$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa File: b843c24c-9470-32c3-9572-a733f7a4b73d.roa (raw, json) Hash identifier: 1JYDzx8KhqOrnQbl3rqIJg58q4DUqZ5k0dCVS5EKu3c= Subject key identifier: AF:78:72:42:CD:9E:48:B5:38:50:61:D9:A4:AC:11:5F:42:15:69:7F Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584E54B4907732D17BF252D50D00 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 21782 IP address blocks: 104.156.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:90:77:32:d1:7b:f2:52:d5:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=68924b87-5d2d-457b-92a7-ff8b1f80b642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1f:92:10:81:b8:8d:84:a9:61:ec:77:98:1a: 1d:0a:ba:82:5e:99:1a:51:cb:93:95:a9:96:20:2a: 6f:e8:e4:23:bb:45:27:1c:dd:af:c9:59:e8:89:89: a2:dd:b6:fc:d0:21:ee:75:e2:6d:81:a3:6c:5e:9d: 7b:70:9c:b9:f8:f0:c0:c5:0e:48:13:ec:1c:e9:c1: 29:02:ba:93:d3:d7:74:3d:42:aa:65:1e:4f:d4:3b: 6e:a6:54:cc:02:fe:5f:b7:59:f4:2a:65:e3:87:71: e7:75:00:c0:95:c2:5d:63:6b:11:14:aa:90:38:e3: 23:ba:cc:4b:55:65:54:f4:6a:ea:36:04:4d:86:15: f1:86:f9:c0:fd:c6:26:36:f9:5c:b3:5a:87:62:b2: be:a6:c7:9e:e5:58:1c:9e:8d:ef:79:2f:b4:21:ca: 96:c4:35:3f:5d:f7:55:b9:ac:82:e8:2b:41:3f:1a: cb:a4:38:db:b9:54:23:a7:a4:99:a8:75:1c:40:e1: e7:5f:89:2b:ae:a2:50:4c:e3:b9:c0:a8:9e:24:e0: bd:35:06:85:00:52:d2:f3:85:14:01:80:78:0e:0c: 96:69:a7:c5:c7:ab:e6:c8:74:29:7e:3a:c8:2e:9e: e5:7d:01:e8:b7:c3:c6:f4:fc:b5:77:af:d7:72:70: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:78:72:42:CD:9E:48:B5:38:50:61:D9:A4:AC:11:5F:42:15:69:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 104.156.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:b7:7e:f3:15:8e:3a:05:1b:51:7d:c4:1c:d0:99:27:4b:6a: 17:e6:09:e8:65:0e:b3:9b:5a:bc:b1:8e:b2:46:44:8e:dc:d0: bd:64:5a:13:d7:da:35:00:2b:7f:f2:85:2b:bd:f6:47:a9:d9: 35:e5:86:94:9f:8e:72:6b:51:0d:64:f3:32:c9:f9:71:3c:43: ef:3b:5d:62:50:8f:cd:17:e5:16:ae:09:d6:ce:4c:e3:ab:b8: 68:3c:e3:b6:e4:27:a2:da:57:fd:cd:4d:75:19:06:9e:88:e1: c5:2d:9a:d1:13:1c:c5:b1:0c:9a:5d:3f:b4:e3:73:73:92:04: d7:82:a9:c2:04:57:08:49:2b:56:9a:e5:a8:b7:aa:71:3c:fd: 36:df:43:27:3b:01:bf:ac:e5:49:59:fa:5c:b8:36:b9:cf:f6: 06:48:51:9e:3f:09:57:4b:0e:c1:55:44:31:e4:08:d7:c7:64: a8:92:71:9c:82:dc:6b:d9:d0:b3:88:4b:bb:56:b9:60:b3:e2: fb:88:63:7f:ee:5b:f2:66:45:df:e7:5c:61:db:89:9f:47:67: 0e:23:b0:e3:d0:9c:db:bb:3d:12:4b:44:b9:5b:89:5e:09:3f: 12:dd:cd:4c:09:dd:a8:0e:39:10:29:38:d4:e0:29:ac:d6:24: b7:a9:e4:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtJB3MtF78lLVDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk Njg5MjRiODctNWQyZC00NTdiLTkyYTctZmY4YjFmODBiNjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h+SEIG4jYSpYex3mBodCrqCXpkaUcuTlamW ICpv6OQju0UnHN2vyVnoiYmi3bb80CHudeJtgaNsXp17cJy5+PDAxQ5IE+wc6cEp ArqT09d0PUKqZR5P1DtuplTMAv5ft1n0KmXjh3HndQDAlcJdY2sRFKqQOOMjusxL VWVU9GrqNgRNhhXxhvnA/cYmNvlcs1qHYrK+psee5Vgcno3veS+0IcqWxDU/XfdV uayC6CtBPxrLpDjbuVQjp6SZqHUcQOHnX4krrqJQTOO5wKieJOC9NQaFAFLS84UU AYB4DgyWaafFx6vmyHQpfjrILp7lfQHot8PG9Py1d6/XcnAExQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK94ckLNnki1OFBh2aSsEV9CFWl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvYjg0M2MyNGMtOTQ3MC0z MmMzLTk1NzItYTczM2Y3YTRiNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKm3fvMVjjoFG1F9xBzQmSdLahfmCehlDrObWryxjrJGRI7c0L1kWhPX 2jUAK3/yhSu99kep2TXlhpSfjnJrUQ1k8zLJ+XE8Q+87XWJQj80X5RauCdbOTOOr uGg847bkJ6LaV/3NTXUZBp6I4cUtmtETHMWxDJpdP7Tjc3OSBNeCqcIEVwhJK1aa 5ai3qnE8/TbfQyc7Ab+s5UlZ+ly4NrnP9gZIUZ4/CVdLDsFVRDHkCNfHZKiScZyC 3GvZ0LOIS7tWuWCz4vuIY3/uW/JmRd/nXGHbiZ9HZw4jsOPQnNu7PRJLRLlbiV4J PxLdzUwJ3agOORApONTgKazWJLep5Ko= -----END CERTIFICATE-----Generated at Thu Jul 9 20:57:44 2026 by rpki-client