$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa File: 7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa (raw, json) Hash identifier: 8XaYbODprXATynBFKZ9auzk4UuPj2AoMdJvSpgfCXO4= Subject key identifier: C6:9E:E6:32:8A:FD:C1:15:6F:DA:75:92:13:F6:08:19:45:19:90:A0 Certificate issuer: /CN=5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306 Certificate serial: 010D0C9F4328584E18AEF203E58A76AD248EE280 Authority key identifier: A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 399213 IP address blocks: 104.167.227.0/24 maxlen: 24 2602:f8d9::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:f2:03:e5:8a:76:ad:24:8e:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=ba9e5d60-f20c-438e-bbc0-3d70ad819581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fc:58:45:87:64:18:22:ba:65:6f:ea:95:e8: c3:cd:e9:ae:e5:d9:44:fd:a6:08:55:20:79:12:15: 6e:0b:3e:c2:14:d7:ae:e2:6b:48:cf:33:6a:e6:dd: 43:63:e3:3d:ab:6b:90:27:64:bc:4a:d9:4a:d9:e1: 4a:4f:56:ad:f4:a3:74:e3:6b:76:fb:e7:cf:40:07: 59:8a:5e:ca:9f:fd:3f:70:d0:e7:e1:b9:e6:e1:9f: fd:64:92:f7:03:27:22:7c:5a:3d:d9:fd:ab:74:8c: 8b:e9:9f:b9:63:1e:f3:69:20:70:dd:ed:14:ff:21: 42:8d:26:7d:2c:13:c6:cb:83:c5:03:60:3b:fc:4b: f8:3c:42:81:03:b6:b9:f2:59:28:63:0b:6a:19:ed: 4f:3b:89:b2:b9:0a:ac:a0:2a:c8:3e:c9:b0:82:85: 86:f1:b8:3c:aa:0d:51:51:87:54:d1:c5:12:3c:bb: ae:23:5d:8d:ee:0f:77:d0:26:11:b9:10:32:27:eb: 26:ae:23:68:47:a7:ce:60:d7:dc:21:9d:9c:3b:a5: 49:cd:43:94:5b:20:a5:6e:0f:70:cc:a2:1f:62:30: e0:95:16:16:69:7a:d4:f2:a8:81:59:46:f8:02:ae: a7:c3:9b:77:9f:dd:27:6c:b8:65:4a:1e:8e:5c:b5: 7a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9E:E6:32:8A:FD:C1:15:6F:DA:75:92:13:F6:08:19:45:19:90:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.crl X509v3 Authority Key Identifier: keyid:A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer sbgp-ipAddrBlock: critical IPv4: 104.167.227.0/24 IPv6: 2602:f8d9::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:55:63:aa:50:53:dd:d6:db:9a:00:87:12:28:48:6d:2a:0d: f2:46:9e:30:c0:c2:87:da:0e:37:82:80:9e:26:6d:82:0d:37: b0:5e:cd:ff:d3:d7:f7:f3:57:18:fd:96:a5:39:f3:35:14:af: 71:29:75:0d:ef:94:04:2a:f6:c5:39:02:fc:80:96:23:d8:f5: b1:b9:a4:ac:13:07:4d:32:29:e0:71:f0:27:f4:3e:1a:dc:bb: 08:cb:d0:90:4d:0f:d3:3f:bb:7b:c6:f5:5c:9e:6d:ec:20:71: e7:b5:67:f6:36:8a:64:5f:69:46:36:40:1c:37:14:da:d0:8f: 3c:ad:1f:e4:ad:3f:ce:5a:3a:27:dc:2b:a8:f5:38:40:e4:e5: da:99:f0:78:07:09:ab:01:5e:27:ae:03:46:8e:0f:38:a5:bf: 27:62:23:0c:51:5d:3c:65:c4:28:ad:bd:d0:ae:36:0c:b5:49: f2:72:b2:47:02:2e:ac:a3:08:68:f5:53:76:f6:a5:e0:7d:63: 16:85:b9:c8:a4:0a:2a:a8:f4:12:d6:6f:e4:c9:1e:0d:92:5a: bf:d6:71:62:e9:53:34:83:2f:d7:ff:99:74:bd:71:6b:88:91: 07:ea:2c:a0:78:db:40:f5:6a:a2:da:52:fc:e9:c3:a1:ff:c1: 70:ed:7d:ed -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE4YrvID5Yp2rSSO4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2YTVkN2EtNTFhMi00YTgzLWI1YjUtZDhjMTU0Yjhk MzA2MB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk YmE5ZTVkNjAtZjIwYy00MzhlLWJiYzAtM2Q3MGFkODE5NTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PxYRYdkGCK6ZW/qlejDzemu5dlE/aYIVSB5 EhVuCz7CFNeu4mtIzzNq5t1DY+M9q2uQJ2S8StlK2eFKT1at9KN042t2++fPQAdZ il7Kn/0/cNDn4bnm4Z/9ZJL3AycifFo92f2rdIyL6Z+5Yx7zaSBw3e0U/yFCjSZ9 LBPGy4PFA2A7/Ev4PEKBA7a58lkoYwtqGe1PO4myuQqsoCrIPsmwgoWG8bg8qg1R UYdU0cUSPLuuI12N7g930CYRuRAyJ+smriNoR6fOYNfcIZ2cO6VJzUOUWyClbg9w zKIfYjDglRYWaXrU8qiBWUb4Aq6nw5t3n90nbLhlSh6OXLV6zwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMae5jKK/cEVb9p1khP2CBlFGZCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZDZh NWQ3YS01MWEyLTRhODMtYjViNS1kOGMxNTRiOGQzMDYvN2RjNWYxMGUtZGRjZS0z OTcwLTgwZjgtNmExMWU1MmU2YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWQ2YTVkN2EtNTFhMi00YTgzLWI1 YjUtZDhjMTU0YjhkMzA2LzVkNmE1ZDdhLTUxYTItNGE4My1iNWI1LWQ4YzE1NGI4 ZDMwNi5jcmwwHwYDVR0jBBgwFoAUoJLYIXxJM+T6p/ExBrt1ksbID2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZDZhNWQ3YS01MWEyLTRhODMtYjViNS1kOGMx NTRiOGQzMDYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAaKfjMA4E AgACMAgDBgAmAvjZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNVWOqUFPd1tuaAIcSKEhtKg3yRp4wwMKH 2g43goCeJm2CDTewXs3/09f381cY/ZalOfM1FK9xKXUN75QEKvbFOQL8gJYj2PWx uaSsEwdNMingcfAn9D4a3LsIy9CQTQ/TP7t7xvVcnm3sIHHntWf2NopkX2lGNkAc NxTa0I88rR/krT/OWjon3Cuo9ThA5OXamfB4BwmrAV4nrgNGjg84pb8nYiMMUV08 ZcQorb3QrjYMtUnycrJHAi6sowho9VN29qXgfWMWhbnIpAoqqPQS1m/kyR4Nklq/ 1nFi6VM0gy/X/5l0vXFriJEH6iygeNtA9Wqi2lL86cOh/8Fw7X3t -----END CERTIFICATE-----Generated at Sat Jun 13 17:45:06 2026 by rpki-client