$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8075f71f-d7fb-3358-af37-5c75ab59a5f5.roa File: 8075f71f-d7fb-3358-af37-5c75ab59a5f5.roa (raw, json) Hash identifier: YCMVnRYcstAFdtNZ8E1zTK1RL7g1geEoQVxX0TuVRQE= Subject key identifier: C0:83:1C:4E:D8:C3:20:BB:08:A9:1A:B0:45:9F:E1:6F:03:E0:03:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7A64EBFFB06A8FCEB240F580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8075f71f-d7fb-3358-af37-5c75ab59a5f5.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 35994 IP address blocks: 104.124.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:eb:ff:b0:6a:8f:ce:b2:40:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=aa1dcbb6-d729-4115-ba63-d2daf7703da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:18:5e:2e:aa:99:56:86:d7:12:c5:6d:61:a4: a3:b9:15:05:6e:71:bb:06:e7:05:83:16:59:c6:f5: 22:9a:54:9b:31:ef:c9:a2:ec:78:f5:66:71:3d:14: e7:10:2a:07:9d:9d:59:ad:c7:58:cc:fe:10:72:87: f3:7d:bb:b2:3c:ef:f9:8c:bc:cd:1f:10:b9:02:cd: 5b:df:8e:07:22:0f:5e:05:4d:0d:0b:3d:05:fe:cf: f5:26:ea:36:6c:e6:fa:ce:3b:ce:d4:a6:dd:9a:d1: 49:69:0e:7d:62:7c:f2:16:d3:1b:50:5b:98:92:db: 1e:ff:28:b7:28:28:ac:b3:36:4a:55:d3:06:59:0c: 45:69:1b:c4:5f:99:0d:51:42:5e:f2:66:b6:4b:24: 4f:78:7e:41:5d:e5:b9:e1:5b:11:df:4f:18:32:58: 1e:c2:1e:f7:c8:53:e1:fb:20:92:a9:08:78:47:c4: 62:0e:8e:fe:1f:69:ba:eb:c0:c4:e7:de:7f:c9:38: 07:f0:d5:79:7a:c7:52:7a:aa:4b:d1:b9:14:13:6e: f3:62:26:54:a0:1a:e8:d4:74:cd:40:af:00:bd:63: 58:ae:ad:74:9b:2a:19:bd:13:10:f7:c4:f0:e5:71: 44:15:8f:6d:f3:90:53:a6:d7:f5:1f:f7:1d:60:35: 6b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:83:1C:4E:D8:C3:20:BB:08:A9:1A:B0:45:9F:E1:6F:03:E0:03:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8075f71f-d7fb-3358-af37-5c75ab59a5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.124.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:91:65:b5:71:66:3a:c9:d5:5c:d4:bd:2c:b6:05:eb:99:7a: bf:de:f2:f5:1e:6f:bd:43:06:c6:6f:27:d6:bb:6a:55:a0:51: 09:f3:28:f2:c0:00:a3:c8:1c:31:d3:30:5f:c1:6e:f1:4d:0e: bd:be:f9:53:a4:ef:30:ea:30:bd:45:09:56:9a:60:c5:cc:7b: f6:54:a9:e3:ce:c4:21:b1:e2:06:17:72:0b:a7:4c:04:ce:5f: 4c:f1:ab:60:a1:93:0a:39:df:e1:53:8a:8b:2d:59:9b:fc:af: e5:fc:ee:73:ef:72:7d:de:ca:f5:89:62:9b:98:c8:58:9c:5d: 01:48:00:34:ce:a3:1d:1f:82:93:a2:a0:63:9c:2d:ca:bb:76: 3d:d6:c1:95:33:41:69:2c:a2:3a:52:e9:f2:0f:d6:61:51:96: 94:47:15:c5:c8:3c:4d:03:e2:11:54:b7:ba:24:fd:94:53:5e: 84:6e:6a:a9:ae:d4:b0:59:74:24:c6:f9:83:7d:27:bc:a3:8b: c0:2e:cb:e7:8f:65:04:c1:cb:e9:35:cf:c0:dc:71:d8:14:80: a5:16:c0:c7:3d:ca:f2:b8:91:b0:07:b5:bd:95:c1:5e:2e:9a: 14:ba:41:68:c9:4a:85:4a:42:59:de:3a:8e:f9:1d:b0:c0:07: d7:8d:ba:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZOv/sGqPzrJA9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk YWExZGNiYjYtZDcyOS00MTE1LWJhNjMtZDJkYWY3NzAzZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohheLqqZVobXEsVtYaSjuRUFbnG7BucFgxZZ xvUimlSbMe/Joux49WZxPRTnECoHnZ1ZrcdYzP4QcofzfbuyPO/5jLzNHxC5As1b 344HIg9eBU0NCz0F/s/1Juo2bOb6zjvO1KbdmtFJaQ59YnzyFtMbUFuYktse/yi3 KCisszZKVdMGWQxFaRvEX5kNUUJe8ma2SyRPeH5BXeW54VsR308YMlgewh73yFPh +yCSqQh4R8RiDo7+H2m668DE595/yTgH8NV5esdSeqpL0bkUE27zYiZUoBro1HTN QK8AvWNYrq10myoZvRMQ98Tw5XFEFY9t85BTptf1H/cdYDVrpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCDHE7YwyC7CKkasEWf4W8D4AN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODA3NWY3MWYtZDdmYi0z MzU4LWFmMzctNWM3NWFiNTlhNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHxiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCRZbVxZjrJ1VzUvSy2BeuZer/e8vUeb71DBsZvJ9a7alWgUQnzKPLA AKPIHDHTMF/BbvFNDr2++VOk7zDqML1FCVaaYMXMe/ZUqePOxCGx4gYXcgunTATO X0zxq2Chkwo53+FTiostWZv8r+X87nPvcn3eyvWJYpuYyFicXQFIADTOox0fgpOi oGOcLcq7dj3WwZUzQWksojpS6fIP1mFRlpRHFcXIPE0D4hFUt7ok/ZRTXoRuaqmu 1LBZdCTG+YN9J7yji8Auy+ePZQTBy+k1z8DccdgUgKUWwMc9yvK4kbAHtb2VwV4u mhS6QWjJSoVKQlneOo75HbDAB9eNuuk= -----END CERTIFICATE-----Generated at Tue Jul 21 20:42:25 2026 by rpki-client