$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa File: caafa691-29e7-3acd-9bec-67691a876be2.roa (raw, json) Hash identifier: vvf1Q9u9cG+nK2eFRe6O4b0UTFP/8YIWQe5d+zM16j0= Subject key identifier: 18:63:A7:2D:48:EA:D0:3B:DF:44:0A:70:DA:78:78:F2:FD:3C:C3:73 Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584E8F54F502252AE1DCFDC17580 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 23470 IP address blocks: 104.128.72.0/24 maxlen: 24 104.128.73.0/24 maxlen: 24 104.128.74.0/24 maxlen: 24 104.128.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:f5:02:25:2a:e1:dc:fd:c1:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=3a442a15-aa3d-44f2-920e-5d59d58127a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:56:fc:e0:80:b6:02:5c:46:53:88:41:fb:9e: eb:a4:3f:2b:d9:51:8b:7b:d7:e8:2a:59:7d:7f:d8: 3a:e1:75:05:3b:ba:2e:f0:c2:1b:99:5b:bb:b0:69: 8e:7f:01:9d:0c:46:0a:9e:19:58:25:a8:a3:a4:0b: 5a:ea:40:96:1a:e8:54:9a:57:fc:f9:34:1a:db:ce: 9d:b4:2e:a6:93:8b:3c:01:a2:02:b5:f0:1c:7f:c6: 51:cf:c2:6f:8c:7f:3a:09:06:32:4c:76:63:07:ca: 45:71:15:e7:09:cb:30:4b:d8:89:60:8e:c3:9b:89: 6a:7d:68:f2:d6:5f:3f:c0:19:1c:26:54:6c:30:0b: 60:33:77:e7:9f:31:01:4c:d2:e4:73:18:e2:c2:a9: d2:64:a4:74:32:c5:5f:d0:fa:48:29:9e:c7:dd:2f: 64:17:49:73:22:2a:56:b6:9b:1f:38:8a:6f:92:e1: 8a:ec:3b:5a:00:aa:28:a5:7a:e3:70:2f:7b:8c:3d: 00:0c:e9:64:17:d7:f2:ed:e5:a6:f8:cb:83:be:59: 20:86:28:fd:02:31:09:7a:e1:1a:47:55:b6:89:47: 4b:cc:12:03:54:0c:5f:97:c2:bc:35:c3:b2:96:06: 0f:a8:04:3b:2a:08:b8:cf:06:44:fe:5c:69:0d:78: 56:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:63:A7:2D:48:EA:D0:3B:DF:44:0A:70:DA:78:78:F2:FD:3C:C3:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 104.128.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:09:1d:8f:1d:10:91:6a:11:2f:ee:f6:9f:96:f8:5a:20:09: 60:1e:41:df:38:0d:6e:89:2e:a9:71:1a:f3:31:10:94:d1:2a: a7:db:cb:49:01:71:f7:3d:25:85:73:bf:b5:2c:3f:c3:7a:5d: 8c:19:18:3c:61:60:93:65:46:85:78:b6:eb:6b:24:6e:6c:a6: 79:ef:15:7e:2f:de:2f:c6:18:69:2f:d3:6a:69:fd:8b:f6:11: e9:bd:3c:3b:bc:eb:d6:a9:e2:e8:ea:c9:b0:b8:17:3e:58:ac: 61:6d:54:8c:4c:03:51:c3:a2:9b:b5:b5:3f:0f:dd:48:8b:99: 6e:25:0e:cb:f9:dd:e7:4a:17:83:17:e4:0a:3e:22:c9:08:f3: a7:29:79:01:11:e9:85:55:50:57:58:77:fb:7e:bc:a2:e3:cd: eb:1f:28:c9:1b:1a:06:89:68:f5:6f:f6:3a:78:9c:d2:28:de: cd:3f:6e:01:03:ca:b8:d1:bc:d4:c5:48:c8:ee:66:55:29:aa: 59:d0:36:58:54:75:d6:9d:1b:7d:0d:58:34:91:2a:e6:e2:58: a6:d3:32:a9:7e:56:80:4e:cb:67:63:35:4b:4d:98:74:ac:76: 8d:d5:74:c7:00:42:bb:2c:47:94:7f:ea:11:2a:3c:28:19:ed: 21:54:d9:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVPUCJSrh3P3BdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk M2E0NDJhMTUtYWEzZC00NGYyLTkyMGUtNWQ1OWQ1ODEyN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11b84IC2AlxGU4hB+57rpD8r2VGLe9foKll9 f9g64XUFO7ou8MIbmVu7sGmOfwGdDEYKnhlYJaijpAta6kCWGuhUmlf8+TQa286d tC6mk4s8AaICtfAcf8ZRz8JvjH86CQYyTHZjB8pFcRXnCcswS9iJYI7Dm4lqfWjy 1l8/wBkcJlRsMAtgM3fnnzEBTNLkcxjiwqnSZKR0MsVf0PpIKZ7H3S9kF0lzIipW tpsfOIpvkuGK7DtaAKoopXrjcC97jD0ADOlkF9fy7eWm+MuDvlkghij9AjEJeuEa R1W2iUdLzBIDVAxfl8K8NcOylgYPqAQ7Kgi4zwZE/lxpDXhWiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhjpy1I6tA730QKcNp4ePL9PMNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvY2FhZmE2OTEtMjllNy0z YWNkLTliZWMtNjc2OTFhODc2YmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsJHY8dEJFqES/u9p+W+FogCWAeQd84DW6JLqlxGvMxEJTRKqfby0kB cfc9JYVzv7UsP8N6XYwZGDxhYJNlRoV4tutrJG5spnnvFX4v3i/GGGkv02pp/Yv2 Eem9PDu869ap4ujqybC4Fz5YrGFtVIxMA1HDopu1tT8P3UiLmW4lDsv53edKF4MX 5Ao+IskI86cpeQER6YVVUFdYd/t+vKLjzesfKMkbGgaJaPVv9jp4nNIo3s0/bgED yrjRvNTFSMjuZlUpqlnQNlhUddadG30NWDSRKubiWKbTMql+VoBOy2djNUtNmHSs do3VdMcAQrssR5R/6hEqPCgZ7SFU2Xc= -----END CERTIFICATE-----Generated at Fri Jul 24 17:09:19 2026 by rpki-client