$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa File: 891439fd-34b5-3a59-98cf-17456b30b05b.roa (raw, json) Hash identifier: R92WC69HKjNww0OL4q63gMbd0uafg4RNd4MNBVCXszU= Subject key identifier: 44:FC:B6:68:5C:40:86:07:31:50:E2:89:C1:5E:23:A2:65:BE:EC:96 Certificate issuer: /CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b Certificate serial: 010D0C9F4328584E54B4A002C82D4290890F9200 Authority key identifier: EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 32003 IP address blocks: 104.243.144.0/20 maxlen: 24 199.38.168.0/22 maxlen: 24 2606:780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:a0:02:c8:2d:42:90:89:0f:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=1fc6714b-9f17-4420-b1d5-158c4be5e6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:63:f6:f8:b4:3a:3c:36:ca:8f:31:9a:8c:9d: 97:fb:5f:2b:b9:b4:51:a4:55:cd:d7:e2:8d:a1:03: ef:f1:f8:1a:32:c7:dd:30:d4:b6:b3:99:ae:c9:9e: 79:ca:92:c4:0a:b8:f3:81:16:ae:ad:ee:1b:9f:f0: 18:4f:46:78:21:0b:7e:f7:c1:3a:1f:27:cb:9e:93: 42:ec:af:40:16:51:c3:c0:00:6c:aa:d4:51:8b:29: 13:29:f8:17:92:07:33:1b:78:76:ef:d0:b3:69:3b: 1d:2c:77:5d:87:73:86:94:cb:c1:a1:5a:ff:15:f5: 1e:03:1b:98:29:51:af:0c:0c:8f:6f:69:cf:3d:33: 1b:24:c9:fe:05:dc:10:a5:21:c4:41:18:b6:41:cf: 28:d0:f2:b7:d7:7e:53:e4:45:e8:06:57:6a:7f:62: 79:2c:d7:92:6b:5d:6a:4d:73:fc:90:be:a3:57:bc: b9:db:22:90:46:df:17:06:de:f0:bb:9f:e3:b3:da: fe:19:ee:f8:b3:88:49:4c:50:be:62:62:99:44:cf: e7:d8:9b:76:1c:57:ad:93:4c:3d:d1:17:08:48:4a: e7:92:95:b4:9e:f1:ec:d1:9f:07:e4:ef:2e:0e:5d: 69:44:4f:8f:df:c0:ca:37:42:b4:65:02:fc:c0:0a: 3e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FC:B6:68:5C:40:86:07:31:50:E2:89:C1:5E:23:A2:65:BE:EC:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.crl X509v3 Authority Key Identifier: keyid:EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer sbgp-ipAddrBlock: critical IPv4: 104.243.144.0/20 199.38.168.0/22 IPv6: 2606:780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a0:3e:df:c9:58:01:60:5c:c9:3b:75:73:fd:58:76:20:ce: fa:3d:1a:2f:37:c1:52:9c:87:ba:b0:9d:a6:4a:7d:fd:d6:b4: 34:38:c7:a3:33:65:1c:88:15:65:e9:6d:59:4a:0f:c0:73:ae: 87:ee:20:98:c0:12:dd:52:91:83:4b:c9:3d:35:88:08:50:62: c4:91:59:c3:11:3b:64:90:d2:d2:1d:a9:a7:8f:38:db:99:7d: 2a:16:a6:f3:b0:fa:33:1b:de:1e:6d:f4:ce:59:11:b4:79:12: 01:ec:32:94:ec:0c:1e:a0:d8:36:55:35:8d:18:6f:3c:ac:79: bf:52:8a:7f:32:50:94:30:37:fd:b8:b1:8c:a5:53:d1:f8:4d: 3e:16:3f:a2:35:21:c4:76:63:43:9b:de:7c:9f:c4:2a:81:fc: ae:1c:f3:d6:35:19:df:5a:77:e9:57:6a:62:2c:d5:9c:93:7c: 18:51:d2:28:da:60:29:74:ad:bc:20:47:e0:ca:96:c2:db:d7: 1e:3b:93:23:20:11:d5:09:6b:3b:3b:40:0f:7c:a0:fe:5f:e4: cb:05:2b:99:83:b1:0e:c8:cd:fc:5d:f2:ad:23:67:8d:a1:0a: 2b:c0:76:07:fa:1b:21:52:2a:c5:e8:e6:ba:23:94:7d:dc:80: 55:fb:a3:47 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE5UtKACyC1CkIkPkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U1Nzg3N2MtODlhZC00ZDE0LTliMmMtM2ZiZDQ0MGIw MDNiMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk MWZjNjcxNGItOWYxNy00NDIwLWIxZDUtMTU4YzRiZTVlNmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WP2+LQ6PDbKjzGajJ2X+18rubRRpFXN1+KN oQPv8fgaMsfdMNS2s5muyZ55ypLECrjzgRaure4bn/AYT0Z4IQt+98E6HyfLnpNC 7K9AFlHDwABsqtRRiykTKfgXkgczG3h279CzaTsdLHddh3OGlMvBoVr/FfUeAxuY KVGvDAyPb2nPPTMbJMn+BdwQpSHEQRi2Qc8o0PK3135T5EXoBldqf2J5LNeSa11q TXP8kL6jV7y52yKQRt8XBt7wu5/js9r+Ge74s4hJTFC+YmKZRM/n2Jt2HFetk0w9 0RcISErnkpW0nvHs0Z8H5O8uDl1pRE+P38DKN0K0ZQL8wAo+vwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFET8tmhcQIYHMVDiicFeI6JlvuyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTU3 ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJkNDQwYjAwM2IvODkxNDM5ZmQtMzRiNS0z YTU5LTk4Y2YtMTc0NTZiMzBiMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2U1Nzg3N2MtODlhZC00ZDE0LTli MmMtM2ZiZDQ0MGIwMDNiL2NlNTc4NzdjLTg5YWQtNGQxNC05YjJjLTNmYmQ0NDBi MDAzYi5jcmwwHwYDVR0jBBgwFoAU7o+JJocvszr18UaPE7bxxh8SVkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTU3ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJk NDQwYjAwM2IuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEaPOQAwQC xyaoMA0EAgACMAcDBQAmBgeAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE+gPt/JWAFgXMk7dXP9WHYgzvo9 Gi83wVKch7qwnaZKff3WtDQ4x6MzZRyIFWXpbVlKD8BzrofuIJjAEt1SkYNLyT01 iAhQYsSRWcMRO2SQ0tIdqaePONuZfSoWpvOw+jMb3h5t9M5ZEbR5EgHsMpTsDB6g 2DZVNY0Ybzyseb9Sin8yUJQwN/24sYylU9H4TT4WP6I1IcR2Y0Ob3nyfxCqB/K4c 89Y1Gd9ad+lXamIs1ZyTfBhR0ijaYCl0rbwgR+DKlsLb1x47kyMgEdUJazs7QA98 oP5f5MsFK5mDsQ7Izfxd8q0jZ42hCivAdgf6GyFSKsXo5rojlH3cgFX7o0c= -----END CERTIFICATE-----Generated at Sat Jul 25 00:38:07 2026 by rpki-client