$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cb2bc80-efb0-35c8-85f5-7e09699fd1f6.roa File: 6cb2bc80-efb0-35c8-85f5-7e09699fd1f6.roa (raw, json) Hash identifier: kgAJdzKtYn/BnhvRiJj0SsFabWnrX+Ihrb5GE3c80rQ= Subject key identifier: 39:C5:83:ED:C6:6D:5F:51:58:6C:7C:B8:CB:E9:6F:4B:4E:5C:B3:16 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D95F01B1A2F346A89BE4D2E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cb2bc80-efb0-35c8-85f5-7e09699fd1f6.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 16625 IP address blocks: 104.98.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:1b:1a:2f:34:6a:89:be:4d:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=ac806361-9811-417a-b23e-6159a36f1b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7b:e1:7f:85:9c:c9:16:0a:40:f5:6a:65:0c: bd:39:58:ba:3f:85:4b:2e:66:37:9f:3d:e0:3e:7f: 88:8e:0f:49:81:60:c2:53:46:6a:13:8d:b7:68:1e: 72:54:80:7b:a5:b6:cf:69:1b:bc:7e:2a:fd:70:fe: 0c:3c:3a:8d:d0:8a:6b:0f:18:ba:19:04:26:38:81: 13:7d:8a:56:65:65:32:1d:c3:23:c8:5e:30:bf:9e: ed:e3:d2:52:0f:4d:77:74:5d:1e:21:24:94:f8:ca: 09:42:ba:0b:1d:66:30:a2:73:bd:22:e6:10:f1:c2: 2f:9e:65:9a:95:3d:fb:be:3b:f6:ab:c5:be:25:d9: 01:ff:46:40:e1:e3:91:f4:65:45:9b:62:ee:74:43: 28:9e:61:96:6d:86:a7:88:eb:7c:fc:f4:04:53:21: 15:8c:e0:74:26:ae:fe:a7:4d:1c:22:53:36:9b:63: bf:8b:49:43:21:b9:cb:5f:05:51:ea:eb:51:21:46: 22:ea:86:16:ca:dc:a2:cb:b5:61:c6:e1:a5:b8:7c: 2c:71:c6:5b:e5:03:e8:79:93:5b:41:11:9e:27:b9: d9:17:b6:27:72:6f:5b:32:c8:44:a1:36:42:84:ca: d6:7f:84:9a:80:66:ff:84:d9:1b:71:5e:a6:44:62: 2f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C5:83:ED:C6:6D:5F:51:58:6C:7C:B8:CB:E9:6F:4B:4E:5C:B3:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cb2bc80-efb0-35c8-85f5-7e09699fd1f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.98.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0f:c3:f6:79:a2:6f:96:7d:ff:be:f8:6f:10:0d:47:41:58: 92:73:48:bc:52:e6:a2:f9:e1:f4:58:1b:7d:52:20:64:cb:33: 72:4c:ee:96:27:25:9b:48:50:2a:f3:e8:26:81:3b:d3:98:43: 00:d4:ae:a1:4c:4c:06:ac:a8:f6:09:0e:13:a7:5d:80:1d:5a: b5:8f:44:60:f4:98:b7:ef:95:13:b1:e5:97:a9:93:2a:5a:e0: 53:25:8e:f3:b9:7b:4b:60:11:48:35:53:35:35:9a:a1:96:8a: 2e:c1:2c:90:bd:3d:09:19:59:b4:2a:75:c4:5d:bc:d9:62:9b: c8:61:3b:8f:96:89:18:99:07:c5:79:a4:ec:85:2c:f7:9d:55: 9f:a5:5f:52:12:a1:d5:19:62:35:fc:bf:b3:60:31:5e:71:e2: 43:9b:d2:d2:69:f8:86:d9:ae:0b:8e:58:ab:b7:79:4f:61:1c: b8:b2:26:d3:3e:b9:a2:5e:be:9d:34:06:16:8c:a0:98:77:eb: 58:34:2b:89:4a:e4:65:7b:89:63:87:81:4b:4c:f5:d2:9a:53: d9:b2:34:bf:f2:82:19:9b:d8:75:3f:3c:cb:b7:93:84:00:3f: 43:6d:e2:4e:04:31:9d:33:aa:f7:ce:0b:ba:17:50:87:f1:11: fd:e3:68:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8BsaLzRqib5NLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk YWM4MDYzNjEtOTgxMS00MTdhLWIyM2UtNjE1OWEzNmYxYjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHvhf4WcyRYKQPVqZQy9OVi6P4VLLmY3nz3g Pn+Ijg9JgWDCU0ZqE423aB5yVIB7pbbPaRu8fir9cP4MPDqN0IprDxi6GQQmOIET fYpWZWUyHcMjyF4wv57t49JSD013dF0eISSU+MoJQroLHWYwonO9IuYQ8cIvnmWa lT37vjv2q8W+JdkB/0ZA4eOR9GVFm2LudEMonmGWbYaniOt8/PQEUyEVjOB0Jq7+ p00cIlM2m2O/i0lDIbnLXwVR6utRIUYi6oYWytyiy7VhxuGluHwsccZb5QPoeZNb QRGeJ7nZF7Yncm9bMshEoTZChMrWf4SagGb/hNkbcV6mRGIvbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnFg+3GbV9RWGx8uMvpb0tOXLMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmNiMmJjODAtZWZiMC0z NWM4LTg1ZjUtN2UwOTY5OWZkMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoPw/Z5om+Wff+++G8QDUdBWJJzSLxS5qL54fRYG31SIGTLM3JM7pYn JZtIUCrz6CaBO9OYQwDUrqFMTAasqPYJDhOnXYAdWrWPRGD0mLfvlROx5Zepkypa 4FMljvO5e0tgEUg1UzU1mqGWii7BLJC9PQkZWbQqdcRdvNlim8hhO4+WiRiZB8V5 pOyFLPedVZ+lX1ISodUZYjX8v7NgMV5x4kOb0tJp+IbZrguOWKu3eU9hHLiyJtM+ uaJevp00BhaMoJh361g0K4lK5GV7iWOHgUtM9dKaU9myNL/yghmb2HU/PMu3k4QA P0Nt4k4EMZ0zqvfOC7oXUIfxEf3jaN8= -----END CERTIFICATE-----Generated at Wed May 13 04:39:15 2026 by rpki-client