$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e807cc0-8c79-3459-9cc2-cdbfa70a78da.roa File: 8e807cc0-8c79-3459-9cc2-cdbfa70a78da.roa (raw, json) Hash identifier: BvTl+nXVdycd1B55tKgCG85ZD6RjIIlQrhaHXaHntVY= Subject key identifier: 02:FF:73:5B:DA:9E:B2:1B:DD:62:0D:DC:9E:3B:84:01:72:B2:E1:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D9325611FDED8EFA4D03C50A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e807cc0-8c79-3459-9cc2-cdbfa70a78da.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 16625 IP address blocks: 104.78.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:61:1f:de:d8:ef:a4:d0:3c:50:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=65ad596d-c3a0-47a9-816c-fb13792c80aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:68:b3:6d:a6:6e:18:c7:5a:b0:61:17:e1: d4:23:34:e9:fe:ed:6e:a5:4b:16:25:c9:7e:a9:03: d4:d5:61:f8:c5:b3:99:fb:8e:53:31:8b:98:7d:ce: af:20:04:75:a3:c7:d2:93:cc:f0:8d:e1:39:63:26: c7:df:eb:8b:e9:8b:42:23:89:7a:4b:91:08:81:19: 0d:26:77:c1:a4:4e:37:c2:d7:c2:b3:29:9f:86:b0: f1:22:f5:74:94:26:d7:42:ab:89:01:f2:74:c1:78: 90:a2:f1:6d:bb:d2:cf:b9:ab:ae:67:c7:8d:4c:bd: 52:3f:73:75:c0:0d:80:0e:7c:df:6a:96:44:06:96: 31:92:38:1f:8d:e3:2e:4b:0e:cb:7d:f3:d4:c6:74: 2c:92:4b:a7:49:83:60:2f:ba:ee:47:1c:64:ba:f8: ea:4f:ef:1a:7a:8a:7e:7f:0c:4c:c8:0a:b4:a1:54: 38:9f:d1:d7:51:2e:c0:f8:3a:56:83:40:d8:e3:73: 7f:55:78:dd:b5:1a:85:ab:fc:1a:10:5f:1b:83:83: 41:28:2e:b5:3a:af:e8:23:40:ac:51:a3:2d:aa:80: e8:23:7a:62:db:26:7b:dc:e8:8e:37:8a:52:90:7d: 23:1a:8c:96:44:b4:47:84:bd:8a:79:31:88:64:7a: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FF:73:5B:DA:9E:B2:1B:DD:62:0D:DC:9E:3B:84:01:72:B2:E1:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e807cc0-8c79-3459-9cc2-cdbfa70a78da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.78.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e7:3b:d9:5a:1b:51:40:37:ed:5f:76:56:bf:26:7d:c2:d2: e3:f6:56:25:97:a6:f6:60:23:6c:ac:1e:d1:ec:58:f4:79:3b: 95:e6:16:01:55:9c:99:ed:23:6c:6e:84:92:09:d8:21:40:d1: 4a:d0:d4:b5:ca:dd:48:dc:53:60:46:23:c1:ba:d1:2b:9b:72: 8b:1a:70:fd:6f:a4:de:52:a2:b9:3d:f2:b3:55:bd:95:12:b6: ec:fc:9b:9b:f8:9c:b0:ee:08:a0:6e:1d:7b:c8:be:9a:e9:89: a9:cd:29:64:80:1a:57:49:94:b2:36:d9:08:bd:e7:ac:fe:23: 97:4c:06:8b:3f:9b:a3:c8:42:00:90:54:c6:bf:c2:2c:17:89: 55:22:75:ab:d8:61:3d:c3:de:52:17:df:cb:f0:f2:6e:9d:fb: 68:9f:51:6a:1f:b2:57:ce:b2:2a:27:88:30:d9:92:c3:39:a2: d0:a6:ab:85:22:0e:22:45:da:79:e0:4a:0c:0c:36:52:e5:b8: 13:59:fc:17:15:e8:46:fd:5f:af:41:1f:d0:c4:42:95:1c:9e: 7a:4e:4b:03:86:b1:68:dd:1b:d9:11:ad:f0:9f:67:81:f4:bf: d9:23:e9:aa:e2:23:21:29:66:37:ee:95:10:35:8d:8d:09:73: 4b:51:bf:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJWEf3tjvpNA8UKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NjVhZDU5NmQtYzNhMC00N2E5LTgxNmMtZmIxMzc5MmM4MGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXNos22mbhjHWrBhF+HUIzTp/u1upUsWJcl+ qQPU1WH4xbOZ+45TMYuYfc6vIAR1o8fSk8zwjeE5YybH3+uL6YtCI4l6S5EIgRkN JnfBpE43wtfCsymfhrDxIvV0lCbXQquJAfJ0wXiQovFtu9LPuauuZ8eNTL1SP3N1 wA2ADnzfapZEBpYxkjgfjeMuSw7LffPUxnQskkunSYNgL7ruRxxkuvjqT+8aeop+ fwxMyAq0oVQ4n9HXUS7A+DpWg0DY43N/VXjdtRqFq/waEF8bg4NBKC61Oq/oI0Cs UaMtqoDoI3pi2yZ73OiON4pSkH0jGoyWRLRHhL2KeTGIZHpfswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAL/c1vanrIb3WIN3J47hAFysuGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU4MDdjYzAtOGM3OS0z NDU5LTljYzItY2RiZmE3MGE3OGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaE68MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfnO9laG1FAN+1fdla/Jn3C0uP2ViWXpvZgI2ysHtHsWPR5O5XmFgFV nJntI2xuhJIJ2CFA0UrQ1LXK3UjcU2BGI8G60SubcosacP1vpN5Sork98rNVvZUS tuz8m5v4nLDuCKBuHXvIvprpianNKWSAGldJlLI22Qi956z+I5dMBos/m6PIQgCQ VMa/wiwXiVUidavYYT3D3lIX38vw8m6d+2ifUWofslfOsioniDDZksM5otCmq4Ui DiJF2nngSgwMNlLluBNZ/BcV6Eb9X69BH9DEQpUcnnpOSwOGsWjdG9kRrfCfZ4H0 v9kj6ariIyEpZjfulRA1jY0Jc0tRv6c= -----END CERTIFICATE-----Generated at Wed May 13 06:40:50 2026 by rpki-client