$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/32cdd595-39b5-33f1-b3d3-81573d4f0634.roa File: 32cdd595-39b5-33f1-b3d3-81573d4f0634.roa (raw, json) Hash identifier: T96MsENOvSc8pBxX8R0vFuLZQpuCzykDJfhQAoJP8Uc= Subject key identifier: 72:09:E5:1B:C1:C8:FD:B5:26:3B:17:5B:5D:76:63:23:86:DA:99:12 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584E86F50358069414DE2A392300 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/32cdd595-39b5-33f1-b3d3-81573d4f0634.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 4922 IP address blocks: 104.244.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:03:58:06:94:14:de:2a:39:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=4a24a0b1-bb19-4c01-9d4b-fcce9c4ac5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:96:64:f7:c8:78:53:05:c2:cc:cd:31:64: b5:06:c4:37:36:da:49:06:a6:78:6c:a7:eb:38:a0: 71:b5:60:90:f7:5d:d6:8e:6d:1b:33:3b:48:91:f8: 51:c0:7f:5d:3f:aa:48:4e:7c:a1:8d:42:a1:c8:69: b6:b6:cd:fa:a5:0a:f8:b3:c4:43:ba:e6:5a:38:e8: ee:af:6e:40:cd:de:80:fe:df:e3:ef:8d:a0:58:fa: 01:e4:00:cc:95:82:43:a6:c1:e4:14:8e:cd:b0:d5: e0:3b:43:9f:cb:7c:15:d1:db:be:d0:41:32:66:ba: 60:7e:b0:b6:16:58:ba:39:26:75:f9:59:3b:f6:64: 0a:3a:b1:5d:24:cf:a7:14:d5:34:1a:0f:45:8a:f2: 6d:4e:0a:cb:e7:c6:db:00:f1:c5:d3:a3:e7:2f:78: a8:43:14:cd:72:a9:15:36:ee:2b:44:6f:bd:35:3d: 6f:57:ae:3f:c6:70:6e:2e:3b:bc:50:50:71:98:d4: 93:98:ae:f9:06:99:5b:24:53:5b:c7:2f:3c:53:b5: ae:b7:a9:f2:0d:d9:3a:03:90:00:2b:6c:a2:12:e1: ad:4f:63:3e:70:60:3d:c4:64:a0:6f:45:cd:72:32: bb:d1:23:99:d5:f7:d3:d0:33:89:da:54:f3:b8:6a: a4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:09:E5:1B:C1:C8:FD:B5:26:3B:17:5B:5D:76:63:23:86:DA:99:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/32cdd595-39b5-33f1-b3d3-81573d4f0634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 104.244.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:68:1a:df:9f:e5:d9:09:af:62:04:5d:d0:a2:bf:48:f1:a6: 85:28:c3:9b:61:61:87:43:26:36:72:46:ac:cf:5a:c1:ce:53: 1f:6d:72:ea:ad:b4:36:4b:f1:fc:67:66:f1:e2:cc:e7:38:05: 65:5c:de:78:46:7f:98:95:2e:fb:3f:20:27:fb:ca:20:ff:a6: a5:ee:7f:a4:d7:d4:9f:9a:89:85:98:ce:38:4b:ff:66:e5:0f: f8:8a:fc:9d:26:9a:d9:f6:20:d0:78:24:fa:16:f3:e4:45:80: 5f:19:4e:66:17:43:ab:50:2e:b2:6e:b7:9b:b8:49:90:f3:0e: 10:9b:75:89:f9:1a:ef:99:a6:8a:e9:1a:94:8a:f8:9b:9d:27: 31:34:f2:51:79:20:95:f9:e1:be:9c:bb:89:7b:42:d9:62:5e: c3:a0:2f:71:bc:b2:a7:cf:4e:86:cd:60:06:37:40:37:1d:9a: e1:2c:db:9d:7b:4b:47:fa:d7:e2:ad:8a:1c:07:d4:d5:c1:3a: 47:90:5d:2d:0a:58:72:2b:92:41:4c:db:6b:03:af:3e:18:c6: 3f:29:82:63:8b:0a:ca:f0:af:bf:19:d6:2f:2c:05:19:0f:70: 50:81:ba:40:10:98:86:de:a9:ee:df:78:7d:31:d3:12:f5:19: 1c:2e:19:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QNYBpQU3io5IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk NGEyNGEwYjEtYmIxOS00YzAxLTlkNGItZmNjZTljNGFjNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZuWZPfIeFMFwszNMWS1BsQ3NtpJBqZ4bKfr OKBxtWCQ913Wjm0bMztIkfhRwH9dP6pITnyhjUKhyGm2ts36pQr4s8RDuuZaOOju r25Azd6A/t/j742gWPoB5ADMlYJDpsHkFI7NsNXgO0Ofy3wV0du+0EEyZrpgfrC2 Fli6OSZ1+Vk79mQKOrFdJM+nFNU0Gg9FivJtTgrL58bbAPHF06PnL3ioQxTNcqkV Nu4rRG+9NT1vV64/xnBuLju8UFBxmNSTmK75BplbJFNbxy88U7Wut6nyDdk6A5AA K2yiEuGtT2M+cGA9xGSgb0XNcjK70SOZ1ffT0DOJ2lTzuGqkFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIJ5RvByP21JjsXW112YyOG2pkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvMzJjZGQ1OTUtMzliNS0z M2YxLWIzZDMtODE1NzNkNGYwNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5oGt+f5dkJr2IEXdCiv0jxpoUow5thYYdDJjZyRqzPWsHOUx9tcuqt tDZL8fxnZvHizOc4BWVc3nhGf5iVLvs/ICf7yiD/pqXuf6TX1J+aiYWYzjhL/2bl D/iK/J0mmtn2INB4JPoW8+RFgF8ZTmYXQ6tQLrJut5u4SZDzDhCbdYn5Gu+Zporp GpSK+JudJzE08lF5IJX54b6cu4l7QtliXsOgL3G8sqfPTobNYAY3QDcdmuEs2517 S0f61+KtihwH1NXBOkeQXS0KWHIrkkFM22sDrz4Yxj8pgmOLCsrwr78Z1i8sBRkP cFCBukAQmIbeqe7feH0x0xL1GRwuGQA= -----END CERTIFICATE-----Generated at Fri Jul 24 02:12:13 2026 by rpki-client