$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa File: 8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa (raw, json) Hash identifier: 92FQMjbjvpjYrGhwABwHNOhBZ606SIYc8Y3QmRzttP0= Subject key identifier: BE:C5:4E:B4:9F:56:D5:1D:57:C9:63:75:DA:70:EF:57:3E:70:E5:7D Certificate issuer: /CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Certificate serial: 010D0C9F4328584EAFE6F1C7C215502DB2143E80 Authority key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 21748 IP address blocks: 104.37.232.0/21 maxlen: 24 2606:8b40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:f1:c7:c2:15:50:2d:b2:14:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=6cab9351-60d1-4792-84d6-7ece1879087b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:ea:09:25:96:27:d9:0a:1d:a5:30:ac:25: 72:2d:c4:5f:b3:e2:b4:3c:28:17:46:07:9e:3c:52: 5f:07:c8:01:7d:64:22:5a:25:01:52:b0:19:c8:a8: 77:4a:48:db:29:d1:62:a8:92:2e:a1:4f:5d:4f:22: 5a:47:3a:33:d2:16:7a:80:ab:f8:7e:cd:06:d8:00: b6:2d:7c:45:1d:44:88:da:96:8a:92:2b:a7:37:30: 69:3f:4e:84:f7:f4:31:fe:e7:e6:fb:3b:53:24:ba: 37:bc:f5:cf:9e:62:00:c6:52:d8:41:00:9f:ef:94: 7b:c4:61:65:e8:34:58:fa:83:9e:9f:41:79:84:52: 1d:43:02:ca:ad:eb:74:53:f6:b3:17:63:e2:47:28: 5b:3f:f7:a4:09:33:8a:38:21:8c:ed:9b:f5:e1:a6: 91:10:4b:8c:c9:ad:2c:8b:50:01:c7:be:d8:37:43: 40:7c:37:cf:23:b6:65:01:5a:f7:ef:58:99:fb:20: b1:d3:3c:00:2e:87:27:42:62:9e:af:ef:35:15:a9: 8b:4d:db:25:a7:bf:d4:36:56:4b:b2:20:af:ce:7f: 19:f2:1c:8c:22:a5:cf:b7:95:f2:67:b9:9f:5f:ff: 2b:43:b3:a9:8c:f7:07:df:a0:28:ce:70:f0:1c:a2: 72:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C5:4E:B4:9F:56:D5:1D:57:C9:63:75:DA:70:EF:57:3E:70:E5:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl X509v3 Authority Key Identifier: keyid:C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer sbgp-ipAddrBlock: critical IPv4: 104.37.232.0/21 IPv6: 2606:8b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:34:76:27:74:dc:d6:b3:98:67:ac:8e:4d:6e:29:9f:57:cd: 89:9e:f5:df:dd:8e:07:0c:c0:09:2f:02:b9:93:28:42:bc:a1: 13:55:fd:c8:a9:91:b1:28:20:b8:3f:3b:69:7d:58:eb:39:79: 96:2d:3a:6c:02:da:71:49:14:45:55:64:75:d8:40:5a:02:98: db:dd:02:04:f9:71:22:e4:3e:99:67:b9:15:9f:01:1b:52:2a: d1:11:2b:b4:7c:3d:27:8c:47:aa:e5:58:e1:dd:dc:5a:a3:2d: 45:93:7b:93:93:69:58:f7:ef:13:00:d2:81:a0:8b:f8:ee:75: 0e:a9:10:f9:e1:79:cb:38:96:05:86:2a:3c:0e:dd:56:8a:30: b8:ff:64:c7:2b:ba:7c:3d:57:87:a8:d3:30:4d:c8:9c:71:8e: d3:4c:5b:6a:38:4a:80:c7:c9:a5:e3:13:9b:84:2e:16:5a:57: d8:13:19:bb:e9:4c:62:a9:81:48:cd:ae:0b:24:89:c9:cd:67: 89:d3:e1:8f:aa:38:b5:bf:9a:ce:84:72:10:6a:c9:cc:72:5e: 13:1b:a1:05:f0:57:d6:50:54:17:2f:6c:86:91:2c:1e:6f:27: 76:fa:d7:f9:78:0c:7e:a3:c6:ce:18:61:3f:42:e8:0f:62:c0: 78:21:da:bc -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE6v5vHHwhVQLbIUPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVh NDRkMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk NmNhYjkzNTEtNjBkMS00NzkyLTg0ZDYtN2VjZTE4NzkwODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX3qCSWWJ9kKHaUwrCVyLcRfs+K0PCgXRgee PFJfB8gBfWQiWiUBUrAZyKh3SkjbKdFiqJIuoU9dTyJaRzoz0hZ6gKv4fs0G2AC2 LXxFHUSI2paKkiunNzBpP06E9/Qx/ufm+ztTJLo3vPXPnmIAxlLYQQCf75R7xGFl 6DRY+oOen0F5hFIdQwLKret0U/azF2PiRyhbP/ekCTOKOCGM7Zv14aaREEuMya0s i1ABx77YN0NAfDfPI7ZlAVr371iZ+yCx0zwALocnQmKer+81FamLTdslp7/UNlZL siCvzn8Z8hyMIqXPt5XyZ7mfX/8rQ7OpjPcH36AoznDwHKJyPwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFL7FTrSfVtUdV8ljddpw71c+cOV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1 YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvOGYyYzUwN2YtOTg4MC0z YTBhLThlNmEtMmQ5Y2M1ZDFlOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTI5NWE2OTUtZTkxYS00YzVhLThh MzEtYTkyMGE0MmVhNDRkL2EyOTVhNjk1LWU5MWEtNGM1YS04YTMxLWE5MjBhNDJl YTQ0ZC5jcmwwHwYDVR0jBBgwFoAUxrdjkJ2ZQm4W9Z6SLSD1iDDBqmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIw YTQyZWE0NGQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDaCXoMA0E AgACMAcDBQAmBotAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAD40did03NazmGesjk1uKZ9XzYme9d/djgcM wAkvArmTKEK8oRNV/cipkbEoILg/O2l9WOs5eZYtOmwC2nFJFEVVZHXYQFoCmNvd AgT5cSLkPplnuRWfARtSKtERK7R8PSeMR6rlWOHd3FqjLUWTe5OTaVj37xMA0oGg i/judQ6pEPnhecs4lgWGKjwO3VaKMLj/ZMcrunw9V4eo0zBNyJxxjtNMW2o4SoDH yaXjE5uELhZaV9gTGbvpTGKpgUjNrgskicnNZ4nT4Y+qOLW/ms6EchBqycxyXhMb oQXwV9ZQVBcvbIaRLB5vJ3b61/l4DH6jxs4YYT9C6A9iwHgh2rw= -----END CERTIFICATE-----Generated at Wed Aug 26 16:12:49 2026 by rpki-client