$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dfaf4cac-1723-334f-a33f-61a8d9bf5e5c.roa File: dfaf4cac-1723-334f-a33f-61a8d9bf5e5c.roa (raw, json) Hash identifier: fZ4/QrmMOxjsg1bzMwmdbWW0zCXIjCnKKM+eyOLIv70= Subject key identifier: D7:31:7B:3A:63:6C:84:C0:4B:75:F4:FF:14:DF:35:40:CE:52:33:79 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EA79C79E6DA74B79D98BE2D80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dfaf4cac-1723-334f-a33f-61a8d9bf5e5c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23473 IP address blocks: 104.145.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:79:e6:da:74:b7:9d:98:be:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e34dbc9c-bf63-4a18-8fcd-d3ce180fde1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:73:37:62:10:29:df:be:3e:41:f7:cc:77:63: e1:82:6a:bf:f7:5b:cb:f8:78:b2:2c:c3:35:c6:43: 38:5c:95:0a:53:fe:3a:dd:9c:9d:eb:8f:01:52:0a: 55:07:b4:38:e2:d5:2a:a7:88:11:7c:fa:42:b2:8b: fc:a3:ff:3a:68:f9:96:23:19:eb:0b:d7:bc:c8:36: ba:73:5a:a5:c2:1e:68:71:d1:5a:67:49:34:b6:52: 87:d5:3f:32:49:27:bc:cb:e0:c5:af:af:23:99:81: 84:b9:1f:e5:74:42:0e:d7:7e:7e:b5:04:ef:23:72: 1a:4b:36:3a:22:75:59:17:de:bc:5f:c5:d8:f3:67: dd:3d:a5:0b:f3:bc:a5:5f:19:8b:ad:e2:69:06:f9: 80:1c:c7:7b:e2:b0:aa:0c:da:07:24:4a:fb:8b:5a: 0f:a6:54:e2:e1:a2:cc:be:a8:a1:97:75:1f:7f:e6: e9:00:b6:10:c1:c0:b9:a0:ee:ce:7f:d2:e3:9c:28: 15:6f:48:37:04:c4:3d:2b:7b:ae:e5:d2:14:38:5f: 2b:a4:e6:87:12:b5:03:23:09:9b:95:c3:42:3c:cc: 63:3b:eb:66:50:5c:18:15:11:65:4a:a2:dc:3f:ad: 5b:3b:ed:8b:84:c2:6b:6a:d2:e5:99:40:84:86:c8: a0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:31:7B:3A:63:6C:84:C0:4B:75:F4:FF:14:DF:35:40:CE:52:33:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dfaf4cac-1723-334f-a33f-61a8d9bf5e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 104.145.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:05:b7:29:f0:c6:c4:04:c1:f3:9d:42:49:41:cc:ef:5c:16: f7:61:66:c3:95:2b:d0:ea:db:4f:00:12:a7:ce:c6:b8:99:ca: 2b:f0:71:71:f1:48:79:ab:4f:93:3b:e1:b8:59:36:67:8b:31: 08:3b:21:25:5a:a9:f0:b2:64:53:6e:35:0d:6c:1b:14:bd:0e: 06:bb:d2:ec:ff:14:a8:ff:2a:59:b5:b5:b8:a9:2c:e8:e6:62: cc:49:86:80:ea:76:11:87:a7:bf:58:ae:8d:d3:bd:fa:29:98: 84:ce:ab:31:79:a8:11:e8:e4:b3:0a:a1:7c:ac:88:18:5d:f9: 88:73:7e:f0:5a:17:6c:d2:3b:ee:f3:bf:cd:fa:fc:e1:cc:d5: 31:bc:ec:86:91:a5:9a:cf:74:bd:c8:b0:7c:31:a2:ab:e9:e9: 93:5f:6b:61:f4:7d:6f:bd:f6:f9:3a:82:eb:b8:eb:21:44:ac: dd:94:97:c6:f4:a6:7a:05:b7:9a:0d:00:3a:14:8c:75:b5:c3: df:7a:bd:f7:69:ca:c1:d1:8c:57:00:53:d8:57:a0:fb:61:b8: 95:9f:f5:65:1e:55:2a:dc:2e:a9:36:ca:b1:55:3f:4f:6d:d1: 32:c8:b8:0c:4c:f5:da:43:32:2f:d7:2c:44:e1:ac:de:49:4f: f7:5e:d7:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnHnm2nS3nZi+LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTM0ZGJjOWMtYmY2My00YTE4LThmY2QtZDNjZTE4MGZkZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHM3YhAp374+QffMd2Phgmq/91vL+HiyLMM1 xkM4XJUKU/463Zyd648BUgpVB7Q44tUqp4gRfPpCsov8o/86aPmWIxnrC9e8yDa6 c1qlwh5ocdFaZ0k0tlKH1T8ySSe8y+DFr68jmYGEuR/ldEIO135+tQTvI3IaSzY6 InVZF968X8XY82fdPaUL87ylXxmLreJpBvmAHMd74rCqDNoHJEr7i1oPplTi4aLM vqihl3Uff+bpALYQwcC5oO7Of9LjnCgVb0g3BMQ9K3uu5dIUOF8rpOaHErUDIwmb lcNCPMxjO+tmUFwYFRFlSqLcP61bO+2LhMJratLlmUCEhsigNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcxezpjbITAS3X0/xTfNUDOUjN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZGZhZjRjYWMtMTcyMy0z MzRmLWEzM2YtNjFhOGQ5YmY1ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkFtynwxsQEwfOdQklBzO9cFvdhZsOVK9Dq208AEqfOxriZyivwcXHx SHmrT5M74bhZNmeLMQg7ISVaqfCyZFNuNQ1sGxS9Dga70uz/FKj/Klm1tbipLOjm YsxJhoDqdhGHp79Yro3TvfopmITOqzF5qBHo5LMKoXysiBhd+YhzfvBaF2zSO+7z v836/OHM1TG87IaRpZrPdL3IsHwxoqvp6ZNfa2H0fW+99vk6guu46yFErN2Ul8b0 pnoFt5oNADoUjHW1w996vfdpysHRjFcAU9hXoPthuJWf9WUeVSrcLqk2yrFVP09t 0TLIuAxM9dpDMi/XLEThrN5JT/de10M= -----END CERTIFICATE-----Generated at Wed Jul 29 05:45:48 2026 by rpki-client