$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d46ac1-cfe0-31e7-b161-a40a0c881500.roa File: b3d46ac1-cfe0-31e7-b161-a40a0c881500.roa (raw, json) Hash identifier: KzXumVH2FnXFhXWg2j/Ff0LzJ70VDpApBJTVDGtcpbE= Subject key identifier: DF:34:61:E1:55:D8:C3:21:56:AD:79:74:7C:DA:F4:69:41:8A:C8:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7634EAC98193970306A97200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d46ac1-cfe0-31e7-b161-a40a0c881500.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 16625 IP address blocks: 104.103.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:ea:c9:81:93:97:03:06:a9:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=ab70b645-7c21-4a92-975f-e5bdf917e24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:54:26:60:ff:c6:01:2d:b6:32:f0:5b:9c: 4e:5e:f0:da:dd:02:37:c4:86:0d:a3:d9:44:aa:48: bb:d5:e2:7b:52:f7:8c:43:ce:70:59:b2:61:fe:e6: 07:56:fa:6c:da:48:b6:f8:69:a1:ac:e7:54:31:fb: 82:ad:3a:c9:33:36:c9:27:bc:ef:a2:ea:79:53:70: 09:b7:30:ec:7f:a0:1a:87:f2:fb:7b:5a:98:a3:68: a1:92:53:c3:2e:3a:01:d7:dd:88:0f:34:d5:01:8b: 71:17:a5:7a:fc:ac:03:39:c5:8d:9b:6f:12:0d:fa: cb:b0:fc:f5:5c:6e:dd:f3:ac:ad:07:61:56:c3:c1: b3:ea:18:16:ae:e2:60:cc:ea:c0:6e:d9:87:0e:14: fb:bc:6f:db:ca:b5:79:82:04:0b:4a:f9:51:b4:c6: 3c:ee:9b:ae:c3:44:f0:a2:6b:31:cd:6d:19:44:33: 3c:af:5f:4d:e3:37:d2:69:4c:df:42:d6:cb:83:6c: bd:2a:0f:ed:7b:3d:a3:b0:e7:4f:9f:7b:b3:c3:89: 55:ed:1b:ea:ea:eb:67:55:a4:e3:3e:b6:f6:82:b8: 3d:06:ed:c1:0c:48:36:87:fc:ec:d2:05:f2:23:5f: 98:47:1b:c8:69:98:60:14:ed:01:17:1f:48:43:c0: 37:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:34:61:E1:55:D8:C3:21:56:AD:79:74:7C:DA:F4:69:41:8A:C8:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d46ac1-cfe0-31e7-b161-a40a0c881500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.103.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:00:d1:48:af:14:1e:de:91:11:dc:b8:5e:e7:73:a6:c1:9e: c5:73:8b:a6:12:86:c7:56:a5:6c:6d:4a:ce:dd:d6:4c:2f:f6: 6c:1f:5f:51:76:df:70:14:74:b0:52:42:75:35:50:54:d1:91: 63:6e:6c:61:48:a0:1e:96:fb:67:9c:11:f5:49:f7:16:e0:25: 7d:46:c4:70:79:ac:99:fe:f0:b3:cc:e0:c0:c4:22:b4:62:4a: 07:12:92:9d:92:c9:72:96:f0:43:ae:70:b3:93:03:08:f7:fc: a5:4a:08:4d:be:2e:8e:fa:ab:fb:49:ad:2e:13:a2:50:ea:05: 31:9f:73:ea:66:3c:dd:18:6c:a0:ac:80:01:77:fb:ec:f9:fa: 52:31:ab:50:15:35:f6:05:74:10:2a:2e:15:57:ff:dd:f9:11: a8:71:f5:fb:03:ad:ea:26:23:6d:6a:ba:87:80:2a:e8:59:4e: 25:b0:47:76:eb:91:b7:a2:65:c5:f1:e6:79:82:99:56:0d:58: ae:82:bf:01:2b:43:6c:be:9c:4e:c8:e5:b2:6e:fe:b5:6e:a1: d5:0e:e3:5c:55:51:5c:7d:32:b2:a1:92:24:50:3f:6f:15:1c: 5f:5c:4c:b5:22:84:9a:4c:fe:fc:8b:02:2b:28:c7:15:19:36: ac:91:b1:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NOrJgZOXAwapcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk YWI3MGI2NDUtN2MyMS00YTkyLTk3NWYtZTViZGY5MTdlMjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQNUJmD/xgEttjLwW5xOXvDa3QI3xIYNo9lE qki71eJ7UveMQ85wWbJh/uYHVvps2ki2+GmhrOdUMfuCrTrJMzbJJ7zvoup5U3AJ tzDsf6Aah/L7e1qYo2ihklPDLjoB192IDzTVAYtxF6V6/KwDOcWNm28SDfrLsPz1 XG7d86ytB2FWw8Gz6hgWruJgzOrAbtmHDhT7vG/byrV5ggQLSvlRtMY87puuw0Tw omsxzW0ZRDM8r19N4zfSaUzfQtbLg2y9Kg/tez2jsOdPn3uzw4lV7Rvq6utnVaTj Prb2grg9Bu3BDEg2h/zs0gXyI1+YRxvIaZhgFO0BFx9IQ8A3ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN80YeFV2MMhVq15dHza9GlBisjGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjNkNDZhYzEtY2ZlMC0z MWU3LWIxNjEtYTQwYTBjODgxNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAA0UivFB7ekRHcuF7nc6bBnsVzi6YShsdWpWxtSs7d1kwv9mwfX1F2 33AUdLBSQnU1UFTRkWNubGFIoB6W+2ecEfVJ9xbgJX1GxHB5rJn+8LPM4MDEIrRi SgcSkp2SyXKW8EOucLOTAwj3/KVKCE2+Lo76q/tJrS4TolDqBTGfc+pmPN0YbKCs gAF3++z5+lIxq1AVNfYFdBAqLhVX/935Eahx9fsDreomI21quoeAKuhZTiWwR3br kbeiZcXx5nmCmVYNWK6CvwErQ2y+nE7I5bJu/rVuodUO41xVUVx9MrKhkiRQP28V HF9cTLUihJpM/vyLAisoxxUZNqyRsRE= -----END CERTIFICATE-----Generated at Fri Jul 24 09:47:51 2026 by rpki-client