$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/f7967a59-1c07-39dc-a959-9b6ab6129975.roa File: f7967a59-1c07-39dc-a959-9b6ab6129975.roa (raw, json) Hash identifier: SM70Zb0IjaoCypDXZw2RDBEcYb7AEAUpAxAESJjol+M= Subject key identifier: F3:1B:AB:03:72:A8:77:87:B7:0B:B6:02:B0:D0:61:A5:08:AB:45:5D Certificate issuer: /CN=3d2a810f-f980-4f77-8ab7-d979958ffb62 Certificate serial: 010D0C9F4328584EA2DFC8B0323C28FEE8A530C0 Authority key identifier: 0F:A4:68:0E:03:74:A1:ED:83:CB:18:96:2B:BF:8D:D2:47:D6:13:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/f7967a59-1c07-39dc-a959-9b6ab6129975.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 25937 IP address blocks: 104.244.128.0/21 maxlen: 21 2606:3a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/3d2a810f-f980-4f77-8ab7-d979958ffb62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/3d2a810f-f980-4f77-8ab7-d979958ffb62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:c8:b0:32:3c:28:fe:e8:a5:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2a810f-f980-4f77-8ab7-d979958ffb62 Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=3b8f49d8-3bab-4754-bfcb-b2029a585deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:60:af:f7:38:74:03:b5:90:4a:dc:f4:ef:99: 57:71:d6:ad:bd:8b:5d:91:45:ce:94:e4:d0:25:59: 0d:02:b1:05:0c:a8:74:bc:ea:5d:ec:18:8f:38:bb: 98:a7:87:35:5c:33:69:b5:e5:27:51:54:7c:0b:c8: 8d:50:48:2a:a0:4b:02:56:36:bb:be:96:aa:f3:cf: bc:a9:22:dd:bd:cd:47:f8:82:80:01:18:3e:06:d5: 1e:9f:57:6e:25:92:8b:28:4e:31:70:c1:a1:66:30: 28:48:54:9e:6e:f7:0a:a9:47:67:89:74:f5:20:40: 50:ec:bd:fd:e7:0b:0c:9e:b9:42:39:92:99:e0:cf: 75:01:a9:ab:34:9e:d3:a8:dc:73:a4:68:95:c0:95: fc:bc:b7:73:28:c9:5f:86:36:25:9a:bf:cd:46:f2: ac:d3:10:6d:09:08:e6:0b:b0:85:9f:1f:87:26:dd: 89:16:20:ff:de:f3:7b:20:0b:79:18:16:5d:0b:c5: 76:cf:0d:ff:a7:0d:93:5d:89:9e:f0:f9:b9:9a:1c: 84:94:8b:01:7b:71:8c:1e:0b:d0:d2:03:b5:4f:31: 62:4e:32:f7:f6:83:13:e4:a3:92:22:1d:67:28:5a: 5f:89:b5:14:55:1a:b2:a3:1e:0e:39:80:93:65:b6: 87:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1B:AB:03:72:A8:77:87:B7:0B:B6:02:B0:D0:61:A5:08:AB:45:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/f7967a59-1c07-39dc-a959-9b6ab6129975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/3d2a810f-f980-4f77-8ab7-d979958ffb62.crl X509v3 Authority Key Identifier: keyid:0F:A4:68:0E:03:74:A1:ED:83:CB:18:96:2B:BF:8D:D2:47:D6:13:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62.cer sbgp-ipAddrBlock: critical IPv4: 104.244.128.0/21 IPv6: 2606:3a40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:2f:b9:71:dd:0b:c1:f7:92:3a:9f:41:ae:e7:a7:83:ae:2e: 08:7e:86:f3:35:5a:96:5d:55:f1:7b:49:bd:f1:38:90:5e:32: d7:eb:86:18:c6:7d:d9:79:5a:70:12:9c:57:59:a2:21:7a:76: 5a:a6:17:1d:2a:c2:89:71:21:6a:05:b2:5d:22:ec:3c:a6:d5: 33:c7:7d:05:e5:4f:56:c7:94:46:31:27:13:34:5b:29:c3:5c: 1f:5c:61:4d:38:cb:64:ab:1e:ec:fd:1b:db:cc:ba:b6:64:db: bf:21:fa:1f:ab:8a:37:74:cf:6e:e8:94:1c:94:f3:97:be:5a: 0e:a9:49:71:47:0d:5d:67:16:71:a0:62:e3:6b:0d:a4:9f:bb: 48:b3:77:c4:82:21:17:69:62:53:d8:ec:69:58:d0:85:49:49: 78:56:61:aa:8e:be:2b:d6:1d:2f:b9:2c:7b:8f:b7:09:1a:50: 20:3d:ef:c6:e7:c7:31:5a:62:89:da:65:28:c3:df:76:1a:51: ed:dd:9a:f1:6a:8e:da:17:46:f7:8f:bc:89:26:a1:8d:c2:c0: 34:63:4a:36:0f:71:6b:9a:f6:2c:7f:83:a2:32:da:32:cb:d6: 73:d3:40:97:a4:17:ab:42:fe:7e:7b:c3:c1:cd:85:90:2b:34: 8a:39:f6:75 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE6i38iwMjwo/uilMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyYTgxMGYtZjk4MC00Zjc3LThhYjctZDk3OTk1OGZm YjYyMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk M2I4ZjQ5ZDgtM2JhYi00NzU0LWJmY2ItYjIwMjlhNTg1ZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmCv9zh0A7WQStz075lXcdatvYtdkUXOlOTQ JVkNArEFDKh0vOpd7BiPOLuYp4c1XDNpteUnUVR8C8iNUEgqoEsCVja7vpaq88+8 qSLdvc1H+IKAARg+BtUen1duJZKLKE4xcMGhZjAoSFSebvcKqUdniXT1IEBQ7L39 5wsMnrlCOZKZ4M91AamrNJ7TqNxzpGiVwJX8vLdzKMlfhjYlmr/NRvKs0xBtCQjm C7CFnx+HJt2JFiD/3vN7IAt5GBZdC8V2zw3/pw2TXYme8Pm5mhyElIsBe3GMHgvQ 0gO1TzFiTjL39oMT5KOSIh1nKFpfibUUVRqyox4OOYCTZbaHzwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFPMbqwNyqHeHtwu2ArDQYaUIq0VdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDJh ODEwZi1mOTgwLTRmNzctOGFiNy1kOTc5OTU4ZmZiNjIvZjc5NjdhNTktMWMwNy0z OWRjLWE5NTktOWI2YWI2MTI5OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QyYTgxMGYtZjk4MC00Zjc3LThh YjctZDk3OTk1OGZmYjYyLzNkMmE4MTBmLWY5ODAtNGY3Ny04YWI3LWQ5Nzk5NThm ZmI2Mi5jcmwwHwYDVR0jBBgwFoAUD6RoDgN0oe2DyxiWK7+N0kfWE4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDJhODEwZi1mOTgwLTRmNzctOGFiNy1kOTc5 OTU4ZmZiNjIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDaPSAMA0E AgACMAcDBQAmBjpAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFQvuXHdC8H3kjqfQa7np4OuLgh+hvM1WpZd VfF7Sb3xOJBeMtfrhhjGfdl5WnASnFdZoiF6dlqmFx0qwolxIWoFsl0i7Dym1TPH fQXlT1bHlEYxJxM0WynDXB9cYU04y2SrHuz9G9vMurZk278h+h+rijd0z27olByU 85e+Wg6pSXFHDV1nFnGgYuNrDaSfu0izd8SCIRdpYlPY7GlY0IVJSXhWYaqOvivW HS+5LHuPtwkaUCA978bnxzFaYonaZSjD33YaUe3dmvFqjtoXRvePvIkmoY3CwDRj SjYPcWua9ix/g6Iy2jLL1nPTQJekF6tC/n57w8HNhZArNIo59nU= -----END CERTIFICATE-----Generated at Thu Jul 30 00:39:58 2026 by rpki-client