$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39bddafe-f991-3933-8d92-6e9daff89da6.roa File: 39bddafe-f991-3933-8d92-6e9daff89da6.roa (raw, json) Hash identifier: +kWZTY7cx9KpfhMZBysR4nXJ5mM5BVgzzhvn4EsessY= Subject key identifier: D5:21:2A:F1:B2:98:66:04:ED:03:1B:9B:DE:29:22:9D:8F:4F:10:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D95F013BD4CDE809958C05900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39bddafe-f991-3933-8d92-6e9daff89da6.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 20940 IP address blocks: 104.98.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:13:bd:4c:de:80:99:58:c0:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=4da0cc34-7b5d-4179-b7e6-5b3583e98ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b8:a4:43:2e:fe:ce:be:ca:0c:a6:14:c7:bc: 74:21:2e:20:3c:95:cb:51:40:c0:da:4d:5b:60:fe: aa:22:4d:eb:ac:f0:fe:1b:98:2f:f1:e8:ea:4c:26: bd:47:eb:39:53:9f:ff:4c:0a:91:59:81:e1:1b:11: 7a:23:ee:19:4f:07:e8:c8:0e:3a:b4:7d:e3:5c:65: 6d:ed:92:b3:6a:31:f8:71:2c:b5:26:ee:0c:75:6e: d1:98:ac:01:f6:e5:10:19:4e:bf:e9:4e:f1:3b:82: f3:f9:c5:74:e2:ad:4b:c4:3b:f1:18:64:f9:f7:56: 6c:6a:83:ed:c6:9b:a4:09:40:0e:44:98:38:c4:93: 8c:a1:fe:91:9a:9d:82:3b:6a:2f:ec:ef:df:30:89: 35:2c:00:d2:1f:20:27:16:b8:4e:f1:29:1d:20:4c: af:f8:61:b1:2e:26:7d:fe:43:64:9b:e2:40:61:11: 9b:a7:82:0e:30:f0:c2:10:11:c2:51:16:2f:2a:0a: ca:78:37:2e:54:c6:ea:a9:09:24:ce:d6:5b:4c:9f: 96:a6:44:59:41:dd:71:f3:f8:2f:83:64:a5:b9:e0: c4:6a:b8:59:f6:06:31:4f:55:fe:fd:ac:d2:e2:ab: a6:25:e0:4b:5a:2e:97:a8:ac:f6:77:61:d1:ff:0f: ae:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:21:2A:F1:B2:98:66:04:ED:03:1B:9B:DE:29:22:9D:8F:4F:10:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39bddafe-f991-3933-8d92-6e9daff89da6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.98.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c1:b6:5e:03:f6:d3:29:e1:e3:eb:f3:49:93:5f:8f:70:e1: be:2b:a4:fc:5e:7a:d6:b5:82:2e:d1:0a:84:7d:16:04:e6:67: f3:50:19:b0:4a:c9:ca:cc:bf:79:37:71:2e:25:77:78:1b:cf: c4:43:b1:7a:33:03:c6:0a:99:7d:a7:74:60:ac:d8:77:49:f4: c4:23:63:39:98:48:a1:54:90:46:9a:56:f9:ea:6c:d4:ce:15: 76:cd:2e:7b:aa:aa:b1:5e:3c:78:9d:22:9a:6f:88:31:48:e4: 38:6d:07:df:31:f3:d8:c9:ca:66:78:b8:8a:d7:fb:fc:45:c5: 38:7a:10:3f:ef:32:9e:15:dc:a9:16:10:18:90:c8:b4:8d:28: d8:20:26:b7:53:56:cc:06:31:e8:82:3e:d5:d9:94:6d:cc:82: 0e:93:92:fd:1f:38:04:10:fa:96:f7:01:e1:f8:c2:bb:0b:04: d5:b1:74:d2:f5:56:e2:09:b6:b8:b7:0c:c4:ec:97:41:bc:f1: ec:e9:d4:92:26:c2:b3:0c:79:f5:11:20:90:fc:4a:46:ce:1c: dd:bf:0e:fa:4f:e6:dd:2d:2d:6d:dd:18:79:97:13:0c:55:ec: f1:f5:71:49:49:b1:59:03:a0:91:69:af:31:3c:6d:74:45:e9: 41:0d:3a:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8BO9TN6AmVjAWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NGRhMGNjMzQtN2I1ZC00MTc5LWI3ZTYtNWIzNTgzZTk4YWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7ikQy7+zr7KDKYUx7x0IS4gPJXLUUDA2k1b YP6qIk3rrPD+G5gv8ejqTCa9R+s5U5//TAqRWYHhGxF6I+4ZTwfoyA46tH3jXGVt 7ZKzajH4cSy1Ju4MdW7RmKwB9uUQGU6/6U7xO4Lz+cV04q1LxDvxGGT591ZsaoPt xpukCUAORJg4xJOMof6Rmp2CO2ov7O/fMIk1LADSHyAnFrhO8SkdIEyv+GGxLiZ9 /kNkm+JAYRGbp4IOMPDCEBHCURYvKgrKeDcuVMbqqQkkztZbTJ+WpkRZQd1x8/gv g2SlueDEarhZ9gYxT1X+/azS4qumJeBLWi6XqKz2d2HR/w+ufQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUhKvGymGYE7QMbm94pIp2PTxDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzliZGRhZmUtZjk5MS0z OTMzLThkOTItNmU5ZGFmZjg5ZGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGJyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrBtl4D9tMp4ePr80mTX49w4b4rpPxeeta1gi7RCoR9FgTmZ/NQGbBK ycrMv3k3cS4ld3gbz8RDsXozA8YKmX2ndGCs2HdJ9MQjYzmYSKFUkEaaVvnqbNTO FXbNLnuqqrFePHidIppviDFI5DhtB98x89jJymZ4uIrX+/xFxTh6ED/vMp4V3KkW EBiQyLSNKNggJrdTVswGMeiCPtXZlG3Mgg6Tkv0fOAQQ+pb3AeH4wrsLBNWxdNL1 VuIJtri3DMTsl0G88ezp1JImwrMMefURIJD8SkbOHN2/DvpP5t0tLW3dGHmXEwxV 7PH1cUlJsVkDoJFprzE8bXRF6UENOk4= -----END CERTIFICATE-----Generated at Wed May 13 12:52:45 2026 by rpki-client