$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa File: a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa (raw, json) Hash identifier: pdZoJ3GQxiM4wSk+u+V8lNoeQMQqY0XlGfgOx/wwBfg= Subject key identifier: 0F:8A:9E:D9:66:91:28:F4:0C:CD:9A:39:45:AB:CD:35:1E:7E:AA:4D Certificate issuer: /CN=4d929512-7541-4207-be46-8af4cc4a4800 Certificate serial: 010D0C9F4328584EA78F76D73DC7A10125CD8390 Authority key identifier: 50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 26658 IP address blocks: 104.232.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:76:d7:3d:c7:a1:01:25:cd:83:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d929512-7541-4207-be46-8af4cc4a4800 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6e227157-ff7d-459f-a730-a38b31c58a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0c:a9:3a:6a:22:a9:83:0a:43:3f:90:a6:87: 36:a2:31:54:d9:04:d8:fd:cf:54:91:b4:cd:b6:a4: 78:9f:d8:59:c8:97:6b:50:b7:b2:92:4b:66:97:24: 73:ad:0d:10:c2:2f:09:16:cb:df:d9:78:36:a0:38: 2a:39:01:12:49:88:dd:11:e8:f4:e0:be:18:ed:66: 2d:75:2d:98:67:c9:ea:e1:30:60:4c:04:8c:8e:a7: 8c:fc:75:2a:f2:16:1b:5e:97:c1:6b:bb:24:c9:08: 60:b1:33:56:88:32:53:71:86:f6:5c:48:b8:fe:db: c0:a0:ed:c6:83:ba:30:8e:36:59:aa:ff:df:1c:97: 7b:ec:72:1e:70:f5:78:c9:0e:a8:11:3c:6f:1a:1f: 15:18:51:e7:83:a7:bf:e2:70:67:dd:eb:20:20:14: aa:b0:d3:fb:f2:0e:5a:04:12:99:ac:9a:e0:7c:82: fc:04:48:b0:4c:e7:04:14:42:c5:1f:13:6a:23:ad: ff:55:44:84:9c:36:ef:52:ad:4b:f2:7e:55:f4:a2: 54:19:c4:b5:2b:c9:bd:3f:1d:df:89:fb:71:47:ac: e3:a4:9f:08:ac:d5:26:ec:22:9a:e7:5a:73:52:33: ee:8a:3f:e3:cd:c2:3b:e1:c2:09:4b:79:21:85:0a: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8A:9E:D9:66:91:28:F4:0C:CD:9A:39:45:AB:CD:35:1E:7E:AA:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl X509v3 Authority Key Identifier: keyid:50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer sbgp-ipAddrBlock: critical IPv4: 104.232.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f3:fb:81:83:0e:a3:60:ea:be:e6:c2:e8:fa:3f:1c:28:46: 2e:98:49:b4:eb:5d:73:29:0a:ab:26:37:c3:32:81:2e:be:8e: c1:b0:64:9b:e6:2b:02:b2:f1:d0:0f:26:4f:08:0d:f9:f8:0a: 8a:db:68:09:c2:87:53:e4:5c:f3:d6:ca:00:a6:19:e8:89:52: 33:ab:2c:ca:26:7a:be:40:fc:bf:9c:30:7b:ca:30:df:7d:c0: 51:39:10:07:b7:68:e7:56:67:27:2a:d5:a8:d0:1a:b5:94:dd: 6a:24:ef:0b:fd:04:a5:22:7b:c2:db:c0:05:ed:b9:13:d1:86: 62:30:19:b6:93:ab:d2:74:5d:eb:dc:eb:56:30:6b:d4:7b:d1: 02:33:a1:31:c1:cf:29:83:44:16:67:fa:88:31:80:24:2c:85: 4f:19:a6:98:ac:97:26:26:99:95:c1:4b:31:18:d4:47:f0:f6: 2a:37:00:6b:58:40:ee:d8:a0:38:24:2e:03:0f:1a:37:b2:9f: bf:cc:88:3a:e4:39:ca:9c:4e:0d:08:2a:8b:93:f0:8e:8f:1f: 06:e7:59:e7:95:39:fd:16:d8:29:43:fa:f9:df:ec:8a:cb:17: ba:80:0d:1b:43:f9:58:9c:20:b1:00:16:13:bf:29:6d:4c:89: c1:0a:41:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj3bXPcehASXNg5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5Mjk1MTItNzU0MS00MjA3LWJlNDYtOGFmNGNjNGE0 ODAwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmUyMjcxNTctZmY3ZC00NTlmLWE3MzAtYTM4YjMxYzU4YTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wypOmoiqYMKQz+Qpoc2ojFU2QTY/c9UkbTN tqR4n9hZyJdrULeykktmlyRzrQ0Qwi8JFsvf2Xg2oDgqOQESSYjdEej04L4Y7WYt dS2YZ8nq4TBgTASMjqeM/HUq8hYbXpfBa7skyQhgsTNWiDJTcYb2XEi4/tvAoO3G g7owjjZZqv/fHJd77HIecPV4yQ6oETxvGh8VGFHng6e/4nBn3esgIBSqsNP78g5a BBKZrJrgfIL8BEiwTOcEFELFHxNqI63/VUSEnDbvUq1L8n5V9KJUGcS1K8m9Px3f iftxR6zjpJ8IrNUm7CKa51pzUjPuij/jzcI74cIJS3khhQo7YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+KntlmkSj0DM2aOUWrzTUefqpNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80ZDky OTUxMi03NTQxLTQyMDctYmU0Ni04YWY0Y2M0YTQ4MDAvYTFhMjA2MGEtNjg4MS0z ZWY1LWFhN2MtMWMzOWY4MzliMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGQ5Mjk1MTItNzU0MS00MjA3LWJl NDYtOGFmNGNjNGE0ODAwLzRkOTI5NTEyLTc1NDEtNDIwNy1iZTQ2LThhZjRjYzRh NDgwMC5jcmwwHwYDVR0jBBgwFoAUUHbGsA5Pv93rRfzEAudPVstdNTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80ZDkyOTUxMi03NTQxLTQyMDctYmU0Ni04YWY0 Y2M0YTQ4MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvz+4GDDqNg6r7mwuj6PxwoRi6YSbTrXXMpCqsmN8MygS6+jsGwZJvm KwKy8dAPJk8IDfn4CorbaAnCh1PkXPPWygCmGeiJUjOrLMomer5A/L+cMHvKMN99 wFE5EAe3aOdWZycq1ajQGrWU3Wok7wv9BKUie8LbwAXtuRPRhmIwGbaTq9J0Xevc 61Ywa9R70QIzoTHBzymDRBZn+ogxgCQshU8ZppislyYmmZXBSzEY1Efw9io3AGtY QO7YoDgkLgMPGjeyn7/MiDrkOcqcTg0IKouT8I6PHwbnWeeVOf0W2ClD+vnf7IrL F7qADRtD+VicILEAFhO/KW1MicEKQSE= -----END CERTIFICATE-----Generated at Wed Jul 29 12:54:08 2026 by rpki-client