$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d88b5200-310f-3d92-806a-4a865f0bb691.roa File: d88b5200-310f-3d92-806a-4a865f0bb691.roa (raw, json) Hash identifier: 2srYFk2hHzCNUwF1P4CegtXObKW//Nnme+DOSRWhK7M= Subject key identifier: BC:31:E2:AF:65:D3:6B:5B:A3:13:98:A4:E4:0D:51:57:6E:AB:FE:F9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA79ADBF1ABC2BED7B0BE2A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d88b5200-310f-3d92-806a-4a865f0bb691.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 104.199.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:db:f1:ab:c2:be:d7:b0:be:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a4933136-0b1d-4fde-9c61-41c48567fa12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:18:01:cd:fa:e4:dd:ee:8c:5b:2f:11:31:b3: ab:6a:78:c4:a2:8d:66:0d:7b:75:af:8a:d1:3e:cf: 0e:88:81:44:51:47:ff:d8:b4:0b:4d:7d:cb:f8:df: 77:31:10:61:f6:31:cc:86:3f:63:52:bd:f7:47:cb: 6c:35:4b:85:25:0d:cf:ee:87:32:0c:6d:36:22:39: 51:63:93:cf:fa:2c:b2:aa:a6:71:05:74:d4:f7:bd: df:55:8a:a0:3e:9a:51:40:30:aa:49:d5:91:47:a9: 12:7a:16:58:f5:f7:e8:88:84:7e:93:57:cc:1c:f8: 4c:7b:9a:c2:77:46:36:b5:5c:b4:b6:1c:c3:d2:c4: ab:4c:ec:e8:59:6f:35:70:9a:cc:30:57:65:52:0e: 5f:32:2f:f0:68:6c:67:02:d5:d5:e9:b2:20:07:4e: 90:ec:cb:50:21:0e:23:f1:6f:79:a5:b9:ec:ae:41: 04:48:e9:05:d0:ae:2d:ff:60:7f:95:87:d8:e7:09: fe:66:34:5c:33:1d:e5:c5:ea:12:87:63:b3:41:53: f3:62:3b:74:60:02:05:12:5f:b3:02:53:b9:32:fc: ef:1a:74:b3:e9:04:61:a7:b9:39:28:ab:1f:0c:cb: c7:5e:65:43:db:8c:96:28:8b:f6:df:10:8a:03:4e: 60:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:31:E2:AF:65:D3:6B:5B:A3:13:98:A4:E4:0D:51:57:6E:AB:FE:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d88b5200-310f-3d92-806a-4a865f0bb691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6c:11:00:d8:8c:a7:02:b8:47:06:1f:76:18:50:cd:ae:65: ff:2e:7d:4b:ec:0f:a9:2d:fd:39:39:48:3b:56:d8:de:da:e0: e4:4f:25:6d:42:03:8e:64:b4:f7:75:aa:be:ac:79:25:11:3c: d1:5e:60:67:da:21:bd:01:2a:5c:47:72:e0:68:35:d8:5d:c3: 07:f8:c8:60:74:17:48:a5:a6:f2:a6:f7:0f:4b:e0:03:dd:6b: 16:fd:b8:1b:75:b6:05:d0:3f:a0:81:da:38:48:90:33:38:b3: 15:0a:ad:6f:dc:4b:8e:51:ec:e5:eb:74:d7:36:94:86:0c:f5: 89:ce:bd:21:4a:a8:17:45:dd:10:93:77:97:19:9f:9d:f9:2d: f2:8b:7e:e3:54:0e:3c:0d:05:d4:b3:39:dc:f5:5a:26:46:a1: bb:42:00:1d:db:a3:0c:d0:64:36:93:3b:31:d3:e8:8c:cc:1b: eb:c5:0b:ef:47:6f:1c:17:6a:6b:f2:b5:2e:6d:c4:48:e6:fe: 55:41:53:7f:d3:63:e3:85:d1:30:8a:1a:5f:f5:53:b8:cd:1e: 18:26:3c:36:41:98:94:7d:de:d7:23:fd:14:82:82:d5:6a:79: bc:3e:2e:e0:f1:39:5c:36:bb:3c:44:59:da:79:df:58:f4:5d: 42:9f:1b:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmtvxq8K+17C+KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTQ5MzMxMzYtMGIxZC00ZmRlLTljNjEtNDFjNDg1NjdmYTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRgBzfrk3e6MWy8RMbOranjEoo1mDXt1r4rR Ps8OiIFEUUf/2LQLTX3L+N93MRBh9jHMhj9jUr33R8tsNUuFJQ3P7ocyDG02IjlR Y5PP+iyyqqZxBXTU973fVYqgPppRQDCqSdWRR6kSehZY9ffoiIR+k1fMHPhMe5rC d0Y2tVy0thzD0sSrTOzoWW81cJrMMFdlUg5fMi/waGxnAtXV6bIgB06Q7MtQIQ4j 8W95pbnsrkEESOkF0K4t/2B/lYfY5wn+ZjRcMx3lxeoSh2OzQVPzYjt0YAIFEl+z AlO5MvzvGnSz6QRhp7k5KKsfDMvHXmVD24yWKIv23xCKA05g1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwx4q9l02tboxOYpOQNUVduq/75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDg4YjUyMDAtMzEwZi0z ZDkyLTgwNmEtNGE4NjVmMGJiNjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpsEQDYjKcCuEcGH3YYUM2uZf8ufUvsD6kt/Tk5SDtW2N7a4ORPJW1C A45ktPd1qr6seSURPNFeYGfaIb0BKlxHcuBoNdhdwwf4yGB0F0ilpvKm9w9L4APd axb9uBt1tgXQP6CB2jhIkDM4sxUKrW/cS45R7OXrdNc2lIYM9YnOvSFKqBdF3RCT d5cZn535LfKLfuNUDjwNBdSzOdz1WiZGobtCAB3bowzQZDaTOzHT6IzMG+vFC+9H bxwXamvytS5txEjm/lVBU3/TY+OF0TCKGl/1U7jNHhgmPDZBmJR93tcj/RSCgtVq ebw+LuDxOVw2uzxEWdp531j0XUKfGx0= -----END CERTIFICATE-----Generated at Wed Jul 29 15:27:31 2026 by rpki-client