$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa File: b96fa30c-800a-3f27-bbe0-a0466bba322b.roa (raw, json) Hash identifier: 5K3MO8retMqQGWsfLPUC2pSt+bEK4/oY95X9BgB8gZM= Subject key identifier: D6:D2:CB:5C:23:B2:9B:E0:7B:9D:B0:0E:8C:91:5E:4B:E0:FD:F1:20 Certificate issuer: /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Certificate serial: 010D0C9F4328584E3A2F1B2759DE8A908B086100 Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 398993 IP address blocks: 104.219.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:1b:27:59:de:8a:90:8b:08:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=fc8366ab-5a71-4a89-ba15-f0de6d083301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0c:7c:10:1c:7b:1e:b1:c7:17:af:b1:47:65: 39:39:e3:10:5c:cd:28:23:cd:5e:e4:37:42:73:b2: 36:8b:4a:9b:1f:1a:e4:f8:80:c4:6d:50:6d:8b:f4: 75:9e:d8:80:2e:a5:3e:54:a8:4d:e6:d5:c8:c9:91: 75:49:1d:ba:b4:7b:75:fa:93:07:6b:ee:dd:98:bf: 51:a7:4b:ef:d0:e2:e6:22:bd:ee:73:f8:44:bc:58: d6:c0:7a:c1:d5:53:00:f9:af:b9:d2:6d:78:89:b9: 00:c8:ac:07:32:d3:a1:2d:c0:76:52:a9:6c:43:a9: 8b:4c:41:4c:bf:f1:02:49:37:e6:35:74:67:6e:ac: c0:17:5d:ad:fe:d0:b9:ea:95:0c:45:33:b9:33:c5: 3a:54:f8:34:f1:53:07:d8:40:d9:9e:e5:ca:99:d5: 64:65:35:54:90:56:2c:77:bd:0f:2d:00:92:af:7e: 45:2a:91:5f:51:2c:5c:ba:bc:71:7b:2c:c6:e2:d7: 9d:0a:f0:b0:e9:22:1f:9d:97:24:2e:52:65:3f:64: d2:ba:80:12:9e:13:7e:90:a9:88:13:5c:ca:aa:c3: 30:6a:16:e6:b4:a0:51:86:af:60:59:5c:c5:0d:87: 35:9c:fb:a9:fd:2b:41:b0:79:b1:1c:b0:79:42:02: db:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D2:CB:5C:23:B2:9B:E0:7B:9D:B0:0E:8C:91:5E:4B:E0:FD:F1:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl X509v3 Authority Key Identifier: keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer sbgp-ipAddrBlock: critical IPv4: 104.219.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:62:5a:3a:2b:d7:d0:89:7d:c7:2d:1d:ed:2c:fe:d2:00:a9: 46:1f:bf:52:fa:8a:8c:9c:b8:d0:81:53:85:89:13:82:19:b5: 49:7d:85:4a:db:81:88:66:58:27:89:84:71:13:ae:39:c6:a3: ec:80:2d:b0:55:a9:74:14:98:bd:7c:0e:f5:4b:63:e1:85:f8: e6:ab:04:52:97:32:1b:3e:f0:46:f1:f0:08:15:19:b8:03:6c: 33:23:c7:da:7f:ce:e1:72:81:a7:00:9f:3c:79:d1:df:cf:72: 41:ac:c9:32:bf:37:e2:3d:68:3d:0a:7a:e2:cd:61:64:71:25: 63:f8:a1:2b:15:71:03:3d:0e:64:a3:c8:64:6c:71:ff:9c:ea: bf:f1:9b:f7:a3:63:58:c3:87:da:a5:a9:c8:33:47:f9:b8:b3: cb:03:24:8b:15:b0:f0:a1:6e:87:9d:5c:66:2d:5b:aa:60:3f: 29:60:75:a0:9e:54:17:eb:e9:8e:5c:b7:76:fa:0c:22:d4:53: 6b:d9:9b:f2:18:c1:fa:43:2b:72:e7:20:68:ca:17:e9:5a:64: 13:db:5c:64:30:8a:a6:0f:43:e9:13:a7:10:63:78:0f:9e:55: 1d:f9:b8:c5:e0:54:f3:69:1d:7f:43:b0:90:2d:a5:f7:94:87: bd:8d:db:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LxsnWd6KkIsIYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNiM2ZjZDktZjkwZC00ZjIwLTk2ZWMtZDRkMzI4NTE3 YzBkMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk ZmM4MzY2YWItNWE3MS00YTg5LWJhMTUtZjBkZTZkMDgzMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwx8EBx7HrHHF6+xR2U5OeMQXM0oI81e5DdC c7I2i0qbHxrk+IDEbVBti/R1ntiALqU+VKhN5tXIyZF1SR26tHt1+pMHa+7dmL9R p0vv0OLmIr3uc/hEvFjWwHrB1VMA+a+50m14ibkAyKwHMtOhLcB2UqlsQ6mLTEFM v/ECSTfmNXRnbqzAF12t/tC56pUMRTO5M8U6VPg08VMH2EDZnuXKmdVkZTVUkFYs d70PLQCSr35FKpFfUSxcurxxeyzG4tedCvCw6SIfnZckLlJlP2TSuoASnhN+kKmI E1zKqsMwahbmtKBRhq9gWVzFDYc1nPup/StBsHmxHLB5QgLbmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbSy1wjspvge52wDoyRXkvg/fEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82M2Iz ZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQzMjg1MTdjMGQvYjk2ZmEzMGMtODAwYS0z ZjI3LWJiZTAtYTA0NjZiYmEzMjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjNiM2ZjZDktZjkwZC00ZjIwLTk2 ZWMtZDRkMzI4NTE3YzBkLzYzYjNmY2Q5LWY5MGQtNGYyMC05NmVjLWQ0ZDMyODUx N2MwZC5jcmwwHwYDVR0jBBgwFoAU85szvqOxj6FrnsAlnz3NKvxiOA0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82M2IzZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQz Mjg1MTdjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNiWjor19CJfcctHe0s/tIAqUYfv1L6ioycuNCBU4WJE4IZtUl9hUrb gYhmWCeJhHETrjnGo+yALbBVqXQUmL18DvVLY+GF+OarBFKXMhs+8Ebx8AgVGbgD bDMjx9p/zuFygacAnzx50d/PckGsyTK/N+I9aD0KeuLNYWRxJWP4oSsVcQM9DmSj yGRscf+c6r/xm/ejY1jDh9qlqcgzR/m4s8sDJIsVsPChboedXGYtW6pgPylgdaCe VBfr6Y5ct3b6DCLUU2vZm/IYwfpDK3LnIGjKF+laZBPbXGQwiqYPQ+kTpxBjeA+e VR35uMXgVPNpHX9DsJAtpfeUh72N2/g= -----END CERTIFICATE-----Generated at Sun Jun 28 02:04:33 2026 by rpki-client