$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11a001cc-88de-32eb-a7ec-453613c9f731.roa File: 11a001cc-88de-32eb-a7ec-453613c9f731.roa (raw, json) Hash identifier: 2UbSg5X3cRbtAJCDiIZj1TJ+5i1rk4sP1zggVMzhxII= Subject key identifier: A1:F4:29:8E:E6:4D:C5:95:55:01:3F:12:AA:FB:2B:9C:9C:6B:1A:02 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D98BAAFE8F09C7726BE7ABB60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11a001cc-88de-32eb-a7ec-453613c9f731.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 16625 IP address blocks: 104.108.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:af:e8:f0:9c:77:26:be:7a:bb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=1a7752c6-f6b9-49c7-a706-42f7023e8746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:0a:18:3c:7c:a7:52:b9:c7:bf:66:1f:a9: 49:e6:bb:c2:4e:70:95:4e:67:3d:87:40:f5:19:65: 50:18:8f:78:cc:6e:2f:a8:76:d8:ee:48:6a:35:1a: d3:a6:10:96:3a:a3:cc:66:44:41:77:7f:a8:eb:34: f9:c2:2d:30:6c:13:c3:36:1e:6c:5f:0b:42:96:16: c3:03:95:bb:32:d8:af:f2:e7:94:f1:3a:dc:95:c3: 45:ee:3e:d9:5f:b6:c8:25:9d:53:c2:ea:a9:49:7c: c0:40:a7:1d:d7:35:10:f9:bc:cc:29:34:0a:a3:63: 34:73:44:69:a8:5a:97:b3:4e:04:47:81:6e:9b:93: 23:c5:76:b6:92:03:40:23:68:d9:af:7f:32:0d:f9: b5:3c:40:71:4c:71:e5:36:50:e2:33:b5:f1:bc:6d: 01:d6:7b:2a:1a:bf:f6:72:fd:5d:36:10:5d:b2:02: b9:ca:8b:8e:a4:aa:d4:ce:8c:84:ce:d7:1f:64:c5: bf:ab:ec:7a:37:0b:66:ad:08:62:dc:db:4c:14:e5: 70:ee:9c:a9:28:f8:cd:11:16:0c:53:23:84:e2:9b: 78:11:4a:b2:8b:3a:7c:6d:df:6f:2c:e4:09:d3:a8: cf:1d:0c:2b:b9:77:fc:93:13:46:ea:02:50:e7:f8: 49:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F4:29:8E:E6:4D:C5:95:55:01:3F:12:AA:FB:2B:9C:9C:6B:1A:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11a001cc-88de-32eb-a7ec-453613c9f731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.108.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b5:97:6e:04:90:a4:e2:d2:fc:09:09:01:3c:18:34:57:bd: 50:e6:9f:60:1c:c1:b4:46:e5:70:5e:8d:ac:6c:f3:d2:f7:37: cc:04:a5:e1:6d:bb:13:fe:9f:cb:a3:7c:92:53:24:a4:5f:8e: 98:c1:59:f5:aa:c4:67:53:67:57:60:54:5e:58:d8:91:04:ae: 2c:63:b8:42:3b:4e:59:03:6b:b4:c7:fc:4f:dc:8f:06:a5:ec: 4c:60:11:02:36:b8:39:cb:16:b7:90:c0:b0:18:e3:f2:a7:3f: 81:67:8c:e3:d3:a2:30:d4:d3:40:97:2f:d7:ba:ca:8c:27:ba: 69:0a:2f:a3:f0:2c:67:a4:f5:1b:bb:ed:73:5a:93:44:07:05: fb:26:04:1d:07:69:d4:e1:4d:72:1a:ba:ec:71:f1:4f:5e:8b: a9:d5:a6:e5:88:75:42:c3:7a:b1:b2:61:af:af:ba:1d:bf:2f: 68:f8:b4:84:18:89:b2:66:54:bf:b8:53:5a:5f:bf:29:03:d1: 3e:c0:03:5c:a2:68:c3:9b:f4:5c:a5:9f:de:43:6f:ad:b4:44: 8b:2d:d9:b6:b0:6c:13:0c:e1:2d:e0:ab:62:04:38:7f:ab:bd: 40:e0:8d:af:0f:46:68:e7:4b:69:ff:2e:58:3e:70:87:34:52: a9:c5:dd:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Yuq/o8Jx3Jr56u2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk MWE3NzUyYzYtZjZiOS00OWM3LWE3MDYtNDJmNzAyM2U4NzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCgKGDx8p1K5x79mH6lJ5rvCTnCVTmc9h0D1 GWVQGI94zG4vqHbY7khqNRrTphCWOqPMZkRBd3+o6zT5wi0wbBPDNh5sXwtClhbD A5W7Mtiv8ueU8TrclcNF7j7ZX7bIJZ1TwuqpSXzAQKcd1zUQ+bzMKTQKo2M0c0Rp qFqXs04ER4Fum5MjxXa2kgNAI2jZr38yDfm1PEBxTHHlNlDiM7XxvG0B1nsqGr/2 cv1dNhBdsgK5youOpKrUzoyEztcfZMW/q+x6NwtmrQhi3NtMFOVw7pypKPjNERYM UyOE4pt4EUqyizp8bd9vLOQJ06jPHQwruXf8kxNG6gJQ5/hJ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKH0KY7mTcWVVQE/Eqr7K5ycaxoCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTFhMDAxY2MtODhkZS0z MmViLWE3ZWMtNDUzNjEzYzlmNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIS1l24EkKTi0vwJCQE8GDRXvVDmn2AcwbRG5XBejaxs89L3N8wEpeFt uxP+n8ujfJJTJKRfjpjBWfWqxGdTZ1dgVF5Y2JEErixjuEI7TlkDa7TH/E/cjwal 7ExgEQI2uDnLFreQwLAY4/KnP4FnjOPTojDU00CXL9e6yownumkKL6PwLGek9Ru7 7XNak0QHBfsmBB0HadThTXIauuxx8U9ei6nVpuWIdULDerGyYa+vuh2/L2j4tIQY ibJmVL+4U1pfvykD0T7AA1yiaMOb9Fyln95Db620RIst2bawbBMM4S3gq2IEOH+r vUDgja8PRmjnS2n/Llg+cIc0UqnF3XQ= -----END CERTIFICATE-----Generated at Wed May 13 11:26:54 2026 by rpki-client