$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f9a3347-97d6-3587-af66-e8f3478398f2.roa File: 5f9a3347-97d6-3587-af66-e8f3478398f2.roa (raw, json) Hash identifier: xGjQV4+Wa/2GrHezLpmLv5HvrTSsRENuwQAswz9uujE= Subject key identifier: B5:1B:61:B3:23:85:3C:15:47:1E:3C:CA:5F:38:44:39:29:C8:47:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D9A201E5EB886A2E84475ED00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f9a3347-97d6-3587-af66-e8f3478398f2.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 16625 IP address blocks: 104.123.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:1e:5e:b8:86:a2:e8:44:75:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=76866dcd-d355-4dd8-9be5-4972e84af06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:0d:c7:c7:00:f7:ce:f0:86:94:9d:6c:d1: 03:4c:04:c7:70:43:1d:b7:80:f5:5d:b3:bd:3c:a8: fc:77:64:3b:fa:29:64:c2:af:6b:5b:db:c8:fc:32: a1:2c:4f:ac:e9:d2:76:c9:ec:78:91:c8:48:1a:f2: 60:90:c5:bb:40:e9:18:0a:75:c3:3f:a7:7e:13:2f: f0:98:fe:28:ad:19:93:af:41:9b:f5:e2:f4:54:f7: 63:06:c6:76:48:49:43:0e:9b:50:0b:04:c6:a3:f4: f1:ef:85:b4:e9:33:8c:bc:86:80:9c:6d:f6:1d:3f: 22:fc:d1:47:b7:79:60:f1:58:24:e7:02:15:ed:a7: c4:7d:95:7f:b4:da:e5:99:0a:94:af:31:50:16:4d: f8:c8:79:b7:5f:07:f5:15:5b:fb:da:dd:9d:ac:7a: 1c:ea:7a:89:82:17:51:96:92:8c:22:5c:50:06:15: 98:32:df:c3:20:b6:0e:c8:77:da:aa:f4:4f:26:31: 9e:36:23:45:ee:b4:f4:2f:98:ae:e8:a9:0f:27:7b: a5:d4:7a:70:24:39:3b:81:6f:25:8a:cc:68:db:ca: fa:3a:a5:d9:bc:8e:e0:a2:82:8c:e2:9d:da:0f:6d: 52:80:26:e0:d1:5d:a7:68:15:1f:02:da:f8:0b:41: ec:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1B:61:B3:23:85:3C:15:47:1E:3C:CA:5F:38:44:39:29:C8:47:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f9a3347-97d6-3587-af66-e8f3478398f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ef:8e:15:84:cb:13:0f:08:4b:01:25:08:23:ef:f0:cb:ac: 78:38:9f:d1:26:36:eb:9d:9b:50:6e:43:8a:5c:47:77:7d:97: 0d:74:a9:01:3d:92:cc:56:e4:1c:70:cc:48:79:a0:78:2d:0e: 14:1d:ee:3e:a8:0c:70:6e:45:4a:88:6c:4e:4d:7e:fc:b0:9d: 0f:55:07:e4:fd:91:41:6d:70:df:25:d6:54:c4:d6:81:ae:78: eb:6d:00:8e:3d:79:6a:62:72:f2:f5:1c:e9:61:77:c8:09:13: 0f:b7:fb:7a:d0:76:22:0a:6b:58:f0:db:21:4d:c9:ed:7e:cf: 0a:5c:a6:e8:92:67:81:1b:d1:4f:d6:c6:cc:18:d3:d7:19:27: b1:c8:cd:f3:a8:a4:09:b4:ae:8b:3a:3c:fd:84:7e:c9:a3:c4: 56:cf:d3:dd:97:c3:dd:9a:a9:6b:37:70:47:20:fe:fc:a1:3b: 42:ac:1e:24:56:94:73:5b:f9:d0:42:8c:dc:4e:9c:05:c5:07: dd:5e:a9:6a:a3:ba:37:16:ce:d5:c0:51:a7:e9:c8:d4:50:55: 1e:64:74:bb:2c:8b:30:e9:16:c6:f5:09:dd:1b:80:df:97:6c: b0:b5:a0:01:88:5a:26:76:55:34:13:bf:ba:37:e0:bb:08:0e: fc:ef:e5:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIB5euIai6ER17QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk NzY4NjZkY2QtZDM1NS00ZGQ4LTliZTUtNDk3MmU4NGFmMDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmsNx8cA987whpSdbNEDTATHcEMdt4D1XbO9 PKj8d2Q7+ilkwq9rW9vI/DKhLE+s6dJ2yex4kchIGvJgkMW7QOkYCnXDP6d+Ey/w mP4orRmTr0Gb9eL0VPdjBsZ2SElDDptQCwTGo/Tx74W06TOMvIaAnG32HT8i/NFH t3lg8Vgk5wIV7afEfZV/tNrlmQqUrzFQFk34yHm3Xwf1FVv72t2drHoc6nqJghdR lpKMIlxQBhWYMt/DILYOyHfaqvRPJjGeNiNF7rT0L5iu6KkPJ3ul1HpwJDk7gW8l isxo28r6OqXZvI7gooKM4p3aD21SgCbg0V2naBUfAtr4C0HsBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUbYbMjhTwVRx48yl84RDkpyEdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWY5YTMzNDctOTdkNi0z NTg3LWFmNjYtZThmMzQ3ODM5OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaHtYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvvjhWEyxMPCEsBJQgj7/DLrHg4n9EmNuudm1BuQ4pcR3d9lw10qQE9 ksxW5BxwzEh5oHgtDhQd7j6oDHBuRUqIbE5NfvywnQ9VB+T9kUFtcN8l1lTE1oGu eOttAI49eWpicvL1HOlhd8gJEw+3+3rQdiIKa1jw2yFNye1+zwpcpuiSZ4Eb0U/W xswY09cZJ7HIzfOopAm0ros6PP2EfsmjxFbP092Xw92aqWs3cEcg/vyhO0KsHiRW lHNb+dBCjNxOnAXFB91eqWqjujcWztXAUafpyNRQVR5kdLssizDpFsb1Cd0bgN+X bLC1oAGIWiZ2VTQTv7o34LsIDvzv5fI= -----END CERTIFICATE-----Generated at Wed May 13 08:36:23 2026 by rpki-client