$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/42afc059-5ef8-345d-9eb0-509cf5658724.roa File: 42afc059-5ef8-345d-9eb0-509cf5658724.roa (raw, json) Hash identifier: q1/UtmmqAVj9IosVN6UM+BgT1w9kY9qjhk+YE7Jir+I= Subject key identifier: FE:DB:58:64:1D:01:36:45:8E:9B:1F:05:A9:F7:DD:49:5C:29:1E:5F Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584EA79B5F8970B43EF0A6EF79C0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/42afc059-5ef8-345d-9eb0-509cf5658724.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 931 IP address blocks: 104.249.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:5f:89:70:b4:3e:f0:a6:ef:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c53d3e9d-de74-4e18-a1f2-f7b7b82a7ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c8:7d:0b:e1:6d:2d:e2:49:7d:03:8b:b0:8b: a4:47:89:60:04:49:21:e9:a9:e0:01:5b:9f:f5:57: 37:e1:aa:22:11:9a:ad:83:b4:f3:0b:ee:bf:ac:b7: b8:bf:65:f4:69:61:d7:a8:f7:e9:45:08:dc:96:41: 2f:cf:2e:6b:80:cd:f0:c5:06:63:15:03:7f:3b:b1: 9c:60:3b:00:9a:06:5d:7b:49:ce:f3:b1:4d:3e:8b: 61:46:6f:8c:d5:7b:ca:d1:d9:17:98:39:f3:66:f1: 44:f5:7c:39:a6:70:9f:79:be:22:54:98:c5:84:f3: 09:a9:f3:3c:fb:d2:08:ee:20:9b:e8:fc:0c:34:ee: 6b:a9:27:5c:26:f3:ef:d8:7a:3c:cd:24:26:aa:1a: 54:bc:d6:0e:a4:16:6a:28:4d:43:0b:f7:b1:c5:d2: 68:0a:ed:d2:b1:a6:f6:4e:81:e4:43:ff:67:77:b6: ee:86:76:8b:6c:f7:3a:ce:ca:b4:d6:8f:82:62:b9: 17:b9:9e:72:ad:c6:87:3c:92:3d:a4:ed:11:37:cc: 15:83:23:6c:92:02:bb:b7:d4:59:e8:68:a0:c6:87: cc:df:c2:ce:4a:f0:f0:8c:e1:b0:be:1d:af:37:1d: eb:e8:1a:26:c3:77:39:27:e0:3d:3e:57:d4:df:d4: f2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DB:58:64:1D:01:36:45:8E:9B:1F:05:A9:F7:DD:49:5C:29:1E:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/42afc059-5ef8-345d-9eb0-509cf5658724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fe:d6:95:7d:c0:d6:78:f1:78:82:96:90:4d:62:d9:92:86: d2:d1:44:cf:02:8c:a9:e1:be:22:b3:0f:4e:a9:85:8e:e0:fa: 50:ad:af:4e:a0:1e:1d:ff:4c:04:8d:fe:19:02:f5:e8:03:06: 61:e6:fd:e1:d0:a4:21:a9:4f:30:87:d4:9e:a4:cb:15:fc:f0: d2:6c:2c:2f:88:26:7d:8b:1a:0c:e1:5b:38:6c:f1:84:bb:b5: 0a:0e:3f:0d:7a:d1:75:71:65:86:2a:e2:7c:9f:8b:b3:36:59: 62:9c:71:0f:4f:b5:19:6b:9d:a6:a6:eb:3f:de:bc:8a:6a:15: 40:3b:c0:b0:12:86:29:57:e8:8f:95:4b:dc:ba:b4:12:1a:03: 6c:64:f9:30:e6:e0:e6:f5:26:fd:14:24:88:c8:8f:8f:89:63: e2:a4:d7:fe:e5:be:b5:d3:ac:6c:3a:b1:63:87:b1:42:fb:1f: 17:ae:c5:9c:2b:08:a1:0b:54:10:fe:d2:66:17:08:fd:83:e4: 69:01:0c:37:f6:75:36:7c:d7:8f:a6:0a:8d:2d:f8:ae:a5:9e: 7c:b4:b5:f6:52:78:9a:ce:66:67:4d:14:2b:0c:43:d6:80:ca: dd:f5:be:17:2c:3a:e2:d2:cc:0b:c0:67:a7:3c:c6:f8:46:c5: 5a:8a:c6:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm1+JcLQ+8KbvecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzUzZDNlOWQtZGU3NC00ZTE4LWExZjItZjdiN2I4MmE3ZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsh9C+FtLeJJfQOLsIukR4lgBEkh6angAVuf 9Vc34aoiEZqtg7TzC+6/rLe4v2X0aWHXqPfpRQjclkEvzy5rgM3wxQZjFQN/O7Gc YDsAmgZde0nO87FNPothRm+M1XvK0dkXmDnzZvFE9Xw5pnCfeb4iVJjFhPMJqfM8 +9II7iCb6PwMNO5rqSdcJvPv2Ho8zSQmqhpUvNYOpBZqKE1DC/exxdJoCu3Ssab2 ToHkQ/9nd7buhnaLbPc6zsq01o+CYrkXuZ5yrcaHPJI9pO0RN8wVgyNskgK7t9RZ 6GigxofM38LOSvDwjOGwvh2vNx3r6Bomw3c5J+A9PlfU39TyfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7bWGQdATZFjpsfBan33UlcKR5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNDJhZmMwNTktNWVmOC0z NDVkLTllYjAtNTA5Y2Y1NjU4NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH+1pV9wNZ48XiClpBNYtmShtLRRM8CjKnhviKzD06phY7g+lCtr06g Hh3/TASN/hkC9egDBmHm/eHQpCGpTzCH1J6kyxX88NJsLC+IJn2LGgzhWzhs8YS7 tQoOPw160XVxZYYq4nyfi7M2WWKccQ9PtRlrnaam6z/evIpqFUA7wLAShilX6I+V S9y6tBIaA2xk+TDm4Ob1Jv0UJIjIj4+JY+Kk1/7lvrXTrGw6sWOHsUL7HxeuxZwr CKELVBD+0mYXCP2D5GkBDDf2dTZ814+mCo0t+K6lnny0tfZSeJrOZmdNFCsMQ9aA yt31vhcsOuLSzAvAZ6c8xvhGxVqKxtU= -----END CERTIFICATE-----Generated at Wed Jul 29 05:13:32 2026 by rpki-client