$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/ff28fe0a-8825-3849-aa9d-8532ce44050e.roa File: ff28fe0a-8825-3849-aa9d-8532ce44050e.roa (raw, json) Hash identifier: UsO1WFPssyppfZzN3zqLlk6fWAjrgD4uNMwUnuI3CGA= Subject key identifier: 3A:6F:19:43:5C:11:C9:03:FF:12:62:7E:77:93:65:48:88:B8:37:92 Certificate issuer: /CN=1ff04835-864a-40da-a12f-dcad0faabb8c Certificate serial: 010D0C9F4328584E51E9FF4CDE3045BA7BD99E80 Authority key identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/ff28fe0a-8825-3849-aa9d-8532ce44050e.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 7029 IP address blocks: 104.152.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:ff:4c:de:30:45:ba:7b:d9:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff04835-864a-40da-a12f-dcad0faabb8c Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=caf81023-7616-43cb-ac5a-6f2b6d476210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:fc:6d:38:15:56:ab:fc:ce:ce:37:70:50: 0f:0d:c0:67:a0:6f:8e:ac:bd:df:b8:b6:e4:41:61: e1:39:41:1c:11:a5:ee:18:50:54:3e:41:7d:c0:d7: c9:68:9f:94:68:ce:e9:6d:f7:7a:e1:26:58:95:70: 1a:36:8e:b5:42:e7:18:16:67:51:c1:2f:0f:fa:ea: a7:ac:f2:1a:69:b0:24:8e:9d:99:04:c3:cc:8a:85: ea:d8:c8:40:6e:25:2a:a2:fd:71:18:d9:12:56:99: db:37:8c:1d:1e:b4:00:f5:d7:dc:d5:bd:6a:da:aa: 52:82:62:45:3c:98:17:be:d8:09:4b:cb:53:be:a3: 89:bb:49:e5:51:bf:6d:7e:e2:34:15:4f:23:d9:95: e3:32:e5:87:70:fb:bd:0c:15:26:9b:29:2e:f7:08: ee:f7:9a:33:d4:35:77:ca:ca:c4:f7:72:5d:0c:80: ad:84:b5:ad:d6:5a:e6:e1:b0:ed:9a:74:e6:33:b2: 02:37:52:9b:33:b6:e3:91:ee:4c:a1:b6:06:da:b9: cf:ab:38:79:41:e4:89:61:38:9f:09:6d:ce:10:a4: fc:2c:90:9a:02:ce:03:4a:55:df:8a:9a:f0:95:8a: 8b:c9:05:95:09:60:a0:36:6c:02:87:23:1a:02:2d: fb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6F:19:43:5C:11:C9:03:FF:12:62:7E:77:93:65:48:88:B8:37:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/ff28fe0a-8825-3849-aa9d-8532ce44050e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl X509v3 Authority Key Identifier: keyid:73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer sbgp-ipAddrBlock: critical IPv4: 104.152.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:3b:5e:4b:e5:9b:73:b8:dc:f8:2a:71:fb:15:f2:a7:1b:ea: f1:b9:8b:f1:88:42:fc:70:a9:ff:27:f9:04:15:8d:0b:58:af: 25:7d:9b:c8:b8:6d:7e:97:93:1f:f6:d9:6b:16:91:56:7a:58: e6:fc:a2:22:84:33:83:1d:9d:7b:41:59:4a:62:ab:5b:76:eb: 76:96:10:d7:5d:9b:c6:52:ff:56:2f:30:c3:6b:80:63:da:cd: 29:48:ac:e0:fa:26:1b:50:e9:9e:a2:1a:08:25:3a:40:f8:b3: 9d:2b:7c:1c:2f:65:16:1f:d0:26:67:bd:a4:bb:81:ba:7d:bd: e3:e2:56:e2:c2:21:84:d6:ba:91:d1:ea:41:28:15:b1:73:a1: 31:95:ad:55:cf:a5:80:1c:97:71:08:0a:34:69:74:36:70:5c: 87:12:68:9a:09:79:b7:ca:41:5c:52:9c:d9:94:f3:3e:e7:11: 5b:c9:0b:dd:2b:e6:fd:a4:6e:39:da:d0:59:72:8d:22:30:cf: 49:6f:30:7b:23:32:31:23:f4:c4:d8:b3:40:64:f8:18:79:2f: bc:ba:fa:ca:62:4a:b4:63:53:84:8f:f1:0e:9a:d5:1d:3e:44: 8d:cf:97:cf:cb:73:84:fd:3e:59:24:a4:9c:25:0d:06:2c:da: e2:ba:79:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6f9M3jBFunvZnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmMDQ4MzUtODY0YS00MGRhLWExMmYtZGNhZDBmYWFi YjhjMB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk Y2FmODEwMjMtNzYxNi00M2NiLWFjNWEtNmYyYjZkNDc2MjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2j8bTgVVqv8zs43cFAPDcBnoG+OrL3fuLbk QWHhOUEcEaXuGFBUPkF9wNfJaJ+UaM7pbfd64SZYlXAaNo61QucYFmdRwS8P+uqn rPIaabAkjp2ZBMPMioXq2MhAbiUqov1xGNkSVpnbN4wdHrQA9dfc1b1q2qpSgmJF PJgXvtgJS8tTvqOJu0nlUb9tfuI0FU8j2ZXjMuWHcPu9DBUmmyku9wju95oz1DV3 ysrE93JdDICthLWt1lrm4bDtmnTmM7ICN1KbM7bjke5MobYG2rnPqzh5QeSJYTif CW3OEKT8LJCaAs4DSlXfiprwlYqLyQWVCWCgNmwChyMaAi37/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpvGUNcEckD/xJifneTZUiIuDeSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYw NDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZhYWJiOGMvZmYyOGZlMGEtODgyNS0z ODQ5LWFhOWQtODUzMmNlNDQwNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZmMDQ4MzUtODY0YS00MGRhLWEx MmYtZGNhZDBmYWFiYjhjLzFmZjA0ODM1LTg2NGEtNDBkYS1hMTJmLWRjYWQwZmFh YmI4Yy5jcmwwHwYDVR0jBBgwFoAUcw/uVLxy0c4qnDR9x78gVvTym4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2Fk MGZhYWJiOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJk7Xkvlm3O43PgqcfsV8qcb6vG5i/GIQvxwqf8n+QQVjQtYryV9m8i4 bX6Xkx/22WsWkVZ6WOb8oiKEM4MdnXtBWUpiq1t263aWENddm8ZS/1YvMMNrgGPa zSlIrOD6JhtQ6Z6iGgglOkD4s50rfBwvZRYf0CZnvaS7gbp9vePiVuLCIYTWupHR 6kEoFbFzoTGVrVXPpYAcl3EICjRpdDZwXIcSaJoJebfKQVxSnNmU8z7nEVvJC90r 5v2kbjna0FlyjSIwz0lvMHsjMjEj9MTYs0Bk+Bh5L7y6+spiSrRjU4SP8Q6a1R0+ RI3Pl8/Lc4T9PlkkpJwlDQYs2uK6eTQ= -----END CERTIFICATE-----Generated at Sat Jul 18 01:19:13 2026 by rpki-client