$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa File: a76a38d7-efa4-3450-9774-2046e431cfb8.roa (raw, json) Hash identifier: OvOOBSOeOI03aHZ5A2csRG+4E6uBECnp5t+7dYsQcY0= Subject key identifier: D2:05:A4:82:92:9D:AA:8C:B6:EF:EF:FF:39:B5:42:E5:B1:AF:31:1F Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584E016B3034643534AFB30400C0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa Signing time: Sat 30 May 2026 13:00:10 +0000 ROA not before: Sat 30 May 2026 13:00:10 +0000 ROA not after: Fri 28 Aug 2026 13:00:10 +0000 asID: 931 IP address blocks: 104.249.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:01:6b:30:34:64:35:34:af:b3:04:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: May 30 13:00:10 2026 GMT Not After : Aug 28 13:00:10 2026 GMT Subject: CN=f60eaca0-bc87-4973-9a94-1f7ccb53b35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d7:21:9b:d1:fe:ff:fd:14:dd:7d:7d:12:8d: 02:64:ec:15:a3:36:7e:e8:8a:99:ac:6c:1a:97:e1: b2:52:ca:ef:b5:93:1d:2f:d2:2e:67:ec:b5:45:5e: 34:68:92:02:04:73:b4:e6:82:eb:c7:4d:7b:8d:8f: de:df:e9:97:33:8c:05:7a:60:2a:b5:7a:b8:7a:2c: b3:d5:ee:62:fe:7c:0a:46:f2:a2:c3:3e:7b:f2:f3: 34:4d:8b:ef:e0:6f:0a:dd:22:8d:18:80:9c:e4:24: 2a:ec:00:7c:33:03:7e:82:0b:08:b5:9d:e1:bd:fc: f3:3c:cf:0a:f8:d8:e7:47:16:c5:69:c9:40:a0:d1: 20:5a:82:21:15:97:ea:1a:8e:d0:69:d2:93:84:9e: 9a:16:c6:b7:18:98:e1:76:f2:f7:b3:57:2c:28:88: c6:d1:60:0d:b9:6d:e4:e9:f2:77:dd:e7:7f:f7:15: 55:66:3c:de:c5:97:ec:47:c6:3e:0d:62:aa:c2:08: 6c:a9:cb:c3:43:5c:34:2a:ff:78:da:a1:58:41:84: 9d:b4:ea:2f:22:91:5f:f3:f0:b3:7a:bc:33:d7:16: ba:ee:66:be:47:ef:30:1d:1f:5c:68:86:8f:31:72: 0e:f2:1a:ce:8f:76:a3:31:b7:28:0d:42:83:dc:73: 4a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:05:A4:82:92:9D:AA:8C:B6:EF:EF:FF:39:B5:42:E5:B1:AF:31:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:07:55:f1:e2:ab:8c:94:07:c4:27:52:b8:4a:b9:06:3b:13: 80:89:87:3d:84:8b:99:34:05:b6:a3:9e:2a:09:3b:38:7b:6e: 7d:39:83:09:cc:44:34:85:7f:d0:37:f4:ec:45:cc:3c:7c:a7: a7:44:9a:e9:36:c5:11:fd:8b:a6:bc:92:3e:03:45:37:6f:19: 52:57:68:07:14:83:52:3c:29:ee:57:a7:e4:77:48:0e:f3:a5: e6:a5:fa:c3:c5:ea:38:d4:93:58:e8:38:5f:66:18:6d:87:54: 26:2f:74:e1:e7:23:be:64:24:33:d8:71:53:a5:70:1b:f5:66: fa:e2:40:11:98:ec:93:41:aa:37:89:6b:8b:98:93:92:70:54: b5:0e:3b:0b:b4:5a:57:c8:21:18:da:fc:ab:c0:70:72:f9:38: 4b:91:5b:96:ea:e1:61:82:25:67:48:87:ca:86:c7:8d:96:71: 8a:a1:77:c9:97:5d:c9:81:f9:37:49:c7:43:aa:3b:d1:96:93: c7:04:ba:50:0d:9a:d7:93:7a:37:4a:c0:a0:15:d7:51:59:8a: a5:39:0e:db:48:ac:65:ff:2e:96:88:1e:e1:2b:7c:d7:43:af: 22:bc:4c:d3:81:fc:50:e1:cc:25:46:d4:20:ac:2d:53:5f:63: ac:ac:44:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4BazA0ZDU0r7MEAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDUzMDEzMDAxMFoXDTI2MDgyODEzMDAxMFowLzEtMCsGA1UEAxMk ZjYwZWFjYTAtYmM4Ny00OTczLTlhOTQtMWY3Y2NiNTNiMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9chm9H+//0U3X19Eo0CZOwVozZ+6IqZrGwa l+GyUsrvtZMdL9IuZ+y1RV40aJICBHO05oLrx017jY/e3+mXM4wFemAqtXq4eiyz 1e5i/nwKRvKiwz578vM0TYvv4G8K3SKNGICc5CQq7AB8MwN+ggsItZ3hvfzzPM8K +NjnRxbFaclAoNEgWoIhFZfqGo7QadKThJ6aFsa3GJjhdvL3s1csKIjG0WANuW3k 6fJ33ed/9xVVZjzexZfsR8Y+DWKqwghsqcvDQ1w0Kv942qFYQYSdtOovIpFf8/Cz erwz1xa67ma+R+8wHR9caIaPMXIO8hrOj3ajMbcoDUKD3HNKxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIFpIKSnaqMtu/v/zm1QuWxrzEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTc2YTM4ZDctZWZhNC0z NDUwLTk3NzQtMjA0NmU0MzFjZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4HVfHiq4yUB8QnUrhKuQY7E4CJhz2Ei5k0BbajnioJOzh7bn05gwnM RDSFf9A39OxFzDx8p6dEmuk2xRH9i6a8kj4DRTdvGVJXaAcUg1I8Ke5Xp+R3SA7z peal+sPF6jjUk1joOF9mGG2HVCYvdOHnI75kJDPYcVOlcBv1ZvriQBGY7JNBqjeJ a4uYk5JwVLUOOwu0WlfIIRja/KvAcHL5OEuRW5bq4WGCJWdIh8qGx42WcYqhd8mX XcmB+TdJx0OqO9GWk8cEulANmteTejdKwKAV11FZiqU5DttIrGX/LpaIHuErfNdD ryK8TNOB/FDhzCVG1CCsLVNfY6ysRJM= -----END CERTIFICATE-----Generated at Sat Jun 13 18:38:55 2026 by rpki-client