$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/7356e457-670a-3033-a781-b9366fd8a801.roa File: 7356e457-670a-3033-a781-b9366fd8a801.roa (raw, json) Hash identifier: uzx4XBvvLL4+hyMoYKFMeaqsxfJC9QmakjBN0/p9aJ8= Subject key identifier: 16:DD:85:DD:B6:02:14:0A:43:D5:9A:33:2A:3B:67:1F:4A:DA:56:DE Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584ED001E31EB360A0EEBA876BA0 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/7356e457-670a-3033-a781-b9366fd8a801.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 46408 IP address blocks: 104.219.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:e3:1e:b3:60:a0:ee:ba:87:6b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=fb5f6fe5-e14a-4300-8ec7-f82f14a96f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:19:80:39:7f:bf:32:8e:4d:94:3a:2a:45: 94:de:ef:39:df:4d:5c:76:ae:01:85:8c:fe:6e:de: f9:91:f4:98:bb:b8:c4:d4:a2:81:a2:2e:83:0c:75: 1c:81:dc:ba:54:8d:07:b1:63:ec:da:40:b7:77:23: 97:e4:7a:09:de:9d:bd:3f:c0:f3:d1:26:70:5d:e7: 6a:c0:49:d2:41:5b:42:53:16:00:dd:f7:8b:1e:5b: bc:66:6e:99:59:d1:27:bb:ae:1e:1d:92:0c:48:ab: 18:94:49:6b:84:c1:24:d9:05:f6:69:8b:94:36:ff: 6c:bc:20:52:e0:7a:02:fe:e4:57:0b:6f:ad:45:eb: 29:1a:7e:a2:b5:bc:08:1b:75:29:e5:13:89:12:bf: 3a:7b:4b:05:74:33:08:8c:9a:00:c3:c2:5d:01:d6: 8d:d1:28:f3:05:e8:9c:f1:f8:86:ad:04:8e:1b:a0: fa:71:f9:75:5a:6e:0e:0a:fe:1e:ba:f1:37:5f:0d: 22:61:68:f6:87:54:a3:aa:71:ad:c6:91:88:dd:f3: 31:6a:68:a4:59:fe:69:cd:97:54:99:e0:9d:d0:54: af:29:a6:c5:72:68:85:12:7b:d4:73:18:20:af:c2: 6f:6b:38:d4:94:e4:cb:db:e8:37:4f:fa:67:1c:20: 1b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DD:85:DD:B6:02:14:0A:43:D5:9A:33:2A:3B:67:1F:4A:DA:56:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/7356e457-670a-3033-a781-b9366fd8a801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 104.219.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:35:ac:78:c2:3c:d9:db:ce:4e:6a:f9:39:f9:83:c0:58:a6: ac:73:d0:89:69:2f:d8:ff:4f:e8:09:bf:5e:84:25:52:b6:91: e5:7c:e9:24:50:f7:22:f5:4c:14:c2:32:eb:53:3a:ad:9d:da: 9f:8f:3c:2d:dd:74:61:f5:cf:36:7e:97:d5:be:dc:9c:65:13: e8:a8:f4:c5:3c:b1:0b:62:cd:56:6a:e4:72:29:19:f1:6b:9c: ed:f1:f0:41:3d:4d:ea:9d:39:fd:cc:57:f2:56:34:c9:5c:9d: 2e:4e:0e:6c:32:41:f0:f1:fc:bf:ed:83:26:c3:63:ed:84:cc: e6:7e:e1:e8:a9:ed:20:41:a7:e1:c7:2f:d5:43:64:9a:e6:00: 0d:59:a2:9c:b8:ed:8f:9b:f4:dc:28:de:ae:be:39:ca:0c:69: a1:0a:1e:42:40:d4:b7:93:c2:ad:58:ba:0c:eb:f6:43:ac:92: f5:5b:b2:b3:9c:17:3d:3f:19:df:d1:5a:86:1c:fa:0b:4e:55: 54:d5:c1:35:0a:31:48:6e:eb:03:93:d7:2b:4f:96:b0:94:ab: 63:cb:0c:33:3a:be:76:42:20:ee:bc:67:8f:5e:f2:56:35:d1: cb:be:43:ad:31:fe:d6:95:46:b0:d1:3e:16:8b:fe:fb:59:eb: 64:f4:74:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAeMes2Cg7rqHa6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmI1ZjZmZTUtZTE0YS00MzAwLThlYzctZjgyZjE0YTk2ZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnQZgDl/vzKOTZQ6KkWU3u85301cdq4BhYz+ bt75kfSYu7jE1KKBoi6DDHUcgdy6VI0HsWPs2kC3dyOX5HoJ3p29P8Dz0SZwXedq wEnSQVtCUxYA3feLHlu8Zm6ZWdEnu64eHZIMSKsYlElrhMEk2QX2aYuUNv9svCBS 4HoC/uRXC2+tRespGn6itbwIG3Up5ROJEr86e0sFdDMIjJoAw8JdAdaN0SjzBeic 8fiGrQSOG6D6cfl1Wm4OCv4euvE3Xw0iYWj2h1SjqnGtxpGI3fMxamikWf5pzZdU meCd0FSvKabFcmiFEnvUcxggr8JvazjUlOTL2+g3T/pnHCAbowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbdhd22AhQKQ9WaMyo7Zx9K2lbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvNzM1NmU0NTctNjcwYS0z MDMzLWE3ODEtYjkzNjZmZDhhODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNsYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA1rHjCPNnbzk5q+Tn5g8BYpqxz0IlpL9j/T+gJv16EJVK2keV86SRQ 9yL1TBTCMutTOq2d2p+PPC3ddGH1zzZ+l9W+3JxlE+io9MU8sQtizVZq5HIpGfFr nO3x8EE9TeqdOf3MV/JWNMlcnS5ODmwyQfDx/L/tgybDY+2EzOZ+4eip7SBBp+HH L9VDZJrmAA1Zopy47Y+b9Nwo3q6+OcoMaaEKHkJA1LeTwq1Yugzr9kOskvVbsrOc Fz0/Gd/RWoYc+gtOVVTVwTUKMUhu6wOT1ytPlrCUq2PLDDM6vnZCIO68Z49e8lY1 0cu+Q60x/taVRrDRPhaL/vtZ62T0dEo= -----END CERTIFICATE-----Generated at Sat Sep 12 14:25:18 2026 by rpki-client