$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/32cdd595-39b5-33f1-b3d3-81573d4f0634.roa File: 32cdd595-39b5-33f1-b3d3-81573d4f0634.roa (raw, json) Hash identifier: SXy2FdhSR2CyGlshqPt8u/hEiqkHRlLFbQJgQybGr7E= Subject key identifier: 6C:49:84:71:4D:58:2C:1C:71:21:DB:70:72:73:6D:6D:B2:6A:3C:A2 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584DA6B0280AAE8F4B9CD161A278 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/32cdd595-39b5-33f1-b3d3-81573d4f0634.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 4922 IP address blocks: 104.244.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:28:0a:ae:8f:4b:9c:d1:61:a2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=e8ae63f3-33ef-4003-866e-eaffeb85a479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ca:41:df:27:eb:ee:e1:dd:ba:2c:6b:f3:1b: 06:d2:26:3c:51:86:96:61:5e:c7:f6:8b:e0:4c:76: 5f:1d:99:b3:9d:73:c1:92:9d:8e:02:b0:61:1c:cf: 07:74:f9:da:42:43:0f:f3:08:8a:40:d0:68:d1:a9: be:fb:95:26:99:e4:50:4e:4f:e6:da:94:b3:9e:c9: 54:c1:8a:49:05:ec:56:a7:4a:1c:73:58:3e:7b:2c: 7a:5f:43:5a:84:8a:b6:2a:21:88:57:b3:92:73:94: 7a:fe:6e:49:55:8e:79:24:39:34:30:fe:37:18:4b: 5b:7f:3b:92:a8:b9:68:99:8c:e2:f7:ef:57:c8:0e: b3:10:a7:d2:0c:ce:b1:eb:e0:09:b3:18:44:16:2f: 92:32:72:d7:b6:e3:a6:40:e1:0b:2e:2a:9c:a5:12: de:ae:9c:99:a5:1d:23:25:82:1a:1f:47:ee:bb:98: e5:ac:a8:6e:79:ae:6f:c5:2d:1c:5a:13:2f:a4:9b: bc:46:f4:33:5f:e6:58:dd:2f:cb:aa:ed:79:7d:79: 0c:4e:bc:56:86:44:89:91:01:b1:cd:8d:85:7d:6e: 94:d7:81:1b:07:48:bc:c4:b7:55:d0:01:1c:84:55: 2f:08:89:00:61:c7:29:49:19:02:75:5d:34:0a:04: 4c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:49:84:71:4D:58:2C:1C:71:21:DB:70:72:73:6D:6D:B2:6A:3C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/32cdd595-39b5-33f1-b3d3-81573d4f0634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 104.244.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2b:03:e6:9d:85:6b:b9:7e:8a:e0:26:90:96:bc:a1:9a:2d: 30:ef:cd:82:72:0f:8c:b1:e0:b6:c5:56:08:e9:97:63:30:9a: 45:44:0f:e3:ed:48:1f:b8:dc:13:1c:07:ca:1a:8b:9d:b8:80: 10:61:ff:00:16:db:f3:1a:d8:b3:94:f4:ed:d1:f5:c2:49:1c: 10:92:1a:da:13:1b:dc:9a:26:ee:0d:64:9f:c2:4d:14:96:6c: d7:4f:8f:3f:0a:70:30:1b:9c:ba:db:3c:e6:15:4c:46:ff:cd: 42:e0:de:6a:b9:33:52:76:3c:60:f8:79:e4:18:e9:fc:1d:11: 5e:93:45:d6:8f:20:92:c0:41:af:f5:f6:24:9f:df:8c:ba:40: 0c:a0:6b:09:88:fd:f5:2f:b3:a2:af:66:98:f1:49:f3:c2:49: 37:9c:8c:67:db:c1:55:11:5a:77:0a:41:ec:5c:52:bd:43:a6: 49:9d:5c:3e:a4:81:36:59:ec:2f:43:a2:37:13:a1:bd:10:06: 56:5c:48:8a:7b:64:2e:2d:c0:b6:29:93:f3:78:44:a5:48:38: af:dc:c4:b9:f7:a1:47:ff:e1:6c:f4:0e:37:a1:76:52:52:49: 77:1c:dd:ea:b5:8c:da:3d:08:c7:83:b7:96:83:8b:38:26:18: d8:a1:84:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCgKro9LnNFhongwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ZThhZTYzZjMtMzNlZi00MDAzLTg2NmUtZWFmZmViODVhNDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8pB3yfr7uHduixr8xsG0iY8UYaWYV7H9ovg THZfHZmznXPBkp2OArBhHM8HdPnaQkMP8wiKQNBo0am++5UmmeRQTk/m2pSznslU wYpJBexWp0occ1g+eyx6X0NahIq2KiGIV7OSc5R6/m5JVY55JDk0MP43GEtbfzuS qLlomYzi9+9XyA6zEKfSDM6x6+AJsxhEFi+SMnLXtuOmQOELLiqcpRLerpyZpR0j JYIaH0fuu5jlrKhuea5vxS0cWhMvpJu8RvQzX+ZY3S/Lqu15fXkMTrxWhkSJkQGx zY2FfW6U14EbB0i8xLdV0AEchFUvCIkAYccpSRkCdV00CgRMNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxJhHFNWCwccSHbcHJzbW2yajyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvMzJjZGQ1OTUtMzliNS0z M2YxLWIzZDMtODE1NzNkNGYwNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACArA+adhWu5forgJpCWvKGaLTDvzYJyD4yx4LbFVgjpl2MwmkVED+Pt SB+43BMcB8oai524gBBh/wAW2/Ma2LOU9O3R9cJJHBCSGtoTG9yaJu4NZJ/CTRSW bNdPjz8KcDAbnLrbPOYVTEb/zULg3mq5M1J2PGD4eeQY6fwdEV6TRdaPIJLAQa/1 9iSf34y6QAygawmI/fUvs6KvZpjxSfPCSTecjGfbwVURWncKQexcUr1DpkmdXD6k gTZZ7C9DojcTob0QBlZcSIp7ZC4twLYpk/N4RKVIOK/cxLn3oUf/4Wz0DjehdlJS SXcc3eq1jNo9CMeDt5aDizgmGNihhCY= -----END CERTIFICATE-----Generated at Wed May 13 12:04:47 2026 by rpki-client