$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c3598e4-63f2-3f67-8303-22fe135985e0.roa File: 7c3598e4-63f2-3f67-8303-22fe135985e0.roa (raw, json) Hash identifier: CU1O+H9wvH3ouyNv7OqA+zJKjEJPjx4EB1G1RmkfhGI= Subject key identifier: 5E:67:F4:1A:2B:A2:18:27:ED:EC:18:BF:EE:0C:BC:31:D7:5A:6D:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7634EA2CD21B5B7BC45E8DA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c3598e4-63f2-3f67-8303-22fe135985e0.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 16625 IP address blocks: 104.100.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:ea:2c:d2:1b:5b:7b:c4:5e:8d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=d989f6be-3333-4b55-a56f-03a75325b8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7b:a9:42:01:5a:93:d2:b2:0d:b7:56:da:fa: 93:93:f8:09:3c:17:b2:54:8e:bf:41:13:1a:bb:43: dd:44:16:dd:c3:e9:83:19:59:c7:06:37:8e:eb:50: 61:46:28:0e:82:16:c6:df:a5:f8:92:b9:e3:49:d4: de:41:84:6f:c8:3e:4a:aa:1a:c8:ad:68:f3:54:6b: f1:e1:22:34:c3:9a:6c:9e:dc:a2:fb:19:9f:05:13: f5:fb:a5:b7:32:63:61:53:44:78:13:75:8a:a0:2b: 10:62:92:28:49:4b:56:82:b6:16:41:cb:d2:d9:38: e5:25:10:cb:d1:ff:27:b0:2c:a7:05:8c:aa:38:2a: fe:67:2e:2c:05:db:81:16:4b:3c:ef:d3:10:b3:c9: 4f:4b:c0:b9:6e:5c:e7:83:50:24:2a:30:c8:c8:ca: 97:58:58:a7:07:00:64:49:65:3b:0a:2a:ba:75:aa: 1a:60:cd:26:2a:82:9c:54:31:81:0b:9a:14:b0:bc: c6:aa:a9:39:49:7f:b5:04:31:02:22:01:7a:b1:a8: 9b:c4:eb:21:e7:1c:34:2d:da:8a:29:84:a4:9d:2c: 8f:69:cf:8c:21:d0:3f:ae:09:76:ef:2b:1a:8b:a6: 54:ee:c1:ab:fe:6a:4d:2f:09:1d:20:32:34:10:e4: e4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:67:F4:1A:2B:A2:18:27:ED:EC:18:BF:EE:0C:BC:31:D7:5A:6D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c3598e4-63f2-3f67-8303-22fe135985e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.100.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:80:90:87:1a:e5:a2:b6:72:50:b3:ec:9f:63:3b:4f:01:3d: cb:5b:c2:8f:c2:5c:d7:8f:dc:ee:39:ad:b8:2e:6e:3b:e7:d0: 5b:7c:5b:e2:51:38:54:43:29:1d:9b:e2:91:6f:8a:b7:0d:00: 34:fd:6e:db:86:40:a5:2f:85:34:bc:9f:5f:00:11:0c:7e:b5: 6b:58:c6:2b:ae:23:e7:10:a0:76:15:d6:89:50:b1:94:ca:cc: b5:a2:4e:f0:53:16:46:62:f8:2b:40:31:3a:7d:1b:a1:2b:92: 95:44:7c:f0:c1:37:23:63:93:b7:d1:48:37:f5:dc:4b:35:08: 18:27:0f:48:83:a4:b7:3a:70:08:4b:11:ff:ea:ec:44:a8:46: 4e:0e:b6:57:eb:db:a8:b3:7c:6b:95:62:53:a6:ff:fa:c3:a3: b8:71:3e:d0:da:9c:3e:25:c4:2b:c9:0b:82:30:05:13:ad:d9: 49:1d:06:c5:1a:69:71:7e:ed:7e:64:a8:7d:46:37:25:1b:b9: 69:b3:9d:d6:f9:59:bd:32:7b:cc:3f:a8:3e:bb:bb:73:e6:1b: a4:38:fa:62:ae:d8:76:99:ae:f7:13:67:8c:f2:e6:b3:90:4a: fc:f9:03:e3:24:49:15:63:a9:04:22:f6:86:81:e9:7c:8a:56: d0:28:8a:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NOos0htbe8RejaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk ZDk4OWY2YmUtMzMzMy00YjU1LWE1NmYtMDNhNzUzMjViOGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nupQgFak9KyDbdW2vqTk/gJPBeyVI6/QRMa u0PdRBbdw+mDGVnHBjeO61BhRigOghbG36X4krnjSdTeQYRvyD5KqhrIrWjzVGvx 4SI0w5psntyi+xmfBRP1+6W3MmNhU0R4E3WKoCsQYpIoSUtWgrYWQcvS2TjlJRDL 0f8nsCynBYyqOCr+Zy4sBduBFks879MQs8lPS8C5blzng1AkKjDIyMqXWFinBwBk SWU7Ciq6daoaYM0mKoKcVDGBC5oUsLzGqqk5SX+1BDECIgF6saibxOsh5xw0LdqK KYSknSyPac+MIdA/rgl27ysai6ZU7sGr/mpNLwkdIDI0EOTkhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5n9Borohgn7ewYv+4MvDHXWm33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2MzNTk4ZTQtNjNmMi0z ZjY3LTgzMDMtMjJmZTEzNTk4NWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyAkIca5aK2clCz7J9jO08BPctbwo/CXNeP3O45rbgubjvn0Ft8W+JR OFRDKR2b4pFvircNADT9btuGQKUvhTS8n18AEQx+tWtYxiuuI+cQoHYV1olQsZTK zLWiTvBTFkZi+CtAMTp9G6ErkpVEfPDBNyNjk7fRSDf13Es1CBgnD0iDpLc6cAhL Ef/q7ESoRk4Otlfr26izfGuVYlOm//rDo7hxPtDanD4lxCvJC4IwBROt2UkdBsUa aXF+7X5kqH1GNyUbuWmzndb5Wb0ye8w/qD67u3PmG6Q4+mKu2HaZrvcTZ4zy5rOQ Svz5A+MkSRVjqQQi9oaB6XyKVtAoimE= -----END CERTIFICATE-----Generated at Tue Jul 21 20:45:31 2026 by rpki-client