$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/af4fe8a1-f378-3c49-a11e-5e5591341f6d.roa File: af4fe8a1-f378-3c49-a11e-5e5591341f6d.roa (raw, json) Hash identifier: QCuHjy+bABOXPb+e71Dx6rqlIY3O1uvflFNd7bwsNXU= Subject key identifier: DB:8C:06:36:A8:B8:8E:D7:D4:D5:DC:43:97:5F:EF:28:79:D9:E8:00 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E296EFE5E431291574A702780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/af4fe8a1-f378-3c49-a11e-5e5591341f6d.roa Signing time: Sat 13 Jun 2026 21:00:12 +0000 ROA not before: Sat 13 Jun 2026 21:00:12 +0000 ROA not after: Fri 11 Sep 2026 21:00:12 +0000 asID: 202903 IP address blocks: 104.243.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:29:6e:fe:5e:43:12:91:57:4a:70:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 13 21:00:12 2026 GMT Not After : Sep 11 21:00:12 2026 GMT Subject: CN=60bcc5cb-09eb-46b4-9e66-1aecfe38bca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:22:22:b3:5b:3d:a1:97:05:15:4d:a4:48:94: 5c:3a:cf:4c:e6:96:69:08:87:66:72:b6:ab:1c:3f: cc:1c:f3:d4:9f:7d:ec:43:e5:98:ea:f5:a7:7e:5a: af:cc:af:0b:25:ee:cf:9a:13:eb:67:4b:be:b1:cc: a3:af:13:69:d3:9d:7a:7b:b4:44:81:c4:44:a2:54: de:d8:7c:6d:64:7d:06:9c:19:22:d7:78:68:f5:ca: 46:a6:37:ad:40:e1:fe:66:9e:0b:1c:6c:60:8e:95: 55:41:22:c9:f9:fd:93:45:43:fb:08:b2:23:b0:90: 2f:d1:12:97:07:6b:2e:14:42:f2:fc:8d:56:12:5e: db:7b:17:26:08:9e:f5:94:ea:92:d5:ce:cb:df:d9: 65:de:ab:60:6c:82:c4:a9:9b:b7:57:94:24:ff:57: 79:2a:f4:ca:a7:59:3e:55:64:37:2a:6d:5f:8e:b1: 2c:12:44:fd:5e:a2:ef:f6:9a:dc:fb:ae:ca:4b:c0: 37:18:82:42:a2:7c:25:11:10:ef:c3:9a:6e:cf:37: 53:62:b4:6a:bf:45:80:61:e1:24:52:29:26:2a:13: 69:7f:ed:44:89:4e:2a:f2:cf:6b:32:fa:70:83:62: f9:2d:b1:5c:4f:3a:d2:7d:85:d6:9a:9e:6c:d8:09: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8C:06:36:A8:B8:8E:D7:D4:D5:DC:43:97:5F:EF:28:79:D9:E8:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/af4fe8a1-f378-3c49-a11e-5e5591341f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:cd:62:1a:8e:fb:11:b3:e9:e3:9f:67:8e:92:79:1e:ed:41: 3f:a2:96:12:90:4f:e0:19:fb:8a:d3:81:39:33:f9:d2:e0:31: 41:9f:ce:83:6c:4b:f2:31:7c:55:69:0b:e3:53:63:f2:f5:99: 64:44:71:c6:5c:a3:54:7d:56:15:84:2c:a7:cc:4a:08:41:70: 26:22:6c:24:99:31:0f:d8:12:ac:fa:89:7b:32:0c:dd:cf:bc: 95:44:35:5e:52:2d:0f:ec:10:c1:1a:80:c5:cf:ea:86:a0:20: db:57:7c:47:e4:80:07:5c:f0:5d:25:e6:b1:75:44:0a:c2:bb: 7b:2e:9a:30:b4:eb:0a:85:98:a9:0e:3c:f3:78:25:f8:fd:43: b2:ef:4b:53:e8:c9:0a:28:98:d8:d9:c3:bf:49:45:fc:92:3f: 3a:cc:57:35:18:ef:78:6b:f4:e3:cd:e3:f9:2b:ec:7d:6d:58: 2e:07:0e:c4:8e:71:5c:1b:6f:b0:96:3b:29:1b:9d:3b:b9:40: a2:12:bb:93:20:c7:f7:27:63:7a:28:b3:3b:ef:cf:a8:f8:5e: 5d:5c:9a:02:a2:83:63:79:6e:b5:44:20:f6:45:24:91:b2:b1: 06:aa:d3:42:f4:4e:31:cb:63:fe:19:4d:fb:d3:81:1a:66:cb: 4b:e5:34:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbv5eQxKRV0pwJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk NjBiY2M1Y2ItMDllYi00NmI0LTllNjYtMWFlY2ZlMzhiY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCIis1s9oZcFFU2kSJRcOs9M5pZpCIdmcrar HD/MHPPUn33sQ+WY6vWnflqvzK8LJe7PmhPrZ0u+scyjrxNp0516e7REgcREolTe 2HxtZH0GnBki13ho9cpGpjetQOH+Zp4LHGxgjpVVQSLJ+f2TRUP7CLIjsJAv0RKX B2suFELy/I1WEl7bexcmCJ71lOqS1c7L39ll3qtgbILEqZu3V5Qk/1d5KvTKp1k+ VWQ3Km1fjrEsEkT9XqLv9prc+67KS8A3GIJConwlERDvw5puzzdTYrRqv0WAYeEk UikmKhNpf+1EiU4q8s9rMvpwg2L5LbFcTzrSfYXWmp5s2AkwQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuMBjaouI7X1NXcQ5df7yh52egAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWY0ZmU4YTEtZjM3OC0z YzQ5LWExMWUtNWU1NTkxMzQxZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfNYhqO+xGz6eOfZ46SeR7tQT+ilhKQT+AZ+4rTgTkz+dLgMUGfzoNs S/IxfFVpC+NTY/L1mWREccZco1R9VhWELKfMSghBcCYibCSZMQ/YEqz6iXsyDN3P vJVENV5SLQ/sEMEagMXP6oagINtXfEfkgAdc8F0l5rF1RArCu3sumjC06wqFmKkO PPN4Jfj9Q7LvS1PoyQoomNjZw79JRfySPzrMVzUY73hr9OPN4/kr7H1tWC4HDsSO cVwbb7CWOykbnTu5QKISu5Mgx/cnY3ooszvvz6j4Xl1cmgKig2N5brVEIPZFJJGy sQaq00L0TjHLY/4ZTfvTgRpmy0vlNNM= -----END CERTIFICATE-----Generated at Fri Jul 24 13:29:21 2026 by rpki-client