$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/d1087e91-df5b-397b-914d-19b3b91f8595.roa File: d1087e91-df5b-397b-914d-19b3b91f8595.roa (raw, json) Hash identifier: JnhUU+V5cN3mE+8iuUJojgZ8uThS+yk+SbPbC7OkqqE= Subject key identifier: 7D:57:13:37:E0:D0:73:EF:AA:5F:D2:A1:92:22:8D:79:AF:63:29:42 Certificate issuer: /CN=b40433ec-94a2-4c25-adea-c7cb2bd2bb1b Certificate serial: 010D0C9F4328584E6144B05C9867492A72041700 Authority key identifier: D1:F0:E4:49:18:3A:E3:63:CC:22:68:CD:F4:46:C3:95:09:BA:75:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/d1087e91-df5b-397b-914d-19b3b91f8595.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 63089 IP address blocks: 104.156.16.0/20 maxlen: 24 104.243.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:b0:5c:98:67:49:2a:72:04:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40433ec-94a2-4c25-adea-c7cb2bd2bb1b Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=0b8614a8-739e-4cca-9089-66a6d802e040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e1:b1:53:8c:2e:60:e7:1f:92:56:95:89:f0: 3c:6c:b4:6b:f3:d0:b9:49:34:1b:63:77:12:2b:ff: 3e:ff:7b:e1:85:ab:4b:42:96:e2:8a:8f:b1:2a:df: 8f:8b:6d:df:72:74:c2:ee:55:f0:3e:47:0b:ca:4a: 38:9c:d3:1d:fa:f6:1e:f6:58:cb:d9:7e:02:49:6c: 16:d0:9c:a9:20:98:e6:2a:c4:f9:c1:a0:65:39:f5: 9b:b0:16:ad:be:fa:ba:15:a2:f6:69:e4:ed:aa:d6: c5:5b:c8:3d:df:54:0d:81:75:48:d9:f9:d5:b7:03: ff:67:2b:cd:ea:86:f9:96:86:c9:f8:8f:76:3e:40: 23:e4:f7:66:63:4f:b6:b1:10:5d:a2:9e:95:ae:c0: e7:dd:cd:6f:8e:d2:f0:03:6e:0b:8c:60:2f:06:fe: 3d:53:af:4c:c2:92:90:8e:50:d2:6c:b6:f8:4c:57: fe:58:96:d7:39:42:7c:d6:22:fb:aa:aa:c9:00:0d: 3f:61:10:f3:d7:ca:d4:20:ac:6f:9e:15:1c:a1:eb: e0:32:69:a7:be:2a:60:4e:32:5a:03:a9:60:6f:a2: a1:15:e0:59:93:a0:44:c8:e5:e1:76:b5:1d:ba:f6: fb:b3:ea:bc:a8:1e:1f:a5:b8:bc:33:bd:aa:bb:57: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:57:13:37:E0:D0:73:EF:AA:5F:D2:A1:92:22:8D:79:AF:63:29:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/d1087e91-df5b-397b-914d-19b3b91f8595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.crl X509v3 Authority Key Identifier: keyid:D1:F0:E4:49:18:3A:E3:63:CC:22:68:CD:F4:46:C3:95:09:BA:75:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.cer sbgp-ipAddrBlock: critical IPv4: 104.156.16.0/20 104.243.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1d:34:0d:ac:c0:2e:c5:56:fb:50:e6:4c:e6:c8:37:d0:c3: 48:fe:38:a6:6a:4f:18:90:e3:70:e6:fe:a9:c9:24:99:d4:57: 17:7a:01:39:1b:7e:8c:92:06:e6:6c:3d:1d:fc:0f:07:61:63: 81:1d:ef:d2:45:c7:45:3e:cf:2f:ae:09:12:d6:36:c0:71:5d: 89:ce:e0:28:a5:7f:90:30:04:f8:b7:c6:69:35:9c:a1:5e:31: 7d:0b:07:15:c3:ed:51:c6:a4:d3:d7:6a:09:7a:9f:44:9e:c9: 38:31:d7:2a:95:a5:1b:bb:6d:bb:d0:44:4a:6c:22:74:1d:53: 6e:99:d8:80:a7:39:cc:22:07:97:02:9b:41:4a:db:bb:39:89: 6f:26:00:85:c7:5d:9b:b5:d5:b8:b3:b5:f0:64:c9:be:f0:81: e3:99:31:2a:02:b1:ec:44:7d:c1:03:49:d7:5c:cd:22:0d:56: 22:bf:9e:d5:b2:47:d8:6c:77:34:98:b2:e8:cc:0c:c3:51:52: fb:86:a4:bd:1e:75:e7:d3:ab:fd:1b:20:12:04:8e:a2:e9:2e: fd:3b:78:4c:aa:c5:be:92:65:6f:72:59:63:09:5b:31:77:4d: bd:cd:aa:69:61:0b:c4:32:f4:30:29:7f:49:6d:71:6b:13:ae: 25:a6:f3:b8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5hRLBcmGdJKnIEFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQwNDMzZWMtOTRhMi00YzI1LWFkZWEtYzdjYjJiZDJi YjFiMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk MGI4NjE0YTgtNzM5ZS00Y2NhLTkwODktNjZhNmQ4MDJlMDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOGxU4wuYOcfklaVifA8bLRr89C5STQbY3cS K/8+/3vhhatLQpbiio+xKt+Pi23fcnTC7lXwPkcLyko4nNMd+vYe9ljL2X4CSWwW 0JypIJjmKsT5waBlOfWbsBatvvq6FaL2aeTtqtbFW8g931QNgXVI2fnVtwP/ZyvN 6ob5lobJ+I92PkAj5PdmY0+2sRBdop6VrsDn3c1vjtLwA24LjGAvBv49U69MwpKQ jlDSbLb4TFf+WJbXOUJ81iL7qqrJAA0/YRDz18rUIKxvnhUcoevgMmmnvipgTjJa A6lgb6KhFeBZk6BEyOXhdrUduvb7s+q8qB4fpbi8M72qu1fIYQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFH1XEzfg0HPvql/SoZIijXmvYylCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNDA0 MzNlYy05NGEyLTRjMjUtYWRlYS1jN2NiMmJkMmJiMWIvZDEwODdlOTEtZGY1Yi0z OTdiLTkxNGQtMTliM2I5MWY4NTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjQwNDMzZWMtOTRhMi00YzI1LWFk ZWEtYzdjYjJiZDJiYjFiL2I0MDQzM2VjLTk0YTItNGMyNS1hZGVhLWM3Y2IyYmQy YmIxYi5jcmwwHwYDVR0jBBgwFoAU0fDkSRg642PMImjN9EbDlQm6dbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNDA0MzNlYy05NGEyLTRjMjUtYWRlYS1jN2Ni MmJkMmJiMWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEaJwQAwQE aPOwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABYdNA2swC7FVvtQ5kzmyDfQw0j+OKZqTxiQ43Dm/qnJJJnU Vxd6ATkbfoySBuZsPR38DwdhY4Ed79JFx0U+zy+uCRLWNsBxXYnO4Cilf5AwBPi3 xmk1nKFeMX0LBxXD7VHGpNPXagl6n0SeyTgx1yqVpRu7bbvQREpsInQdU26Z2ICn OcwiB5cCm0FK27s5iW8mAIXHXZu11biztfBkyb7wgeOZMSoCsexEfcEDSddczSIN ViK/ntWyR9hsdzSYsujMDMNRUvuGpL0edefTq/0bIBIEjqLpLv07eEyqxb6SZW9y WWMJWzF3Tb3NqmlhC8Qy9DApf0ltcWsTriWm87g= -----END CERTIFICATE-----Generated at Sun Jul 12 23:46:22 2026 by rpki-client