$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa File: 407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa (raw, json) Hash identifier: R/4oonIUoWWpcmd6/unQevgqSqWENR5zd3joAqL0pU0= Subject key identifier: 39:4D:B9:8D:8D:B8:12:60:C1:4E:01:DA:2E:72:EF:D9:C2:7E:17:1D Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584E07008F851F7A7E075CE58700 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 16433 IP address blocks: 104.243.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:8f:85:1f:7a:7e:07:5c:e5:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=28e35c1d-3aee-4e04-a689-f045ec0648e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:67:d8:de:33:8e:b8:cd:1a:12:2c:49:d1:15: 50:70:eb:73:83:6c:a0:03:93:f0:0d:62:55:79:82: 22:cf:48:e3:66:37:6a:3a:b7:96:f5:8c:03:75:15: b4:5d:85:8f:a5:54:11:32:90:48:7d:ca:b4:0a:18: 31:9f:9b:2b:c2:2a:39:73:e8:58:96:06:c9:5e:9d: 23:82:88:22:a5:35:b7:98:69:59:77:2f:d5:45:a8: 8a:38:e4:06:cf:67:83:0e:9b:e2:b4:b3:d3:b4:e4: 9d:85:69:4f:03:db:c1:c1:35:dd:51:86:54:7d:61: cc:9c:69:69:9a:43:bb:0a:fc:56:85:7e:9c:1e:4d: 90:2e:31:24:63:3d:77:9a:10:aa:8f:3b:e8:25:34: 89:f3:d1:48:0d:ff:68:12:ff:36:0f:c5:59:14:4a: f5:ba:98:ad:f1:81:6b:fa:00:bb:20:3d:48:5c:0e: 9f:b3:2e:f4:b4:89:26:5a:c7:3c:65:bc:f8:92:ac: aa:5a:7d:de:cd:86:1a:45:34:4d:61:2d:1d:ca:71: a2:19:93:5f:bb:9d:42:04:44:13:df:13:2f:2d:c1: 36:fe:8d:64:6c:81:3e:48:e6:a8:0b:2e:d9:16:e2: 51:78:2e:57:48:61:4c:97:73:85:73:3c:80:3d:4d: dd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4D:B9:8D:8D:B8:12:60:C1:4E:01:DA:2E:72:EF:D9:C2:7E:17:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 104.243.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a1:e2:aa:5c:b3:39:98:d7:c5:00:0d:66:72:f2:02:86:5f: 5e:1f:42:8a:b6:59:c9:b1:62:a9:50:fb:81:4e:a0:56:ae:8f: 01:33:ff:dd:51:07:59:33:99:5a:8b:8e:83:1b:73:f2:bb:30: 49:e7:95:b8:3c:2a:12:80:9f:53:a7:7c:0a:3b:50:72:52:b8: d3:dc:6b:cd:fb:04:76:bc:46:af:58:ad:64:f2:4c:34:d3:ef: c7:2d:e6:93:23:01:e7:33:85:6c:cc:94:62:0c:e0:69:0c:e4: c6:69:b4:c4:80:bc:6a:a1:96:e2:62:c4:ff:42:1f:a5:ff:f6: 84:d4:73:e3:b7:13:4e:f5:57:41:04:ba:79:24:e5:e1:1d:aa: 13:f3:41:b2:88:cd:ad:e4:1d:cd:e0:b4:56:bc:28:89:9d:6f: 56:82:5e:ec:d8:4a:c4:38:fd:f5:48:61:d8:8c:87:33:01:4f: 12:75:65:1e:c9:ca:3f:cf:ae:aa:41:01:85:ef:6f:82:60:34: 8d:22:c5:53:29:3e:82:23:9f:97:98:f0:b9:02:95:81:f6:a8: bb:ff:9f:06:74:2b:6f:42:2d:af:d6:53:0c:8d:f4:a9:a7:6d: 83:b3:1a:e7:ec:90:44:01:b5:16:c7:22:7b:db:94:26:2c:2c: 12:85:69:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAI+FH3p+B1zlhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk MjhlMzVjMWQtM2FlZS00ZTA0LWE2ODktZjA0NWVjMDY0OGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWfY3jOOuM0aEixJ0RVQcOtzg2ygA5PwDWJV eYIiz0jjZjdqOreW9YwDdRW0XYWPpVQRMpBIfcq0Chgxn5srwio5c+hYlgbJXp0j gogipTW3mGlZdy/VRaiKOOQGz2eDDpvitLPTtOSdhWlPA9vBwTXdUYZUfWHMnGlp mkO7CvxWhX6cHk2QLjEkYz13mhCqjzvoJTSJ89FIDf9oEv82D8VZFEr1upit8YFr +gC7ID1IXA6fsy70tIkmWsc8Zbz4kqyqWn3ezYYaRTRNYS0dynGiGZNfu51CBEQT 3xMvLcE2/o1kbIE+SOaoCy7ZFuJReC5XSGFMl3OFczyAPU3dOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlNuY2NuBJgwU4B2i5y79nCfhcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNDA3ZWZhMGEtYzhlNS0z NTQ4LWEyMGQtZTk3MmRjNzNmYmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGih4qpcszmY18UADWZy8gKGX14fQoq2WcmxYqlQ+4FOoFaujwEz/91R B1kzmVqLjoMbc/K7MEnnlbg8KhKAn1OnfAo7UHJSuNPca837BHa8Rq9YrWTyTDTT 78ct5pMjAeczhWzMlGIM4GkM5MZptMSAvGqhluJixP9CH6X/9oTUc+O3E071V0EE unkk5eEdqhPzQbKIza3kHc3gtFa8KImdb1aCXuzYSsQ4/fVIYdiMhzMBTxJ1ZR7J yj/PrqpBAYXvb4JgNI0ixVMpPoIjn5eY8LkClYH2qLv/nwZ0K29CLa/WUwyN9Kmn bYOzGufskEQBtRbHInvblCYsLBKFaes= -----END CERTIFICATE-----Generated at Sat Jun 13 11:02:17 2026 by rpki-client