$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/326d8589-7168-3ad2-9522-1d772eca633b.roa File: 326d8589-7168-3ad2-9522-1d772eca633b.roa (raw, json) Hash identifier: viEdYW6o0QBqaWnjlzlsIqQtVcsWolhrCcK5lxIUhFY= Subject key identifier: 00:6D:F1:CC:D8:44:55:5C:71:45:48:62:1B:2C:5D:A7:4C:BC:3D:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7A64EB1AE09953FDFF11D6E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/326d8589-7168-3ad2-9522-1d772eca633b.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 20940 IP address blocks: 104.123.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:eb:1a:e0:99:53:fd:ff:11:d6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=e2e04396-6ddd-479d-bee0-21196474a46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a8:5d:0a:9c:72:b6:98:f2:b4:c3:4a:2a:17: b7:67:52:92:a5:3e:55:57:87:df:9e:5e:de:e3:f5: a3:09:44:50:49:69:95:4c:f6:28:e0:67:97:af:e6: 27:64:9f:6c:13:16:d7:6e:0f:76:07:12:35:83:73: 12:d2:66:16:79:d0:dc:25:80:43:ef:8b:0c:54:2e: 17:b7:59:e2:3d:64:37:38:5d:5c:5c:2d:79:5d:71: 9b:2e:46:6f:7a:01:04:80:4e:f6:13:6c:70:e9:fc: 1e:30:8b:17:e1:5c:6b:f9:cd:3e:ec:9e:f8:3c:b2: 3d:a1:11:39:78:15:ec:ec:80:b2:53:af:37:df:f5: f5:85:81:ca:5a:a6:c7:ae:ba:b3:fa:23:b3:4a:99: 5c:ca:49:96:98:b9:87:42:21:07:45:2c:16:43:80: c6:21:01:13:47:e5:5f:3c:4f:75:4f:73:a1:19:fe: 6a:87:37:ac:34:74:78:f9:97:fb:df:8d:37:18:b2: 54:cc:29:4f:2f:9c:84:6f:aa:15:ad:e7:02:44:72: 06:23:e0:46:e1:10:c1:71:76:59:91:47:38:99:38: 92:6a:01:e7:83:f2:80:45:af:92:c1:c8:3d:f2:61: 0b:49:71:77:1c:cb:d3:4b:aa:a2:1c:a5:4e:ea:15: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6D:F1:CC:D8:44:55:5C:71:45:48:62:1B:2C:5D:A7:4C:BC:3D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/326d8589-7168-3ad2-9522-1d772eca633b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ab:c3:57:84:55:75:8c:17:97:83:76:d8:ec:84:3f:8d:08: f6:c7:23:90:63:6c:30:d9:ba:85:d9:57:0c:92:17:d5:1d:d1: 4e:d3:34:34:d1:bb:0a:eb:60:5f:02:fc:eb:98:ec:20:b7:3a: 8f:fd:64:af:56:2f:f9:9a:85:e0:03:3c:77:71:b7:9b:13:6f: dd:ec:ba:93:0d:b8:3d:c9:73:00:d0:4f:03:e0:f4:39:ab:49: 3f:1a:c1:2a:7f:d0:19:cb:17:2d:3d:e2:1e:f3:98:d4:42:bc: 46:fe:8e:f1:4c:87:b0:78:d7:dd:67:32:e0:8a:1d:67:3b:cb: 79:24:53:5b:93:b0:5d:52:5f:d6:2f:22:97:3c:b4:d1:90:3c: 03:59:df:f3:ae:6e:1e:88:11:b7:3b:25:92:c3:48:da:03:d0: 14:f7:9b:a8:75:91:85:ca:cd:88:9b:70:da:40:90:7d:37:c9: 49:1b:21:44:20:24:61:b9:a8:bd:c4:65:e9:bd:85:cf:96:55: ce:b8:41:c6:b9:7c:5a:3f:48:02:52:db:9d:07:74:0a:73:ff: d8:33:bc:a7:69:fc:3b:25:0e:68:68:e0:3a:8f:15:08:46:1a: a0:18:81:04:eb:2d:af:41:65:e7:8a:a8:f4:29:71:98:71:a8: 9f:a2:3b:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZOsa4JlT/f8R1uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk ZTJlMDQzOTYtNmRkZC00NzlkLWJlZTAtMjExOTY0NzRhNDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKhdCpxytpjytMNKKhe3Z1KSpT5VV4ffnl7e 4/WjCURQSWmVTPYo4GeXr+YnZJ9sExbXbg92BxI1g3MS0mYWedDcJYBD74sMVC4X t1niPWQ3OF1cXC15XXGbLkZvegEEgE72E2xw6fweMIsX4Vxr+c0+7J74PLI9oRE5 eBXs7ICyU6833/X1hYHKWqbHrrqz+iOzSplcykmWmLmHQiEHRSwWQ4DGIQETR+Vf PE91T3OhGf5qhzesNHR4+Zf73403GLJUzClPL5yEb6oVrecCRHIGI+BG4RDBcXZZ kUc4mTiSagHng/KARa+Swcg98mELSXF3HMvTS6qiHKVO6hWHEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABt8czYRFVccUVIYhssXadMvD2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzI2ZDg1ODktNzE2OC0z YWQyLTk1MjItMWQ3NzJlY2E2MzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHtDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqrw1eEVXWMF5eDdtjshD+NCPbHI5BjbDDZuoXZVwySF9Ud0U7TNDTR uwrrYF8C/OuY7CC3Oo/9ZK9WL/maheADPHdxt5sTb93supMNuD3JcwDQTwPg9Dmr ST8awSp/0BnLFy094h7zmNRCvEb+jvFMh7B4191nMuCKHWc7y3kkU1uTsF1SX9Yv Ipc8tNGQPANZ3/Oubh6IEbc7JZLDSNoD0BT3m6h1kYXKzYibcNpAkH03yUkbIUQg JGG5qL3EZem9hc+WVc64Qca5fFo/SAJS250HdApz/9gzvKdp/DslDmho4DqPFQhG GqAYgQTrLa9BZeeKqPQpcZhxqJ+iO2s= -----END CERTIFICATE-----Generated at Tue Jul 21 20:01:08 2026 by rpki-client