$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/73ca0919-a04c-37ff-94f3-29d436366d7d.roa File: 73ca0919-a04c-37ff-94f3-29d436366d7d.roa (raw, json) Hash identifier: l+vP/Tp9ANPqf9Y5sTFjmki2BqFreMXRd3WPHK/Kg50= Subject key identifier: F9:7B:48:E2:D3:AD:75:B4:5A:5D:96:81:82:C4:B4:50:1D:BC:C2:0A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E7634DDA39D9F2C11D0BF1600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/73ca0919-a04c-37ff-94f3-29d436366d7d.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 212238 IP address blocks: 104.243.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:dd:a3:9d:9f:2c:11:d0:bf:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=173ec3f2-558a-4ec4-a9cf-dfc502ac0897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:65:c0:fd:66:e4:1c:84:01:c5:e9:ff:45:4b: 31:34:53:15:54:1a:aa:70:f9:4b:01:0a:66:60:c1: bd:38:f9:f3:dc:73:84:f3:2e:a1:c9:59:b9:ca:af: 08:3f:3a:4c:79:16:63:3f:d5:fc:d6:55:2f:35:87: 05:4a:7c:35:6e:7e:dd:35:50:0b:e4:f8:06:48:bc: 41:74:00:6c:d0:7d:0d:c8:e6:ea:85:d7:62:4e:20: 81:47:6e:ed:3e:14:03:20:01:77:69:3f:78:f9:9c: f2:f2:c0:c4:08:04:ba:c9:57:60:fc:b6:4b:af:c2: 6c:2a:61:fb:2a:51:76:e2:25:6c:c9:5f:f6:3d:c3: 90:e2:a9:2f:93:79:ec:65:b8:8a:51:b5:04:4a:e1: 6c:1d:34:3c:69:02:4b:4b:0f:d6:25:ad:59:36:03: a4:76:3e:56:d4:4c:4d:8a:71:bb:1e:44:57:41:66: 3e:89:1c:53:96:10:47:a3:b6:7b:55:0d:e9:3b:6b: 49:e7:c4:7c:6d:7a:6d:2a:a7:ac:f6:1e:bf:df:6c: d5:99:09:5a:8c:d7:ee:6e:f7:67:bc:95:8a:90:ab: 20:2c:a6:8a:11:2b:cb:d4:71:91:53:2f:d3:f6:64: 1f:9d:3c:6a:8d:c1:03:ba:81:8f:e9:5d:2f:ca:49: c1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7B:48:E2:D3:AD:75:B4:5A:5D:96:81:82:C4:B4:50:1D:BC:C2:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/73ca0919-a04c-37ff-94f3-29d436366d7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c0:18:6f:a6:f3:4b:52:55:cb:af:48:e3:f9:0c:01:c1:de: 11:ba:b7:9a:51:2b:65:69:1b:6a:6f:fd:b7:6b:31:8e:9e:87: bd:b0:a9:22:b2:d8:d9:c9:ea:33:7f:50:ba:06:7c:3a:8a:93: 97:cc:6d:33:5e:a7:da:2f:c1:87:74:3b:d5:c4:a2:19:b9:07: a1:6a:4a:31:7e:b3:28:31:d2:99:2e:87:e4:f9:1e:f7:09:41: 62:a1:20:a5:55:84:be:13:0c:a7:99:4f:23:91:eb:d5:24:1e: a2:15:e7:47:c6:86:5d:2f:cd:fa:17:b1:73:d2:3a:27:bc:30: fa:d3:9d:cc:1e:28:61:2b:0e:17:05:f5:85:7e:eb:7d:fa:f5: 7f:5a:31:d5:ea:39:be:dd:3e:d8:6f:fe:ca:43:08:0b:e6:b5: c0:e5:d6:82:ea:cb:c5:32:4a:3c:50:15:57:ef:86:36:a0:f4: 67:74:bf:d0:38:c2:c3:57:b2:37:b1:bd:54:b2:70:e6:9b:6a: 98:9c:a0:50:35:1c:6b:b3:03:1f:d9:e5:52:06:6d:44:87:c4: 72:11:57:2b:71:81:d6:e2:fb:0d:d6:71:e3:fd:8e:6a:fe:c2: 27:46:73:f6:f0:ff:14:ad:7b:5d:68:21:de:98:54:b5:d4:df: 9a:ec:fd:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NN2jnZ8sEdC/FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk MTczZWMzZjItNTU4YS00ZWM0LWE5Y2YtZGZjNTAyYWMwODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2XA/WbkHIQBxen/RUsxNFMVVBqqcPlLAQpm YMG9OPnz3HOE8y6hyVm5yq8IPzpMeRZjP9X81lUvNYcFSnw1bn7dNVAL5PgGSLxB dABs0H0NyObqhddiTiCBR27tPhQDIAF3aT94+Zzy8sDECAS6yVdg/LZLr8JsKmH7 KlF24iVsyV/2PcOQ4qkvk3nsZbiKUbUESuFsHTQ8aQJLSw/WJa1ZNgOkdj5W1ExN inG7HkRXQWY+iRxTlhBHo7Z7VQ3pO2tJ58R8bXptKqes9h6/32zVmQlajNfubvdn vJWKkKsgLKaKESvL1HGRUy/T9mQfnTxqjcEDuoGP6V0vyknBxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPl7SOLTrXW0Wl2WgYLEtFAdvMIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzNjYTA5MTktYTA0Yy0z N2ZmLTk0ZjMtMjlkNDM2MzY2ZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnAGG+m80tSVcuvSOP5DAHB3hG6t5pRK2VpG2pv/bdrMY6eh72wqSKy 2NnJ6jN/ULoGfDqKk5fMbTNep9ovwYd0O9XEohm5B6FqSjF+sygx0pkuh+T5HvcJ QWKhIKVVhL4TDKeZTyOR69UkHqIV50fGhl0vzfoXsXPSOie8MPrTncweKGErDhcF 9YV+63369X9aMdXqOb7dPthv/spDCAvmtcDl1oLqy8UySjxQFVfvhjag9Gd0v9A4 wsNXsjexvVSycOabapicoFA1HGuzAx/Z5VIGbUSHxHIRVytxgdbi+w3WceP9jmr+ widGc/bw/xSte11oId6YVLXU35rs/bQ= -----END CERTIFICATE-----Generated at Fri Jul 24 10:53:45 2026 by rpki-client