$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b25ffc0c-2c86-3e2f-b39e-e295b5a8d800.roa File: b25ffc0c-2c86-3e2f-b39e-e295b5a8d800.roa (raw, json) Hash identifier: e1Z/29i5WP10OVeI4JwV0AvFwaNJ9NvoIZsGJ8cOoAI= Subject key identifier: AF:AB:47:E4:A1:3C:1B:A1:1D:D4:5E:B1:1A:0B:C3:22:1F:AD:47:1E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7A64E453A6A5266A6AF67500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b25ffc0c-2c86-3e2f-b39e-e295b5a8d800.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 16625 IP address blocks: 104.124.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:e4:53:a6:a5:26:6a:6a:f6:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=f07e41f6-cc2b-4838-91d9-b66c66f174d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:92:14:81:97:7d:c9:97:de:2d:df:ea:5d: f6:e2:23:60:46:5e:bc:75:5b:83:8a:e4:32:1b:da: b6:cf:a4:04:8b:cd:29:91:79:08:2a:80:1e:2f:a6: 18:f2:3e:7f:8f:35:84:6d:31:d1:c6:81:59:f8:2b: ba:8e:90:11:bd:e2:55:81:42:17:ba:5c:38:51:37: 98:4e:1f:c3:0d:a2:8a:32:14:e9:75:de:fc:55:29: a0:00:2e:51:82:28:03:d8:2d:11:fb:bd:b7:ea:5e: 49:95:ec:58:80:64:fd:bf:1f:7a:e7:e4:82:56:7c: 23:45:8a:8a:71:e9:4b:2b:18:74:0d:6e:01:2f:7e: 81:2a:a0:82:37:a5:de:53:63:69:25:af:6d:d5:42: 64:57:ff:57:f9:dc:17:31:86:0d:82:fd:2c:f2:fd: 46:69:49:e0:d3:8b:bf:f9:31:c4:c7:37:93:77:68: 12:a4:e1:39:6c:58:6a:81:1e:15:78:80:95:83:80: 54:8c:81:41:18:ca:4d:a7:b4:62:64:27:95:4d:5b: a7:d7:17:7a:14:25:25:f6:f5:08:23:b7:4e:ad:88: 08:1e:83:26:7b:55:71:2f:86:4f:13:5b:aa:55:64: f4:3b:bf:ee:16:4e:9f:07:5c:aa:c5:96:41:5e:4d: 10:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AB:47:E4:A1:3C:1B:A1:1D:D4:5E:B1:1A:0B:C3:22:1F:AD:47:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b25ffc0c-2c86-3e2f-b39e-e295b5a8d800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.124.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:96:d6:ef:28:97:82:a6:c2:bb:24:64:ce:d9:bf:da:5e:6f: 4e:0a:1d:d4:90:c2:4c:3a:49:df:03:1d:ad:46:b8:8d:1c:13: f4:27:42:73:cc:8c:91:dd:9b:4c:ef:d9:b9:b0:e9:78:9c:ff: 66:21:2a:9f:43:04:3b:31:63:b7:fe:3e:da:d7:6b:2c:65:0e: 22:e4:ae:35:2f:7c:f2:d4:b5:af:58:d9:0c:bd:eb:11:0d:3b: cf:c8:97:18:79:27:20:83:7d:0d:dd:06:0a:51:0d:51:16:ad: 00:c5:9b:d4:ff:89:9d:ee:89:49:51:52:c9:9b:91:e4:69:20: 4a:ad:11:29:3c:08:49:4a:ef:be:04:b9:5f:3e:6c:03:25:c6: 66:ae:31:18:19:d1:79:47:70:18:a4:3c:be:d0:38:af:07:a1: 32:bf:b2:ac:7d:ec:9b:d9:48:dd:70:45:16:63:30:91:a3:aa: 16:ac:de:a0:fc:47:9b:f9:23:e5:85:f0:77:a7:54:20:2c:ff: 68:bc:ee:02:87:ec:fb:89:e1:d8:ac:64:03:f8:e3:a3:31:37: 83:45:45:c9:1f:c5:1f:30:9d:5d:05:d9:52:0a:c4:33:67:f5: 55:f7:fa:0e:d9:0b:3a:f3:36:2b:9d:f3:90:61:df:74:51:da: e5:2a:64:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZORTpqUmamr2dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk ZjA3ZTQxZjYtY2MyYi00ODM4LTkxZDktYjY2YzY2ZjE3NGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV+SFIGXfcmX3i3f6l324iNgRl68dVuDiuQy G9q2z6QEi80pkXkIKoAeL6YY8j5/jzWEbTHRxoFZ+Cu6jpARveJVgUIXulw4UTeY Th/DDaKKMhTpdd78VSmgAC5RgigD2C0R+7236l5JlexYgGT9vx965+SCVnwjRYqK celLKxh0DW4BL36BKqCCN6XeU2NpJa9t1UJkV/9X+dwXMYYNgv0s8v1GaUng04u/ +THExzeTd2gSpOE5bFhqgR4VeICVg4BUjIFBGMpNp7RiZCeVTVun1xd6FCUl9vUI I7dOrYgIHoMme1VxL4ZPE1uqVWT0O7/uFk6fB1yqxZZBXk0Q6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+rR+ShPBuhHdResRoLwyIfrUceMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI1ZmZjMGMtMmM4Ni0z ZTJmLWIzOWUtZTI5NWI1YThkODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmW1u8ol4KmwrskZM7Zv9peb04KHdSQwkw6Sd8DHa1GuI0cE/QnQnPM jJHdm0zv2bmw6Xic/2YhKp9DBDsxY7f+PtrXayxlDiLkrjUvfPLUta9Y2Qy96xEN O8/Ilxh5JyCDfQ3dBgpRDVEWrQDFm9T/iZ3uiUlRUsmbkeRpIEqtESk8CElK774E uV8+bAMlxmauMRgZ0XlHcBikPL7QOK8HoTK/sqx97JvZSN1wRRZjMJGjqhas3qD8 R5v5I+WF8HenVCAs/2i87gKH7PuJ4disZAP446MxN4NFRckfxR8wnV0F2VIKxDNn 9VX3+g7ZCzrzNiud85Bh33RR2uUqZNo= -----END CERTIFICATE-----Generated at Fri Jul 24 10:01:28 2026 by rpki-client