$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3468e988-70e4-3dfd-a14d-360d7a837fb0.roa File: 3468e988-70e4-3dfd-a14d-360d7a837fb0.roa (raw, json) Hash identifier: 2mH2CUETcJ/2QAt0NxQ/q/3stt7fuN6WTzIOTj1lsZo= Subject key identifier: BC:62:84:F5:04:B1:47:C8:BA:45:37:D1:7C:D8:14:6E:21:EA:B0:01 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584DD35B05CFC9F7D80B0D3B4500 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3468e988-70e4-3dfd-a14d-360d7a837fb0.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 393336 IP address blocks: 104.193.226.0/24 maxlen: 24 162.250.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:05:cf:c9:f7:d8:0b:0d:3b:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=ff725a14-eeb1-41a1-ad56-15216c5336f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ca:41:e8:bb:f2:af:9b:62:75:7e:77:9b:18: 41:9f:75:75:af:18:09:c8:d8:20:1c:ef:97:e2:d6: b8:6d:17:d7:8c:6b:f3:6d:ef:6c:e5:85:f7:86:5e: b8:02:ed:9e:aa:ab:08:0c:42:58:81:1b:cb:5d:07: 6a:74:3d:03:62:43:c0:e4:54:1a:18:e1:b8:a1:8f: 49:52:aa:fd:6a:0f:1d:2c:29:02:c0:0e:16:99:53: 40:4d:22:d9:b3:0d:c6:e3:67:57:39:ad:71:84:74: be:45:ae:a5:2e:56:9c:a9:0d:c6:c1:ba:25:ea:01: 27:f0:da:c9:93:23:b6:5a:0c:11:bf:09:a9:5d:a1: 8c:67:02:31:53:28:83:51:65:da:69:cf:be:d2:a2: f1:ea:04:98:a5:29:c7:97:cd:5f:59:fb:38:b1:86: 0d:62:a2:f7:37:2a:aa:5c:94:3d:98:08:e6:de:59: 41:61:50:5e:e1:2d:59:4e:a9:73:eb:e3:b6:89:1c: 54:36:ab:7e:b2:7d:7b:f0:ba:72:d7:fd:7c:69:ab: 3c:14:21:a1:7a:12:b2:41:7c:c9:14:6d:5a:7a:e2: 29:bc:66:95:27:9a:50:87:66:45:01:17:38:b0:18: 88:bc:da:63:ab:83:42:aa:86:cc:da:d1:6a:24:df: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:62:84:F5:04:B1:47:C8:BA:45:37:D1:7C:D8:14:6E:21:EA:B0:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3468e988-70e4-3dfd-a14d-360d7a837fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 104.193.226.0/24 162.250.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:a9:9d:e1:dc:2f:44:74:a6:21:f6:c7:c1:af:d2:d6:6f:5c: ed:32:8a:35:bd:a2:85:e7:94:a6:e8:46:d8:f8:0b:7b:d1:d4: 70:e6:d1:89:7a:54:dd:63:61:bb:9c:58:56:4f:09:4a:14:c6: 02:c5:ae:78:9c:99:26:e8:b9:c9:63:87:76:c4:b8:83:ba:39: 7e:57:bd:bf:8e:db:f9:95:29:dc:f1:65:b4:20:43:f7:ea:a7: 16:76:72:87:40:0c:63:b3:dd:66:b0:52:cf:7a:e6:c2:bb:32: 5c:dd:4d:14:0c:b3:32:7e:77:de:52:a5:f1:a3:fd:2b:ce:41: 76:bd:7a:34:91:46:64:8d:5b:37:6d:7b:74:8a:ed:43:1b:f2: c8:bd:e9:1a:7f:5d:40:4d:50:4a:b9:72:6c:77:59:a8:a2:3e: f9:92:1e:69:64:b1:13:cc:ed:72:98:9c:39:47:58:38:1b:ab: 5e:7a:4e:ca:69:1b:08:68:5a:10:2e:02:32:fa:c8:ce:36:b2: 0a:b7:6a:50:ea:a3:18:37:ad:27:9a:3b:a8:66:be:3c:76:c3: 66:62:f3:0e:cd:bd:bf:10:fa:fe:b6:96:19:d2:73:97:39:94: ed:75:77:e0:b8:22:65:e2:b2:0e:a1:6e:ed:5e:6b:f8:77:c7: 73:c3:87:e1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE3TWwXPyffYCw07RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk ZmY3MjVhMTQtZWViMS00MWExLWFkNTYtMTUyMTZjNTMzNmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcpB6Lvyr5tidX53mxhBn3V1rxgJyNggHO+X 4ta4bRfXjGvzbe9s5YX3hl64Au2eqqsIDEJYgRvLXQdqdD0DYkPA5FQaGOG4oY9J Uqr9ag8dLCkCwA4WmVNATSLZsw3G42dXOa1xhHS+Ra6lLlacqQ3Gwbol6gEn8NrJ kyO2WgwRvwmpXaGMZwIxUyiDUWXaac++0qLx6gSYpSnHl81fWfs4sYYNYqL3Nyqq XJQ9mAjm3llBYVBe4S1ZTqlz6+O2iRxUNqt+sn178Lpy1/18aas8FCGhehKyQXzJ FG1aeuIpvGaVJ5pQh2ZFARc4sBiIvNpjq4NCqobM2tFqJN+9yQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLxihPUEsUfIukU30XzYFG4h6rABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvMzQ2OGU5ODgtNzBlNC0z ZGZkLWExNGQtMzYwZDdhODM3ZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaMHiAwQA ovrrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBANupneHcL0R0piH2x8Gv0tZvXO0yijW9ooXnlKboRtj4C3vR 1HDm0Yl6VN1jYbucWFZPCUoUxgLFrnicmSboucljh3bEuIO6OX5Xvb+O2/mVKdzx ZbQgQ/fqpxZ2codADGOz3WawUs965sK7MlzdTRQMszJ+d95SpfGj/SvOQXa9ejSR RmSNWzdte3SK7UMb8si96Rp/XUBNUEq5cmx3WaiiPvmSHmlksRPM7XKYnDlHWDgb q156TsppGwhoWhAuAjL6yM42sgq3alDqoxg3rSeaO6hmvjx2w2Zi8w7Nvb8Q+v62 lhnSc5c5lO11d+C4ImXisg6hbu1ea/h3x3PDh+E= -----END CERTIFICATE-----Generated at Sat Jun 13 13:51:22 2026 by rpki-client