$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa File: ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa (raw, json) Hash identifier: xBG217vBmcPntjaCnl0ZUqGXlynBlBCssdEriSbBprU= Subject key identifier: EF:57:13:CB:1B:39:5A:52:A9:33:FA:CD:2E:80:94:26:80:19:EE:92 Certificate issuer: /CN=a5ffb160-7d08-4282-966a-137e7328c1b0 Certificate serial: 010D0C9F4328584EB2B1B9E96D6C8F6F67979E70 Authority key identifier: 3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 63330 IP address blocks: 104.222.64.0/20 maxlen: 24 2605:e580::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:b9:e9:6d:6c:8f:6f:67:97:9e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ffb160-7d08-4282-966a-137e7328c1b0 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=8150d71b-8548-4986-97f7-47ce3bbcd498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:02:ee:00:b9:36:09:74:28:cd:7b:31:eb:df: 4a:ef:54:b4:6d:56:11:79:91:ff:e5:ba:bd:97:58: 81:4b:ed:32:d6:f9:48:ef:0d:c5:c6:df:42:03:71: f7:09:2a:d2:49:0b:cb:26:c7:f8:15:99:79:0c:bd: aa:b8:d9:94:f4:19:10:ed:09:0c:0f:85:9a:b8:09: 24:b9:7e:25:68:ef:7d:e7:48:75:4a:21:a4:fb:77: e5:66:dc:ee:cd:ea:e3:62:62:1f:ad:1e:82:8a:15: 8f:ff:6b:4f:3c:7d:bf:c4:a7:2c:cf:b2:f2:9e:c4: 05:24:ea:3c:eb:6d:48:ac:af:5e:72:9d:29:80:e3: 20:5e:4c:53:1c:99:6a:96:ec:35:1b:f6:05:0c:89: 38:db:06:79:69:b4:6a:37:65:ec:51:ef:7f:be:c7: a3:0e:e1:46:a2:de:93:3a:8b:ab:05:37:bc:62:ec: ba:62:76:be:62:e8:52:a9:90:1d:78:47:3c:ba:00: bc:4f:36:4a:ef:dc:cb:78:de:d6:10:d6:d0:ff:82: c2:fe:c9:f0:bf:60:c1:90:59:c4:dc:82:a7:30:98: 7c:66:21:82:f1:47:ed:aa:5e:c5:15:4c:de:3d:63: ae:8a:59:c0:af:05:0b:c5:63:51:3d:00:12:15:f5: 2b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:57:13:CB:1B:39:5A:52:A9:33:FA:CD:2E:80:94:26:80:19:EE:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.crl X509v3 Authority Key Identifier: keyid:3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer sbgp-ipAddrBlock: critical IPv4: 104.222.64.0/20 IPv6: 2605:e580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:88:ef:bd:4e:dc:ae:4e:d2:7e:c3:67:01:f1:d9:16:98:14: b4:25:cf:81:bc:fd:1a:ef:38:07:1b:51:29:08:dc:3a:83:03: 19:38:23:78:d9:a8:e7:3b:94:86:1d:ad:62:7e:61:ea:eb:ed: f7:9e:b3:62:77:7c:0a:95:d3:37:b9:fa:6f:d7:29:1e:2b:ff: df:6f:72:df:69:23:77:c9:b1:6f:fa:6e:f1:b8:17:e6:2f:ec: 9e:ef:14:9d:48:a3:f0:33:d5:85:65:80:a5:ee:3e:49:0d:b7: 25:68:b9:84:9b:7a:c4:fa:c4:21:cf:aa:05:aa:c8:ae:cf:c6: 64:3e:9b:f9:6d:64:4f:ef:b8:84:0c:df:7d:af:05:00:ed:e6: d8:b2:40:27:d9:b2:83:18:0e:76:d5:00:62:14:3b:c0:38:77: 48:6a:53:5e:57:c7:34:d8:f0:09:01:bd:15:dc:ea:99:ec:a2: ad:f7:8c:90:a2:33:a0:7b:2c:e3:22:b4:e1:d2:a8:1a:7d:fc: 9c:fa:62:eb:db:38:1e:28:30:4a:8f:49:6f:c0:1f:d5:93:05: eb:16:48:a4:65:5c:28:5f:e1:90:fa:0e:85:34:f5:3e:cf:4b: 21:59:5a:fb:3a:d2:25:4a:cf:b9:61:18:a2:e0:cb:c0:df:bc: bc:72:f1:81 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE6ysbnpbWyPb2eXnnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVmZmIxNjAtN2QwOC00MjgyLTk2NmEtMTM3ZTczMjhj MWIwMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ODE1MGQ3MWItODU0OC00OTg2LTk3ZjctNDdjZTNiYmNkNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjALuALk2CXQozXsx699K71S0bVYReZH/5bq9 l1iBS+0y1vlI7w3Fxt9CA3H3CSrSSQvLJsf4FZl5DL2quNmU9BkQ7QkMD4WauAkk uX4laO9950h1SiGk+3flZtzuzerjYmIfrR6CihWP/2tPPH2/xKcsz7LynsQFJOo8 621IrK9ecp0pgOMgXkxTHJlqluw1G/YFDIk42wZ5abRqN2XsUe9/vsejDuFGot6T OourBTe8Yuy6Yna+YuhSqZAdeEc8ugC8TzZK79zLeN7WENbQ/4LC/snwv2DBkFnE 3IKnMJh8ZiGC8Uftql7FFUzePWOuilnArwULxWNRPQASFfUriwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFO9XE8sbOVpSqTP6zS6AlCaAGe6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNWZm YjE2MC03ZDA4LTQyODItOTY2YS0xMzdlNzMyOGMxYjAvZWNlZmVhZGEtY2JkYi0z ZjhhLTlhYmUtNTBlYTM1YTcyOGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTVmZmIxNjAtN2QwOC00MjgyLTk2 NmEtMTM3ZTczMjhjMWIwL2E1ZmZiMTYwLTdkMDgtNDI4Mi05NjZhLTEzN2U3MzI4 YzFiMC5jcmwwHwYDVR0jBBgwFoAUPC5ArBlHHCOMQjlu0zXstrvl1jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNWZmYjE2MC03ZDA4LTQyODItOTY2YS0xMzdl NzMyOGMxYjAuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEaN5AMA0E AgACMAcDBQAmBeWAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAEOI771O3K5O0n7DZwHx2RaYFLQlz4G8/Rrv OAcbUSkI3DqDAxk4I3jZqOc7lIYdrWJ+Yerr7fees2J3fAqV0ze5+m/XKR4r/99v ct9pI3fJsW/6bvG4F+Yv7J7vFJ1Io/Az1YVlgKXuPkkNtyVouYSbesT6xCHPqgWq yK7PxmQ+m/ltZE/vuIQM332vBQDt5tiyQCfZsoMYDnbVAGIUO8A4d0hqU15XxzTY 8AkBvRXc6pnsoq33jJCiM6B7LOMitOHSqBp9/Jz6YuvbOB4oMEqPSW/AH9WTBesW SKRlXChf4ZD6DoU09T7PSyFZWvs60iVKz7lhGKLgy8DfvLxy8YE= -----END CERTIFICATE-----Generated at Fri Aug 21 02:49:16 2026 by rpki-client