$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa File: 8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa (raw, json) Hash identifier: evP39CLOXz38jS/m6qf+/4g2JryvxzDjxmO0KgUbadw= Subject key identifier: 62:93:59:90:AC:24:46:02:F0:8D:E5:0E:50:33:C4:09:86:66:AF:ED Certificate issuer: /CN=25422be5-720b-40bc-8a4d-02579ec1bead Certificate serial: 010D0C9F4328584EC7A1CCC0DED88A1CEC2767EC Authority key identifier: CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 63447 IP address blocks: 104.245.200.0/22 maxlen: 22 204.107.204.0/24 maxlen: 24 2602:ff98::/36 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:cc:c0:de:d8:8a:1c:ec:27:67:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25422be5-720b-40bc-8a4d-02579ec1bead Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=2d471145-3af0-4813-b62a-61b66140a1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4c:f3:1b:dd:dc:a4:49:5a:fc:68:76:0e:87: c9:f4:26:15:b0:ae:17:bd:f0:91:43:40:87:69:cf: 53:d9:aa:89:7f:61:af:56:67:8c:77:43:00:5a:27: 4e:29:54:4c:b2:8b:20:16:90:b4:bd:65:20:35:6b: 41:1c:66:4b:80:4d:28:01:61:e6:56:a6:50:07:1b: 1e:d7:17:43:a2:d6:91:52:64:7c:c8:4b:5a:24:d8: 19:87:6c:00:dd:33:71:b4:b8:9d:d8:90:9a:ea:12: 95:aa:3a:75:5a:c8:71:45:f8:fe:af:dc:75:0c:db: d1:67:49:33:8a:a3:ba:f8:93:f1:03:76:9b:3d:87: 06:79:d2:f6:d0:f9:ba:2e:a6:be:0a:a1:13:4d:ad: bc:ce:1b:aa:96:6c:17:ff:93:ad:3a:68:a7:21:4b: 7d:72:ac:13:a0:5d:cf:72:16:7c:b4:ae:dc:63:46: 1c:6c:17:a9:b0:6f:fa:f9:d4:cf:15:7c:f9:47:a8: 62:3d:c6:55:59:54:57:f3:3a:81:8d:26:d6:16:0f: 60:bb:32:89:09:4b:04:b3:72:5e:24:0c:d9:a2:85: 82:2f:af:db:14:1c:c2:c8:fa:08:28:78:4d:07:8f: 95:ea:13:f9:dd:ec:92:3d:d2:aa:cc:71:42:cb:97: 75:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:93:59:90:AC:24:46:02:F0:8D:E5:0E:50:33:C4:09:86:66:AF:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl X509v3 Authority Key Identifier: keyid:CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer sbgp-ipAddrBlock: critical IPv4: 104.245.200.0/22 204.107.204.0/24 IPv6: 2602:ff98::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:8d:5d:13:87:9e:93:c8:24:05:51:46:be:77:7a:86:83:41: 3c:bd:a6:32:0a:64:24:96:c6:3f:92:0b:d2:85:e4:50:b0:12: 0c:4e:f1:2c:23:8f:ea:26:a6:8e:2f:15:77:56:99:32:6a:da: 26:0e:a0:79:11:e3:5d:77:ff:21:b3:04:c7:c5:9f:5f:d7:37: a6:f9:92:84:c1:a2:c1:2e:93:dd:52:51:a0:76:38:88:b3:ba: 87:dc:59:21:f7:49:0d:84:18:7f:f9:f9:1a:aa:65:22:84:46: 87:92:05:70:99:0b:29:d9:d9:de:09:8e:34:78:ab:84:af:1d: 32:d5:3e:94:a9:5e:29:fc:31:ab:34:d7:f4:2f:d9:6b:80:06: d1:65:ca:5d:99:26:9b:75:8a:9e:dc:78:05:03:81:0c:81:d6: c8:d0:d7:fe:0b:96:e7:21:88:93:5f:63:47:dd:26:ef:3d:5b: e0:73:ee:35:4a:58:8b:44:f7:a8:2a:0d:ff:96:d0:c2:95:d6: a9:60:69:d2:0e:05:3b:e3:85:83:88:a4:4e:9c:6e:b6:1b:4d: 13:a7:81:eb:45:ae:4b:b6:d1:6d:f3:e6:80:2f:b6:36:82:f3: dd:56:d7:73:2a:58:7a:13:e3:b8:6d:63:ee:4a:f8:09:2f:44: e6:68:a9:c0 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE7HoczA3tiKHOwnZ+wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU0MjJiZTUtNzIwYi00MGJjLThhNGQtMDI1NzllYzFi ZWFkMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk MmQ0NzExNDUtM2FmMC00ODEzLWI2MmEtNjFiNjYxNDBhMWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEzzG93cpEla/Gh2DofJ9CYVsK4XvfCRQ0CH ac9T2aqJf2GvVmeMd0MAWidOKVRMsosgFpC0vWUgNWtBHGZLgE0oAWHmVqZQBxse 1xdDotaRUmR8yEtaJNgZh2wA3TNxtLid2JCa6hKVqjp1WshxRfj+r9x1DNvRZ0kz iqO6+JPxA3abPYcGedL20Pm6Lqa+CqETTa28zhuqlmwX/5OtOminIUt9cqwToF3P chZ8tK7cY0YcbBepsG/6+dTPFXz5R6hiPcZVWVRX8zqBjSbWFg9guzKJCUsEs3Je JAzZooWCL6/bFBzCyPoIKHhNB4+V6hP53eySPdKqzHFCy5d1QQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFGKTWZCsJEYC8I3lDlAzxAmGZq/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQy MmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3OWVjMWJlYWQvOGE1YzBlOTAtZWM2Yi0z YWM4LTg1ZDctOTA4Zjg4MGU3MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjU0MjJiZTUtNzIwYi00MGJjLThh NGQtMDI1NzllYzFiZWFkLzI1NDIyYmU1LTcyMGItNDBiYy04YTRkLTAyNTc5ZWMx YmVhZC5jcmwwHwYDVR0jBBgwFoAUztKXLUcr1PnAkCBw26y6O9ViY2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQyMmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3 OWVjMWJlYWQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCaPXIAwQA zGvMMA4EAgACMAgDBgQmAv+YADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgjV0Th56TyCQFUUa+d3qGg0E8 vaYyCmQklsY/kgvSheRQsBIMTvEsI4/qJqaOLxV3VpkyatomDqB5EeNdd/8hswTH xZ9f1zem+ZKEwaLBLpPdUlGgdjiIs7qH3Fkh90kNhBh/+fkaqmUihEaHkgVwmQsp 2dneCY40eKuErx0y1T6UqV4p/DGrNNf0L9lrgAbRZcpdmSabdYqe3HgFA4EMgdbI 0Nf+C5bnIYiTX2NH3SbvPVvgc+41SliLRPeoKg3/ltDCldapYGnSDgU744WDiKRO nG62G00Tp4HrRa5LttFt8+aAL7Y2gvPdVtdzKlh6E+O4bWPuSvgJL0TmaKnA -----END CERTIFICATE-----Generated at Thu Aug 13 12:56:55 2026 by rpki-client