$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa File: 3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa (raw, json) Hash identifier: Qb3xNn9vkFbyBghCtajzslQHq4DNutQJGnl8IZEP+y8= Subject key identifier: 9C:22:A9:98:31:35:1C:EA:94:BF:67:1A:30:21:CD:6D:73:59:10:41 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584E2AD45D86CC44B3DFED50AF00 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa Signing time: Sun 14 Jun 2026 09:00:11 +0000 ROA not before: Sun 14 Jun 2026 09:00:11 +0000 ROA not after: Sat 12 Sep 2026 09:00:11 +0000 asID: 20127 IP address blocks: 104.152.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2a:d4:5d:86:cc:44:b3:df:ed:50:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Jun 14 09:00:11 2026 GMT Not After : Sep 12 09:00:11 2026 GMT Subject: CN=2d715d32-53c3-483f-bbec-e805f272c553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bd:f9:78:ef:8b:ac:18:1a:e2:7a:19:b6:de: 6a:f5:51:e1:9f:bf:85:e9:29:91:aa:48:9e:7c:84: f4:e2:33:85:c5:7a:31:6c:05:3a:5b:87:6a:52:14: c3:c4:5b:0b:fc:0d:77:e3:3c:35:6f:49:3c:b5:95: 04:89:14:ad:70:a3:50:53:a0:63:06:91:b4:aa:06: 02:91:eb:b9:6b:3b:32:c1:2c:6d:80:83:37:6e:32: 44:08:63:5f:57:78:b5:97:63:b9:a9:2d:64:16:4f: 2c:8d:76:ec:2a:d0:da:78:62:e7:ae:30:6c:35:1f: 6c:92:cb:7d:7a:15:15:10:63:81:cb:ea:02:b3:5d: a5:da:19:c8:95:88:52:36:a2:cc:ad:65:00:08:26: 9d:59:b6:ed:0d:cb:55:72:26:2e:c3:09:b7:38:19: 59:21:9b:01:49:b0:52:ce:47:b8:f3:e0:73:18:6b: 31:39:f8:fa:1d:05:e9:f0:c1:cf:41:3e:dd:bc:77: 79:48:24:d3:28:dd:f6:39:03:5f:00:b2:cc:cb:16: f7:22:46:d8:ee:e4:d8:23:93:31:e2:16:e8:54:3f: aa:1d:d8:48:e3:a7:26:5e:46:e5:7f:9e:7e:62:e0: 6f:c9:07:7c:71:85:f7:cf:06:89:72:56:ed:ff:e1: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:22:A9:98:31:35:1C:EA:94:BF:67:1A:30:21:CD:6D:73:59:10:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 104.152.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:cb:a5:86:5a:dc:92:9e:ac:1c:11:ca:e5:41:70:fc:9b:9c: dd:c3:f8:cc:0c:82:a2:7c:e2:b1:73:2f:f1:71:af:81:62:4f: 64:b4:73:16:37:25:67:57:17:d0:4e:1e:e5:88:2a:84:95:9f: d1:77:bd:56:8d:6d:f1:6b:ae:fc:cb:c9:33:18:1e:ed:27:c4: 8e:0a:d7:77:bd:ec:9c:d0:00:62:25:23:85:69:34:4d:46:bb: 4b:69:06:0f:ee:fe:52:be:5e:37:5b:c1:e3:48:3f:07:ad:b0: 42:3d:5d:16:22:73:85:a8:dc:e4:0b:23:16:6c:d6:88:b9:83: 2d:e8:99:56:c0:ff:50:eb:2f:d0:8b:0d:ca:ed:1a:d2:ec:f3: a1:0f:2d:94:6c:08:01:37:91:85:b6:77:f2:35:81:28:6d:dc: 3e:36:d2:5c:2e:9e:56:5f:46:8a:43:93:a9:31:83:f7:39:fa: e3:2f:d6:69:15:3b:cf:de:2f:00:d6:b7:0f:2a:71:8e:28:bf: 84:93:38:c0:39:36:50:04:d0:0c:36:09:76:17:df:51:1a:f4: 4b:ef:ef:5a:cf:03:1e:cd:e1:d5:ed:c6:93:67:ba:01:24:f8: 74:bf:65:e9:a0:4b:29:71:0f:92:cd:c8:9d:fd:29:0b:72:1d: 45:a0:14:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1F2GzESz3+1QrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk MmQ3MTVkMzItNTNjMy00ODNmLWJiZWMtZTgwNWYyNzJjNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb35eO+LrBga4noZtt5q9VHhn7+F6SmRqkie fIT04jOFxXoxbAU6W4dqUhTDxFsL/A134zw1b0k8tZUEiRStcKNQU6BjBpG0qgYC keu5azsywSxtgIM3bjJECGNfV3i1l2O5qS1kFk8sjXbsKtDaeGLnrjBsNR9skst9 ehUVEGOBy+oCs12l2hnIlYhSNqLMrWUACCadWbbtDctVciYuwwm3OBlZIZsBSbBS zke48+BzGGsxOfj6HQXp8MHPQT7dvHd5SCTTKN32OQNfALLMyxb3IkbY7uTYI5Mx 4hboVD+qHdhI46cmXkblf55+YuBvyQd8cYX3zwaJclbt/+FWxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwiqZgxNRzqlL9nGjAhzW1zWRBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvM2ZmZTJiNzYtZTc3NC0z YzU2LWFhZTYtYzIzNTk4MjBjNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJjFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXLpYZa3JKerBwRyuVBcPybnN3D+MwMgqJ84rFzL/Fxr4FiT2S0cxY3 JWdXF9BOHuWIKoSVn9F3vVaNbfFrrvzLyTMYHu0nxI4K13e97JzQAGIlI4VpNE1G u0tpBg/u/lK+XjdbweNIPwetsEI9XRYic4Wo3OQLIxZs1oi5gy3omVbA/1DrL9CL DcrtGtLs86EPLZRsCAE3kYW2d/I1gSht3D420lwunlZfRopDk6kxg/c5+uMv1mkV O8/eLwDWtw8qcY4ov4STOMA5NlAE0Aw2CXYX31Ea9Evv71rPAx7N4dXtxpNnugEk +HS/ZemgSylxD5LNyJ39KQtyHUWgFOg= -----END CERTIFICATE-----Generated at Wed Jun 24 05:02:10 2026 by rpki-client