$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/811b67a1-324a-3a90-8651-0b1003f9a663.roa File: 811b67a1-324a-3a90-8651-0b1003f9a663.roa (raw, json) Hash identifier: w9tIrcaM4kdXpg1gpNvCfSIFFRW9Wl7Ijth+WaVYpYg= Subject key identifier: 58:25:B7:5D:27:75:82:88:CC:82:58:A7:7E:48:F6:F9:B0:28:D9:F4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7A64EBC0CE74B356AA46E100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/811b67a1-324a-3a90-8651-0b1003f9a663.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 16625 IP address blocks: 104.123.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:eb:c0:ce:74:b3:56:aa:46:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=c1c1d376-5be4-4f13-ae1b-4aa78ed85792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:71:84:8a:b0:c7:ea:48:8a:4b:62:ba:3e:6d: f1:32:9a:80:5e:f4:6d:25:24:72:2c:41:99:9d:d0: 88:a8:38:3b:be:19:ff:60:20:ef:d7:bc:62:89:8c: d5:1d:72:a2:dd:2c:1f:56:5a:bd:5f:29:2f:fa:0f: 5f:ff:c2:c8:70:0d:a2:31:fe:b2:e3:3d:07:52:c3: b6:48:c9:5c:fc:55:b3:74:d2:99:37:74:20:a7:ac: 90:99:67:65:c5:88:1e:e3:45:67:86:65:92:7b:76: 73:b9:19:44:b2:98:46:7d:8b:06:ac:31:fd:94:fa: 3e:37:6a:84:32:cb:4a:31:63:32:3e:44:47:0f:86: 6f:eb:83:b6:21:db:37:cb:9f:98:5f:41:40:40:c2: 56:56:33:28:27:86:69:34:e8:cd:bf:6e:a2:13:81: 0c:7b:3a:1b:5e:c0:46:de:26:0d:bf:11:eb:76:2d: df:76:02:15:90:53:74:ce:34:18:9d:de:d8:26:0e: e8:3e:70:7a:11:74:59:0d:ba:b6:0d:07:85:9c:78: da:95:96:63:1f:4f:2c:ac:a7:75:f2:e3:6d:3a:61: 4b:fc:90:e4:6f:8b:4e:d9:70:28:61:d6:0d:e2:e1: 01:69:b8:00:6c:24:c8:4c:6b:67:15:70:b2:60:15: 26:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:25:B7:5D:27:75:82:88:CC:82:58:A7:7E:48:F6:F9:B0:28:D9:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/811b67a1-324a-3a90-8651-0b1003f9a663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2f:fb:a6:d3:c1:8f:18:ce:72:28:91:23:92:d6:c6:24:a8: 20:e9:66:6c:b9:25:bd:55:1e:a3:8f:f5:4f:f4:bc:b6:4d:bd: 49:72:59:f8:0b:30:cd:76:93:d0:d0:07:bd:d8:5b:2e:e5:10: ae:1e:fe:29:c3:8c:ab:89:a9:df:6a:80:a3:5f:4e:ea:b4:22: 7b:6d:b4:b7:9f:ad:2c:c8:02:c0:b7:ee:e0:25:ac:8f:d2:9b: dc:c4:e0:ba:0a:c1:6f:90:dd:88:ef:7e:be:d1:e0:95:50:9a: 03:34:b5:a7:fa:3a:b3:8d:4a:4f:f4:b1:57:6d:7c:3c:48:58: 88:52:8a:d0:c1:7e:33:b1:7b:05:6d:61:bb:5f:70:f1:7c:5e: e7:11:85:a6:ba:27:3f:37:f2:f1:de:4e:86:16:6d:50:b6:fa: 02:d3:72:0c:e5:d9:89:83:4b:a8:7d:74:01:26:c0:ee:a6:a1: 70:0a:ef:e8:e5:01:b4:15:18:13:53:c6:da:81:82:52:c5:e9: 46:9c:24:6c:ac:ee:b0:a8:d6:09:c2:36:44:34:45:f7:d0:b8: 92:b1:08:0e:57:01:6b:f5:fc:30:12:f1:43:54:3e:c8:63:a8: d4:11:4d:57:6f:95:94:d1:cb:50:3c:c6:c2:8e:d0:aa:2a:86: 40:41:49:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZOvAznSzVqpG4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk YzFjMWQzNzYtNWJlNC00ZjEzLWFlMWItNGFhNzhlZDg1NzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XGEirDH6kiKS2K6Pm3xMpqAXvRtJSRyLEGZ ndCIqDg7vhn/YCDv17xiiYzVHXKi3SwfVlq9Xykv+g9f/8LIcA2iMf6y4z0HUsO2 SMlc/FWzdNKZN3Qgp6yQmWdlxYge40VnhmWSe3ZzuRlEsphGfYsGrDH9lPo+N2qE MstKMWMyPkRHD4Zv64O2Ids3y5+YX0FAQMJWVjMoJ4ZpNOjNv26iE4EMezobXsBG 3iYNvxHrdi3fdgIVkFN0zjQYnd7YJg7oPnB6EXRZDbq2DQeFnHjalZZjH08srKd1 8uNtOmFL/JDkb4tO2XAoYdYN4uEBabgAbCTITGtnFXCyYBUmrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFglt10ndYKIzIJYp35I9vmwKNn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODExYjY3YTEtMzI0YS0z YTkwLTg2NTEtMGIxMDAzZjlhNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwv+6bTwY8YznIokSOS1sYkqCDpZmy5Jb1VHqOP9U/0vLZNvUlyWfgL MM12k9DQB73YWy7lEK4e/inDjKuJqd9qgKNfTuq0IntttLefrSzIAsC37uAlrI/S m9zE4LoKwW+Q3Yjvfr7R4JVQmgM0taf6OrONSk/0sVdtfDxIWIhSitDBfjOxewVt YbtfcPF8XucRhaa6Jz838vHeToYWbVC2+gLTcgzl2YmDS6h9dAEmwO6moXAK7+jl AbQVGBNTxtqBglLF6UacJGys7rCo1gnCNkQ0RffQuJKxCA5XAWv1/DAS8UNUPshj qNQRTVdvlZTRy1A8xsKO0KoqhkBBSXI= -----END CERTIFICATE-----Generated at Tue Jul 21 21:40:58 2026 by rpki-client