$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/b3e95321-3610-3e01-8849-37595bbfccf0.roa File: b3e95321-3610-3e01-8849-37595bbfccf0.roa (raw, json) Hash identifier: MuP+A5EEUYPpZ1E6cEEPgcCcQICPSaHY9zxnbsCrB0g= Subject key identifier: 2C:16:FC:EC:18:FD:77:28:EC:B1:46:D4:E2:DD:A1:5C:B8:28:91:37 Certificate issuer: /CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Certificate serial: 010D0C9F4328584EE6573CCDC318F23FB9900300 Authority key identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/b3e95321-3610-3e01-8849-37595bbfccf0.roa Signing time: Thu 20 Aug 2026 13:00:12 +0000 ROA not before: Thu 20 Aug 2026 13:00:12 +0000 ROA not after: Wed 18 Nov 2026 14:00:12 +0000 asID: 400304 IP address blocks: 104.204.64.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:57:3c:cd:c3:18:f2:3f:b9:90:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Validity Not Before: Aug 20 13:00:12 2026 GMT Not After : Nov 18 14:00:12 2026 GMT Subject: CN=0b7fe5f3-192a-402b-9a59-4b064374e48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:23:0e:b4:cf:07:cd:c0:df:5e:50:71:36:79: ab:30:65:a5:92:50:5a:54:f7:f1:35:62:31:9e:83: 18:60:3e:3e:e1:1e:d8:d4:f1:4b:5d:6d:ee:5a:66: 10:0e:12:05:38:7b:7e:43:70:ce:08:de:4a:4a:1f: 38:2f:94:dd:b2:a4:e1:38:4f:4d:ab:29:ab:d5:98: a6:b3:fe:ef:3f:a1:de:5a:59:44:c2:39:15:3e:07: a2:0e:1e:66:98:9c:78:81:f7:29:e7:03:5f:28:96: 27:98:3d:20:73:c2:0d:65:11:64:70:21:b4:d7:72: 5e:f5:b7:5f:4c:ff:f8:84:96:90:d9:f8:08:e1:d3: 43:95:52:1d:22:87:03:59:73:f5:87:ff:7c:d8:c7: 14:b8:0a:c7:55:81:28:66:cd:82:bd:a8:f4:17:a7: 59:d1:bf:90:14:67:65:df:e2:a9:ba:3b:0d:42:5f: 48:88:e6:59:6a:c7:dc:65:b8:6b:ed:53:d4:9d:df: 72:6c:40:59:9a:b9:45:15:02:10:ca:48:6b:1d:1b: e5:08:61:46:23:62:0d:e0:ef:b3:d5:02:e4:ac:60: 62:34:f5:20:b3:ff:5a:6e:f6:db:22:94:74:15:9b: e0:5f:51:b4:ad:f5:49:e1:57:61:3c:ab:a9:52:7d: da:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:16:FC:EC:18:FD:77:28:EC:B1:46:D4:E2:DD:A1:5C:B8:28:91:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/b3e95321-3610-3e01-8849-37595bbfccf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl X509v3 Authority Key Identifier: keyid:C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer sbgp-ipAddrBlock: critical IPv4: 104.204.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:16:a1:7b:bb:bd:77:f6:2e:8c:3e:9c:85:c3:20:32:ab:71: 8a:40:72:96:2a:56:d0:42:4b:90:e3:3f:e9:73:f5:83:5c:ce: f2:19:ca:27:86:6a:57:96:30:9d:00:79:ee:8b:4d:85:6f:f7: f1:f6:d6:e9:f1:ff:a7:53:56:50:05:26:34:e7:6f:a7:d4:54: 08:4e:d8:8d:db:7d:ab:51:99:c6:6d:c6:7d:90:fb:02:3c:88: d1:f1:4b:a2:f4:36:ac:cf:0f:07:0b:f1:f8:7a:0d:07:4d:6d: 4b:f2:29:fa:4a:a6:ab:8e:fa:47:12:c5:8e:1f:58:d1:24:c9: 61:4d:b4:e3:7c:cf:01:37:86:16:b3:c4:99:90:64:9c:60:d7: 30:1d:29:d2:a9:bd:a3:83:6e:bf:e6:44:85:cf:f9:af:a6:0c: 2e:11:46:68:36:af:8c:bc:4d:aa:6e:66:bf:da:2f:ae:d6:c9: a3:77:7c:17:f7:cf:1b:aa:18:2f:e7:49:ae:73:e4:04:6f:8d: e4:a0:c8:35:c5:ff:78:87:5a:40:db:24:ae:31:b3:4c:26:c7: f3:b8:4c:30:e5:7c:07:9a:fb:a5:2b:d7:63:4a:6f:e8:f4:20: 38:b9:af:b1:95:01:05:ff:fb:1d:b5:91:44:de:2a:75:cc:53: 8a:ef:43:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7mVzzNwxjyP7mQAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1N2ZkMTgtM2M2NS00M2EzLTk2YzEtYTZmZTYxMDI4 YzcyMB4XDTI2MDgyMDEzMDAxMloXDTI2MTExODE0MDAxMlowLzEtMCsGA1UEAxMk MGI3ZmU1ZjMtMTkyYS00MDJiLTlhNTktNGIwNjQzNzRlNDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSMOtM8HzcDfXlBxNnmrMGWlklBaVPfxNWIx noMYYD4+4R7Y1PFLXW3uWmYQDhIFOHt+Q3DOCN5KSh84L5TdsqThOE9Nqymr1Zim s/7vP6HeWllEwjkVPgeiDh5mmJx4gfcp5wNfKJYnmD0gc8INZRFkcCG013Je9bdf TP/4hJaQ2fgI4dNDlVIdIocDWXP1h/982McUuArHVYEoZs2Cvaj0F6dZ0b+QFGdl 3+KpujsNQl9IiOZZasfcZbhr7VPUnd9ybEBZmrlFFQIQykhrHRvlCGFGI2IN4O+z 1QLkrGBiNPUgs/9abvbbIpR0FZvgX1G0rfVJ4VdhPKupUn3aHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwW/OwY/Xco7LFG1OLdoVy4KJE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3 ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEwMjhjNzIvYjNlOTUzMjEtMzYxMC0z ZTAxLTg4NDktMzc1OTViYmZjY2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU1N2ZkMTgtM2M2NS00M2EzLTk2 YzEtYTZmZTYxMDI4YzcyL2RlNTdmZDE4LTNjNjUtNDNhMy05NmMxLWE2ZmU2MTAy OGM3Mi5jcmwwHwYDVR0jBBgwFoAUyLwb9S9S6U+Vy3r8GAwCZEBMgj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZl NjEwMjhjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIWoXu7vXf2Low+nIXDIDKrcYpAcpYqVtBCS5DjP+lz9YNczvIZyieG aleWMJ0Aee6LTYVv9/H21unx/6dTVlAFJjTnb6fUVAhO2I3bfatRmcZtxn2Q+wI8 iNHxS6L0NqzPDwcL8fh6DQdNbUvyKfpKpquO+kcSxY4fWNEkyWFNtON8zwE3hhaz xJmQZJxg1zAdKdKpvaODbr/mRIXP+a+mDC4RRmg2r4y8TapuZr/aL67WyaN3fBf3 zxuqGC/nSa5z5ARvjeSgyDXF/3iHWkDbJK4xs0wmx/O4TDDlfAea+6Ur12NKb+j0 IDi5r7GVAQX/+x21kUTeKnXMU4rvQ6E= -----END CERTIFICATE-----Generated at Sun Sep 6 19:51:08 2026 by rpki-client