$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa File: a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa (raw, json) Hash identifier: KAF084O9RHHZtqizutS0bIKyGWKFcbb2rdtvWCNvpdE= Subject key identifier: 3F:D4:F8:0A:A8:C8:17:4B:0D:CD:EC:68:E4:B6:49:CA:C1:58:05:CF Certificate issuer: /CN=900920d7-dc26-412d-b92a-7af35af2cc24 Certificate serial: 010D0C9F4328584E1E444D174D513FCD4D2A7340 Authority key identifier: D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 36694 IP address blocks: 104.219.228.0/22 maxlen: 24 2620:11d:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:4d:17:4d:51:3f:cd:4d:2a:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900920d7-dc26-412d-b92a-7af35af2cc24 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=90ebeb54-63c0-474e-87ca-2198ab44a81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:63:f3:f5:9c:c8:14:26:c2:b2:7a:71:ff:c5: e0:3a:46:64:5f:0c:fd:b2:eb:39:fe:e1:4f:c5:7f: 04:9a:5a:b4:23:96:2a:36:80:ee:50:92:a0:ae:00: 10:84:fd:76:57:ab:b9:bb:e9:ea:d7:f3:ea:72:bd: 9a:75:7a:e4:72:e3:93:e8:01:0a:01:e9:a7:f6:73: 6b:bb:c4:a3:83:3b:5b:43:36:e9:a2:e3:40:88:18: 61:0b:ad:ec:a8:ef:8f:8b:42:f5:28:f0:cc:d0:67: 59:68:17:ef:0a:d0:c1:07:cd:52:22:eb:bd:71:57: 6b:5e:15:af:dc:44:11:e1:05:a6:8d:93:d4:84:df: 1b:e1:f3:07:ab:14:a8:a8:dd:92:91:92:07:87:a9: cc:ee:74:7e:b8:1b:f4:0e:f9:8d:1f:07:b2:1f:45: 88:eb:99:0b:bd:e7:c4:eb:b0:80:2c:68:a5:58:a1: e3:ad:76:8b:47:da:e0:87:b1:35:1c:99:9a:f9:e1: 0a:1c:c9:97:45:fb:5f:5a:a9:57:ac:5c:45:94:8c: 48:4e:40:a0:38:70:a4:37:cd:fc:b5:a5:02:cf:1f: ba:1f:9f:c2:92:36:4a:d3:cb:d5:b4:b3:3d:76:a6: 2e:ad:e6:8f:d2:0d:a2:b4:af:6f:ac:0c:fb:cc:db: 96:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D4:F8:0A:A8:C8:17:4B:0D:CD:EC:68:E4:B6:49:CA:C1:58:05:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl X509v3 Authority Key Identifier: keyid:D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer sbgp-ipAddrBlock: critical IPv4: 104.219.228.0/22 IPv6: 2620:11d:1000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:05:a7:88:45:d6:33:6c:6e:cd:d0:0a:cd:4e:43:5d:03:e6: a6:a6:6c:85:b5:f4:70:81:c6:88:bf:8e:29:0c:c4:b9:b1:93: 6e:02:a8:79:31:a7:84:27:89:8a:d9:14:dc:bb:19:4f:54:64: e6:82:d6:74:c7:e3:6d:73:10:a9:5a:4c:ae:e5:9a:53:b8:b4: b5:c9:6b:5e:f3:c2:70:dc:cc:01:08:dc:23:93:1e:9b:ce:69: 7a:2e:62:20:03:cc:4a:95:ee:c1:8b:d8:06:06:12:14:12:af: 3c:69:8d:5b:29:99:09:ca:a5:08:b6:a0:79:f6:2e:3d:f5:4a: a3:66:57:bf:f9:e7:54:93:97:26:68:d3:af:7e:d3:60:8c:97: a3:83:14:13:6f:0e:08:70:f9:2c:c8:02:6f:d1:5a:46:3d:d1: 47:a5:f5:f9:be:0c:46:f5:35:6b:f1:b7:9f:6b:ca:cb:b9:87: 7a:27:05:79:ec:f4:5b:91:13:06:d5:63:8e:a1:ed:3e:35:82: e7:5c:6d:ad:02:fe:c0:21:cb:e7:cf:a5:8c:b3:4c:8f:97:26: fb:18:9b:de:71:c3:6e:a2:d0:b7:ec:80:6b:a6:c6:be:54:7c: 6a:ca:ee:a8:66:7b:07:2c:ef:8d:ff:64:bc:80:7f:40:02:ed: af:c1:42:a9 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE4eRE0XTVE/zU0qc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwOTIwZDctZGMyNi00MTJkLWI5MmEtN2FmMzVhZjJj YzI0MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk OTBlYmViNTQtNjNjMC00NzRlLTg3Y2EtMjE5OGFiNDRhODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mPz9ZzIFCbCsnpx/8XgOkZkXwz9sus5/uFP xX8Emlq0I5YqNoDuUJKgrgAQhP12V6u5u+nq1/Pqcr2adXrkcuOT6AEKAemn9nNr u8SjgztbQzbpouNAiBhhC63sqO+Pi0L1KPDM0GdZaBfvCtDBB81SIuu9cVdrXhWv 3EQR4QWmjZPUhN8b4fMHqxSoqN2SkZIHh6nM7nR+uBv0DvmNHweyH0WI65kLvefE 67CALGilWKHjrXaLR9rgh7E1HJma+eEKHMmXRftfWqlXrFxFlIxITkCgOHCkN838 taUCzx+6H5/CkjZK08vVtLM9dqYureaP0g2itK9vrAz7zNuWZwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFD/U+AqoyBdLDc3saOS2ScrBWAXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5 MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYzNWFmMmNjMjQvYTg2ZGVhNGYtNWY2Zi0z MmFlLThhMjUtZWFkNGE0ZGJhMmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTAwOTIwZDctZGMyNi00MTJkLWI5 MmEtN2FmMzVhZjJjYzI0LzkwMDkyMGQ3LWRjMjYtNDEyZC1iOTJhLTdhZjM1YWYy Y2MyNC5jcmwwHwYDVR0jBBgwFoAU13KmmlqaXjEFGyFRuDvHSIlI0+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYz NWFmMmNjMjQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCaNvkMA8E AgACMAkDBwQmIAEdEAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUwWniEXWM2xuzdAKzU5DXQPmpqZshbX0 cIHGiL+OKQzEubGTbgKoeTGnhCeJitkU3LsZT1Rk5oLWdMfjbXMQqVpMruWaU7i0 tclrXvPCcNzMAQjcI5Mem85pei5iIAPMSpXuwYvYBgYSFBKvPGmNWymZCcqlCLag efYuPfVKo2ZXv/nnVJOXJmjTr37TYIyXo4MUE28OCHD5LMgCb9FaRj3RR6X1+b4M RvU1a/G3n2vKy7mHeicFeez0W5ETBtVjjqHtPjWC51xtrQL+wCHL58+ljLNMj5cm +xib3nHDbqLQt+yAa6bGvlR8asruqGZ7Byzvjf9kvIB/QALtr8FCqQ== -----END CERTIFICATE-----Generated at Sun Jun 14 01:33:44 2026 by rpki-client