$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/35c5b19c-d212-3871-bbc6-e557994a06be.roa File: 35c5b19c-d212-3871-bbc6-e557994a06be.roa (raw, json) Hash identifier: DxnTJuco3ykJ/jfl2txrwH4+DLfQv+B/0lwkbjTO/Xg= Subject key identifier: 21:34:46:CD:F4:24:AB:71:E5:6D:11:0C:BC:58:65:BC:38:90:AB:A6 Certificate issuer: /CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Certificate serial: 010D0C9F4328584EA78810D537D6B763C3F19400 Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/35c5b19c-d212-3871-bbc6-e557994a06be.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40401 IP address blocks: 104.153.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:10:d5:37:d6:b7:63:c3:f1:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ce3df5e8-5604-4070-8d84-6495bee25107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ff:ff:44:dc:ce:3c:a2:62:4e:53:31:f2:48: 07:48:a9:b7:ef:c9:60:d2:1e:f2:6a:98:cc:9b:e8: 6f:48:ad:21:ac:3c:22:80:32:b7:0d:73:b1:e3:66: 74:84:49:d7:90:bd:98:87:d7:a1:2c:b8:a8:ec:cc: 20:b8:c5:b0:c6:fb:99:e2:7e:49:c1:85:ef:da:f0: ff:17:fc:4a:3c:5f:b9:52:68:17:cb:91:8d:87:7d: 7e:02:76:e1:09:4d:d7:46:82:5e:a5:d3:8e:b2:81: cd:40:47:42:40:12:d8:ec:54:08:a6:76:a5:e9:ff: b6:c7:b8:c2:d1:74:2f:14:d9:d0:d1:60:62:fc:f3: 7c:a8:fd:b7:ab:ee:a9:75:9c:76:64:66:7a:28:b0: 38:09:27:67:5f:33:69:db:56:97:84:de:ed:14:af: 5a:6a:48:6f:4c:bd:fb:36:76:c7:63:79:81:b0:d1: 2c:7d:03:fd:bb:7b:6c:a7:04:e6:d4:c0:a6:24:a0: 63:b7:7a:40:76:4b:11:97:8b:10:96:18:3f:e2:0e: c8:2c:cd:72:9e:1a:aa:bf:33:ae:26:75:a4:72:82: f0:6a:81:f9:2f:04:43:60:ac:e7:37:83:fb:8c:2e: 3d:db:ce:d3:26:d7:23:2a:db:53:47:65:b8:6e:c0: 39:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:34:46:CD:F4:24:AB:71:E5:6D:11:0C:BC:58:65:BC:38:90:AB:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/35c5b19c-d212-3871-bbc6-e557994a06be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl X509v3 Authority Key Identifier: keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer sbgp-ipAddrBlock: critical IPv4: 104.153.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c4:ef:ee:2f:33:73:bf:5a:5e:40:57:15:57:ba:fc:72:8f: aa:fb:3e:29:7e:78:c5:ff:21:0e:5b:6b:4c:3f:8d:60:83:67: 69:2f:6d:48:54:c6:26:01:5b:ed:6d:ee:ac:41:0c:c1:27:69: f4:04:3c:1a:90:6d:f4:63:14:2b:5e:9d:ee:dc:60:90:a2:f0: c2:cf:70:3c:42:13:da:f2:11:9e:a1:9e:0f:b3:13:2e:11:6e: 6f:1c:8b:fe:35:6f:b9:5a:f1:af:6f:58:33:63:10:22:9b:03: 4c:47:cb:e7:05:7b:a8:b7:1d:4f:32:34:bd:22:72:36:82:98: a6:70:08:bc:43:31:95:fd:a7:dc:09:df:58:f4:f7:d9:f4:94: 29:83:3d:05:ca:b4:8c:cd:62:8c:31:4b:bb:b5:8c:88:0f:9a: d5:e7:35:35:36:57:88:66:fc:b0:e1:cc:a9:d1:b0:6a:88:eb: b1:b9:49:f7:a8:54:00:c4:c3:bf:1b:8b:d8:0b:8f:12:92:bc: 1d:35:1a:21:a3:89:74:e1:05:2c:c9:44:50:bf:90:bf:f4:42: a0:c3:9f:27:99:d9:0f:4f:ea:b9:00:ec:33:e9:a0:02:25:6f: fe:89:91:24:30:03:ad:3f:25:02:d6:d4:99:83:06:ed:f1:f6: 95:7f:18:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niBDVN9a3Y8PxlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MzMTNlMzktOTFmMS00MWZjLWJjNWMtZDIxM2E0Mjll Mjg3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2UzZGY1ZTgtNTYwNC00MDcwLThkODQtNjQ5NWJlZTI1MTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo///RNzOPKJiTlMx8kgHSKm378lg0h7yapjM m+hvSK0hrDwigDK3DXOx42Z0hEnXkL2Yh9ehLLio7MwguMWwxvuZ4n5JwYXv2vD/ F/xKPF+5UmgXy5GNh31+AnbhCU3XRoJepdOOsoHNQEdCQBLY7FQIpnal6f+2x7jC 0XQvFNnQ0WBi/PN8qP23q+6pdZx2ZGZ6KLA4CSdnXzNp21aXhN7tFK9aakhvTL37 NnbHY3mBsNEsfQP9u3tspwTm1MCmJKBjt3pAdksRl4sQlhg/4g7ILM1ynhqqvzOu JnWkcoLwaoH5LwRDYKznN4P7jC49287TJtcjKttTR2W4bsA5uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCE0Rs30JKtx5W0RDLxYZbw4kKumMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMx M2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEzYTQyOWUyODcvMzVjNWIxOWMtZDIxMi0z ODcxLWJiYzYtZTU1Nzk5NGEwNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2MzMTNlMzktOTFmMS00MWZjLWJj NWMtZDIxM2E0MjllMjg3LzdjMzEzZTM5LTkxZjEtNDFmYy1iYzVjLWQyMTNhNDI5 ZTI4Ny5jcmwwHwYDVR0jBBgwFoAUfZc5aNgWxyYUfpq5JQWS6V07FCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMxM2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEz YTQyOWUyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHE7+4vM3O/Wl5AVxVXuvxyj6r7Pil+eMX/IQ5ba0w/jWCDZ2kvbUhU xiYBW+1t7qxBDMEnafQEPBqQbfRjFCtene7cYJCi8MLPcDxCE9ryEZ6hng+zEy4R bm8ci/41b7la8a9vWDNjECKbA0xHy+cFe6i3HU8yNL0icjaCmKZwCLxDMZX9p9wJ 31j099n0lCmDPQXKtIzNYowxS7u1jIgPmtXnNTU2V4hm/LDhzKnRsGqI67G5Sfeo VADEw78bi9gLjxKSvB01GiGjiXThBSzJRFC/kL/0QqDDnyeZ2Q9P6rkA7DPpoAIl b/6JkSQwA60/JQLW1JmDBu3x9pV/GIg= -----END CERTIFICATE-----Generated at Wed Jul 29 08:33:23 2026 by rpki-client