6:99:3c:3c:39:3a:f7:3c:1b:c7:f3:88:37:bd: 77:a6:c3:72:b7:1e:ed:94:85:ef:1b:bf:87:de:f8:2d:f5:f8: ee:3f:f0:eb:fb:2b:7f:34:5e:19:bf:ed:cc:8a:6d:a3:4a:52: 54:b9:1e:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYd0hSA3JXW5xMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NjIxNTdmNTMtMmFmMi00MjA4LWFhNDctZmJjMjQ2YzQwYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7Gvu1zcYhJEpmjiR/o/N+scsjgPllFXHEHB wibK0fOdOgNxpP3dqQ4gzYmLi0c2TyRuoiMqv4tCUCMyr9eSWd3pJxAUbJg4uFp2 5wfJgHYKbAJLsThdagYMDGL8AWC2+rrH0Gw0JIcThCYXf+Rn6gtNjVWmDkknvAj0 m3Qmc0tloHGRmYTH0wz4wqSyZABvDZ5kC1KecCkr/qzM1BQ5U3G2cLPyVEJM4mCJ 14eQP5WDXwz7imtEe3B8GNw8CGrC9+QkH2YXR2VtU2g3WHGFIzx0HY1sl3/OJ07W y26mRIj+ofwLevHYaPByultD5PAtP70XTAIonzpviG2w9e/iQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOwg8dJVl3c5rKNTx0+7UV0DW1MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvMjM3YTUwYzAtZDg1ZS0z YmEyLTg1MDMtNGVhODA5ZTRhNzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrF9NaDgQallWOt75L+Z15BPt7rSP2EFbTWxKSo2tsWbaMueEsRM/yu 16nheSUQ7T0gjlWCkZ/t0NM1yY+GEIdoFW0GDO9IzikwRCHiHTrwDXHmUhyMoYpb 1n4J0XJC1iVbqBI4QkwIayTlm8gil3FFeaiZgTk+HoM4+OAiGBF1Rn0gYlOUS2LB x+XM9edJwxP7HVIiCA+jRS6g/x36wbGilItunP9N+kucmY1shvcyFzq/yMgXObMA tv5o8jutO/JvdLeyjeZQF962mTw8OTr3PBvH84g3vXemw3K3Hu2Uhe8bv4fe+C31 +O4/8Ov7K380Xhm/7cyKbaNKUlS5Hj4= -----END CERTIFICATE-----Generated at Sat Aug 22 18:42:25 2026 by rpki-client