$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67b4856a-f739-32f4-856a-6c24584e5917.roa File: 67b4856a-f739-32f4-856a-6c24584e5917.roa (raw, json) Hash identifier: mr4XRmpgfh4SaP5bqTFbKvNw6P2njTdZq5/ywZ5N+sQ= Subject key identifier: 1C:82:45:22:93:49:1B:E5:CD:1B:B7:91:31:D1:B7:B4:6C:5D:32:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8AC550967A5D2724DE4F8D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67b4856a-f739-32f4-856a-6c24584e5917.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 16625 IP address blocks: 104.77.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:50:96:7a:5d:27:24:de:4f:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=278c715f-7b0e-4bbe-b1aa-72043580e1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:89:d2:68:e6:96:56:8f:b2:9e:37:79:e1:d0: f8:19:50:2e:26:90:b3:96:51:0c:23:a4:1e:5a:78: d3:29:23:d0:35:ce:e1:e5:6b:10:1a:78:c6:84:e5: 57:15:54:68:7a:22:01:a7:56:ac:da:b3:1a:56:41: 50:96:e5:dd:21:38:24:b5:91:95:eb:9e:4f:3b:4e: 89:84:15:c2:7a:ab:08:0e:f8:af:f7:1f:b1:39:68: 8f:75:0c:25:bd:5c:8a:b8:9a:af:c2:0b:38:57:92: 48:6f:e7:ba:f5:f3:fb:04:00:50:75:23:b7:8b:42: bf:b8:5a:20:a9:26:1c:34:30:09:41:83:ec:db:42: 59:69:31:d9:60:5e:49:c8:2d:7d:f8:dc:7e:89:a1: 2f:16:91:17:08:43:a8:d0:f8:4b:41:6e:a5:73:79: e6:52:52:2b:f0:46:c9:fa:76:c7:92:30:28:00:6f: d0:32:48:3e:dc:f8:74:97:7a:ed:72:7e:91:69:d3: 36:75:7e:d3:8b:63:52:45:a1:f3:bb:6b:28:1f:01: 29:f0:78:2c:78:78:8b:cc:1e:04:e6:59:80:52:6e: af:a1:6e:8b:f6:5b:0f:54:40:b1:5d:fd:05:0b:51: fc:81:a2:0c:3d:e5:36:f0:f6:e8:4b:dc:62:3f:31: 06:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:82:45:22:93:49:1B:E5:CD:1B:B7:91:31:D1:B7:B4:6C:5D:32:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67b4856a-f739-32f4-856a-6c24584e5917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.77.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f5:36:ed:7e:ea:22:24:6b:bc:6e:42:85:d2:92:97:c6:06: f8:e9:08:94:1a:ea:95:04:73:ba:a1:d5:da:61:81:f3:be:4a: e5:ee:86:d2:d7:67:08:27:84:a5:ad:95:a1:04:49:c4:10:13: ba:ea:86:98:34:0f:d5:e9:e3:12:da:d2:74:84:db:48:19:0f: 2c:65:e7:a0:20:74:47:43:17:28:c3:37:27:8a:42:00:05:69: 5e:65:af:91:70:92:d2:04:b1:1e:5c:d0:9e:16:f0:3e:de:d3: 7a:63:ef:4a:b9:e3:80:72:2e:b4:8e:3d:22:fb:12:04:b7:f7: d9:11:a4:82:ba:e3:55:b0:ef:11:96:84:db:fa:6e:22:5c:03: dc:01:25:63:c5:4a:a5:79:19:53:55:30:6e:ca:20:9d:9c:1b: 0b:5e:ba:ab:3c:30:7b:d3:a7:98:f2:5a:73:30:23:48:7d:a6: 49:be:4e:28:90:66:36:81:67:40:a9:f5:47:e5:c7:05:6a:c6: 3a:8e:33:29:4f:b0:76:d4:38:3c:2b:40:1a:f1:e1:a8:28:cd: 4e:db:33:17:81:f9:27:70:a5:d8:d4:f9:25:d3:f5:1e:f7:68: 6b:6d:3b:b7:84:02:b1:f4:a3:bb:d1:b7:1d:ea:49:94:3c:be: 67:6e:03:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxVCWel0nJN5PjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk Mjc4YzcxNWYtN2IwZS00YmJlLWIxYWEtNzIwNDM1ODBlMWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjInSaOaWVo+ynjd54dD4GVAuJpCzllEMI6Qe WnjTKSPQNc7h5WsQGnjGhOVXFVRoeiIBp1as2rMaVkFQluXdITgktZGV655PO06J hBXCeqsIDviv9x+xOWiPdQwlvVyKuJqvwgs4V5JIb+e69fP7BABQdSO3i0K/uFog qSYcNDAJQYPs20JZaTHZYF5JyC19+Nx+iaEvFpEXCEOo0PhLQW6lc3nmUlIr8EbJ +nbHkjAoAG/QMkg+3Ph0l3rtcn6RadM2dX7Ti2NSRaHzu2soHwEp8HgseHiLzB4E 5lmAUm6voW6L9lsPVECxXf0FC1H8gaIMPeU28PboS9xiPzEGbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByCRSKTSRvlzRu3kTHRt7RsXTKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjdiNDg1NmEtZjczOS0z MmY0LTg1NmEtNmMyNDU4NGU1OTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaE0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACf1Nu1+6iIka7xuQoXSkpfGBvjpCJQa6pUEc7qh1dphgfO+SuXuhtLX ZwgnhKWtlaEEScQQE7rqhpg0D9Xp4xLa0nSE20gZDyxl56AgdEdDFyjDNyeKQgAF aV5lr5FwktIEsR5c0J4W8D7e03pj70q544ByLrSOPSL7EgS399kRpIK641Ww7xGW hNv6biJcA9wBJWPFSqV5GVNVMG7KIJ2cGwteuqs8MHvTp5jyWnMwI0h9pkm+TiiQ ZjaBZ0Cp9UflxwVqxjqOMylPsHbUODwrQBrx4agozU7bMxeB+SdwpdjU+SXT9R73 aGttO7eEArH0o7vRtx3qSZQ8vmduAxA= -----END CERTIFICATE-----Generated at Wed May 13 14:32:41 2026 by rpki-client