$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/10f6258f-0624-366b-b770-20e51ad3c4d0.roa File: 10f6258f-0624-366b-b770-20e51ad3c4d0.roa (raw, json) Hash identifier: ccHHc9SXZ3pPwAEmN9/uOFQlXl4CtY794oW9oS406Y0= Subject key identifier: 41:19:B9:0E:14:A2:3F:49:88:0F:F0:A7:0D:E3:60:3A:F0:7B:F0:9F Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584E5A49EED9FAB058EE768F8680 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/10f6258f-0624-366b-b770-20e51ad3c4d0.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 53730 IP address blocks: 104.238.248.0/24 maxlen: 24 104.238.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:ee:d9:fa:b0:58:ee:76:8f:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=e6504495-c0cc-4227-96e9-6bbf54ffe961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a8:b3:89:cd:91:06:bc:39:64:77:04:95:7d: 94:b2:1a:e6:ca:8b:fd:bb:d9:09:11:99:92:61:73: 02:b0:4a:08:81:79:f7:6e:f7:33:04:95:28:f0:f3: 0a:b2:77:42:e6:18:41:11:1b:db:3f:7f:97:8b:22: 8f:b8:c3:49:02:0d:7d:ab:bf:3b:31:17:db:65:d9: b4:84:38:92:de:27:b4:e9:55:64:5e:39:43:a9:86: b3:4d:e8:04:6d:62:2e:57:20:50:c5:52:c9:25:e5: 88:57:49:28:c3:68:c3:9b:b5:3e:99:c1:23:6e:c9: be:5d:67:b5:3a:2d:8a:b1:ef:85:d6:48:58:e0:0a: 29:62:d8:39:e5:f9:f3:04:23:7c:9d:de:37:49:c2: 56:3b:a0:78:84:dc:9d:78:8d:55:2d:d5:a2:f1:da: 14:82:71:5c:ff:e2:e9:4b:96:93:58:bf:69:e4:82: 22:0c:3e:ac:aa:63:b0:7d:fa:27:c0:83:e9:f9:39: 03:49:c6:25:ed:12:45:fa:48:aa:19:f7:b0:7b:99: d4:2b:4a:ab:d5:7c:5e:00:d1:2c:1a:0e:75:1e:0e: 26:0a:88:c6:d7:4f:12:ae:04:57:93:39:10:3a:6e: 8b:f2:4b:d5:38:7c:4c:85:78:e1:4d:78:09:cb:1b: dc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:19:B9:0E:14:A2:3F:49:88:0F:F0:A7:0D:E3:60:3A:F0:7B:F0:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/10f6258f-0624-366b-b770-20e51ad3c4d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 104.238.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:78:88:52:2f:f0:e1:59:70:a0:5e:77:bc:45:58:6d:32:64: c5:3a:42:ec:74:36:36:80:b7:1e:d1:b5:3d:d0:bb:02:56:db: e9:92:43:cb:30:49:cf:94:6c:21:3a:50:0b:00:d3:0d:ea:d5: 13:1f:0a:00:d1:46:e4:32:ce:b5:00:f9:04:04:01:35:5a:57: e9:4d:9f:a3:b2:eb:45:5c:54:0c:ad:be:b1:35:02:83:8f:d7: 51:21:59:7d:17:12:fa:9f:e7:3c:1c:c5:c3:82:ca:11:f6:03: 9e:ed:db:14:78:97:ff:ea:a6:44:27:e2:b8:0d:59:71:30:b8: 9e:c8:b2:ab:74:83:59:e1:e5:dd:35:a0:40:94:49:9d:43:26: 41:06:9d:29:e3:74:f8:d2:1d:e4:d4:7c:b5:1d:52:32:32:31: 44:47:80:aa:42:e7:70:d0:a4:a5:8f:64:d2:4d:b2:d4:a6:93: aa:bd:e1:9f:ae:96:cb:6d:4e:f6:7e:49:21:36:2b:e8:ee:f3: fc:1b:79:ab:fd:66:a5:69:22:40:b0:8b:7e:b5:f2:ca:48:7f: 49:05:24:83:ac:bc:9e:54:14:3b:27:78:22:8c:6e:75:67:5f: 0e:d5:42:3e:59:ec:9e:b7:93:dc:67:64:8f:15:c0:ab:af:ab: 3f:1d:a7:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSe7Z+rBY7naPhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk ZTY1MDQ0OTUtYzBjYy00MjI3LTk2ZTktNmJiZjU0ZmZlOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKizic2RBrw5ZHcElX2Ushrmyov9u9kJEZmS YXMCsEoIgXn3bvczBJUo8PMKsndC5hhBERvbP3+XiyKPuMNJAg19q787MRfbZdm0 hDiS3ie06VVkXjlDqYazTegEbWIuVyBQxVLJJeWIV0kow2jDm7U+mcEjbsm+XWe1 Oi2Kse+F1khY4AopYtg55fnzBCN8nd43ScJWO6B4hNydeI1VLdWi8doUgnFc/+Lp S5aTWL9p5IIiDD6sqmOwffonwIPp+TkDScYl7RJF+kiqGfewe5nUK0qr1XxeANEs Gg51Hg4mCojG108SrgRXkzkQOm6L8kvVOHxMhXjhTXgJyxvcxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEZuQ4Uoj9JiA/wpw3jYDrwe/CfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMTBmNjI1OGYtMDYyNC0z NjZiLWI3NzAtMjBlNTFhZDNjNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaO74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANp4iFIv8OFZcKBed7xFWG0yZMU6Qux0NjaAtx7RtT3QuwJW2+mSQ8sw Sc+UbCE6UAsA0w3q1RMfCgDRRuQyzrUA+QQEATVaV+lNn6Oy60VcVAytvrE1AoOP 11EhWX0XEvqf5zwcxcOCyhH2A57t2xR4l//qpkQn4rgNWXEwuJ7Isqt0g1nh5d01 oECUSZ1DJkEGnSnjdPjSHeTUfLUdUjIyMURHgKpC53DQpKWPZNJNstSmk6q94Z+u lsttTvZ+SSE2K+ju8/wbeav9ZqVpIkCwi3618spIf0kFJIOsvJ5UFDsneCKMbnVn Xw7VQj5Z7J63k9xnZI8VwKuvqz8dpwM= -----END CERTIFICATE-----Generated at Thu Jul 23 21:58:48 2026 by rpki-client