$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa File: 8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa (raw, json) Hash identifier: nGy6P/1DtLxKZyWle4tt52w/QvJW8TWjstxO9lyu6Pw= Subject key identifier: 14:59:95:3F:3E:6E:AE:89:83:57:17:F6:69:C5:5B:ED:1A:F2:F8:2F Certificate issuer: /CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Certificate serial: 010D0C9F4328584E0D84215FE4F56170739CD100 Authority key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 21748 IP address blocks: 104.37.232.0/21 maxlen: 24 2606:8b40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:21:5f:e4:f5:61:70:73:9c:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=7570dbf1-501e-4f66-bd74-48fdfdc6f4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:07:5d:59:fc:67:e9:d6:61:9f:3b:52:40:c6: d5:bb:9f:d7:70:f6:7d:e2:51:4f:56:3b:fc:05:ca: 9a:83:45:85:11:e3:27:b8:aa:6e:62:e0:1e:98:bd: d8:8f:bf:d6:c2:89:d6:07:9a:4c:bf:ca:00:5b:77: 37:ca:7e:ca:30:c3:c5:c5:90:15:15:00:21:3b:83: b6:a0:17:d4:a9:fa:aa:a8:c5:38:a0:c4:e9:d9:9b: 0b:c4:87:1e:cd:fe:ce:e0:bf:f5:87:38:8a:aa:db: c5:48:5d:0c:82:b0:d3:79:76:51:dc:ac:cd:fa:77: 77:7c:4b:24:0a:22:02:71:79:e0:81:51:78:a7:dd: 3f:da:92:8f:a9:a4:a0:16:43:e2:2f:da:99:dd:6b: c7:a3:7e:c8:13:0b:2e:d7:0b:02:9e:d8:46:05:a8: 13:56:eb:7e:6d:06:8e:98:f5:c5:4a:af:a5:1b:d8: 05:e2:04:c6:97:84:c0:3d:9e:cd:7d:5c:4d:d1:fd: a9:93:8d:b6:e7:dd:98:3a:96:fb:e3:aa:94:7f:82: 2d:6e:7f:bd:f4:eb:dc:9a:7c:dd:8e:5c:50:fa:1d: 5b:f3:21:b5:a1:e1:4b:a2:08:57:a4:6c:50:6b:fa: d0:60:99:1c:5f:2a:7f:d8:06:0d:21:69:63:54:ab: fc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:59:95:3F:3E:6E:AE:89:83:57:17:F6:69:C5:5B:ED:1A:F2:F8:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl X509v3 Authority Key Identifier: keyid:C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer sbgp-ipAddrBlock: critical IPv4: 104.37.232.0/21 IPv6: 2606:8b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:56:00:78:22:a2:1d:c2:72:bf:29:fa:6f:8f:df:5c:bd:40: 19:56:1e:70:ed:0f:a7:2d:d7:26:a8:3e:5a:90:7d:18:ba:08: d7:fe:d2:9a:69:d1:9f:45:f4:d1:ba:f9:08:f5:9c:98:9a:14: a9:16:b3:37:fa:4f:ff:11:64:e5:f0:a7:81:70:e3:62:38:06: 7f:80:7b:ef:b5:2e:8f:20:83:af:f2:a5:a9:a0:b4:e9:ec:26: 46:14:e9:7a:34:b5:6f:cb:57:a8:32:a7:50:8a:8e:0a:58:85: b8:45:b1:50:73:cf:a2:0f:d6:0c:96:35:f1:96:e6:38:bf:74: e2:63:19:19:39:07:0a:88:96:68:cb:52:73:b4:6e:f1:66:cd: 02:99:c6:ec:a9:d2:7b:fd:48:87:db:b2:99:5d:c9:2e:f0:a3: 91:a0:eb:f5:9c:2a:1f:f9:be:ae:e3:10:e0:6b:99:6a:b3:bb: 4e:44:d1:43:b1:dc:17:28:07:e0:d6:26:03:59:af:76:83:70: 8b:ae:d8:3d:a4:d6:b5:82:1d:c7:43:4e:1a:99:62:89:d2:57: b3:68:e4:50:eb:84:b3:45:53:d2:ef:f7:67:1a:17:77:e8:2d: 90:21:da:2c:7d:8f:af:d7:61:79:ea:cf:5b:96:df:ea:35:20: 95:3c:d9:ec -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE4NhCFf5PVhcHOc0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVh NDRkMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk NzU3MGRiZjEtNTAxZS00ZjY2LWJkNzQtNDhmZGZkYzZmNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngddWfxn6dZhnztSQMbVu5/XcPZ94lFPVjv8 Bcqag0WFEeMnuKpuYuAemL3Yj7/WwonWB5pMv8oAW3c3yn7KMMPFxZAVFQAhO4O2 oBfUqfqqqMU4oMTp2ZsLxIcezf7O4L/1hziKqtvFSF0MgrDTeXZR3KzN+nd3fEsk CiICcXnggVF4p90/2pKPqaSgFkPiL9qZ3WvHo37IEwsu1wsCnthGBagTVut+bQaO mPXFSq+lG9gF4gTGl4TAPZ7NfVxN0f2pk422592YOpb746qUf4Itbn+99Ovcmnzd jlxQ+h1b8yG1oeFLoghXpGxQa/rQYJkcXyp/2AYNIWljVKv84QIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBRZlT8+bq6Jg1cX9mnFW+0a8vgvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1 YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvOGYyYzUwN2YtOTg4MC0z YTBhLThlNmEtMmQ5Y2M1ZDFlOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTI5NWE2OTUtZTkxYS00YzVhLThh MzEtYTkyMGE0MmVhNDRkL2EyOTVhNjk1LWU5MWEtNGM1YS04YTMxLWE5MjBhNDJl YTQ0ZC5jcmwwHwYDVR0jBBgwFoAUxrdjkJ2ZQm4W9Z6SLSD1iDDBqmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIw YTQyZWE0NGQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDaCXoMA0E AgACMAcDBQAmBotAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADlWAHgioh3Ccr8p+m+P31y9QBlWHnDtD6ct 1yaoPlqQfRi6CNf+0ppp0Z9F9NG6+Qj1nJiaFKkWszf6T/8RZOXwp4Fw42I4Bn+A e++1Lo8gg6/ypamgtOnsJkYU6Xo0tW/LV6gyp1CKjgpYhbhFsVBzz6IP1gyWNfGW 5ji/dOJjGRk5BwqIlmjLUnO0bvFmzQKZxuyp0nv9SIfbspldyS7wo5Gg6/WcKh/5 vq7jEOBrmWqzu05E0UOx3BcoB+DWJgNZr3aDcIuu2D2k1rWCHcdDThqZYonSV7No 5FDrhLNFU9Lv92caF3foLZAh2ix9j6/XYXnqz1uW3+o1IJU82ew= -----END CERTIFICATE-----Generated at Sat Jun 13 16:01:44 2026 by rpki-client