$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ab351743-aef7-30f2-8559-a82939a0d327.roa File: ab351743-aef7-30f2-8559-a82939a0d327.roa (raw, json) Hash identifier: aKdbSPFxo4CPB1BJqCyejLhdLAFiq+XIZexOnkLHH3Q= Subject key identifier: A2:18:B0:A7:4D:0E:8C:63:86:92:06:DB:3E:81:EE:8F:2C:AB:0D:AE Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584E86F5110EA543D108715BDEE0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ab351743-aef7-30f2-8559-a82939a0d327.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 7201 IP address blocks: 104.140.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:11:0e:a5:43:d1:08:71:5b:de:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=4f371e4c-ea17-449c-82f9-d4292d40b2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:71:c2:7d:ae:8f:76:b6:08:60:c8:6c:07:af: ac:3e:5c:2d:47:ca:18:47:73:3e:65:86:aa:5f:df: 20:7e:e3:f8:15:c5:94:c9:c9:1a:d1:96:99:7c:e6: 3c:c2:40:8f:21:69:d1:ef:39:27:ec:06:04:ee:33: 41:de:d2:ec:f8:87:1f:6c:69:32:db:7e:5a:32:e1: 84:40:d2:9f:bc:74:4f:44:31:23:58:58:ad:6b:50: 26:9b:a9:0e:83:24:56:64:22:f2:bf:f5:a3:7d:90: 10:7e:49:cb:28:37:5e:bc:86:f2:91:f1:7c:f0:52: 05:e3:a8:28:69:74:0c:1a:b5:1a:f4:a8:be:f9:29: 8d:43:03:87:34:cc:7e:2e:39:81:90:16:21:05:6e: e8:07:0f:36:66:c7:aa:5c:f2:78:56:6c:7d:50:14: c8:0b:30:6d:6a:f5:e0:11:76:f6:4f:f8:b5:90:35: 06:2c:25:56:49:ae:35:f9:ed:1c:7e:4b:9e:f2:00: 5b:39:b2:ff:18:62:c7:49:64:df:be:d5:de:76:e9: cc:a4:d4:c2:c5:aa:7e:eb:03:3e:59:ee:3b:80:46: a3:8e:27:fb:1d:f5:5d:6b:2f:fa:4d:ab:22:88:54: cc:c8:64:ff:be:35:29:e0:20:e3:df:a3:a4:a2:d8: bd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:18:B0:A7:4D:0E:8C:63:86:92:06:DB:3E:81:EE:8F:2C:AB:0D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ab351743-aef7-30f2-8559-a82939a0d327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.140.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:86:4d:ce:3d:37:d4:f9:ba:fa:0c:b5:10:de:0d:c3:3f:e9: 9c:96:83:7f:f2:43:7c:f2:44:7f:17:02:1d:6e:71:0b:07:59: 8b:66:17:fe:b5:7a:59:1e:5e:4c:66:b2:0f:69:28:a9:2a:7f: 50:f0:8f:f2:b3:df:5a:9b:9c:eb:8f:8b:be:1e:1d:30:a9:62: e7:2b:9e:6a:13:6d:13:0e:db:a0:fe:e6:1f:c6:ae:bc:d3:d5: 28:50:b1:94:b9:aa:1c:a3:d8:83:9d:d2:d7:f2:73:82:da:fd: 30:70:aa:db:fc:01:a4:49:3a:0d:a3:33:f7:fe:66:09:ae:58: db:b3:1a:bd:71:ad:23:7e:84:01:1f:aa:4e:29:e5:d5:70:01: ac:f1:0d:77:6b:ae:f8:30:45:6d:e5:be:3e:c1:d9:fe:bb:73: fa:ca:51:47:e9:b4:0a:0b:84:f0:13:25:f3:4c:ab:98:7d:f9: 45:d4:4e:ee:35:48:ba:96:ba:7b:b4:6d:d7:16:bc:4f:1d:96: 44:6e:84:2d:91:61:eb:f4:d5:b2:c3:ff:68:ac:68:29:0e:22: b8:2d:bf:0c:75:fd:69:92:c4:53:d2:c7:fb:87:b7:2e:5f:8f: 8d:dc:9b:d0:eb:f6:6b:8c:87:e2:33:4c:a5:e5:e1:2f:5f:ee: 42:64:f4:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9REOpUPRCHFb3uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk NGYzNzFlNGMtZWExNy00NDljLTgyZjktZDQyOTJkNDBiMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3HCfa6PdrYIYMhsB6+sPlwtR8oYR3M+ZYaq X98gfuP4FcWUycka0ZaZfOY8wkCPIWnR7zkn7AYE7jNB3tLs+IcfbGky235aMuGE QNKfvHRPRDEjWFita1Amm6kOgyRWZCLyv/WjfZAQfknLKDdevIbykfF88FIF46go aXQMGrUa9Ki++SmNQwOHNMx+LjmBkBYhBW7oBw82ZseqXPJ4Vmx9UBTICzBtavXg EXb2T/i1kDUGLCVWSa41+e0cfkue8gBbObL/GGLHSWTfvtXedunMpNTCxap+6wM+ We47gEajjif7HfVday/6TasiiFTMyGT/vjUp4CDj36Okoti9OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIYsKdNDoxjhpIG2z6B7o8sqw2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYWIzNTE3NDMtYWVmNy0z MGYyLTg1NTktYTgyOTM5YTBkMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIwjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmGTc49N9T5uvoMtRDeDcM/6ZyWg3/yQ3zyRH8XAh1ucQsHWYtmF/61 elkeXkxmsg9pKKkqf1Dwj/Kz31qbnOuPi74eHTCpYucrnmoTbRMO26D+5h/GrrzT 1ShQsZS5qhyj2IOd0tfyc4La/TBwqtv8AaRJOg2jM/f+ZgmuWNuzGr1xrSN+hAEf qk4p5dVwAazxDXdrrvgwRW3lvj7B2f67c/rKUUfptAoLhPATJfNMq5h9+UXUTu41 SLqWunu0bdcWvE8dlkRuhC2RYev01bLD/2isaCkOIrgtvwx1/WmSxFPSx/uHty5f j43cm9Dr9muMh+IzTKXl4S9f7kJk9IY= -----END CERTIFICATE-----Generated at Fri Jul 24 15:59:10 2026 by rpki-client