$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/ff28fe0a-8825-3849-aa9d-8532ce44050e.roa File: ff28fe0a-8825-3849-aa9d-8532ce44050e.roa (raw, json) Hash identifier: c6QQ55Uc8zX6MOFKn8uqsY+E655WLai84Q0CwN6+VaE= Subject key identifier: 6E:77:9B:4C:4B:CE:B9:66:96:29:14:57:0C:91:C9:C6:2B:14:A9:A6 Certificate issuer: /CN=1ff04835-864a-40da-a12f-dcad0faabb8c Certificate serial: 010D0C9F4328584EF44CC9384A7D2C7FD5C74680 Authority key identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/ff28fe0a-8825-3849-aa9d-8532ce44050e.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 7029 IP address blocks: 104.152.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c9:38:4a:7d:2c:7f:d5:c7:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff04835-864a-40da-a12f-dcad0faabb8c Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=594b4430-8c2b-473b-be80-e7cb6fba2aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6d:77:60:29:be:fd:6c:13:dd:a9:11:cc:d6: 12:73:fb:73:8b:04:3b:88:6d:25:8c:3b:bc:e7:85: e6:c0:4a:be:0c:f8:2a:fa:8a:da:73:08:d3:5a:95: a6:77:57:62:8b:52:89:42:93:b6:b0:f2:0c:c6:f0: 2c:f5:97:ce:9d:3f:31:28:dd:4b:55:b9:26:30:5a: 7d:11:21:6f:41:d5:dd:a8:38:13:76:c5:c3:4c:5a: 18:29:bf:13:e2:43:50:db:13:7d:c6:4d:d8:a0:5d: 75:04:94:ca:98:9a:81:c7:65:49:3d:b3:de:3a:0b: 34:74:4b:9c:be:c7:8b:52:65:18:34:15:bc:73:64: ca:87:91:d2:e8:70:c9:fc:5f:6c:0a:f7:cf:51:8d: 85:9b:f8:94:ff:ec:53:ce:aa:63:bc:af:32:2e:2c: ed:9f:7d:1d:66:6d:81:90:cb:48:c4:99:f0:94:b8: 36:25:0f:ce:bf:9b:52:67:7f:f1:54:e1:98:24:ba: 59:7f:6f:1b:26:7c:87:67:d8:18:27:6a:cb:f2:bb: 9d:1d:24:39:df:18:a8:d6:ed:89:c0:eb:fd:46:35: d6:5f:d7:4f:d9:01:8e:e5:87:c6:21:06:0c:04:45: ff:ec:05:72:8c:c6:fe:f4:14:7a:35:85:2a:cb:12: 29:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:77:9B:4C:4B:CE:B9:66:96:29:14:57:0C:91:C9:C6:2B:14:A9:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/ff28fe0a-8825-3849-aa9d-8532ce44050e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl X509v3 Authority Key Identifier: keyid:73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer sbgp-ipAddrBlock: critical IPv4: 104.152.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:4d:3a:23:c6:0b:25:96:dd:49:dd:f3:b4:be:5b:cf:a1:36: e6:6b:9d:a6:30:a7:4d:b7:ac:fc:a5:c5:0e:91:de:0f:54:34: bf:bf:f1:32:52:a8:fa:37:d5:e3:c9:09:bc:81:8a:c7:73:5c: 88:c0:3d:50:f6:6f:c5:d9:af:0d:a5:40:46:9e:d3:0d:5f:5b: a6:06:7b:5b:e7:e7:26:2c:fc:ab:df:e5:24:c5:9e:ac:82:4c: 20:53:81:2f:c6:c7:98:2e:da:2d:7d:19:5a:02:91:9f:0d:50: 2c:e6:f5:7a:0c:60:25:d9:64:10:69:6f:94:ce:16:50:0d:dc: 96:7e:e6:56:c4:43:4d:50:f8:f1:ef:e9:79:75:e5:7c:aa:29: 83:62:69:fb:e5:f2:97:e1:4e:2d:4c:e6:97:61:6d:c7:84:6a: 97:5e:d8:ee:7f:7e:08:e9:b8:3c:93:44:04:6b:d0:cc:d9:5c: f4:ca:dc:67:55:6c:a7:d9:a8:fd:63:6a:ba:09:42:60:15:55: 9a:73:19:9e:73:61:31:a9:70:a3:1d:0c:82:49:c4:19:af:69: fd:7e:ef:a9:89:c2:46:e4:d2:a2:9a:81:64:bb:9a:a0:de:73: 34:e9:f2:51:aa:b3:77:98:51:8f:07:1c:be:66:41:d1:b6:36: d0:7c:25:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMk4Sn0sf9XHRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmMDQ4MzUtODY0YS00MGRhLWExMmYtZGNhZDBmYWFi YjhjMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk NTk0YjQ0MzAtOGMyYi00NzNiLWJlODAtZTdjYjZmYmEyYWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv213YCm+/WwT3akRzNYSc/tziwQ7iG0ljDu8 54XmwEq+DPgq+oracwjTWpWmd1dii1KJQpO2sPIMxvAs9ZfOnT8xKN1LVbkmMFp9 ESFvQdXdqDgTdsXDTFoYKb8T4kNQ2xN9xk3YoF11BJTKmJqBx2VJPbPeOgs0dEuc vseLUmUYNBW8c2TKh5HS6HDJ/F9sCvfPUY2Fm/iU/+xTzqpjvK8yLiztn30dZm2B kMtIxJnwlLg2JQ/Ov5tSZ3/xVOGYJLpZf28bJnyHZ9gYJ2rL8rudHSQ53xio1u2J wOv9RjXWX9dP2QGO5YfGIQYMBEX/7AVyjMb+9BR6NYUqyxIpAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG53m0xLzrlmlikUVwyRycYrFKmmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYw NDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZhYWJiOGMvZmYyOGZlMGEtODgyNS0z ODQ5LWFhOWQtODUzMmNlNDQwNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZmMDQ4MzUtODY0YS00MGRhLWEx MmYtZGNhZDBmYWFiYjhjLzFmZjA0ODM1LTg2NGEtNDBkYS1hMTJmLWRjYWQwZmFh YmI4Yy5jcmwwHwYDVR0jBBgwFoAUcw/uVLxy0c4qnDR9x78gVvTym4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2Fk MGZhYWJiOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRNOiPGCyWW3Und87S+W8+hNuZrnaYwp023rPylxQ6R3g9UNL+/8TJS qPo31ePJCbyBisdzXIjAPVD2b8XZrw2lQEae0w1fW6YGe1vn5yYs/Kvf5STFnqyC TCBTgS/Gx5gu2i19GVoCkZ8NUCzm9XoMYCXZZBBpb5TOFlAN3JZ+5lbEQ01Q+PHv 6Xl15XyqKYNiafvl8pfhTi1M5pdhbceEapde2O5/fgjpuDyTRARr0MzZXPTK3GdV bKfZqP1jaroJQmAVVZpzGZ5zYTGpcKMdDIJJxBmvaf1+76mJwkbk0qKagWS7mqDe czTp8lGqs3eYUY8HHL5mQdG2NtB8JZc= -----END CERTIFICATE-----Generated at Tue Sep 1 03:43:27 2026 by rpki-client