$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/35a4a280-a419-3d31-a496-90f9731524db.roa File: 35a4a280-a419-3d31-a496-90f9731524db.roa (raw, json) Hash identifier: DnqAnN72ewCuDGfqv58d6TQsOL4hPs3TnFrovOyYHWk= Subject key identifier: D3:2B:8F:2F:52:EB:CA:0F:AB:25:C2:F4:B8:7F:32:BC:7C:75:BC:0B Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F4328584E4AEF33C4FCD79803A43641C0 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/35a4a280-a419-3d31-a496-90f9731524db.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 3214 IP address blocks: 104.255.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:33:c4:fc:d7:98:03:a4:36:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=d4e67f4e-0248-431a-8023-4b04a6a9d188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cf:f6:01:88:83:0f:cb:37:b5:9b:db:6e:01: 51:13:46:a2:45:d7:e3:4f:78:7d:f1:6e:5f:55:52: 79:98:f7:57:e9:ca:5f:c8:e0:6d:2e:f9:6c:62:4d: 8e:3c:00:42:60:54:61:4d:0a:be:a6:e8:f1:02:6b: 5c:89:05:a2:55:70:89:2e:0d:2e:a8:00:76:4e:9e: 83:53:14:1e:f5:cd:b6:b7:bd:fa:c0:b2:cf:ec:d7: e9:98:85:a6:4b:9c:48:fa:56:4f:cc:8a:05:a9:80: 17:c0:b6:01:0e:d8:e0:65:c1:51:16:08:9c:92:89: ab:59:bb:73:9c:23:cd:1a:d4:ec:37:54:99:13:99: f4:d7:3c:05:60:a3:f8:7e:4c:65:dc:b9:6b:d0:4b: 19:9c:3b:81:1e:a7:8f:79:ac:3f:97:e6:00:e1:88: 52:a0:a9:16:e0:0e:58:20:e6:e8:28:89:ce:23:fc: fd:1d:18:c2:e8:44:0e:1f:f3:da:4a:bb:a3:a7:73: 33:e2:c5:f4:55:d1:4a:c6:24:ea:5d:5e:bd:bc:e8: c7:89:24:5f:8d:db:e2:a0:1e:d1:d8:e1:b7:e3:2a: b3:8a:08:52:e5:95:70:e0:2b:06:e7:3a:59:03:a0: 85:d3:b3:d8:53:ae:e1:99:e7:df:57:00:99:8d:53: 98:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2B:8F:2F:52:EB:CA:0F:AB:25:C2:F4:B8:7F:32:BC:7C:75:BC:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/35a4a280-a419-3d31-a496-90f9731524db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: 104.255.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:e5:46:cd:0b:ff:ec:1a:39:40:23:2c:a2:0b:15:d7:20:eb: 21:79:d9:b5:d9:d7:07:05:d7:38:46:d4:4b:e6:20:d6:79:1e: a7:c5:7b:8d:f3:17:fa:a1:49:4c:15:13:bd:af:d6:f0:6c:e7: 64:82:76:93:69:62:13:05:ce:b5:18:8d:f2:94:43:a6:30:63: 5e:dc:b1:17:1d:c2:b0:15:1a:a9:1d:45:f1:03:9e:44:b5:69: 4b:0b:7c:ee:9e:f9:d4:4b:2d:7f:04:02:e7:47:69:6d:76:7f: 71:ab:bf:23:77:fb:1d:fb:25:23:0f:07:1a:38:dc:ed:7c:fa: c7:0e:00:b5:59:fd:d3:77:a2:1e:f6:cd:9b:a6:44:d4:9a:57: ad:73:f4:16:f6:ba:a6:a8:80:e5:18:29:f6:2f:72:25:1c:45: 81:36:9e:63:9e:58:83:ad:71:63:12:ba:59:25:c2:5b:b1:42: d0:d2:50:9f:c4:08:4c:7a:99:20:24:44:75:97:5c:6b:ce:c6: ee:b9:54:76:d0:09:3b:4b:0f:72:34:1f:1a:d1:b0:2b:8b:0a: 88:11:27:9d:80:3b:4a:af:17:9b:0c:12:76:17:49:76:10:46: 0e:2d:b5:c6:b1:67:ee:b2:57:d9:39:90:1d:06:b8:96:57:c0: 8d:6b:93:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K7zPE/NeYA6Q2QcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZDRlNjdmNGUtMDI0OC00MzFhLTgwMjMtNGIwNGE2YTlkMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs/2AYiDD8s3tZvbbgFRE0aiRdfjT3h98W5f VVJ5mPdX6cpfyOBtLvlsYk2OPABCYFRhTQq+pujxAmtciQWiVXCJLg0uqAB2Tp6D UxQe9c22t736wLLP7NfpmIWmS5xI+lZPzIoFqYAXwLYBDtjgZcFRFgickomrWbtz nCPNGtTsN1SZE5n01zwFYKP4fkxl3Llr0EsZnDuBHqePeaw/l+YA4YhSoKkW4A5Y IOboKInOI/z9HRjC6EQOH/PaSrujp3Mz4sX0VdFKxiTqXV69vOjHiSRfjdvioB7R 2OG34yqzighS5ZVw4CsG5zpZA6CF07PYU67hmeffVwCZjVOYIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMrjy9S68oPqyXC9Lh/Mrx8dbwLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvMzVhNGEyODAtYTQxOS0z ZDMxLWE0OTYtOTBmOTczMTUyNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzlRs0L/+waOUAjLKILFdcg6yF52bXZ1wcF1zhG1EvmINZ5HqfFe43z F/qhSUwVE72v1vBs52SCdpNpYhMFzrUYjfKUQ6YwY17csRcdwrAVGqkdRfEDnkS1 aUsLfO6e+dRLLX8EAudHaW12f3GrvyN3+x37JSMPBxo43O18+scOALVZ/dN3oh72 zZumRNSaV61z9Bb2uqaogOUYKfYvciUcRYE2nmOeWIOtcWMSulklwluxQtDSUJ/E CEx6mSAkRHWXXGvOxu65VHbQCTtLD3I0HxrRsCuLCogRJ52AO0qvF5sMEnYXSXYQ Rg4ttcaxZ+6yV9k5kB0GuJZXwI1rk8A= -----END CERTIFICATE-----Generated at Fri Jul 24 14:07:17 2026 by rpki-client