$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/aa619ae4-c051-3154-953a-a049c92a68f3.roa File: aa619ae4-c051-3154-953a-a049c92a68f3.roa (raw, json) Hash identifier: 7Nb0Z2WnG99fOefHXM2Ay957gBzyw7g5JpYeUZj1rjA= Subject key identifier: F7:EA:2D:01:38:41:45:82:6F:55:4B:E2:62:7F:5A:65:3A:BA:90:02 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F3052609C3F36C00333E034C0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/aa619ae4-c051-3154-953a-a049c92a68f3.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 11404 IP address blocks: 104.220.0.0/16 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:60:9c:3f:36:c0:03:33:e0:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=4d7f029f-33a6-4353-9d09-d87f01c74b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d5:17:ce:90:ee:e8:82:d7:30:82:95:5d:b4: 83:17:74:0e:04:f9:c6:13:6a:d8:1b:4f:43:74:cf: 6e:fa:5b:66:96:83:e4:bd:a4:b6:78:bd:70:07:d5: 44:bd:b8:4f:66:0a:95:7d:68:5b:c4:1f:fd:86:28: c7:51:ec:06:35:af:68:de:9e:ad:e6:e1:3f:ed:0e: f5:ca:df:8c:e0:6c:13:1c:25:2b:18:5e:b9:21:93: 42:f2:30:e4:71:72:ee:77:bd:f9:91:10:b3:07:39: c6:6c:b8:d1:a8:59:20:7b:e2:53:45:1a:3c:eb:24: e1:41:e8:54:6e:10:31:81:57:e0:f7:33:f5:a2:71: 7a:80:5b:ec:53:80:85:2e:c9:fa:c2:23:25:cc:6a: 8b:b7:33:5f:02:77:b7:62:64:60:6b:3f:73:79:d6: 65:f5:bd:34:05:6d:b6:89:38:49:4e:3e:08:35:69: 58:5f:50:e3:25:76:d4:02:8e:96:33:c6:c8:17:24: c7:91:84:d9:2f:f0:40:10:b0:34:25:7d:30:8e:d5: 60:7c:ae:9c:25:0a:db:6c:b3:47:bc:86:d2:13:d2: 8c:48:5a:13:f6:59:27:90:51:61:7d:35:1b:1e:27: e5:4e:07:aa:68:ef:1f:c1:b2:6f:a7:cb:57:fe:9a: 55:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EA:2D:01:38:41:45:82:6F:55:4B:E2:62:7F:5A:65:3A:BA:90:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/aa619ae4-c051-3154-953a-a049c92a68f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:13:c2:e5:c1:5f:87:00:fa:fe:0e:ad:b9:d8:66:c5:bd:87: 5e:ef:32:b9:41:3f:9b:4f:77:e2:2c:3c:96:a5:db:a9:c3:64: c7:a0:07:a3:52:3f:f4:a9:fc:e9:13:58:8a:ca:1c:9e:db:77: 90:20:13:e1:de:fa:77:20:a4:a0:49:cc:6e:ac:6e:e2:62:43: 64:cd:3e:94:71:dd:79:2a:70:23:68:90:fb:00:91:20:38:fd: 00:9d:30:cc:88:4c:fa:34:25:5f:25:65:73:5d:d1:e7:26:bc: 06:ea:eb:da:2e:86:8c:f9:14:bb:cb:48:df:7f:21:fd:fa:78: dd:0d:e3:61:8f:e6:ca:6e:39:18:7d:75:d7:79:73:0d:d1:3a: a7:87:91:22:e1:84:3c:d1:9b:36:bf:ad:14:45:37:d0:54:7e: 98:9f:a3:54:86:0a:26:b4:fd:d2:67:52:a1:e6:8d:76:01:f5: cf:83:73:1a:85:87:2b:3b:01:c8:a2:dc:bf:9f:a7:08:8b:1c: b1:37:57:35:64:92:63:2b:1c:98:a5:c9:42:f9:66:d7:27:3d: da:c1:c1:ef:5d:0a:ba:6e:4c:4b:d0:ba:5c:35:b9:73:a2:09: 9f:eb:af:df:6f:0f:69:db:07:b1:d1:bb:c3:12:ac:7e:13:d4: f4:71:0f:80 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8wUmCcPzbAAzPgNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk NGQ3ZjAyOWYtMzNhNi00MzUzLTlkMDktZDg3ZjAxYzc0YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodUXzpDu6ILXMIKVXbSDF3QOBPnGE2rYG09D dM9u+ltmloPkvaS2eL1wB9VEvbhPZgqVfWhbxB/9hijHUewGNa9o3p6t5uE/7Q71 yt+M4GwTHCUrGF65IZNC8jDkcXLud735kRCzBznGbLjRqFkge+JTRRo86yThQehU bhAxgVfg9zP1onF6gFvsU4CFLsn6wiMlzGqLtzNfAne3YmRgaz9zedZl9b00BW22 iThJTj4INWlYX1DjJXbUAo6WM8bIFyTHkYTZL/BAELA0JX0wjtVgfK6cJQrbbLNH vIbSE9KMSFoT9lknkFFhfTUbHiflTgeqaO8fwbJvp8tX/ppVTwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPfqLQE4QUWCb1VL4mJ/WmU6upACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYWE2MTlhZTQtYzA1MS0z MTU0LTk1M2EtYTA0OWM5MmE2OGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAaNwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWRPC5cFfhwD6/g6tudhmxb2HXu8yuUE/m0934iw8lqXbqcNkx6AHo1I/ 9Kn86RNYisocntt3kCAT4d76dyCkoEnMbqxu4mJDZM0+lHHdeSpwI2iQ+wCRIDj9 AJ0wzIhM+jQlXyVlc13R5ya8Burr2i6GjPkUu8tI338h/fp43Q3jYY/mym45GH11 13lzDdE6p4eRIuGEPNGbNr+tFEU30FR+mJ+jVIYKJrT90mdSoeaNdgH1z4NzGoWH KzsByKLcv5+nCIscsTdXNWSSYyscmKXJQvlm1yc92sHB710Kum5MS9C6XDW5c6IJ n+uv328PadsHsdG7wxKsfhPU9HEPgA== -----END CERTIFICATE-----Generated at Mon Sep 21 21:26:32 2026 by rpki-client