$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2be0b0-9006-3bf9-91b2-f7e53afa8a71.roa File: 8c2be0b0-9006-3bf9-91b2-f7e53afa8a71.roa (raw, json) Hash identifier: rR34BYy3fdXns/5+ZHNJ11Fdb7+0mLceqzHJfy4PedM= Subject key identifier: 35:54:81:7B:3E:46:5F:EE:F3:01:BD:B8:B5:DC:8A:69:AE:20:B4:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8AC54B4AA5D4624C2B716620 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2be0b0-9006-3bf9-91b2-f7e53afa8a71.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 16625 IP address blocks: 104.120.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:4b:4a:a5:d4:62:4c:2b:71:66:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=1eb3f56e-d226-4bd8-90fd-649378ddd3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:75:a1:de:a8:fc:e2:9d:5e:25:be:95:b7:a3: 21:85:67:01:be:56:f2:54:26:87:ca:2f:6a:70:d4: d3:9e:e7:19:fd:bf:76:1d:fe:c7:7c:47:c8:bd:ac: ba:1c:e2:e0:bc:29:69:01:c6:0b:cd:70:9a:95:b7: 2a:27:bc:0d:bf:d4:ea:c1:15:bd:32:8c:9c:9e:7f: c3:ac:49:62:93:4b:25:73:f4:ae:0a:9a:ad:29:d9: 4f:e7:00:27:be:e2:d9:99:4c:d4:f1:f5:32:4d:27: 4f:30:d7:85:ed:2a:da:7d:13:76:b5:87:16:5a:1d: 63:b4:dc:26:e0:aa:24:00:09:77:48:90:8d:4a:14: 0c:ed:73:ee:36:e4:a7:94:7a:cf:fa:26:07:b0:07: 65:06:f0:94:43:0f:9d:8d:38:b5:18:cb:37:6d:2d: b9:98:9c:8f:02:a7:e2:c6:ae:d0:f9:4f:d6:92:e9: 15:5e:0a:1f:0e:43:d8:7c:5e:4b:25:c0:8f:d7:9d: 4d:94:6f:18:fa:98:c8:e0:c2:f8:7b:73:40:a8:0a: c1:1b:b6:a3:0a:bc:95:75:53:95:72:7b:85:2b:a4: 48:00:89:c0:2c:75:58:6b:cb:b5:e7:58:c9:7e:29: c9:41:b1:ff:dd:0a:95:0e:a4:03:60:10:f6:20:fb: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:54:81:7B:3E:46:5F:EE:F3:01:BD:B8:B5:DC:8A:69:AE:20:B4:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2be0b0-9006-3bf9-91b2-f7e53afa8a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.120.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:71:3f:17:c4:ca:13:57:69:66:49:05:2a:1e:1b:82:4e:a9: 78:7e:12:75:c5:e2:45:8b:28:6b:49:0c:a7:6b:e9:98:7a:b9: 6e:59:24:52:bb:be:fc:04:f0:73:9b:92:df:65:b6:68:19:d9: 79:32:1f:2a:ee:50:d6:75:a3:74:fd:6e:fd:18:36:d4:4f:58: 93:ee:8a:9c:42:ab:fd:d8:11:8e:5e:08:ce:d9:8c:79:c9:3d: d1:13:b4:cf:1f:2d:bb:63:83:2b:4c:65:31:09:78:78:a7:7b: 36:3a:18:2c:28:59:c5:88:f7:19:6a:b0:dc:9d:0d:e5:c7:ca: b8:8b:b5:05:bc:44:43:9e:4f:4c:6c:a8:be:3d:83:fb:f9:f9: cc:b9:aa:79:f8:7d:e0:1e:d6:f6:25:92:78:f9:0b:8e:df:e0: 89:51:f0:f9:5a:fd:0e:d3:9b:22:fa:6e:14:aa:51:41:bb:b7: 86:08:10:14:7b:ee:ce:af:fc:ce:cd:f7:61:9b:6b:44:72:f0: ae:04:c7:29:1c:27:ef:b2:0f:f0:90:81:99:b7:ea:e1:ca:25: d7:c4:4b:98:f8:95:cf:f6:78:2d:25:d4:f4:a2:fa:3f:03:47: 4b:9a:03:9a:af:f8:11:8f:0d:ce:fc:ad:e0:3f:3f:13:50:3e: b3:55:9a:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUtKpdRiTCtxZiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk MWViM2Y1NmUtZDIyNi00YmQ4LTkwZmQtNjQ5Mzc4ZGRkM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinWh3qj84p1eJb6Vt6MhhWcBvlbyVCaHyi9q cNTTnucZ/b92Hf7HfEfIvay6HOLgvClpAcYLzXCalbcqJ7wNv9TqwRW9Moycnn/D rElik0slc/SuCpqtKdlP5wAnvuLZmUzU8fUyTSdPMNeF7SrafRN2tYcWWh1jtNwm 4KokAAl3SJCNShQM7XPuNuSnlHrP+iYHsAdlBvCUQw+djTi1GMs3bS25mJyPAqfi xq7Q+U/WkukVXgofDkPYfF5LJcCP151NlG8Y+pjI4ML4e3NAqArBG7ajCryVdVOV cnuFK6RIAInALHVYa8u151jJfinJQbH/3QqVDqQDYBD2IPuIpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVUgXs+Rl/u8wG9uLXcimmuILR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGMyYmUwYjAtOTAwNi0z YmY5LTkxYjItZjdlNTNhZmE4YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpxPxfEyhNXaWZJBSoeG4JOqXh+EnXF4kWLKGtJDKdr6Zh6uW5ZJFK7 vvwE8HObkt9ltmgZ2XkyHyruUNZ1o3T9bv0YNtRPWJPuipxCq/3YEY5eCM7ZjHnJ PdETtM8fLbtjgytMZTEJeHinezY6GCwoWcWI9xlqsNydDeXHyriLtQW8REOeT0xs qL49g/v5+cy5qnn4feAe1vYlknj5C47f4IlR8Pla/Q7TmyL6bhSqUUG7t4YIEBR7 7s6v/M7N92Gba0Ry8K4ExykcJ++yD/CQgZm36uHKJdfES5j4lc/2eC0l1PSi+j8D R0uaA5qv+BGPDc78reA/PxNQPrNVmtQ= -----END CERTIFICATE-----Generated at Wed May 13 10:40:57 2026 by rpki-client