$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa File: b96fa30c-800a-3f27-bbe0-a0466bba322b.roa (raw, json) Hash identifier: cmGyt5bSm1k39S0vqgk9SPXKiW6kBILLYR0ZFx1qA2c= Subject key identifier: 1A:73:9C:63:A7:3F:E3:F4:08:FE:B2:26:A6:2A:8A:55:39:27:54:D9 Certificate issuer: /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Certificate serial: 010D0C9F4328584EDC91EBD7D57077EC508DD940 Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 398993 IP address blocks: 104.219.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:91:eb:d7:d5:70:77:ec:50:8d:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=a0ec93e3-d330-45e6-abb9-ca5fff9b9c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9d:95:72:b0:21:c5:b6:f1:7a:28:49:e5:54: 65:84:6f:ea:45:e8:de:20:f1:07:a7:cc:a1:2d:62: ee:74:21:de:04:2d:83:74:d3:87:62:2e:c5:66:0a: e1:f0:bc:91:9e:ac:19:88:ff:f7:26:c8:1a:d9:72: 19:55:7f:ac:21:df:1b:4c:8b:a9:fa:91:ec:28:07: 15:18:c8:b3:ae:02:40:35:2b:53:8b:04:49:07:87: 93:d6:a1:a6:00:72:36:be:59:6c:c0:bf:3b:bf:d2: 1f:57:42:93:47:fa:2e:f9:6b:b1:27:0c:49:b5:91: 12:42:c3:c0:da:e8:4a:4d:ac:de:4f:ff:52:c0:90: 5f:98:40:e4:2f:25:0a:4e:38:0d:1e:27:d8:90:17: 54:9a:ce:cf:2a:4d:a5:3d:fb:46:d5:2b:ce:35:9e: 3d:81:12:d6:c3:b9:bc:e7:14:70:da:bd:bb:04:c6: cf:f5:bc:a7:94:81:ed:bf:5b:ab:a4:e3:70:04:70: e6:97:9b:81:2d:07:e6:db:9b:5d:31:66:dc:1a:a6: 37:06:6b:d5:f6:39:ff:2c:fa:dd:83:e2:3b:56:70: 59:22:1d:d6:f0:70:94:34:ee:69:b6:82:92:f9:c5: 1d:0c:2d:c0:3e:e3:6c:48:70:23:ca:85:a5:b0:44: 3c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:73:9C:63:A7:3F:E3:F4:08:FE:B2:26:A6:2A:8A:55:39:27:54:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl X509v3 Authority Key Identifier: keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer sbgp-ipAddrBlock: critical IPv4: 104.219.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:f8:af:71:cd:53:45:e9:dd:ed:66:8d:87:1c:44:0b:4d:45: 07:cc:b8:c1:69:c8:a9:79:fb:80:5f:66:60:fe:16:c0:ac:6c: 7a:6d:04:86:77:02:32:47:01:de:64:d3:8a:aa:f3:08:64:76: 3e:b5:bf:ad:32:3f:24:a6:8c:20:a5:a2:42:e0:01:b7:08:51: 9c:7c:8b:d0:16:88:67:09:24:ed:a2:ac:df:44:14:c3:44:4d: 82:bf:d1:34:d2:93:ec:02:4e:0a:bc:d7:91:7f:0f:10:d4:23: 9e:45:dd:ce:e9:fa:8d:f9:63:f5:b9:1a:ed:e8:30:d7:19:dc: b5:2f:a4:7e:f2:c6:7f:6e:0a:c4:4b:50:1b:a1:cc:a5:6d:07: e2:54:5c:1b:82:e2:d6:8e:09:d3:13:36:2e:5c:5a:21:27:d6: 84:27:3d:4b:ef:4b:79:ab:57:9d:b1:4d:e0:1e:ec:42:d0:46: bb:12:4e:1e:0d:fe:18:c0:41:fb:98:f2:df:35:3a:99:28:b8: 73:bf:9f:07:cc:a0:ca:3c:3b:bb:6e:1b:53:ad:fd:cd:25:e3: 7e:37:40:e6:65:37:89:3e:0d:c6:fc:00:fb:60:ac:5d:8d:48: e1:85:65:5f:72:68:2d:89:c4:fd:bf:94:0b:e5:43:8f:14:cf: aa:60:a1:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckevX1XB37FCN2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNiM2ZjZDktZjkwZC00ZjIwLTk2ZWMtZDRkMzI4NTE3 YzBkMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk YTBlYzkzZTMtZDMzMC00NWU2LWFiYjktY2E1ZmZmOWI5YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ2VcrAhxbbxeihJ5VRlhG/qRejeIPEHp8yh LWLudCHeBC2DdNOHYi7FZgrh8LyRnqwZiP/3Jsga2XIZVX+sId8bTIup+pHsKAcV GMizrgJANStTiwRJB4eT1qGmAHI2vllswL87v9IfV0KTR/ou+WuxJwxJtZESQsPA 2uhKTazeT/9SwJBfmEDkLyUKTjgNHifYkBdUms7PKk2lPftG1SvONZ49gRLWw7m8 5xRw2r27BMbP9bynlIHtv1urpONwBHDml5uBLQfm25tdMWbcGqY3BmvV9jn/LPrd g+I7VnBZIh3W8HCUNO5ptoKS+cUdDC3APuNsSHAjyoWlsEQ8EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpznGOnP+P0CP6yJqYqilU5J1TZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82M2Iz ZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQzMjg1MTdjMGQvYjk2ZmEzMGMtODAwYS0z ZjI3LWJiZTAtYTA0NjZiYmEzMjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjNiM2ZjZDktZjkwZC00ZjIwLTk2 ZWMtZDRkMzI4NTE3YzBkLzYzYjNmY2Q5LWY5MGQtNGYyMC05NmVjLWQ0ZDMyODUx N2MwZC5jcmwwHwYDVR0jBBgwFoAU85szvqOxj6FrnsAlnz3NKvxiOA0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82M2IzZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQz Mjg1MTdjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj4r3HNU0Xp3e1mjYccRAtNRQfMuMFpyKl5+4BfZmD+FsCsbHptBIZ3 AjJHAd5k04qq8whkdj61v60yPySmjCClokLgAbcIUZx8i9AWiGcJJO2irN9EFMNE TYK/0TTSk+wCTgq815F/DxDUI55F3c7p+o35Y/W5Gu3oMNcZ3LUvpH7yxn9uCsRL UBuhzKVtB+JUXBuC4taOCdMTNi5cWiEn1oQnPUvvS3mrV52xTeAe7ELQRrsSTh4N /hjAQfuY8t81OpkouHO/nwfMoMo8O7tuG1Ot/c0l4343QOZlN4k+Dcb8APtgrF2N SOGFZV9yaC2JxP2/lAvlQ48Uz6pgoe0= -----END CERTIFICATE-----Generated at Mon Sep 21 19:17:07 2026 by rpki-client