$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b8aa4e5-3e17-3013-8f5f-35714b97a539.roa File: 1b8aa4e5-3e17-3013-8f5f-35714b97a539.roa (raw, json) Hash identifier: SRdmMq2+zta/Hfp0dDC21+tjMYRNfLOshGH/iykftZM= Subject key identifier: 74:9D:23:DF:6E:6B:E2:25:0B:74:85:CC:86:CD:10:65:99:B4:4A:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7634E577341BD50E21A10F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b8aa4e5-3e17-3013-8f5f-35714b97a539.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 16625 IP address blocks: 104.85.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:e5:77:34:1b:d5:0e:21:a1:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=c61013c3-4397-45b6-b92f-17398143ce56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:b6:75:e3:6f:33:15:b7:67:75:e3:a0:35: 40:dc:a5:12:f9:c0:83:29:96:44:38:c3:35:ab:21: 35:27:7e:f3:70:cc:0d:fe:a3:45:10:89:54:67:57: d6:78:76:df:84:3d:97:d2:08:f1:26:57:87:99:f0: d6:f6:ec:05:a5:40:0b:6e:44:e9:13:4d:28:03:97: 04:f6:5f:79:21:35:c2:68:98:49:ec:21:e2:b3:21: 6c:e8:09:b5:3e:5f:5b:d0:8b:50:fb:7a:33:20:35: aa:8f:88:49:ff:a8:81:12:58:51:87:f5:10:0a:b2: f2:7a:9a:48:41:2f:9e:e0:1d:9f:04:1b:20:b8:20: e7:78:30:1d:5a:42:3a:09:0a:5a:77:0f:03:c9:1e: f2:a2:7d:ed:64:bc:f1:ab:7e:3b:12:96:c4:d6:59: c7:2f:4f:c5:b9:97:96:cb:ec:6e:91:e9:73:81:fc: 10:6b:a7:cd:34:4e:c7:6a:2b:8b:f0:ee:b3:5e:d7: 23:87:f3:85:4c:ee:0e:ab:65:e3:28:0f:6e:8b:14: 05:40:58:b0:7a:4d:ba:fb:4f:ba:5e:e2:bf:06:89: 67:67:a3:1b:fb:bd:ba:2c:f9:76:1f:09:88:50:56: 49:70:22:d3:7b:2b:ea:88:d1:96:b3:ab:75:1b:f8: 8d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9D:23:DF:6E:6B:E2:25:0B:74:85:CC:86:CD:10:65:99:B4:4A:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b8aa4e5-3e17-3013-8f5f-35714b97a539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.85.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ff:e5:23:32:9b:2f:75:c7:eb:d0:93:77:2d:04:1f:91:52: fd:81:04:1e:33:f6:0e:b6:04:3a:1e:33:0c:3a:0a:b2:00:9b: c4:70:2f:76:1f:a4:c8:c6:c4:6e:69:7d:7e:7e:85:ca:40:97: 48:19:7b:a5:fd:82:e5:26:30:d6:43:7e:8f:65:f2:85:0f:b7: f9:1c:e5:a3:bd:d8:f6:35:12:86:6d:b1:ae:78:f6:87:86:6d: 96:75:1b:60:4d:1f:0e:4f:cc:14:1d:d0:f3:de:e2:1f:ae:c8: 35:a8:64:11:dd:56:1e:b5:32:81:df:fc:46:3f:3e:c3:5f:06: 2a:00:5a:05:d4:fc:e7:6c:c1:bf:dd:3a:56:ff:87:d0:d9:1a: c2:16:b0:b4:59:bf:15:67:7a:b9:c2:21:c7:2a:0e:94:2e:0f: 44:da:3e:57:29:b3:b5:ed:9f:4f:3d:f7:e7:b3:c9:87:81:86: 4d:8d:23:f4:4b:2a:e1:7a:ab:69:1f:3c:7d:03:c8:18:e3:ed: c5:b3:db:3d:70:29:07:92:c1:57:8f:56:5d:5d:97:ab:be:35: e0:22:5e:74:7f:d0:72:67:2a:ec:a8:fa:70:b7:0c:ff:f0:64: c6:6e:89:8a:71:7a:42:7e:7a:8a:ad:fa:71:3e:c6:bc:2a:9f: b0:a3:d1:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NOV3NBvVDiGhDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk YzYxMDEzYzMtNDM5Ny00NWI2LWI5MmYtMTczOTgxNDNjZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTe2deNvMxW3Z3XjoDVA3KUS+cCDKZZEOMM1 qyE1J37zcMwN/qNFEIlUZ1fWeHbfhD2X0gjxJleHmfDW9uwFpUALbkTpE00oA5cE 9l95ITXCaJhJ7CHisyFs6Am1Pl9b0ItQ+3ozIDWqj4hJ/6iBElhRh/UQCrLyeppI QS+e4B2fBBsguCDneDAdWkI6CQpadw8DyR7yon3tZLzxq347EpbE1lnHL0/FuZeW y+xukelzgfwQa6fNNE7HaiuL8O6zXtcjh/OFTO4Oq2XjKA9uixQFQFiwek26+0+6 XuK/BolnZ6Mb+726LPl2HwmIUFZJcCLTeyvqiNGWs6t1G/iNkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSdI99ua+IlC3SFzIbNEGWZtEpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWI4YWE0ZTUtM2UxNy0z MDEzLThmNWYtMzU3MTRiOTdhNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL/5SMymy91x+vQk3ctBB+RUv2BBB4z9g62BDoeMww6CrIAm8RwL3Yf pMjGxG5pfX5+hcpAl0gZe6X9guUmMNZDfo9l8oUPt/kc5aO92PY1EoZtsa549oeG bZZ1G2BNHw5PzBQd0PPe4h+uyDWoZBHdVh61MoHf/EY/PsNfBioAWgXU/Odswb/d Olb/h9DZGsIWsLRZvxVnernCIccqDpQuD0TaPlcps7Xtn0899+ezyYeBhk2NI/RL KuF6q2kfPH0DyBjj7cWz2z1wKQeSwVePVl1dl6u+NeAiXnR/0HJnKuyo+nC3DP/w ZMZuiYpxekJ+eoqt+nE+xrwqn7Cj0R0= -----END CERTIFICATE-----Generated at Tue Jul 21 19:58:42 2026 by rpki-client