$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2d73ff87-ef5f-3cd2-a7eb-eb100c76e0e8.roa File: 2d73ff87-ef5f-3cd2-a7eb-eb100c76e0e8.roa (raw, json) Hash identifier: iVp3PI4CrHMu41gQ4BT2TcaJK61at9jXKPpcdFlPGwU= Subject key identifier: 08:9B:FF:44:6D:84:DE:87:5F:F0:50:C1:7E:67:9A:B8:CF:1C:0A:03 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584FD25BE271E318725450989224 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2d73ff87-ef5f-3cd2-a7eb-eb100c76e0e8.roa Signing time: Fri 13 Nov 2026 02:00:14 +0000 ROA not before: Fri 13 Nov 2026 02:00:14 +0000 ROA not after: Thu 11 Feb 2027 02:00:14 +0000 asID: 11404 IP address blocks: 104.244.220.0/22 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d2:5b:e2:71:e3:18:72:54:50:98:92:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Nov 13 02:00:14 2026 GMT Not After : Feb 11 02:00:14 2027 GMT Subject: CN=79b0cbdb-2ab1-4bc3-9288-ee31162dd563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:96:da:00:a8:78:b4:68:19:e2:b9:20:2b:1a: 0d:9f:d5:94:18:08:7e:c1:d3:3b:ae:05:be:13:6c: 8c:1b:be:1c:ee:55:b6:26:8f:cb:e8:e0:c0:11:a0: 84:e4:2c:48:2f:21:64:a2:74:e6:6a:15:f4:29:84: 64:b0:45:c0:d5:bc:96:62:b6:29:7b:5c:bc:01:f7: ee:ba:10:62:d5:43:2a:ec:d2:d8:c9:75:b4:17:3c: 8d:84:6e:54:a4:98:04:73:54:0b:01:aa:bf:b0:f4: 82:75:d6:da:fe:a2:f2:7f:0b:3d:40:3a:c8:96:ec: 0c:8d:09:f0:77:b7:94:2b:de:49:f7:16:a2:8b:70: 31:dd:1e:30:09:a8:7f:fb:7b:9a:6d:ce:f1:69:73: d5:1c:5e:3a:68:7f:23:c9:a5:b8:b3:cf:1e:c5:74: b7:a3:63:5d:0b:a8:1d:01:32:62:f7:07:38:d9:aa: 77:9c:2f:7d:3c:6e:e3:da:73:12:27:4e:15:97:bb: c1:fc:20:94:4a:a4:f8:52:0a:dc:c6:51:27:38:0e: 27:02:04:f1:62:02:ea:ea:a8:bb:ce:17:2c:f7:1c: ab:c5:48:7f:dc:44:51:45:4b:b6:62:f7:49:b7:e0: 0b:27:0a:44:27:28:01:41:2e:72:d9:14:d9:92:dc: 18:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9B:FF:44:6D:84:DE:87:5F:F0:50:C1:7E:67:9A:B8:CF:1C:0A:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2d73ff87-ef5f-3cd2-a7eb-eb100c76e0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.244.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:9c:1e:a3:62:d4:e0:5a:30:cb:f6:56:65:c4:0c:6e:eb:65: 14:1e:50:ff:dc:5b:6b:ed:d6:15:6c:6c:57:e1:33:96:d9:36: ee:33:0a:d0:21:3f:9a:8c:9d:3e:c2:1a:96:9e:b7:21:10:e8: 10:b3:14:75:f1:3b:dd:40:b2:a5:55:fc:49:a1:ce:9a:63:4e: db:2a:1b:2d:01:ba:1f:08:25:7d:d0:06:44:14:85:56:12:a3: 6f:4c:2a:12:3b:2d:fa:63:23:e5:02:ce:c8:59:8c:cf:02:24: 50:78:8b:ec:8e:f0:05:62:60:f6:8d:e2:4e:5b:d2:20:7c:5d: 77:f4:7f:09:2b:62:d7:39:48:16:a6:62:13:82:52:7b:44:0d: 73:10:d4:75:a5:71:3f:76:18:22:81:ab:d7:1e:9f:43:d4:ea: 1d:3f:4c:10:e0:6a:f6:6f:00:a4:d7:ef:43:83:20:0c:e6:96: 23:c7:95:15:0d:d8:d0:ff:d9:9c:ea:ac:09:14:9a:c2:8d:dd: e7:7e:7a:c3:f2:34:a0:aa:b8:87:11:cb:e3:2b:34:7d:5e:d0: 3b:06:02:77:04:59:45:ba:16:be:ba:af:f5:ed:a0:32:ca:33: 33:e2:54:61:2f:c5:83:f9:87:99:fb:d4:ba:7c:a4:3b:88:5a: fa:c2:0e:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/SW+Jx4xhyVFCYkiQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MTExMzAyMDAxNFoXDTI3MDIxMTAyMDAxNFowLzEtMCsGA1UEAxMk NzliMGNiZGItMmFiMS00YmMzLTkyODgtZWUzMTE2MmRkNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpbaAKh4tGgZ4rkgKxoNn9WUGAh+wdM7rgW+ E2yMG74c7lW2Jo/L6ODAEaCE5CxILyFkonTmahX0KYRksEXA1byWYrYpe1y8Affu uhBi1UMq7NLYyXW0FzyNhG5UpJgEc1QLAaq/sPSCddba/qLyfws9QDrIluwMjQnw d7eUK95J9xaii3Ax3R4wCah/+3uabc7xaXPVHF46aH8jyaW4s88exXS3o2NdC6gd ATJi9wc42ap3nC99PG7j2nMSJ04Vl7vB/CCUSqT4UgrcxlEnOA4nAgTxYgLq6qi7 zhcs9xyrxUh/3ERRRUu2YvdJt+ALJwpEJygBQS5y2RTZktwYAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAib/0RthN6HX/BQwX5nmrjPHAoDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMmQ3M2ZmODctZWY1Zi0z Y2QyLWE3ZWItZWIxMDBjNzZlMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKcHqNi1OBaMMv2VmXEDG7rZRQeUP/cW2vt1hVsbFfhM5bZNu4zCtAh P5qMnT7CGpaetyEQ6BCzFHXxO91AsqVV/EmhzppjTtsqGy0Buh8IJX3QBkQUhVYS o29MKhI7LfpjI+UCzshZjM8CJFB4i+yO8AViYPaN4k5b0iB8XXf0fwkrYtc5SBam YhOCUntEDXMQ1HWlcT92GCKBq9cen0PU6h0/TBDgavZvAKTX70ODIAzmliPHlRUN 2ND/2ZzqrAkUmsKN3ed+esPyNKCquIcRy+MrNH1e0DsGAncEWUW6Fr66r/XtoDLK MzPiVGEvxYP5h5n71Lp8pDuIWvrCDkA= -----END CERTIFICATE-----Generated at Sun Nov 15 13:30:12 2026 by rpki-client