$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa File: d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa (raw, json) Hash identifier: QNW63ElFCOjoYJNv6PwzjuTk14O16CCmsr4UpDvIEn8= Subject key identifier: 43:AD:C8:A7:6B:4C:DA:BA:BF:32:4D:89:4D:EA:4B:BB:3C:02:63:23 Certificate issuer: /CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580 Certificate serial: 010D0C9F4328584DAC4581270EF32C4D40BA3100 Authority key identifier: 93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 395950 IP address blocks: 104.232.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:81:27:0e:f3:2c:4d:40:ba:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=c71c4f9c-5143-46cf-8d1d-7b9a23eae976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fc:08:fe:8e:c3:4a:ed:54:a0:fc:10:d1:56: e8:bd:56:c2:80:f4:85:62:fd:83:a5:1e:85:76:5d: c4:fc:7f:47:dc:f4:13:6c:5f:c3:7a:30:16:08:dc: 48:3f:1e:c7:48:0b:e4:87:6b:5c:20:50:3f:53:3b: 67:39:d8:b4:af:83:1f:f1:ec:49:73:50:9f:6e:77: 27:05:8e:c4:15:4e:32:43:87:f3:bc:19:c6:03:a3: 31:17:30:e6:cc:05:7f:da:f2:27:f4:f4:de:f4:98: 9e:1f:15:36:b6:82:95:74:ca:ca:48:99:15:f2:31: 42:ab:4c:89:2f:70:cf:4b:1e:f6:da:18:3f:78:d8: a6:d0:53:a6:82:37:34:f9:19:2c:66:85:d8:75:88: 0d:f1:f1:a4:7e:6c:f3:64:02:df:a9:5f:be:c3:64: 92:1e:b2:d8:f4:a4:e0:c6:93:d6:79:da:b5:a4:2b: 68:89:c3:c6:33:cc:8a:0a:c9:88:e8:9a:fa:8d:05: 0f:12:99:39:0b:9d:c1:8c:eb:d7:55:7b:76:92:10: 9d:0a:b8:03:e4:9d:79:2e:97:da:c9:f3:83:8d:d5: ff:f6:b4:6e:a1:94:2b:f8:e7:fd:ee:78:0f:91:d2: 31:6b:34:02:25:09:b4:39:f0:a9:1c:e6:ea:4e:e9: fd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AD:C8:A7:6B:4C:DA:BA:BF:32:4D:89:4D:EA:4B:BB:3C:02:63:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl X509v3 Authority Key Identifier: keyid:93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer sbgp-ipAddrBlock: critical IPv4: 104.232.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:0f:2b:70:2e:dc:16:51:26:34:a4:27:58:44:f3:cf:66:f7: b7:dd:e9:9b:fb:51:49:b9:53:c6:9a:0e:97:ad:27:6c:3a:c5: 59:d5:d1:8b:71:1a:11:89:b0:08:9f:c1:b6:b7:30:fd:38:d1: 63:c1:28:ae:16:32:b3:96:16:57:f0:c0:91:2c:8e:87:2a:05: 91:b5:e1:4f:60:55:b3:11:68:cb:4c:90:50:25:c1:95:01:b8: 84:6f:3a:00:d2:00:d7:5e:d7:b7:be:c0:b4:1f:33:78:07:97: 2c:02:22:b4:0d:2b:ae:30:40:d2:a9:d8:4b:31:62:0f:44:6b: c4:08:cc:98:8c:92:39:8f:89:b4:e8:1f:6e:9b:c6:f4:32:89: 65:69:cc:9b:4f:34:bd:3a:29:6a:97:4c:46:4a:35:7e:71:42: 38:6b:18:5c:27:ac:b5:93:b0:99:3b:82:af:fe:7e:9b:ab:e8: 23:85:99:f9:2a:4e:33:7f:f8:8c:65:07:c4:11:4a:15:03:60: 70:9b:78:7e:c9:5c:e2:38:56:68:c3:bb:29:f2:83:74:69:d5: a0:28:50:8e:a5:42:94:5e:24:bf:67:82:92:93:2f:d8:00:f9: 37:34:eb:82:21:a7:af:34:21:ea:4b:e7:74:02:8e:90:8d:70: b4:39:d0:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRYEnDvMsTUC6MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2OWMyYTctZjdkNy00OGJiLWExNzctN2MwYjY3NjU0 NTgwMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk YzcxYzRmOWMtNTE0My00NmNmLThkMWQtN2I5YTIzZWFlOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/wI/o7DSu1UoPwQ0VbovVbCgPSFYv2DpR6F dl3E/H9H3PQTbF/DejAWCNxIPx7HSAvkh2tcIFA/UztnOdi0r4Mf8exJc1Cfbncn BY7EFU4yQ4fzvBnGA6MxFzDmzAV/2vIn9PTe9JieHxU2toKVdMrKSJkV8jFCq0yJ L3DPSx722hg/eNim0FOmgjc0+RksZoXYdYgN8fGkfmzzZALfqV++w2SSHrLY9KTg xpPWedq1pCtoicPGM8yKCsmI6Jr6jQUPEpk5C53BjOvXVXt2khCdCrgD5J15Lpfa yfODjdX/9rRuoZQr+Of97ngPkdIxazQCJQm0OfCpHObqTun9jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOtyKdrTNq6vzJNiU3qS7s8AmMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZDY5 YzJhNy1mN2Q3LTQ4YmItYTE3Ny03YzBiNjc2NTQ1ODAvZDEyNmMzM2UtOWExMC0z ZGQyLTg2N2UtZmQyYjE0ZGFiZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWQ2OWMyYTctZjdkNy00OGJiLWEx NzctN2MwYjY3NjU0NTgwLzVkNjljMmE3LWY3ZDctNDhiYi1hMTc3LTdjMGI2NzY1 NDU4MC5jcmwwHwYDVR0jBBgwFoAUk9EPQIKTK6+/siB9xjyzAANfANQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZDY5YzJhNy1mN2Q3LTQ4YmItYTE3Ny03YzBi Njc2NTQ1ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4PK3Au3BZRJjSkJ1hE889m97fd6Zv7UUm5U8aaDpetJ2w6xVnV0Ytx GhGJsAifwba3MP040WPBKK4WMrOWFlfwwJEsjocqBZG14U9gVbMRaMtMkFAlwZUB uIRvOgDSANde17e+wLQfM3gHlywCIrQNK64wQNKp2EsxYg9Ea8QIzJiMkjmPibTo H26bxvQyiWVpzJtPNL06KWqXTEZKNX5xQjhrGFwnrLWTsJk7gq/+fpur6COFmfkq TjN/+IxlB8QRShUDYHCbeH7JXOI4VmjDuynyg3Rp1aAoUI6lQpReJL9ngpKTL9gA +Tc064Ihp680IepL53QCjpCNcLQ50MY= -----END CERTIFICATE-----Generated at Wed May 13 15:20:13 2026 by rpki-client