$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa File: 86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa (raw, json) Hash identifier: qVbMBL4JglmYGQJ/E/1idQ+wTLgWYUkJ8nPJKK5kthk= Subject key identifier: A6:5C:12:28:F7:DD:DC:F8:BC:7A:39:3C:A5:21:3D:AA:BE:5B:2D:1F Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F4328584E1FA99FC172E0D480BDA81800 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 1403 IP address blocks: 104.163.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:9f:c1:72:e0:d4:80:bd:a8:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=fbd9d939-f8d5-440a-82d8-cdb732d33013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d2:11:a2:94:b2:ef:29:32:56:23:1d:4f:f6: 67:05:78:a9:77:d2:08:6e:ee:c9:18:a7:26:d8:da: 67:ca:21:30:2d:b1:4c:cd:0c:2e:db:64:bf:d7:b9: 3e:20:34:64:aa:8d:d5:1c:71:f5:ff:ba:02:c6:45: 8b:f8:f6:c8:24:d6:8f:d2:b1:aa:83:1d:31:9c:6b: f9:bd:93:c7:23:1e:ef:b0:1f:fa:f7:1c:5c:c4:d5: 65:96:23:c9:b1:82:14:e6:cc:07:e4:55:8f:a9:18: f8:90:ee:03:c6:5f:ed:a3:c5:db:52:1c:4a:4e:10: fe:4f:2d:27:08:bd:76:a2:cf:e5:dd:94:ef:be:b8: c6:35:28:19:59:dd:6b:72:24:96:f0:96:e0:86:85: 85:1e:ed:e3:49:6d:eb:4a:4a:16:c1:8d:fc:c7:e9: ed:33:a2:86:93:96:2a:29:74:95:d0:17:5a:e5:a5: 4b:5f:57:63:97:28:4b:b7:b4:b8:e1:26:e0:d0:b6: de:a7:7f:cb:3e:db:6c:ef:3f:42:6a:12:d1:43:e4: da:d0:10:2b:dd:00:37:23:ca:ec:01:c4:9e:52:51: cf:b4:a8:0a:2b:04:42:22:04:5c:8b:fb:74:10:89: 16:38:ba:f7:1a:1f:eb:f4:15:4b:9d:fa:19:d8:58: d2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5C:12:28:F7:DD:DC:F8:BC:7A:39:3C:A5:21:3D:AA:BE:5B:2D:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 104.163.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f7:cd:f2:b1:38:fa:51:ac:f2:96:d8:47:d2:42:d0:8e:ff: f4:3c:65:88:79:60:94:df:f9:99:9c:4b:72:55:cb:e8:bb:c3: 4d:65:da:d6:2c:da:c2:a0:5a:17:2e:63:a5:e8:77:f9:23:af: 85:38:6f:b9:c6:e3:26:77:33:29:dd:db:4e:9e:87:4b:9a:b9: 8c:05:1f:6e:d1:4b:ec:3f:c7:87:5e:dd:49:4e:75:48:50:4d: c3:f8:11:67:92:3d:66:76:31:29:6b:9f:74:30:ea:54:a0:07: 0c:28:70:08:68:0b:dd:7d:d2:05:f0:58:d7:8d:77:ae:36:da: 6f:d0:c9:4f:78:16:30:b1:47:10:78:6c:71:13:b6:5f:16:93: e7:c7:e4:12:18:7e:db:b1:10:15:74:d9:26:9e:04:de:a4:1f: 46:d3:93:d5:e2:7b:ed:88:3c:4b:21:6a:23:6c:6e:0c:9d:c9: 95:04:10:60:cb:38:92:1f:eb:08:2e:ad:ff:59:21:a7:df:6f: 38:71:89:6c:30:1b:a7:6d:7c:48:a9:09:16:75:99:07:3f:9b: 48:7b:d7:f7:67:cc:43:ba:b8:d2:bf:f1:b2:2c:1e:c2:fe:ec: 6b:d0:b9:3e:cb:8a:7f:aa:b8:9c:4b:82:71:e7:a7:27:41:4d: 7b:68:fb:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqZ/BcuDUgL2oGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk ZmJkOWQ5MzktZjhkNS00NDBhLTgyZDgtY2RiNzMyZDMzMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidIRopSy7ykyViMdT/ZnBXipd9IIbu7JGKcm 2NpnyiEwLbFMzQwu22S/17k+IDRkqo3VHHH1/7oCxkWL+PbIJNaP0rGqgx0xnGv5 vZPHIx7vsB/69xxcxNVlliPJsYIU5swH5FWPqRj4kO4Dxl/to8XbUhxKThD+Ty0n CL12os/l3ZTvvrjGNSgZWd1rciSW8JbghoWFHu3jSW3rSkoWwY38x+ntM6KGk5Yq KXSV0Bda5aVLX1djlyhLt7S44Sbg0Lbep3/LPtts7z9CahLRQ+Ta0BAr3QA3I8rs AcSeUlHPtKgKKwRCIgRci/t0EIkWOLr3Gh/r9BVLnfoZ2FjSbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZcEij33dz4vHo5PKUhPaq+Wy0fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvODZkMWFhODItY2EzMC0z NjRiLTk5NjQtYzBmZGRiNWIwYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHaKOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn3zfKxOPpRrPKW2EfSQtCO//Q8ZYh5YJTf+ZmcS3JVy+i7w01l2tYs 2sKgWhcuY6Xod/kjr4U4b7nG4yZ3Mynd206eh0uauYwFH27RS+w/x4de3UlOdUhQ TcP4EWeSPWZ2MSlrn3Qw6lSgBwwocAhoC9190gXwWNeNd6422m/QyU94FjCxRxB4 bHETtl8Wk+fH5BIYftuxEBV02SaeBN6kH0bTk9Xie+2IPEshaiNsbgydyZUEEGDL OJIf6wgurf9ZIaffbzhxiWwwG6dtfEipCRZ1mQc/m0h71/dnzEO6uNK/8bIsHsL+ 7GvQuT7Lin+quJxLgnHnpydBTXto+2A= -----END CERTIFICATE-----Generated at Sat Jun 13 16:30:35 2026 by rpki-client