$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dce288b3-ba3d-3cee-915e-c80d75a1aaf3.roa File: dce288b3-ba3d-3cee-915e-c80d75a1aaf3.roa (raw, json) Hash identifier: 22Uoi3E7MciAMgtABGWOqn47PM+qL1olE3BRiNEjdP0= Subject key identifier: 8E:62:3E:CB:D2:F2:F8:FF:2E:76:C1:1E:74:07:96:DA:71:25:89:6E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E736A35BE4C50EC250D06E5E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dce288b3-ba3d-3cee-915e-c80d75a1aaf3.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 16625 IP address blocks: 104.73.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:35:be:4c:50:ec:25:0d:06:e5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=8a043da6-ff7b-46fa-bcbe-40dc17fd9296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f7:84:b0:2f:45:db:13:7f:a5:24:d6:bb:54: b4:84:82:75:ac:ab:e1:fb:9e:0c:f5:8d:9b:74:ee: 43:84:4c:23:a5:34:14:f1:2a:5b:43:24:f1:86:31: b9:ae:44:1e:0b:36:84:16:37:0c:49:de:23:c3:12: fd:45:97:fc:a8:b4:17:93:19:fb:4c:99:be:7d:f2: ee:ba:73:cf:a5:5c:9a:c2:bd:6a:cf:f1:9a:24:be: d2:f8:79:26:a5:03:91:57:dc:43:16:d4:c5:26:c7: 5b:86:99:e0:43:be:ab:15:c1:0b:a0:09:b3:24:5c: 4b:13:05:a2:76:83:1d:f8:d7:fe:f4:15:74:9f:35: 3c:9b:c1:d6:ab:42:51:f5:a1:c5:fc:db:dd:f3:0c: f1:dd:8d:bc:d1:a3:d8:7f:4a:bb:eb:27:27:fb:03: 17:52:7f:1c:c9:d7:e1:33:f4:46:de:cf:41:f2:64: 44:fb:87:31:d0:08:de:3e:69:d8:14:3a:fb:07:81: af:33:9b:73:04:51:9f:84:46:2d:ec:3c:80:73:6d: 68:aa:5d:bd:dc:e2:94:b6:06:3b:92:83:45:01:52: 71:f4:ab:db:d0:33:4d:a0:c5:ea:8f:e3:9f:9e:89: 15:59:ef:16:26:11:ed:e2:b9:fb:a3:c6:8e:47:cd: d5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:62:3E:CB:D2:F2:F8:FF:2E:76:C1:1E:74:07:96:DA:71:25:89:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dce288b3-ba3d-3cee-915e-c80d75a1aaf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.73.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:83:78:58:1a:1e:ef:c1:e8:f1:3c:82:74:96:d2:6d:d5:a9: 90:7c:46:70:b8:bf:22:49:8d:d4:49:27:8f:d7:ed:16:6b:80: 6c:af:21:3d:c4:59:f6:e8:d5:20:db:5b:25:5a:f5:bd:9c:bc: aa:99:aa:ee:e4:68:33:2d:72:af:36:fa:37:20:1b:cd:41:c9: a9:b7:0c:30:81:90:a0:a7:58:12:55:14:97:20:c0:9c:c2:de: 9b:dd:fc:3c:41:51:96:8e:19:d0:85:b1:05:aa:6a:22:51:fb: e6:01:c8:61:73:cc:cb:ce:31:36:5d:aa:63:7d:80:3e:fc:79: 49:06:8e:4f:2c:79:5d:56:31:89:dc:06:53:35:65:53:d4:2c: f8:a5:c8:18:4d:18:11:45:10:c5:21:7b:1c:e0:47:fd:17:8c: 76:58:47:50:c8:97:59:5a:4b:c8:50:ee:ce:cb:8f:d1:c6:2d: 5e:51:e7:7a:84:16:21:75:6e:4a:54:23:97:90:2e:68:6a:7b: 31:3c:63:33:fb:40:67:be:ba:09:04:97:f8:28:40:bb:dc:d4: 3d:70:7f:67:31:ab:37:d8:b3:5e:fd:17:84:b0:81:98:78:1a: ab:e8:59:92:65:4d:85:61:cf:62:a9:c7:6c:ad:4e:cb:7f:0b: 06:93:c9:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zajW+TFDsJQ0G5eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk OGEwNDNkYTYtZmY3Yi00NmZhLWJjYmUtNDBkYzE3ZmQ5Mjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfeEsC9F2xN/pSTWu1S0hIJ1rKvh+54M9Y2b dO5DhEwjpTQU8SpbQyTxhjG5rkQeCzaEFjcMSd4jwxL9RZf8qLQXkxn7TJm+ffLu unPPpVyawr1qz/GaJL7S+HkmpQORV9xDFtTFJsdbhpngQ76rFcELoAmzJFxLEwWi doMd+Nf+9BV0nzU8m8HWq0JR9aHF/Nvd8wzx3Y280aPYf0q76ycn+wMXUn8cydfh M/RG3s9B8mRE+4cx0AjePmnYFDr7B4GvM5tzBFGfhEYt7DyAc21oql293OKUtgY7 koNFAVJx9Kvb0DNNoMXqj+OfnokVWe8WJhHt4rn7o8aOR83VAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5iPsvS8vj/LnbBHnQHltpxJYluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGNlMjg4YjMtYmEzZC0z Y2VlLTkxNWUtYzgwZDc1YTFhYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaEmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+DeFgaHu/B6PE8gnSW0m3VqZB8RnC4vyJJjdRJJ4/X7RZrgGyvIT3E Wfbo1SDbWyVa9b2cvKqZqu7kaDMtcq82+jcgG81Byam3DDCBkKCnWBJVFJcgwJzC 3pvd/DxBUZaOGdCFsQWqaiJR++YByGFzzMvOMTZdqmN9gD78eUkGjk8seV1WMYnc BlM1ZVPULPilyBhNGBFFEMUhexzgR/0XjHZYR1DIl1laS8hQ7s7Lj9HGLV5R53qE FiF1bkpUI5eQLmhqezE8YzP7QGe+ugkEl/goQLvc1D1wf2cxqzfYs179F4SwgZh4 GqvoWZJlTYVhz2Kpx2ytTst/CwaTyV0= -----END CERTIFICATE-----Generated at Fri Jul 24 13:55:52 2026 by rpki-client