$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d106b278-eda4-3570-a558-32b1617e5026.roa File: d106b278-eda4-3570-a558-32b1617e5026.roa (raw, json) Hash identifier: aDnRjDF0+xCSIVK/DTfEGMONv4YWausimZn/pMVSO9o= Subject key identifier: 83:F1:15:F3:FB:74:82:CD:76:E1:51:32:D3:85:29:C7:E9:56:3F:62 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7A0FC625FE8CC6BE5840D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d106b278-eda4-3570-a558-32b1617e5026.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 184.31.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:fc:62:5f:e8:cc:6b:e5:84:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=76bff9d8-3cf6-496f-8e8e-ac59d7dd7a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8e:0c:b0:07:82:e1:ee:df:e6:de:ca:95:be: 83:eb:52:a6:55:ef:9c:d4:f0:ee:5f:b4:ab:95:6a: 02:c3:40:d1:cb:da:8f:f2:b4:51:09:ec:c1:c1:63: f2:19:39:bb:ac:6f:15:89:7d:e6:1e:70:23:63:e1: f6:27:17:3e:92:7c:d7:7e:d8:0e:dc:01:1a:47:bb: e3:ad:d9:12:ef:19:b8:09:61:10:62:1b:b6:38:aa: 35:04:b4:46:fe:b8:a8:e1:2a:69:ce:f2:0f:cf:0b: 7e:ef:03:8d:87:52:84:b8:71:7e:49:1c:32:a9:ef: 5a:ae:18:f5:c6:42:10:ec:13:d5:0e:99:57:1d:30: ef:f3:f9:9f:5d:50:0f:27:e5:29:09:ea:38:c1:1b: 8a:93:aa:af:a0:89:7a:d8:52:be:0b:53:c7:d1:7e: be:77:e2:bd:ae:e2:9a:25:cf:3f:c0:39:5d:d5:74: 13:b0:c0:ae:a8:cc:47:48:cc:0d:3e:4f:95:02:e1: c1:d7:f4:11:fc:04:31:fe:3a:90:c0:d5:73:62:f6: a5:05:74:57:c5:5f:97:1f:af:48:a3:3f:cd:cd:13: 09:60:7f:3c:e4:57:69:a4:07:c8:66:0f:4c:04:48: f2:4e:5c:72:6f:cc:fc:aa:21:38:64:38:ca:90:0d: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F1:15:F3:FB:74:82:CD:76:E1:51:32:D3:85:29:C7:E9:56:3F:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d106b278-eda4-3570-a558-32b1617e5026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.31.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:2b:91:2f:f3:99:91:3e:c1:23:02:b9:52:f7:94:91:c6:d6: ed:79:23:37:9a:8a:bf:4b:b1:24:56:98:28:73:9c:85:c9:40: 2a:5b:4c:cc:43:8d:c7:c7:ea:55:ee:ff:a5:2f:25:d9:dd:5a: 9a:22:8f:a3:09:45:f5:66:26:c3:93:54:e9:d1:be:80:b3:50: c4:92:c2:6f:6b:0b:67:61:98:d4:04:70:9a:fc:da:08:9b:da: 0b:0d:a8:45:b4:1e:02:07:8c:c8:8b:78:85:be:3c:24:7b:93: fb:a1:d4:74:f7:1e:dc:46:7d:7d:1e:45:ec:1d:7a:95:db:a3: c3:22:e1:34:38:29:7c:f5:4d:8d:69:b9:2c:2d:7c:a7:5c:36: a6:67:11:17:34:79:7a:db:00:f2:03:cd:eb:01:b0:7f:c9:bc: 85:c6:e2:71:82:ba:02:99:b2:18:02:3d:e6:33:39:dc:c4:2a: 5c:8f:88:87:19:90:a4:25:f5:de:f5:f6:82:d3:61:8a:3d:03: c3:b9:7d:43:06:e4:ab:c9:1e:76:4b:ec:51:51:06:95:0e:64: f0:d0:9b:82:aa:31:f7:cb:6a:4a:0a:b9:fa:27:b7:b6:d6:58: 89:dc:0b:d4:d1:c1:ad:4e:0c:9e:34:b8:82:ad:b5:51:2f:74: 17:86:8a:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noPxiX+jMa+WEDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzZiZmY5ZDgtM2NmNi00OTZmLThlOGUtYWM1OWQ3ZGQ3YTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY4MsAeC4e7f5t7Klb6D61KmVe+c1PDuX7Sr lWoCw0DRy9qP8rRRCezBwWPyGTm7rG8ViX3mHnAjY+H2Jxc+knzXftgO3AEaR7vj rdkS7xm4CWEQYhu2OKo1BLRG/rio4SppzvIPzwt+7wONh1KEuHF+SRwyqe9arhj1 xkIQ7BPVDplXHTDv8/mfXVAPJ+UpCeo4wRuKk6qvoIl62FK+C1PH0X6+d+K9ruKa Jc8/wDld1XQTsMCuqMxHSMwNPk+VAuHB1/QR/AQx/jqQwNVzYvalBXRXxV+XH69I oz/NzRMJYH885FdppAfIZg9MBEjyTlxyb8z8qiE4ZDjKkA1COQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPxFfP7dILNduFRMtOFKcfpVj9iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDEwNmIyNzgtZWRhNC0z NTcwLWE1NTgtMzJiMTYxN2U1MDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuB9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8rkS/zmZE+wSMCuVL3lJHG1u15Izeair9LsSRWmChznIXJQCpbTMxD jcfH6lXu/6UvJdndWpoij6MJRfVmJsOTVOnRvoCzUMSSwm9rC2dhmNQEcJr82gib 2gsNqEW0HgIHjMiLeIW+PCR7k/uh1HT3HtxGfX0eRewdepXbo8Mi4TQ4KXz1TY1p uSwtfKdcNqZnERc0eXrbAPIDzesBsH/JvIXG4nGCugKZshgCPeYzOdzEKlyPiIcZ kKQl9d719oLTYYo9A8O5fUMG5KvJHnZL7FFRBpUOZPDQm4KqMffLakoKufont7bW WIncC9TRwa1ODJ40uIKttVEvdBeGigI= -----END CERTIFICATE-----Generated at Wed Jul 29 09:40:11 2026 by rpki-client