$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa File: af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa (raw, json) Hash identifier: bIqbSif+0lt+RFVU0bTF987lAQ1Shso5vnj6DzhsgyQ= Subject key identifier: 6E:50:D2:26:17:48:87:1F:FA:CA:1C:A3:C0:2C:06:76:66:E5:80:FF Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584DB1DAC896836C0001B6470880 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 395092 IP address blocks: 104.36.228.0/22 maxlen: 24 2607:a680:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:c8:96:83:6c:00:01:b6:47:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=ec068ba6-768c-4f40-8ae8-0efa059fb7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1f:b8:9c:05:44:b9:d6:1e:35:9c:f8:55:a7: 69:a2:cf:35:88:c4:a8:30:31:64:8f:91:3b:54:69: b3:8e:ee:2a:48:4c:1a:f2:a1:c5:c6:f7:36:03:9a: 15:72:cb:06:8d:68:67:8f:0d:71:27:83:a0:d6:e7: 15:59:a3:42:2f:86:26:be:5b:a9:2e:52:b5:30:39: 1a:0e:18:8a:d0:9f:03:7b:48:d6:8f:26:8a:d0:b6: d4:fa:d4:c3:42:80:4c:93:be:6b:78:4b:68:1c:9d: 4e:5d:02:22:ac:b8:a3:59:06:fa:d5:7a:41:cf:87: d8:f3:ba:e2:56:0d:32:42:ee:d4:81:28:3b:95:9b: 4f:1d:d6:26:f3:d6:a4:f8:b3:b1:48:24:24:1b:b3: a3:7f:82:79:ac:f8:6f:a8:98:50:8d:c8:e2:b3:a6: 2f:4f:8a:c3:f6:eb:aa:aa:ea:16:38:76:96:01:64: d3:26:c0:1a:1d:0b:eb:d4:a3:0a:a6:24:30:a5:ee: c3:b2:03:30:89:8c:af:4d:d3:b8:55:17:96:d8:ce: 9f:62:83:57:99:19:e0:bb:ed:d0:47:08:17:90:14: ea:58:24:0a:11:68:d3:b8:1f:27:4e:26:0b:ca:df: f8:b2:50:a3:08:33:c3:81:95:b6:cf:80:11:35:0c: 7a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:50:D2:26:17:48:87:1F:FA:CA:1C:A3:C0:2C:06:76:66:E5:80:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 104.36.228.0/22 IPv6: 2607:a680:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e7:21:8b:59:9a:56:b8:64:61:ec:53:71:16:f2:c7:eb:a8: 72:8a:37:12:b1:36:63:65:83:d8:6a:e3:5c:62:21:db:9b:ef: 9f:bc:18:9e:36:41:e7:03:c8:c0:bf:ea:09:b2:da:f9:f2:1f: 96:36:d5:37:6a:49:b2:e3:c4:a2:03:bd:73:6f:d4:7f:95:cb: 0e:5b:cd:7a:ff:c5:6d:c3:87:55:cf:c6:17:66:f7:4d:5e:7f: 35:34:46:f8:9d:fc:18:15:52:55:9c:55:12:a2:46:47:cd:dc: fb:b7:4b:ec:4d:8f:b7:93:99:44:7a:49:21:3f:6d:80:d5:d8: bb:15:0f:c4:e0:3a:4a:ed:30:94:e4:80:c9:13:64:1a:09:7a: f7:64:0a:fa:37:35:aa:45:0e:4f:67:74:87:e3:3e:8f:9f:69: 83:a7:67:42:63:37:5d:a5:a9:8d:ff:da:77:44:b6:04:27:3a: 56:5e:f1:8d:a7:c2:09:13:e7:d6:11:4c:09:6d:bf:bb:67:70: 3a:9f:48:67:42:4a:67:31:b4:b0:28:13:07:5a:89:32:c2:ee: 88:92:fe:84:f5:e7:15:5a:66:8f:dd:c5:15:95:b6:47:ee:8f: 2a:66:b3:a4:18:73:08:5d:21:5d:da:6c:9c:14:be:db:13:85: 30:ed:d4:3c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE2x2siWg2wAAbZHCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk ZWMwNjhiYTYtNzY4Yy00ZjQwLThhZTgtMGVmYTA1OWZiN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB+4nAVEudYeNZz4Vadpos81iMSoMDFkj5E7 VGmzju4qSEwa8qHFxvc2A5oVcssGjWhnjw1xJ4Og1ucVWaNCL4YmvlupLlK1MDka DhiK0J8De0jWjyaK0LbU+tTDQoBMk75reEtoHJ1OXQIirLijWQb61XpBz4fY87ri Vg0yQu7UgSg7lZtPHdYm89ak+LOxSCQkG7Ojf4J5rPhvqJhQjcjis6YvT4rD9uuq quoWOHaWAWTTJsAaHQvr1KMKpiQwpe7DsgMwiYyvTdO4VReW2M6fYoNXmRngu+3Q RwgXkBTqWCQKEWjTuB8nTiYLyt/4slCjCDPDgZW2z4ARNQx6IQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFG5Q0iYXSIcf+soco8AsBnZm5YD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvYWY3M2E3YTgtM2MwYi0z MWQ3LTg5ZGItNGM4ZWI5YjdjN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCaCTkMA8E AgACMAkDBwAmB6aAAAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAA+chi1maVrhkYexTcRbyx+uocoo3ErE2 Y2WD2GrjXGIh25vvn7wYnjZB5wPIwL/qCbLa+fIfljbVN2pJsuPEogO9c2/Uf5XL DlvNev/FbcOHVc/GF2b3TV5/NTRG+J38GBVSVZxVEqJGR83c+7dL7E2Pt5OZRHpJ IT9tgNXYuxUPxOA6Su0wlOSAyRNkGgl692QK+jc1qkUOT2d0h+M+j59pg6dnQmM3 XaWpjf/ad0S2BCc6Vl7xjafCCRPn1hFMCW2/u2dwOp9IZ0JKZzG0sCgTB1qJMsLu iJL+hPXnFVpmj93FFZW2R+6PKmazpBhzCF0hXdpsnBS+2xOFMO3UPA== -----END CERTIFICATE-----Generated at Wed May 13 04:55:44 2026 by rpki-client