$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa File: b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa (raw, json) Hash identifier: GHgeFgFZBmxfpGtL+w2byjWuYGQVqX+Gl3LGhQtzYM4= Subject key identifier: 77:67:D1:67:F7:47:2F:E0:C6:2E:38:6B:C0:FD:03:E2:32:5C:41:3F Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC45838383C60D6C74649200 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 11404 IP address blocks: 104.220.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:83:83:83:c6:0d:6c:74:64:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=43bacc99-2cab-4b07-8966-71f374838a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:9b:42:c5:9c:4f:86:5f:38:4f:42:b5:52: 4f:ad:70:03:2a:74:e0:16:3e:7a:6d:dd:71:d7:6b: 80:46:ff:48:fd:0b:42:99:e8:79:04:c6:90:dc:94: e3:5b:e3:11:bf:ff:f1:20:61:8d:72:b8:28:07:83: 15:1b:02:cd:a2:93:84:84:6c:d6:2f:c1:5d:eb:6f: df:d4:44:fc:0d:f7:ad:50:8f:74:07:7a:4c:6b:4f: 3f:da:d3:62:7e:bb:92:ed:ca:e8:c7:0d:1b:9b:74: 0b:b8:43:1c:20:9e:f7:ec:7e:78:5b:8a:9d:79:c6: 16:f6:09:1a:0e:36:34:08:2b:50:30:86:3e:8a:ba: 7c:ad:fb:ba:b5:cd:cb:01:80:7a:7e:b1:03:d0:ec: da:11:4d:7c:a0:59:b5:45:43:a2:9c:09:66:52:85: 5e:85:a0:24:86:d0:b9:60:ec:a7:21:11:de:b7:1b: ae:a6:ef:7f:9f:f8:13:52:09:45:d1:25:18:c4:1b: 1d:7b:16:11:79:61:d2:fb:52:9b:dc:fb:ac:b3:3b: eb:ce:87:e5:0f:d4:33:8a:57:e6:08:31:e8:51:89: b2:d3:2a:68:4c:fb:e7:0d:ef:a1:4e:76:cf:ba:a3: dc:79:f2:3a:c5:f4:4c:47:e7:8c:ec:cf:28:f5:4b: 39:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:67:D1:67:F7:47:2F:E0:C6:2E:38:6B:C0:FD:03:E2:32:5C:41:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:bd:73:c9:8d:ab:56:fc:29:76:ca:94:98:c8:5e:30:97:e4: ff:df:c5:b2:9a:fc:61:4b:13:c0:a3:2b:b3:89:98:98:3c:21: c5:6d:5f:de:17:25:13:0c:8c:ed:00:07:45:52:00:11:43:2b: af:cb:c1:29:2d:48:5d:89:6d:4e:e9:2a:b8:ff:a3:15:fc:73: c5:72:8d:99:6e:49:aa:fa:00:6c:31:1d:c7:f8:cd:6e:35:ef: 05:ee:7f:b6:03:ae:8f:4f:99:4c:4d:e7:55:6d:03:56:6e:4c: 7d:83:c4:af:04:05:f3:66:50:ee:e4:97:11:d1:c3:99:32:a8: 85:4d:3a:9d:49:f9:15:cd:26:fa:4f:75:ad:ba:c8:a6:da:40: 79:6c:e6:aa:b4:48:90:99:fc:22:08:95:2f:84:4f:3a:86:fd: dc:bf:22:6b:11:35:15:5b:34:26:2c:40:d4:ec:85:41:36:a1: f5:5d:2f:78:25:a0:cf:7c:30:fc:80:08:1b:65:c6:22:70:81: 0d:27:51:df:32:74:97:98:e6:cf:3c:7f:2f:e1:cf:0f:84:5b: fa:3d:02:57:fe:fc:3e:4e:59:80:78:04:05:42:10:d0:25:75: e9:af:f6:31:45:75:a3:12:d1:df:9b:36:b0:22:50:d6:1f:b9: 6f:f2:14:f3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2sRYODg8YNbHRkkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk NDNiYWNjOTktMmNhYi00YjA3LTg5NjYtNzFmMzc0ODM4YTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok+bQsWcT4ZfOE9CtVJPrXADKnTgFj56bd1x 12uARv9I/QtCmeh5BMaQ3JTjW+MRv//xIGGNcrgoB4MVGwLNopOEhGzWL8Fd62/f 1ET8DfetUI90B3pMa08/2tNifruS7croxw0bm3QLuEMcIJ737H54W4qdecYW9gka DjY0CCtQMIY+irp8rfu6tc3LAYB6frED0OzaEU18oFm1RUOinAlmUoVehaAkhtC5 YOynIRHetxuupu9/n/gTUglF0SUYxBsdexYReWHS+1Kb3PusszvrzoflD9Qzilfm CDHoUYmy0ypoTPvnDe+hTnbPuqPcefI6xfRMR+eM7M8o9Us5kQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHdn0Wf3Ry/gxi44a8D9A+IyXEE/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYjA5YjhjY2ItZWI2Ny0z YTMwLTlkNTEtMjRkZmMwMzE4ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAaNwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXL1zyY2rVvwpdsqUmMheMJfk/9/Fspr8YUsTwKMrs4mYmDwhxW1f3hcl EwyM7QAHRVIAEUMrr8vBKS1IXYltTukquP+jFfxzxXKNmW5JqvoAbDEdx/jNbjXv Be5/tgOuj0+ZTE3nVW0DVm5MfYPErwQF82ZQ7uSXEdHDmTKohU06nUn5Fc0m+k91 rbrIptpAeWzmqrRIkJn8IgiVL4RPOob93L8iaxE1FVs0JixA1OyFQTah9V0veCWg z3ww/IAIG2XGInCBDSdR3zJ0l5jmzzx/L+HPD4Rb+j0CV/78Pk5ZgHgEBUIQ0CV1 6a/2MUV1oxLR35s2sCJQ1h+5b/IU8w== -----END CERTIFICATE-----Generated at Wed May 13 05:14:04 2026 by rpki-client