$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa File: 2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa (raw, json) Hash identifier: xVi5a0/qmsw6xopOD8tB3s1BMSRqlG3fovJUmIb1wkI= Subject key identifier: A5:47:02:BA:0D:2F:62:8A:89:26:C1:C8:C1:F8:D3:D8:BC:CA:0D:6C Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584E97B5026A52BB238F7FD98C80 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 4540 IP address blocks: 104.151.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:02:6a:52:bb:23:8f:7f:d9:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=38a2d0ca-b241-4fef-a746-1445c84e0ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5e:d4:ba:7b:1e:05:cd:e7:b6:65:2f:13:5f: e7:38:f9:32:12:c0:c3:d9:e4:79:fa:87:73:6f:6c: 2c:1b:3f:7c:c1:ba:ab:bf:99:76:09:3e:4d:c9:f5: bd:75:cf:5c:70:8e:12:ad:57:86:13:42:58:6f:36: e8:3b:f2:1a:62:d1:26:b9:8c:bb:0c:35:d7:ef:2c: 3b:3d:a2:c0:92:88:c5:a9:fd:64:0d:52:b2:b3:40: ea:2a:72:f0:3a:57:23:7f:8d:c5:f7:55:85:57:8d: 1a:1c:8d:70:75:2e:46:70:d0:3b:46:96:07:8e:5a: 7a:ae:99:70:72:31:5e:f5:9c:63:2d:96:81:f2:90: ea:ed:bb:ea:9b:f5:14:c2:f3:e0:32:5e:41:df:66: 16:d5:06:f7:25:0e:15:40:23:56:0f:48:c6:28:b3: f2:8d:66:fa:bd:0f:fc:55:ee:31:ef:c4:27:20:c1: 77:40:0c:16:b8:d4:cb:61:e3:a1:a1:eb:cb:5e:5a: c7:4b:35:5e:17:fb:7b:5c:2b:2d:31:23:c5:ec:36: 20:53:dc:28:37:a7:80:af:ec:ae:18:91:b3:4a:4f: 31:c0:0c:a5:f0:71:a6:17:5c:8e:17:3a:88:bc:c4: 3d:c8:46:f4:af:8c:ac:f3:2f:d9:db:9d:48:ad:c2: da:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:47:02:BA:0D:2F:62:8A:89:26:C1:C8:C1:F8:D3:D8:BC:CA:0D:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 104.151.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:b4:75:f8:b4:8f:bf:c4:40:88:4b:b9:d2:46:d3:61:ec:82: 1a:f4:fe:9e:fd:70:18:32:d3:cb:74:f2:ee:a6:b3:32:44:f5: 97:00:57:a3:6a:0d:82:2f:08:6d:5e:34:73:78:a3:f6:df:20: 54:99:46:7c:c3:b4:e6:76:d2:e7:f9:de:81:f9:2a:e5:0a:32: ec:5f:61:fc:cc:0f:81:e8:b7:a5:b1:2a:05:24:60:63:76:5e: 5a:b8:9f:9e:a9:ea:f6:2b:d1:26:70:ee:34:eb:cf:54:7f:5f: 20:f4:1f:ea:07:95:9d:09:5d:46:8f:db:32:a0:fa:be:79:e7: 3e:8c:5b:e5:9d:37:af:e5:0b:3f:2d:51:f1:8b:45:53:21:8a: eb:0a:2c:19:c1:ac:99:8d:b8:1a:b7:fc:a0:b5:c7:c4:4e:a1: 2c:3c:82:e5:b4:e7:c1:35:e7:f0:ea:74:58:ab:3b:56:84:ea: 4d:a5:bf:b7:04:96:5c:83:51:82:22:78:f8:b2:36:12:b3:2b: 8a:fd:03:7b:ae:70:cc:1c:6d:d6:cd:17:66:5d:9a:19:4f:fa: 65:95:3d:45:97:5b:9d:4d:e5:91:55:a8:64:6c:03:21:50:dc: 5d:34:b9:25:94:61:34:34:3d:c3:64:7c:a3:df:24:9c:03:6a: 3f:b3:35:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQJqUrsjj3/ZjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk MzhhMmQwY2EtYjI0MS00ZmVmLWE3NDYtMTQ0NWM4NGUwYmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj17UunseBc3ntmUvE1/nOPkyEsDD2eR5+odz b2wsGz98wbqrv5l2CT5NyfW9dc9ccI4SrVeGE0JYbzboO/IaYtEmuYy7DDXX7yw7 PaLAkojFqf1kDVKys0DqKnLwOlcjf43F91WFV40aHI1wdS5GcNA7RpYHjlp6rplw cjFe9ZxjLZaB8pDq7bvqm/UUwvPgMl5B32YW1Qb3JQ4VQCNWD0jGKLPyjWb6vQ/8 Ve4x78QnIMF3QAwWuNTLYeOhoevLXlrHSzVeF/t7XCstMSPF7DYgU9woN6eAr+yu GJGzSk8xwAyl8HGmF1yOFzqIvMQ9yEb0r4ys8y/Z251IrcLaFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVHAroNL2KKiSbByMH409i8yg1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMjk0NmFjMjAtNTI5ZS0z YzhjLThkZmItNWJhZjQxZDBmMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK60dfi0j7/EQIhLudJG02Hsghr0/p79cBgy08t08u6mszJE9ZcAV6Nq DYIvCG1eNHN4o/bfIFSZRnzDtOZ20uf53oH5KuUKMuxfYfzMD4Hot6WxKgUkYGN2 Xlq4n56p6vYr0SZw7jTrz1R/XyD0H+oHlZ0JXUaP2zKg+r555z6MW+WdN6/lCz8t UfGLRVMhiusKLBnBrJmNuBq3/KC1x8ROoSw8guW058E15/DqdFirO1aE6k2lv7cE llyDUYIiePiyNhKzK4r9A3uucMwcbdbNF2ZdmhlP+mWVPUWXW51N5ZFVqGRsAyFQ 3F00uSWUYTQ0PcNkfKPfJJwDaj+zNW0= -----END CERTIFICATE-----Generated at Fri Jul 24 10:55:35 2026 by rpki-client