$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa File: 97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa (raw, json) Hash identifier: YGvZ23GR0fbUvhsGNHWHEZTOdTdNsX2Ft6Hx5b/SGA8= Subject key identifier: 4C:BD:3F:B2:13:58:0A:88:C9:B4:2E:17:7F:B1:FD:6A:4F:96:44:31 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584E921F9EF7FCF97A75D04C0E80 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 395092 IP address blocks: 104.225.128.0/22 maxlen: 24 2607:a680:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:9e:f7:fc:f9:7a:75:d0:4c:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=41ada6bc-4a49-41c0-a4a4-e7abf6e5f7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:48:28:27:35:d1:08:9b:ee:3d:c0:67:2f: 7a:4c:22:c6:aa:06:a6:ba:98:2e:c4:04:38:15:cb: 5e:0a:3f:fd:03:88:5e:ae:97:1c:e0:34:64:6e:ea: d7:63:22:8a:46:e9:b2:45:ad:a3:90:e9:62:da:e3: ac:2f:f1:ef:94:ec:8f:8d:d8:54:ec:65:e3:11:d1: 58:6d:56:3b:23:89:4c:a2:a1:71:f8:62:aa:21:5b: c1:12:75:15:6f:55:d9:b9:82:2f:55:00:00:3f:e8: 5e:2f:19:ac:36:34:1d:3a:f5:aa:c6:8d:34:5a:5e: 81:72:59:d4:ed:b4:2a:9a:63:de:8a:0b:36:97:cf: 8d:93:e0:7e:c1:d7:ff:13:03:f4:d9:21:c6:fe:85: 4d:18:3a:89:d6:09:4a:db:df:1b:6a:7c:23:eb:8f: 64:af:5e:77:f7:a8:f9:36:83:07:33:3d:24:0f:39: 5b:7e:a6:cc:bc:56:42:83:ab:21:d9:90:3d:ed:97: 64:6f:f8:5d:fd:53:fb:45:66:06:a3:b3:cd:d2:4a: cb:da:5d:c0:11:fc:95:25:ea:91:ea:96:c0:78:d4: 97:de:d5:07:59:28:74:e7:8d:79:b3:0b:97:9d:27: 11:b3:f6:af:0e:06:68:60:b1:dc:b5:b6:56:91:c4: 90:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BD:3F:B2:13:58:0A:88:C9:B4:2E:17:7F:B1:FD:6A:4F:96:44:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/97bc6d79-fa01-33f8-b9f5-8f8fd0f53fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 104.225.128.0/22 IPv6: 2607:a680:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:35:0c:94:48:25:3a:05:00:45:41:35:fa:ba:ca:a8:8b:53: 41:89:a5:2a:ca:69:de:03:e3:9d:9a:44:3f:82:19:bd:0c:80: 1c:a2:fe:05:e2:15:01:0c:16:e8:92:55:f3:b7:67:a7:5b:20: b3:88:38:49:91:ac:42:19:35:85:9f:47:09:47:df:52:49:4e: 9c:aa:47:77:f4:2a:16:33:ce:af:15:2c:a4:1e:32:66:b8:a6: a6:aa:5f:c8:20:f8:c7:bf:26:50:ac:c4:a4:0f:bc:18:db:5c: 86:96:37:a8:17:81:69:9d:88:73:94:18:5f:4c:40:fc:93:90: 17:6b:94:5f:a6:d0:df:89:18:67:91:27:b3:dd:b1:12:74:4c: 85:57:1c:af:12:e9:87:d0:ed:13:f6:48:d5:7a:ca:73:7d:74: fa:45:a1:95:9b:5c:37:84:09:dc:a8:0d:6a:a9:a9:b3:91:80: dc:3d:05:2a:a7:fb:d1:07:0c:38:30:b3:e5:f5:ba:34:63:84: 28:b9:09:86:6f:cd:2c:a5:dd:ce:98:a1:2b:1a:0e:48:e0:ac: 78:e1:33:4f:2e:95:e1:94:6a:cb:af:25:19:1d:55:25:4d:e1: 4e:f2:28:07:86:f5:55:4d:8a:7b:71:b3:de:ee:4d:99:0d:d0: ef:34:a5:b3 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE6SH573/Pl6ddBMDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk NDFhZGE2YmMtNGE0OS00MWMwLWE0YTQtZTdhYmY2ZTVmN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA9IKCc10Qib7j3AZy96TCLGqgamupguxAQ4 FcteCj/9A4herpcc4DRkburXYyKKRumyRa2jkOli2uOsL/HvlOyPjdhU7GXjEdFY bVY7I4lMoqFx+GKqIVvBEnUVb1XZuYIvVQAAP+heLxmsNjQdOvWqxo00Wl6BclnU 7bQqmmPeigs2l8+Nk+B+wdf/EwP02SHG/oVNGDqJ1glK298banwj649kr15396j5 NoMHMz0kDzlbfqbMvFZCg6sh2ZA97Zdkb/hd/VP7RWYGo7PN0krL2l3AEfyVJeqR 6pbAeNSX3tUHWSh05415swuXnScRs/avDgZoYLHctbZWkcSQAwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFEy9P7ITWAqIybQuF3+x/WpPlkQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvOTdiYzZkNzktZmEwMS0z M2Y4LWI5ZjUtOGY4ZmQwZjUzZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCaOGAMA8E AgACMAkDBwAmB6aAAAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWjUMlEglOgUARUE1+rrKqItTQYmlKspp 3gPjnZpEP4IZvQyAHKL+BeIVAQwW6JJV87dnp1sgs4g4SZGsQhk1hZ9HCUffUklO nKpHd/QqFjPOrxUspB4yZrimpqpfyCD4x78mUKzEpA+8GNtchpY3qBeBaZ2Ic5QY X0xA/JOQF2uUX6bQ34kYZ5Ens92xEnRMhVccrxLph9DtE/ZI1XrKc310+kWhlZtc N4QJ3KgNaqmps5GA3D0FKqf70QcMODCz5fW6NGOEKLkJhm/NLKXdzpihKxoOSOCs eOEzTy6V4ZRqy68lGR1VJU3hTvIoB4b1VU2Ke3Gz3u5NmQ3Q7zSlsw== -----END CERTIFICATE-----Generated at Fri Jul 24 08:57:25 2026 by rpki-client