$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4bd70481-a99e-3e31-a2d0-135a2da0b7d3.roa File: 4bd70481-a99e-3e31-a2d0-135a2da0b7d3.roa (raw, json) Hash identifier: i80jkJf9TCsTt/V6GWC6/mievmtpoxwYbfPYhb335cQ= Subject key identifier: 7C:D3:00:DB:1C:33:A3:CE:C7:15:6B:C0:EF:C9:D0:BE:66:9E:48:5C Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584FD25BE413DB1918ADD066EFC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4bd70481-a99e-3e31-a2d0-135a2da0b7d3.roa Signing time: Fri 13 Nov 2026 02:00:14 +0000 ROA not before: Fri 13 Nov 2026 02:00:14 +0000 ROA not after: Thu 11 Feb 2027 02:00:14 +0000 asID: 54858 IP address blocks: 104.220.0.0/16 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d2:5b:e4:13:db:19:18:ad:d0:66:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Nov 13 02:00:14 2026 GMT Not After : Feb 11 02:00:14 2027 GMT Subject: CN=5b3ad5b8-b5e4-4f27-b7e4-dff00e19d8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:e7:29:fe:24:c1:68:c1:8c:34:95:ef:61: 55:bf:59:bd:0c:04:65:ce:9a:7a:a1:c9:69:b3:85: da:9a:b8:80:59:99:c8:23:2f:1c:4f:5d:5a:25:ba: dd:ec:d4:c3:8e:1c:03:37:71:57:6a:7c:c2:8f:2a: 19:76:a0:2c:06:f7:94:70:78:7e:80:45:53:ba:85: d9:f7:c3:53:75:3d:d3:2f:ea:64:5a:61:b6:73:ee: 14:7b:09:0a:be:f6:7d:4d:65:23:86:f3:2a:52:9e: 43:e8:e2:79:92:79:64:1c:10:44:7b:64:89:b7:cd: d9:2a:71:a5:fd:12:ae:ee:ba:a5:ca:5a:66:fa:04: 31:29:25:9c:b4:2c:ec:bf:36:7d:36:2f:1f:91:2f: 54:e9:67:15:99:87:fd:8c:75:ec:fd:3d:0d:d2:ea: 9e:26:c2:d0:f0:9c:07:cd:4b:41:78:84:9b:91:6b: 02:b4:12:f1:b8:ef:46:aa:35:ce:9c:f2:1d:ce:04: f4:a3:7f:dc:06:6d:81:f9:aa:c3:7a:f7:5d:45:d9: aa:85:82:80:55:f2:b7:00:61:24:76:f1:70:77:05: e0:8d:e6:f4:60:05:36:19:6a:b2:b4:3e:73:d8:34: 00:d7:d7:b2:ec:d1:36:43:8f:30:18:db:98:db:1d: c5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D3:00:DB:1C:33:A3:CE:C7:15:6B:C0:EF:C9:D0:BE:66:9E:48:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4bd70481-a99e-3e31-a2d0-135a2da0b7d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b6:37:b5:15:c4:f7:dc:54:3f:a1:e3:98:aa:53:91:f3:d8: 1d:83:f9:22:fa:a6:e7:41:12:f0:0a:a5:bc:07:7c:88:5c:b6: 6b:1c:70:0b:bd:5c:6f:d8:ac:a8:1d:83:75:db:82:c4:75:e7: 70:65:98:93:b2:83:49:22:da:c0:4c:79:01:80:14:49:ee:50: 34:e4:7f:d0:69:a1:14:4b:7e:a1:5b:49:3e:04:0d:67:cf:3b: e7:4e:88:cb:1f:f5:2c:f8:61:c2:7c:47:c8:a0:63:e9:18:58: 9b:7a:b1:e1:f6:23:26:2c:db:b0:19:1f:80:1a:0d:8e:8c:7a: 79:60:a1:36:87:30:a4:63:0c:90:e0:38:85:70:29:b3:15:cf: fa:ef:96:ee:6f:01:da:21:c5:27:0d:10:66:57:77:05:7f:1d: 0f:56:d1:14:06:7a:3d:bc:af:8e:39:54:d5:26:5a:7c:bb:47: cd:55:2e:33:3b:24:81:fe:74:8c:4e:0e:0e:b3:af:bb:89:e4: a9:3e:39:d0:9f:be:89:15:ac:da:70:45:66:52:5f:db:17:0b: 47:5a:da:5d:1a:c0:ac:36:15:fe:d4:88:d1:c6:55:18:b2:fb: e5:a5:93:25:87:9b:2e:23:8d:7e:b8:5f:51:95:e6:c1:83:a1: d0:3a:b9:7f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE/SW+QT2xkYrdBm78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MTExMzAyMDAxNFoXDTI3MDIxMTAyMDAxNFowLzEtMCsGA1UEAxMk NWIzYWQ1YjgtYjVlNC00ZjI3LWI3ZTQtZGZmMDBlMTlkOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8DnKf4kwWjBjDSV72FVv1m9DARlzpp6oclp s4XamriAWZnIIy8cT11aJbrd7NTDjhwDN3FXanzCjyoZdqAsBveUcHh+gEVTuoXZ 98NTdT3TL+pkWmG2c+4UewkKvvZ9TWUjhvMqUp5D6OJ5knlkHBBEe2SJt83ZKnGl /RKu7rqlylpm+gQxKSWctCzsvzZ9Ni8fkS9U6WcVmYf9jHXs/T0N0uqeJsLQ8JwH zUtBeISbkWsCtBLxuO9GqjXOnPIdzgT0o3/cBm2B+arDevddRdmqhYKAVfK3AGEk dvFwdwXgjeb0YAU2GWqytD5z2DQA19ey7NE2Q48wGNuY2x3FgwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHzTANscM6POxxVrwO/J0L5mnkhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNGJkNzA0ODEtYTk5ZS0z ZTMxLWEyZDAtMTM1YTJkYTBiN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAaNwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABrY3tRXE99xUP6HjmKpTkfPYHYP5Ivqm50ES8AqlvAd8iFy2axxwC71c b9isqB2DdduCxHXncGWYk7KDSSLawEx5AYAUSe5QNOR/0GmhFEt+oVtJPgQNZ887 506Iyx/1LPhhwnxHyKBj6RhYm3qx4fYjJizbsBkfgBoNjox6eWChNocwpGMMkOA4 hXApsxXP+u+W7m8B2iHFJw0QZld3BX8dD1bRFAZ6PbyvjjlU1SZafLtHzVUuMzsk gf50jE4ODrOvu4nkqT450J++iRWs2nBFZlJf2xcLR1raXRrArDYV/tSI0cZVGLL7 5aWTJYebLiONfrhfUZXmwYOh0Dq5fw== -----END CERTIFICATE-----Generated at Sun Nov 15 15:05:25 2026 by rpki-client