$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/7240f3c2-ab10-300d-8db2-697e0432d604.roa File: 7240f3c2-ab10-300d-8db2-697e0432d604.roa (raw, json) Hash identifier: /Jnw88vHTWCbN8ZmxPH+dEB8oMdbPTYgtlrmoUrAgUY= Subject key identifier: 88:7D:36:04:20:D3:EE:F8:9C:A1:88:A5:44:07:24:85:FF:ED:BE:7E Certificate issuer: /CN=1ff04835-864a-40da-a12f-dcad0faabb8c Certificate serial: 010D0C9F4328584E9A7FB22E1056D14295427200 Authority key identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/7240f3c2-ab10-300d-8db2-697e0432d604.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 5650 IP address blocks: 104.152.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:b2:2e:10:56:d1:42:95:42:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff04835-864a-40da-a12f-dcad0faabb8c Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=e15b9df0-bc10-4cc3-ac57-12f748af8a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ae:93:9d:62:24:d4:31:da:c0:ba:e1:b2:63: 9b:5b:94:6a:0f:65:2b:51:fc:31:6c:96:45:de:e0: 2b:fc:f3:a2:84:bc:05:30:1f:2c:88:86:7d:59:e6: 9b:a8:83:1a:c1:69:09:97:b4:13:60:64:b9:9a:f5: 34:22:3f:c8:8b:32:f3:d6:56:dd:33:9b:73:1e:db: ca:1a:9a:8b:65:06:12:59:de:5e:4f:cf:8a:d5:d8: c3:82:6f:49:f2:ef:08:ac:ff:a3:7d:75:82:a2:1b: 7c:46:ce:8f:a4:67:ed:69:b1:b0:ef:8e:f4:53:e0: eb:9d:d2:da:ee:09:0b:b2:11:8d:3b:a8:c1:22:55: 25:60:7c:6b:6b:f5:48:fc:69:0f:05:7a:2a:c5:8d: a7:f9:61:22:af:e2:b6:fd:1c:93:95:95:ed:34:ad: 44:81:6c:79:10:17:79:71:3a:1f:2c:4b:4b:ea:9b: dd:9b:c0:0b:3d:bc:dc:de:d3:10:63:b3:88:83:ab: f6:0c:f2:0d:92:ce:86:ab:8d:e8:1f:d7:3e:4f:f9: 70:d2:66:52:e9:72:9d:47:cd:d1:8a:d0:c4:7b:df: d9:86:82:c9:15:a9:4e:fa:5e:83:67:1f:8e:fa:36: 71:54:be:28:2e:d4:76:97:f5:bd:d7:e8:dd:31:0e: c1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7D:36:04:20:D3:EE:F8:9C:A1:88:A5:44:07:24:85:FF:ED:BE:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/7240f3c2-ab10-300d-8db2-697e0432d604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl X509v3 Authority Key Identifier: keyid:73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer sbgp-ipAddrBlock: critical IPv4: 104.152.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ed:92:8a:2c:10:0e:21:a9:7e:e9:55:02:2f:59:a8:04:c5: 5d:8e:bf:06:19:19:f9:5d:b3:ba:5e:fa:2c:30:2e:6c:6a:c6: fb:fe:47:15:55:9a:fd:ce:61:34:eb:e2:2a:c6:41:36:69:5b: 25:6d:69:f8:4c:48:7a:af:af:44:85:13:8d:b8:69:40:ba:77: 93:96:61:32:5d:f5:3f:dc:e6:41:9d:69:96:59:e4:d4:40:54: 89:79:75:af:c9:fa:10:aa:e0:44:e4:94:a0:bb:ad:b7:6f:43: 1c:86:cf:56:ff:f1:88:27:5e:f2:f6:fa:91:58:58:18:0c:33: 8f:af:cc:a8:77:65:02:fa:8d:4d:32:f2:40:da:ee:80:f9:b5: 4b:c8:58:02:88:dc:0a:f7:a5:0f:0f:fc:04:39:1c:73:f8:21: 83:94:2e:33:36:99:86:80:45:ec:d4:7f:d9:17:f1:77:76:70: 79:14:1a:ef:30:5a:90:8e:3f:e3:c6:70:7e:fc:11:78:54:5d: d4:49:2b:56:d4:d1:bb:01:d7:a0:bf:95:64:bc:4a:93:0b:83: 53:5f:07:ac:1a:69:c1:83:9a:91:51:a7:df:17:be:c6:7c:19: f3:24:85:f1:5a:b0:60:b2:d5:b5:98:e3:a4:60:17:e7:a3:25: 2b:b7:56:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af7IuEFbRQpVCcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmMDQ4MzUtODY0YS00MGRhLWExMmYtZGNhZDBmYWFi YjhjMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk ZTE1YjlkZjAtYmMxMC00Y2MzLWFjNTctMTJmNzQ4YWY4YTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA966TnWIk1DHawLrhsmObW5RqD2UrUfwxbJZF 3uAr/POihLwFMB8siIZ9WeabqIMawWkJl7QTYGS5mvU0Ij/IizLz1lbdM5tzHtvK GpqLZQYSWd5eT8+K1djDgm9J8u8IrP+jfXWCoht8Rs6PpGftabGw7470U+DrndLa 7gkLshGNO6jBIlUlYHxra/VI/GkPBXoqxY2n+WEir+K2/RyTlZXtNK1EgWx5EBd5 cTofLEtL6pvdm8ALPbzc3tMQY7OIg6v2DPINks6Gq43oH9c+T/lw0mZS6XKdR83R itDEe9/ZhoLJFalO+l6DZx+O+jZxVL4oLtR2l/W91+jdMQ7B8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIh9NgQg0+74nKGIpUQHJIX/7b5+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYw NDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZhYWJiOGMvNzI0MGYzYzItYWIxMC0z MDBkLThkYjItNjk3ZTA0MzJkNjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZmMDQ4MzUtODY0YS00MGRhLWEx MmYtZGNhZDBmYWFiYjhjLzFmZjA0ODM1LTg2NGEtNDBkYS1hMTJmLWRjYWQwZmFh YmI4Yy5jcmwwHwYDVR0jBBgwFoAUcw/uVLxy0c4qnDR9x78gVvTym4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2Fk MGZhYWJiOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPtkoosEA4hqX7pVQIvWagExV2OvwYZGflds7pe+iwwLmxqxvv+RxVV mv3OYTTr4irGQTZpWyVtafhMSHqvr0SFE424aUC6d5OWYTJd9T/c5kGdaZZZ5NRA VIl5da/J+hCq4ETklKC7rbdvQxyGz1b/8YgnXvL2+pFYWBgMM4+vzKh3ZQL6jU0y 8kDa7oD5tUvIWAKI3Ar3pQ8P/AQ5HHP4IYOULjM2mYaARezUf9kX8Xd2cHkUGu8w WpCOP+PGcH78EXhUXdRJK1bU0bsB16C/lWS8SpMLg1NfB6waacGDmpFRp98XvsZ8 GfMkhfFasGCy1bWY46RgF+ejJSu3VqQ= -----END CERTIFICATE-----Generated at Fri Jul 24 12:54:42 2026 by rpki-client