$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/2cdfafd9-8f03-3005-bf1a-d8a0a4240613.roa File: 2cdfafd9-8f03-3005-bf1a-d8a0a4240613.roa (raw, json) Hash identifier: dMhKNv+kvSCdQLI3FxNknY2NKJtgAdaYv9xfVvAdg0M= Subject key identifier: 5D:FC:A7:B1:41:31:6B:4D:AD:DF:50:07:04:9A:61:57:62:66:14:4D Certificate issuer: /CN=1ff04835-864a-40da-a12f-dcad0faabb8c Certificate serial: 010D0C9F4328584EA795D482D66091FFF68DB740 Authority key identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/2cdfafd9-8f03-3005-bf1a-d8a0a4240613.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 6079 IP address blocks: 104.152.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:d4:82:d6:60:91:ff:f6:8d:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff04835-864a-40da-a12f-dcad0faabb8c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=eb6b12f4-d82c-4e30-851b-f526d07d69db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ab:31:bd:e4:d5:7c:eb:9c:1e:b1:a3:ef:74: 23:8f:48:c6:52:4d:15:38:a4:18:ef:0b:24:77:3b: 5f:ed:76:47:57:50:a7:3b:d3:5c:7a:80:59:9f:18: c6:55:40:d6:3e:43:d4:4e:9a:d0:3f:68:03:1b:c8: 9a:09:f0:07:ed:27:f4:66:bc:11:a8:1f:63:33:04: bf:24:f2:85:3d:f5:b2:0c:db:bf:eb:15:64:98:a5: 2c:95:16:ae:d1:c8:55:59:ef:b9:4f:e4:34:ff:94: be:e2:af:f4:2b:20:92:04:3c:41:d8:06:84:ca:eb: 4d:07:4c:b9:d1:86:c2:41:54:27:60:62:87:a6:33: 4f:2a:32:c5:8c:39:17:b4:d9:c5:ce:ec:bf:be:8d: 06:e7:f3:8d:c0:de:a3:93:70:d9:bc:f0:9f:20:0e: e5:b3:17:c6:05:60:6f:5f:6b:8a:7d:ef:44:3d:46: b7:72:5b:cc:7c:e4:50:2b:c4:2e:06:f3:5d:1d:b1: a4:17:c0:13:30:20:cb:e6:56:ee:61:41:7e:9b:8d: 0d:2a:63:75:14:c4:6e:f6:fd:7a:8b:35:b7:f3:7d: ad:09:37:a7:e9:59:4d:a7:56:97:42:9f:af:f0:c5: be:41:e6:47:90:dc:77:af:c7:17:62:f7:09:fe:1d: 83:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FC:A7:B1:41:31:6B:4D:AD:DF:50:07:04:9A:61:57:62:66:14:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/2cdfafd9-8f03-3005-bf1a-d8a0a4240613.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl X509v3 Authority Key Identifier: keyid:73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer sbgp-ipAddrBlock: critical IPv4: 104.152.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:28:fc:c2:c8:43:1d:2a:ee:11:40:f0:fb:21:17:32:b2:65: 4f:69:4a:75:c6:5c:0a:c6:4c:32:00:58:57:22:32:30:ec:c3: cb:eb:20:a4:48:2b:f4:8d:21:42:83:34:5f:e5:18:08:c2:6e: f3:40:04:6d:e0:80:92:e8:39:90:7e:fb:03:68:f8:3c:ae:05: 59:0d:19:7f:26:f2:4a:3f:72:95:1f:c5:ce:94:54:2f:65:1b: 96:7a:fa:d6:f3:53:c6:34:ef:61:aa:5a:08:44:98:3c:ce:e6: 0a:2a:df:e3:b2:d3:64:75:4b:c2:a6:23:63:e4:53:57:54:14: 53:6d:1c:b9:2e:2d:47:0d:2b:4f:9b:03:7c:36:13:0c:9c:43: cc:3e:f4:c7:91:2f:d2:fa:31:cc:72:c4:47:af:b8:cd:a5:28: 2f:4e:38:73:61:16:35:ce:55:0f:64:64:42:19:a1:0d:58:64: 5a:2f:5d:00:8c:31:e7:06:44:7a:e5:17:c4:cf:cd:f8:da:cd: 95:09:9a:af:ea:8b:1a:c8:1f:73:dd:80:f7:c4:52:20:e1:cb: 28:93:3c:af:10:99:38:90:2d:93:5a:b7:27:44:43:72:16:4d: 45:2e:ed:63:82:8d:11:77:b1:a6:43:8a:89:29:5a:e6:20:1c: db:07:4e:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nldSC1mCR//aNt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmMDQ4MzUtODY0YS00MGRhLWExMmYtZGNhZDBmYWFi YjhjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWI2YjEyZjQtZDgyYy00ZTMwLTg1MWItZjUyNmQwN2Q2OWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6sxveTVfOucHrGj73Qjj0jGUk0VOKQY7wsk dztf7XZHV1CnO9NceoBZnxjGVUDWPkPUTprQP2gDG8iaCfAH7Sf0ZrwRqB9jMwS/ JPKFPfWyDNu/6xVkmKUslRau0chVWe+5T+Q0/5S+4q/0KyCSBDxB2AaEyutNB0y5 0YbCQVQnYGKHpjNPKjLFjDkXtNnFzuy/vo0G5/ONwN6jk3DZvPCfIA7lsxfGBWBv X2uKfe9EPUa3clvMfORQK8QuBvNdHbGkF8ATMCDL5lbuYUF+m40NKmN1FMRu9v16 izW3832tCTen6VlNp1aXQp+v8MW+QeZHkNx3r8cXYvcJ/h2DvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF38p7FBMWtNrd9QBwSaYVdiZhRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYw NDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZhYWJiOGMvMmNkZmFmZDktOGYwMy0z MDA1LWJmMWEtZDhhMGE0MjQwNjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZmMDQ4MzUtODY0YS00MGRhLWEx MmYtZGNhZDBmYWFiYjhjLzFmZjA0ODM1LTg2NGEtNDBkYS1hMTJmLWRjYWQwZmFh YmI4Yy5jcmwwHwYDVR0jBBgwFoAUcw/uVLxy0c4qnDR9x78gVvTym4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2Fk MGZhYWJiOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUo/MLIQx0q7hFA8PshFzKyZU9pSnXGXArGTDIAWFciMjDsw8vrIKRI K/SNIUKDNF/lGAjCbvNABG3ggJLoOZB++wNo+DyuBVkNGX8m8ko/cpUfxc6UVC9l G5Z6+tbzU8Y072GqWghEmDzO5goq3+Oy02R1S8KmI2PkU1dUFFNtHLkuLUcNK0+b A3w2EwycQ8w+9MeRL9L6McxyxEevuM2lKC9OOHNhFjXOVQ9kZEIZoQ1YZFovXQCM MecGRHrlF8TPzfjazZUJmq/qixrIH3PdgPfEUiDhyyiTPK8QmTiQLZNatydEQ3IW TUUu7WOCjRF3saZDiokpWuYgHNsHTiA= -----END CERTIFICATE-----Generated at Wed Jul 29 06:23:17 2026 by rpki-client