$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80468f6f-336f-3f66-9f3b-2813627c5ea0.roa File: 80468f6f-336f-3f66-9f3b-2813627c5ea0.roa (raw, json) Hash identifier: QBosaK89jx01t8093c7WR1gZ4D1rpWYiIpNYagrq1tA= Subject key identifier: 3F:73:66:85:EC:0B:58:85:C1:76:67:B9:D2:40:31:A4:A7:44:81:B4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8AC55128D98CD56158D4C180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80468f6f-336f-3f66-9f3b-2813627c5ea0.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 16625 IP address blocks: 104.89.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:51:28:d9:8c:d5:61:58:d4:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=e43897cd-25d1-4e3e-ad62-82ee60bf8a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:bb:9a:0f:0e:15:f6:5b:72:48:61:dc:df: 70:cf:36:bd:f2:73:47:22:8d:7d:cf:85:c5:ad:0f: a6:9e:a1:60:83:42:63:45:14:7d:cc:c9:cb:af:1d: 1c:09:90:4b:3f:69:a3:eb:58:e6:2e:fe:fc:cb:e3: 81:43:73:69:be:ae:91:6f:c4:31:66:88:67:24:71: 6d:57:8c:85:e3:ba:af:63:1a:bb:35:d6:ff:46:f2: 20:3a:7f:80:cd:bb:a4:fe:61:85:84:11:e5:86:52: 73:03:af:97:24:9f:99:6a:cd:00:cb:2a:00:0b:f1: 7c:9f:a0:5a:c6:9a:75:33:8e:6c:52:f5:3f:e4:53: 35:0b:e9:f6:22:22:00:9f:88:49:3d:be:8d:8f:ad: 82:39:6a:4f:d1:15:85:60:86:ab:92:66:8a:14:8c: e5:38:b2:fc:6d:f2:25:ce:a7:15:6c:f6:9e:b2:b8: 91:64:31:48:ae:2f:e8:86:49:14:b5:34:f1:43:cb: 3f:0e:31:f4:a8:51:a4:f7:86:e3:c6:4c:ee:eb:01: 13:0a:87:09:95:d0:cd:0e:95:6e:63:af:89:24:9c: 35:c6:e5:20:81:ae:98:41:ae:5a:5f:35:1b:e4:e1: f0:e8:4f:31:34:40:ba:30:ea:04:0b:18:86:cb:a9: ba:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:73:66:85:EC:0B:58:85:C1:76:67:B9:D2:40:31:A4:A7:44:81:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80468f6f-336f-3f66-9f3b-2813627c5ea0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.89.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:02:ee:ba:57:81:81:18:37:ed:21:e5:12:8a:8a:60:00:82: 53:dd:77:14:bf:49:ea:ed:e8:fb:20:71:5f:f7:58:16:0e:97: 9e:73:ca:9f:bc:57:b3:11:0f:6a:14:fc:63:b1:6a:af:9f:91: 28:49:ba:97:a4:d6:d3:b6:95:ad:82:fc:80:5b:a4:ed:6e:9d: ad:c8:30:bc:15:51:d6:e6:eb:e2:f8:aa:80:fc:a2:6b:33:47: dd:c4:67:46:61:18:f7:93:4e:f1:38:e3:b8:37:c4:b2:31:7c: f0:62:18:04:ff:73:07:d5:58:81:09:f2:cb:58:e0:fa:6b:64: 3a:92:90:59:3d:a7:98:c5:cc:0b:03:6d:aa:2b:80:b3:eb:37: 51:e7:14:15:48:7e:64:e0:d2:2e:0d:6f:71:b9:4e:cc:7d:bb: d1:ef:19:9c:e7:af:5d:38:28:29:a8:fd:9a:62:c5:4d:a4:07: 85:9c:3b:29:a5:3e:b1:9a:c3:8d:3f:22:2d:c7:32:8c:49:cc: d4:6f:09:2f:38:84:34:42:8d:db:32:96:e3:2a:66:b4:81:46: f2:e3:6b:7e:40:a7:44:e1:46:a2:d4:2d:45:93:2f:28:44:2f: 18:d6:7d:34:9d:47:3f:9a:ea:d9:dd:9c:dd:08:06:84:29:b2: 85:fb:92:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxVEo2YzVYVjUwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZTQzODk3Y2QtMjVkMS00ZTNlLWFkNjItODJlZTYwYmY4YTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW+7mg8OFfZbckhh3N9wzza98nNHIo19z4XF rQ+mnqFgg0JjRRR9zMnLrx0cCZBLP2mj61jmLv78y+OBQ3Npvq6Rb8QxZohnJHFt V4yF47qvYxq7Ndb/RvIgOn+Azbuk/mGFhBHlhlJzA6+XJJ+Zas0AyyoAC/F8n6Ba xpp1M45sUvU/5FM1C+n2IiIAn4hJPb6Nj62COWpP0RWFYIarkmaKFIzlOLL8bfIl zqcVbPaesriRZDFIri/ohkkUtTTxQ8s/DjH0qFGk94bjxkzu6wETCocJldDNDpVu Y6+JJJw1xuUgga6YQa5aXzUb5OHw6E8xNEC6MOoECxiGy6m6yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9zZoXsC1iFwXZnudJAMaSnRIG0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODA0NjhmNmYtMzM2Zi0z ZjY2LTlmM2ItMjgxMzYyN2M1ZWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFlkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUC7rpXgYEYN+0h5RKKimAAglPddxS/Sert6PsgcV/3WBYOl55zyp+8 V7MRD2oU/GOxaq+fkShJupek1tO2la2C/IBbpO1una3IMLwVUdbm6+L4qoD8omsz R93EZ0ZhGPeTTvE447g3xLIxfPBiGAT/cwfVWIEJ8stY4PprZDqSkFk9p5jFzAsD baorgLPrN1HnFBVIfmTg0i4Nb3G5Tsx9u9HvGZznr104KCmo/ZpixU2kB4WcOyml PrGaw40/Ii3HMoxJzNRvCS84hDRCjdsyluMqZrSBRvLja35Ap0ThRqLULUWTLyhE LxjWfTSdRz+a6tndnN0IBoQpsoX7kjY= -----END CERTIFICATE-----Generated at Wed May 13 10:37:42 2026 by rpki-client