$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa File: 1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa (raw, json) Hash identifier: QBfmK9/tJpTI5SGVKGJRWZpdHMAiYn8zb6it+xfTHFQ= Subject key identifier: 88:8A:65:19:08:51:4C:92:27:BA:AD:11:D0:E9:33:4A:3F:1A:5B:93 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584E9BE51524331713D2A9F2F240 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 40788 IP address blocks: 104.193.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:15:24:33:17:13:d2:a9:f2:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=d2068cc2-8945-4e6f-9cb5-3dea471f94f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:43:ed:9c:40:40:99:5f:af:18:de:d6:84:72: ac:cb:6b:24:a6:62:7d:a8:88:06:81:00:f0:40:24: 4c:c6:b8:65:c3:62:fc:ab:19:dc:4c:b2:0f:b9:12: 8a:ca:d5:ba:c2:9f:90:2a:7a:d7:a0:29:93:1a:45: f8:cb:0e:6b:9e:3d:d0:5a:5b:77:be:b8:b0:25:63: da:84:ec:98:18:8d:98:1c:db:26:a0:0e:57:d3:34: 6a:7f:2c:8f:29:91:ac:3d:82:8f:d9:4b:6b:34:0d: 2c:4d:1b:ed:5c:aa:2c:da:9c:7b:36:3e:37:b3:c4: 1e:bb:6e:f4:ba:98:5b:d1:37:00:ea:82:c0:21:23: ad:b7:1c:71:e6:ba:0a:7d:59:fb:87:e0:fd:4f:81: a3:6f:0f:0d:ca:5d:40:16:30:04:c4:ea:d0:33:d6: dc:27:ce:b6:fb:57:f3:7b:07:fd:c3:d7:04:a4:d6: be:a2:48:78:4f:08:63:f9:6e:34:36:07:1a:7f:22: 51:c3:b3:1d:87:8f:01:41:cd:10:21:dc:b8:c2:e3: fd:c7:f1:a8:15:fd:7e:0e:fc:40:38:74:07:01:9a: f2:ef:0d:c4:5f:4c:f2:95:87:cd:3c:15:04:22:55: 64:29:75:99:f3:95:5e:e0:d6:9f:93:53:7d:20:93: f6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8A:65:19:08:51:4C:92:27:BA:AD:11:D0:E9:33:4A:3F:1A:5B:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 104.193.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:80:59:3f:ff:f2:8c:bc:6e:1b:35:2f:06:8d:97:79:46:5a: 85:8b:55:bc:73:bd:7d:d9:0a:61:15:e4:53:f5:d6:94:60:c3: 37:fe:08:83:4d:97:5d:aa:40:52:94:3b:eb:0c:d9:e2:dd:07: 65:d4:34:cf:46:26:88:0c:e2:84:5e:48:6c:30:2d:35:e2:91: f9:38:f4:df:c6:5b:0d:46:a9:ad:6e:ab:a5:cb:c9:52:82:18: fb:45:ab:74:db:08:39:ce:06:7e:4d:c2:7e:e2:91:b4:27:a2: 99:fb:74:bb:5b:1f:5c:79:3c:4b:1b:ad:9f:ee:7f:d3:a0:62: d5:3f:1c:cd:cc:81:89:38:f4:ee:82:cc:74:dc:15:d5:3d:f3: e2:18:cb:bf:c1:e8:e5:dc:37:28:11:b1:b1:c8:b0:8f:f8:a6: e7:22:82:fe:81:05:03:51:ae:01:83:97:1c:41:09:4a:7e:e0: 89:0e:62:94:4a:fd:88:48:6e:dd:07:af:bc:23:64:da:d1:27: 27:a4:86:f8:56:19:d6:de:36:5b:af:91:d9:c4:31:fb:89:23: a8:f8:9a:b2:5d:d8:b0:df:65:96:8c:ac:7d:bb:a8:17:e7:e8: 5c:c4:95:ee:1e:3f:cb:3c:9e:b1:9b:c2:8b:74:69:14:6c:a9: 9d:b9:e0:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5RUkMxcT0qny8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk ZDIwNjhjYzItODk0NS00ZTZmLTljYjUtM2RlYTQ3MWY5NGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00PtnEBAmV+vGN7WhHKsy2skpmJ9qIgGgQDw QCRMxrhlw2L8qxncTLIPuRKKytW6wp+QKnrXoCmTGkX4yw5rnj3QWlt3vriwJWPa hOyYGI2YHNsmoA5X0zRqfyyPKZGsPYKP2UtrNA0sTRvtXKos2px7Nj43s8Qeu270 uphb0TcA6oLAISOttxxx5roKfVn7h+D9T4Gjbw8Nyl1AFjAExOrQM9bcJ862+1fz ewf9w9cEpNa+okh4Twhj+W40NgcafyJRw7Mdh48BQc0QIdy4wuP9x/GoFf1+DvxA OHQHAZry7w3EX0zylYfNPBUEIlVkKXWZ85Ve4Nafk1N9IJP2DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiKZRkIUUySJ7qtEdDpM0o/GluTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMWNkMDNmNzMtYzJlYi0z MjcxLTkxYjEtOWRlNjU1NjRmM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaME4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyAWT//8oy8bhs1LwaNl3lGWoWLVbxzvX3ZCmEV5FP11pRgwzf+CINN l12qQFKUO+sM2eLdB2XUNM9GJogM4oReSGwwLTXikfk49N/GWw1Gqa1uq6XLyVKC GPtFq3TbCDnOBn5Nwn7ikbQnopn7dLtbH1x5PEsbrZ/uf9OgYtU/HM3MgYk49O6C zHTcFdU98+IYy7/B6OXcNygRsbHIsI/4pucigv6BBQNRrgGDlxxBCUp+4IkOYpRK /YhIbt0Hr7wjZNrRJyekhvhWGdbeNluvkdnEMfuJI6j4mrJd2LDfZZaMrH27qBfn 6FzEle4eP8s8nrGbwot0aRRsqZ254K0= -----END CERTIFICATE-----Generated at Wed Jul 29 09:28:41 2026 by rpki-client