$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b319208-3832-3c8d-9e56-78b0cd14f4be.roa File: 4b319208-3832-3c8d-9e56-78b0cd14f4be.roa (raw, json) Hash identifier: U1MyioTkr+DfJrupEMwz5bQAe0rYDi2A7xdRMxFnIwM= Subject key identifier: CE:02:AD:73:01:C3:67:1E:4D:21:2E:2B:1A:C7:9C:0C:29:4D:7C:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D9A2023BC6903093EFB81CF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b319208-3832-3c8d-9e56-78b0cd14f4be.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 16625 IP address blocks: 104.117.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:23:bc:69:03:09:3e:fb:81:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=4ddf07d3-91e3-4484-95d7-71d33ae3dce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:06:46:b7:72:a5:c4:c9:69:47:22:3a:8c:ab: 95:b1:32:19:79:a4:9a:c8:68:4e:f7:20:b3:af:35: 20:4a:4b:3e:e3:71:7b:c7:ea:f2:a5:17:94:9f:f2: bf:98:71:cb:b8:22:96:8b:4f:cd:bd:fb:9b:a6:80: e1:86:08:df:26:77:b2:a9:68:99:20:87:c3:2f:76: e1:a4:1d:41:2c:e8:61:31:2e:84:a7:42:ee:f4:4f: 07:b8:74:dd:3a:f9:0a:62:35:99:4d:8a:01:f6:a8: 8e:a4:ac:7c:4c:61:01:7d:46:cd:5c:ef:63:41:13: 91:a2:eb:4c:d0:f9:04:13:ea:b9:da:cc:e1:07:1e: 02:e0:1b:b5:a8:45:f3:ef:70:2e:f4:7b:22:ac:9e: 0e:f5:99:d2:17:cc:a8:a3:91:bf:0e:89:30:d0:e8: 39:eb:ab:35:25:62:75:3f:4c:4e:b0:13:14:40:27: b2:42:38:91:2e:93:bb:22:19:c1:b3:25:48:6d:c1: 41:eb:36:8c:e0:63:1d:ad:5e:1f:24:41:7a:dd:5c: 5d:a4:c1:94:33:13:ee:1d:c6:5a:49:82:29:4a:04: 40:ce:4f:b9:a2:2b:02:92:ed:75:07:83:a6:41:74: 1d:5a:fd:59:2b:b3:99:dc:5d:08:57:75:92:fb:11: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:02:AD:73:01:C3:67:1E:4D:21:2E:2B:1A:C7:9C:0C:29:4D:7C:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b319208-3832-3c8d-9e56-78b0cd14f4be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.117.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ef:30:b3:1b:97:c3:bf:4c:cc:d6:36:ee:db:50:75:b1:86: 09:98:2f:72:f1:63:52:6f:34:31:78:46:fa:be:c1:c3:dd:90: c7:04:6f:f7:30:39:1b:81:5e:9d:a3:14:a4:98:60:49:0c:11: a4:de:c3:9a:f2:8c:73:b0:c6:50:d6:ea:6c:c6:68:56:24:46: e9:53:77:be:07:ed:f1:f9:55:83:71:53:35:de:b1:b7:4e:c0: 01:d3:80:d6:dd:40:01:ac:c9:72:66:97:a9:ed:2e:2d:f0:2d: 8f:90:a7:7e:ce:85:26:df:e8:89:67:c9:10:7a:39:96:40:c7: 4f:e1:a5:52:f2:4f:4d:76:12:0c:2c:fa:8f:5b:04:12:d9:f8: d1:be:c8:ca:88:28:cc:97:ad:4d:68:ba:08:06:01:40:90:0e: f7:fa:16:94:50:da:66:a2:b7:26:39:c6:1f:5b:04:64:06:b0: e0:45:b4:f7:b8:bc:5a:b5:54:7a:3c:29:a6:e9:a5:a4:b1:11: 75:79:6d:97:47:b8:34:a2:5c:9e:3a:71:56:a8:f9:86:eb:c7: 5e:82:95:81:38:ca:f9:c0:b2:85:be:ca:bb:d5:08:21:15:a6: 8f:51:1d:4f:e4:47:d4:88:6a:95:4a:b1:a0:7b:69:48:cb:9e: 29:b5:0c:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aICO8aQMJPvuBzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk NGRkZjA3ZDMtOTFlMy00NDg0LTk1ZDctNzFkMzNhZTNkY2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwZGt3KlxMlpRyI6jKuVsTIZeaSayGhO9yCz rzUgSks+43F7x+rypReUn/K/mHHLuCKWi0/NvfubpoDhhgjfJneyqWiZIIfDL3bh pB1BLOhhMS6Ep0Lu9E8HuHTdOvkKYjWZTYoB9qiOpKx8TGEBfUbNXO9jQRORoutM 0PkEE+q52szhBx4C4Bu1qEXz73Au9HsirJ4O9ZnSF8yoo5G/Dokw0Og566s1JWJ1 P0xOsBMUQCeyQjiRLpO7IhnBsyVIbcFB6zaM4GMdrV4fJEF63VxdpMGUMxPuHcZa SYIpSgRAzk+5oisCku11B4OmQXQdWv1ZK7OZ3F0IV3WS+xG3BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4CrXMBw2ceTSEuKxrHnAwpTXxWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGIzMTkyMDgtMzgzMi0z YzhkLTllNTYtNzhiMGNkMTRmNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbvMLMbl8O/TMzWNu7bUHWxhgmYL3LxY1JvNDF4Rvq+wcPdkMcEb/cw ORuBXp2jFKSYYEkMEaTew5ryjHOwxlDW6mzGaFYkRulTd74H7fH5VYNxUzXesbdO wAHTgNbdQAGsyXJml6ntLi3wLY+Qp37OhSbf6IlnyRB6OZZAx0/hpVLyT012Egws +o9bBBLZ+NG+yMqIKMyXrU1ouggGAUCQDvf6FpRQ2maityY5xh9bBGQGsOBFtPe4 vFq1VHo8KabppaSxEXV5bZdHuDSiXJ46cVao+Ybrx16ClYE4yvnAsoW+yrvVCCEV po9RHU/kR9SIapVKsaB7aUjLnim1DIU= -----END CERTIFICATE-----Generated at Wed May 13 08:52:54 2026 by rpki-client