$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/013b3ecc-b106-3fe3-922c-05448cd2a85b.roa File: 013b3ecc-b106-3fe3-922c-05448cd2a85b.roa (raw, json) Hash identifier: XL2nLS45AOHSoT3gLdEat0Zpsj2g4oEBptiFK6cR2tA= Subject key identifier: DF:AF:C2:79:8A:DE:EF:2C:DA:B7:74:A8:CF:50:A0:E7:7C:7C:22:76 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584EC20C61BD16A9CD2ABFB9B800 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/013b3ecc-b106-3fe3-922c-05448cd2a85b.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 62943 IP address blocks: 104.255.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:61:bd:16:a9:cd:2a:bf:b9:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=4020eb25-893b-4ffd-9d77-6e51c6e07e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e3:b5:19:95:0f:e3:c3:b6:d8:47:b3:7f:22: 31:ba:81:65:3d:d6:d2:92:a1:38:07:59:a5:0f:8c: c1:8f:11:19:b2:a0:7b:24:b0:06:2a:d0:4a:d1:24: 3f:79:9e:74:23:c9:fa:55:36:b1:cf:39:10:77:f1: 5f:8a:13:1b:6a:9b:57:12:fc:9e:37:5b:55:14:b8: 51:e9:e1:e8:e2:f9:4d:d1:98:e1:53:46:14:a2:37: 55:83:87:a0:58:05:56:52:55:77:0f:b8:bb:8c:be: ee:2c:a3:e9:52:11:6a:cd:e7:9e:ae:fe:2f:13:ca: 64:56:d4:5c:4c:3f:12:89:b0:d9:5b:4f:3d:5c:42: cb:a6:d4:34:ff:ef:d4:6e:31:07:66:a9:2f:98:4b: e1:07:8d:3d:90:30:57:04:56:e1:5a:cd:cf:a8:fe: a7:ca:30:f9:ef:09:40:bd:4a:cf:03:82:1d:ab:47: df:1e:d9:50:08:60:9a:fe:6f:77:07:60:1a:76:ae: 53:0c:8b:51:3e:d6:5f:36:f9:7d:5c:eb:1e:65:d4: 23:52:f1:d7:b1:01:42:38:5d:10:bf:03:0a:9a:d5: 66:0f:99:63:c9:0a:11:71:bc:2b:37:51:f4:1f:f2: 73:16:93:56:51:e3:ed:98:62:53:9d:49:d0:04:88: 62:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AF:C2:79:8A:DE:EF:2C:DA:B7:74:A8:CF:50:A0:E7:7C:7C:22:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/013b3ecc-b106-3fe3-922c-05448cd2a85b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 104.255.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:3d:81:59:39:4c:d0:05:ff:e1:3e:e4:b9:e4:a5:9a:72:83: 1a:b5:2f:52:b0:f8:05:bd:9f:51:a1:9e:90:8c:31:a7:a5:2e: 16:60:98:14:ea:5d:fa:14:86:4e:11:83:88:e0:1c:3e:af:2e: 92:85:a0:2e:a9:03:f2:d4:40:8e:3c:a1:73:62:5b:8d:0e:5b: c6:43:de:f3:ca:46:99:38:cc:4e:5c:88:5a:6a:6d:8f:2b:48: ff:e1:63:3c:d7:af:54:64:77:17:3e:0a:9a:f6:a5:46:1e:d9: 3c:9f:5b:f0:7d:a1:cf:db:71:ed:92:d4:fe:5e:24:cd:5e:a3: 07:45:62:a2:e0:41:77:cb:f2:25:45:58:b1:24:cc:98:6d:9e: 64:e9:df:06:a7:3c:5b:b7:a1:d0:96:64:6a:38:fc:d1:3c:a2: 71:d2:6a:96:50:7d:80:78:b9:cd:b9:8b:30:1f:31:96:3c:2b: 5f:7a:19:61:0b:5c:d0:3b:03:21:81:5e:53:95:6e:c1:07:fb: 1f:b2:70:b2:31:4e:9b:8f:91:52:0c:4f:00:e5:b3:82:67:57: b0:4d:3f:73:3b:0d:68:9d:e9:03:b0:77:f1:0e:66:a3:fc:16: 78:9a:8c:59:c3:c2:8b:6b:13:d5:ef:f4:a4:15:a5:86:e3:11: aa:6d:b4:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDGG9FqnNKr+5uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk NDAyMGViMjUtODkzYi00ZmZkLTlkNzctNmU1MWM2ZTA3ZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleO1GZUP48O22EezfyIxuoFlPdbSkqE4B1ml D4zBjxEZsqB7JLAGKtBK0SQ/eZ50I8n6VTaxzzkQd/FfihMbaptXEvyeN1tVFLhR 6eHo4vlN0ZjhU0YUojdVg4egWAVWUlV3D7i7jL7uLKPpUhFqzeeerv4vE8pkVtRc TD8SibDZW089XELLptQ0/+/UbjEHZqkvmEvhB409kDBXBFbhWs3PqP6nyjD57wlA vUrPA4Idq0ffHtlQCGCa/m93B2Aadq5TDItRPtZfNvl9XOseZdQjUvHXsQFCOF0Q vwMKmtVmD5ljyQoRcbwrN1H0H/JzFpNWUePtmGJTnUnQBIhiYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+vwnmK3u8s2rd0qM9QoOd8fCJ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvMDEzYjNlY2MtYjEwNi0z ZmUzLTkyMmMtMDU0NDhjZDJhODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaP9uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU9gVk5TNAF/+E+5LnkpZpygxq1L1Kw+AW9n1GhnpCMMaelLhZgmBTq XfoUhk4Rg4jgHD6vLpKFoC6pA/LUQI48oXNiW40OW8ZD3vPKRpk4zE5ciFpqbY8r SP/hYzzXr1Rkdxc+Cpr2pUYe2TyfW/B9oc/bce2S1P5eJM1eowdFYqLgQXfL8iVF WLEkzJhtnmTp3wanPFu3odCWZGo4/NE8onHSapZQfYB4uc25izAfMZY8K196GWEL XNA7AyGBXlOVbsEH+x+ycLIxTpuPkVIMTwDls4JnV7BNP3M7DWid6QOwd/EOZqP8 FniajFnDwotrE9Xv9KQVpYbjEapttKc= -----END CERTIFICATE-----Generated at Sun Aug 9 19:22:53 2026 by rpki-client