$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/410b8e95-0002-3e61-ab49-0c5de00a0a0a.roa File: 410b8e95-0002-3e61-ab49-0c5de00a0a0a.roa (raw, json) Hash identifier: a1J519Iu+aIGv1u9wNGsWUM0o/zJevo2BATj/dhpCyc= Subject key identifier: F6:FE:EF:65:26:21:B8:53:01:7E:FE:8F:EF:0E:83:55:55:7E:96:13 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D9A201E2BBD532D70919E2980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/410b8e95-0002-3e61-ab49-0c5de00a0a0a.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 20940 IP address blocks: 104.123.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:1e:2b:bd:53:2d:70:91:9e:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=7c302e9c-d3f7-4fdb-8f6f-d8775470f4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:47:78:38:1a:b8:10:ca:24:5c:4f:1b:d5:f6: 70:b5:1a:1c:e8:bc:09:ca:c3:28:19:cb:b0:f9:c7: 7e:f9:65:c6:67:e6:b8:ad:95:8c:62:1c:4b:3d:d7: fd:4c:f5:88:ca:2d:37:91:0b:28:a4:05:d1:b3:c5: 7f:01:6d:c5:d7:1d:43:84:66:62:10:6e:ae:e1:b7: 83:5b:e4:01:7c:de:26:2c:a0:6c:eb:c5:f9:e0:84: c7:c2:72:51:73:a4:12:2f:5a:5f:c8:24:14:e3:db: ed:32:32:6f:90:00:b6:be:aa:0a:75:cc:d0:31:32: e9:3c:7a:30:7d:bd:f6:ab:99:8e:81:52:5c:87:58: ae:80:87:54:0a:28:2d:1f:8c:2b:68:ad:b4:70:e6: 27:64:d8:86:c3:7a:a5:ff:53:2c:f0:9c:dd:45:b0: 43:e7:05:f8:fb:66:12:f0:9b:52:fb:ea:05:50:6e: 32:f8:75:53:9d:2b:02:cb:fd:aa:8d:95:86:a1:60: e3:32:b9:f1:ee:65:53:14:ba:e4:d7:af:27:2f:b8: f2:eb:3b:c4:69:d8:df:fb:28:8d:15:f1:09:2c:78: 83:94:7f:16:3a:89:3e:d3:68:1b:50:bb:42:f0:36: 9d:37:65:10:ac:2d:40:13:2c:8c:51:46:b4:e7:9f: 38:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FE:EF:65:26:21:B8:53:01:7E:FE:8F:EF:0E:83:55:55:7E:96:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/410b8e95-0002-3e61-ab49-0c5de00a0a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:82:a6:a9:4d:6a:c9:7f:bd:13:29:9a:46:18:9c:6a:fe:6d: 98:5c:1e:51:b6:bc:23:f6:9e:6b:b0:12:28:c9:68:48:8e:7c: cf:a5:62:6c:54:4d:18:1b:4c:9e:33:dd:5d:45:48:1b:08:68: ac:c4:4e:79:93:96:19:4d:1e:ae:d9:2c:57:5d:a0:74:8c:e1: 4d:48:36:d8:90:ce:a3:6f:fe:c2:38:24:83:1c:93:ac:c2:ec: a5:d9:9a:93:ee:f3:f6:f6:26:25:89:b6:f4:8f:49:6b:44:16: dc:07:60:38:36:d6:20:9f:fb:df:ca:a2:a1:27:7b:7e:55:1b: 97:90:a2:fa:1d:5e:33:a2:ad:5e:cc:71:02:c6:24:a4:ae:46: b5:0f:94:70:6a:5c:72:57:e7:67:f8:dd:b4:fa:39:aa:1c:ee: 45:36:fd:4f:46:ff:84:f1:6c:35:64:dd:68:af:17:84:35:01: 83:b2:82:36:da:53:09:c7:e3:53:7c:1d:e7:76:1f:07:a4:31: d1:49:54:49:b4:94:e2:5d:e9:0c:2b:eb:e1:b4:9a:fb:1c:2e: 29:ff:53:bf:c5:6c:45:0e:aa:c1:ad:24:25:68:00:86:94:2b: 1e:b9:33:4c:42:7b:76:46:cc:b1:b3:23:03:d2:ac:9f:10:fa: 92:5e:b8:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIB4rvVMtcJGeKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk N2MzMDJlOWMtZDNmNy00ZmRiLThmNmYtZDg3NzU0NzBmNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUd4OBq4EMokXE8b1fZwtRoc6LwJysMoGcuw +cd++WXGZ+a4rZWMYhxLPdf9TPWIyi03kQsopAXRs8V/AW3F1x1DhGZiEG6u4beD W+QBfN4mLKBs68X54ITHwnJRc6QSL1pfyCQU49vtMjJvkAC2vqoKdczQMTLpPHow fb32q5mOgVJch1iugIdUCigtH4wraK20cOYnZNiGw3ql/1Ms8JzdRbBD5wX4+2YS 8JtS++oFUG4y+HVTnSsCy/2qjZWGoWDjMrnx7mVTFLrk168nL7jy6zvEadjf+yiN FfEJLHiDlH8WOok+02gbULtC8DadN2UQrC1AEyyMUUa05584YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPb+72UmIbhTAX7+j+8Og1VVfpYTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDEwYjhlOTUtMDAwMi0z ZTYxLWFiNDktMGM1ZGUwMGEwYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHtCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6CpqlNasl/vRMpmkYYnGr+bZhcHlG2vCP2nmuwEijJaEiOfM+lYmxU TRgbTJ4z3V1FSBsIaKzETnmTlhlNHq7ZLFddoHSM4U1INtiQzqNv/sI4JIMck6zC 7KXZmpPu8/b2JiWJtvSPSWtEFtwHYDg21iCf+9/KoqEne35VG5eQovodXjOirV7M cQLGJKSuRrUPlHBqXHJX52f43bT6Oaoc7kU2/U9G/4TxbDVk3WivF4Q1AYOygjba UwnH41N8Hed2HwekMdFJVEm0lOJd6Qwr6+G0mvscLin/U7/FbEUOqsGtJCVoAIaU Kx65M0xCe3ZGzLGzIwPSrJ8Q+pJeuOs= -----END CERTIFICATE-----Generated at Wed May 13 04:59:23 2026 by rpki-client