$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/29387d14-5369-3841-8b55-747cef9985b6.roa File: 29387d14-5369-3841-8b55-747cef9985b6.roa (raw, json) Hash identifier: 1f+Hj+OGIT8NBSP61/fo+rZpz1M6OQiIHekLOtwr9Sc= Subject key identifier: 3C:9E:C8:E7:C6:E5:27:AD:05:93:E2:E9:87:24:09:E9:0B:54:E7:66 Certificate issuer: /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Certificate serial: 010D0C9F4328584E4AEF349CBE63070E57DFDC00 Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/29387d14-5369-3841-8b55-747cef9985b6.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 46562 IP address blocks: 104.200.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:34:9c:be:63:07:0e:57:df:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=8c0b3d32-d8ef-44fb-a17d-0f431899c1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f0:76:b2:4f:72:a8:23:13:a2:de:59:c5:e1: ac:c5:6b:0f:23:98:c0:9d:f1:7b:99:3d:b9:40:38: af:f2:ca:44:e8:97:63:ae:3b:1d:70:ae:c6:4f:e1: f5:45:79:e6:00:26:82:00:d7:41:dc:d9:c5:16:00: 6e:e0:60:63:87:ba:9b:af:6c:fb:b9:44:3e:7c:73: e1:b2:ec:05:3e:35:10:b5:02:4d:8f:59:d2:0b:9a: 53:db:d8:52:73:20:71:05:13:80:0a:38:50:0a:a0: 29:0c:ee:15:32:9b:f0:cd:bb:14:11:ca:f0:01:2c: 55:f1:3a:10:fd:51:ee:c3:62:85:8a:34:de:1a:0f: b1:91:e3:5a:d9:eb:42:7c:90:e6:86:e0:2e:89:75: a2:5e:48:ee:26:b3:21:b7:94:3c:5a:fa:e0:07:0a: a8:2e:83:ae:be:11:10:e1:1a:4f:16:c8:64:e7:ba: 29:4b:a7:d9:dd:b4:ae:61:5f:33:f2:ab:8e:0c:10: 92:04:f3:79:2a:07:6d:30:de:c6:93:d8:e9:af:c5: 58:ff:25:cf:ac:63:9c:c7:ed:7b:5a:1c:30:73:7c: e8:32:99:6a:6a:33:da:27:f4:1a:c6:81:ca:e1:6c: 9f:79:36:2d:18:0a:1e:55:5a:ec:5e:ad:91:33:e4: 84:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9E:C8:E7:C6:E5:27:AD:05:93:E2:E9:87:24:09:E9:0B:54:E7:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/29387d14-5369-3841-8b55-747cef9985b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl X509v3 Authority Key Identifier: keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer sbgp-ipAddrBlock: critical IPv4: 104.200.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:b1:c1:a3:55:73:31:7e:92:49:07:c2:3a:53:34:39:f8:d1: db:c5:4d:cc:a9:95:d3:09:a4:60:17:4b:dd:2f:cc:d4:e5:ac: db:c3:0f:fa:89:98:8b:f2:8d:7a:a2:0f:15:cc:eb:d4:2c:8d: 8d:1c:4e:3d:3c:3f:d9:4e:7b:45:10:a2:04:50:30:88:a6:47: ad:16:86:1a:ec:80:87:c3:b2:67:af:30:71:41:1f:02:e1:bb: dd:8c:28:06:83:b9:87:e2:7e:51:52:31:e3:bb:38:0b:03:6c: 83:74:85:56:16:d7:7e:17:d7:c9:ac:bf:35:bd:35:ca:a6:9f: 1f:ab:b7:f6:9a:7a:29:81:59:71:3f:65:c0:e6:18:5d:c2:61: 3e:74:a2:64:ef:87:0e:95:38:ca:bb:b5:d0:4e:2b:77:36:a2: 86:e8:af:57:56:7c:59:d4:90:f9:96:ff:54:a0:42:f7:fb:a3: 3d:9f:13:a8:77:03:b1:e9:b7:13:9a:ad:77:2b:9e:e2:67:05: a3:69:6b:78:08:7f:ee:44:a8:3d:73:33:c2:ed:9d:49:c1:30: ff:71:e1:54:fe:15:fc:58:27:5f:d5:58:c2:c4:e1:7d:c9:23: b6:ae:99:0b:c2:d6:98:a0:3c:36:ce:74:89:84:39:02:51:50: 08:e9:3a:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K7zScvmMHDlff3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUzMjNkYWMtYTE1ZC00ZjgyLWE3MGItMzBlMWE0Y2Ex Mjc5MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk OGMwYjNkMzItZDhlZi00NGZiLWExN2QtMGY0MzE4OTljMWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/B2sk9yqCMTot5ZxeGsxWsPI5jAnfF7mT25 QDiv8spE6JdjrjsdcK7GT+H1RXnmACaCANdB3NnFFgBu4GBjh7qbr2z7uUQ+fHPh suwFPjUQtQJNj1nSC5pT29hScyBxBROACjhQCqApDO4VMpvwzbsUEcrwASxV8ToQ /VHuw2KFijTeGg+xkeNa2etCfJDmhuAuiXWiXkjuJrMht5Q8WvrgBwqoLoOuvhEQ 4RpPFshk57opS6fZ3bSuYV8z8quODBCSBPN5KgdtMN7Gk9jpr8VY/yXPrGOcx+17 Whwwc3zoMplqajPaJ/QaxoHK4WyfeTYtGAoeVVrsXq2RM+SExwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyeyOfG5SetBZPi6YckCekLVOdmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMy M2RhYy1hMTVkLTRmODItYTcwYi0zMGUxYTRjYTEyNzkvMjkzODdkMTQtNTM2OS0z ODQxLThiNTUtNzQ3Y2VmOTk4NWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUzMjNkYWMtYTE1ZC00ZjgyLWE3 MGItMzBlMWE0Y2ExMjc5L2Q1MzIzZGFjLWExNWQtNGY4Mi1hNzBiLTMwZTFhNGNh MTI3OS5jcmwwHwYDVR0jBBgwFoAUyDY3c/UqyujL65IZblyvIFXxGr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMyM2RhYy1hMTVkLTRmODItYTcwYi0zMGUx YTRjYTEyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSxwaNVczF+kkkHwjpTNDn40dvFTcypldMJpGAXS90vzNTlrNvDD/qJ mIvyjXqiDxXM69QsjY0cTj08P9lOe0UQogRQMIimR60WhhrsgIfDsmevMHFBHwLh u92MKAaDuYfiflFSMeO7OAsDbIN0hVYW134X18msvzW9Ncqmnx+rt/aaeimBWXE/ ZcDmGF3CYT50omTvhw6VOMq7tdBOK3c2oobor1dWfFnUkPmW/1SgQvf7oz2fE6h3 A7HptxOarXcrnuJnBaNpa3gIf+5EqD1zM8LtnUnBMP9x4VT+FfxYJ1/VWMLE4X3J I7aumQvC1pigPDbOdImEOQJRUAjpOog= -----END CERTIFICATE-----Generated at Fri Jul 24 16:28:25 2026 by rpki-client