$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa File: 9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa (raw, json) Hash identifier: XFkbFHjF3BmZ55Ta4bcxf7ydf/W7tyY4zbUqa5kBDg8= Subject key identifier: 4D:0F:74:78:14:74:47:E4:AC:91:9B:0F:58:1F:84:88:A8:12:1A:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D95F01BBF84CDC35ADA37BD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 20940 IP address blocks: 104.101.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:1b:bf:84:cd:c3:5a:da:37:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=ad68428b-553f-4d9d-935d-b6ba885dfce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2e:f7:b4:39:c6:06:ff:f9:0c:0c:e3:e5:05: 1e:98:ef:17:e9:ed:f8:ca:ab:a8:81:94:3d:b4:93: ed:5d:e4:cd:3b:19:70:45:7f:9a:ca:a9:63:a8:93: 94:ce:bd:de:19:b2:6a:94:9c:63:99:40:e8:62:2c: 1e:51:c8:95:a4:d5:56:7b:22:ba:76:77:44:0d:f2: 4b:e8:e8:d6:67:2f:9b:40:9b:67:41:7e:25:bd:92: 8c:56:6a:df:23:c6:1c:17:93:6c:58:64:fc:cd:03: 93:cc:8b:2e:db:4e:03:49:b2:da:94:5f:e0:45:10: 47:33:0e:c6:a6:1f:38:cc:9d:ed:a0:f7:72:17:99: 9a:14:08:86:87:9d:ab:4a:ef:91:1b:2d:d6:eb:2f: 1d:93:f1:89:d9:fa:aa:4d:bd:86:79:d8:ae:d0:ca: e9:e1:08:e6:c8:a7:07:2a:02:f4:b8:a5:3f:e1:57: ad:3f:d1:89:63:32:a4:95:59:e7:3c:32:c5:35:43: 15:dc:ac:c1:18:0e:cb:dc:14:44:14:2e:f2:00:bc: 9c:c3:36:67:22:85:2a:b5:75:1e:34:0c:fb:76:e5: 63:39:17:59:51:85:a9:bc:05:6f:5b:85:a9:44:44: ff:32:82:f0:40:67:a4:1f:cb:14:61:de:25:64:a7: 23:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0F:74:78:14:74:47:E4:AC:91:9B:0F:58:1F:84:88:A8:12:1A:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.101.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e9:69:86:4c:71:96:52:a0:11:3a:04:17:68:f0:c5:e7:13: aa:15:55:86:51:30:2d:d5:e2:03:27:d2:bd:5f:b2:e3:7e:e2: 52:59:35:98:55:20:f7:55:ed:43:b9:b5:96:98:a7:42:3e:62: a1:20:d8:14:03:c5:91:b4:89:03:50:25:60:73:89:3e:93:41: 2e:6a:ee:fe:4a:cd:22:66:74:c1:e0:1b:c5:52:94:a8:7b:74: 6b:64:e6:34:79:72:96:b5:17:0e:3a:3a:a4:45:4a:ca:5e:6c: 0b:6a:c0:6d:46:d6:1b:f5:fd:40:f0:db:f7:0c:08:eb:3f:c2: d1:f5:34:18:54:fe:fe:e1:31:a2:b0:a3:c9:ab:1b:b3:0a:92: 03:b7:61:dc:f1:32:b3:ab:f3:5d:ca:cb:0b:9c:76:c5:f7:9e: 82:63:17:c7:dc:f2:0b:31:ad:f6:a0:4b:c5:3e:65:f3:29:2c: dc:df:33:e2:c4:36:52:61:58:91:d0:5c:01:09:ce:92:3d:5f: b3:ab:13:c0:7a:81:c8:6e:0b:19:44:bb:f2:f2:cd:18:58:11: 7b:09:da:32:33:0c:df:44:f8:1e:90:5b:15:9d:a5:58:9b:14: 67:49:33:e0:32:c3:59:b4:fd:f8:05:19:28:5a:fa:fe:43:38: a7:5c:57:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8Bu/hM3DWto3vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk YWQ2ODQyOGItNTUzZi00ZDlkLTkzNWQtYjZiYTg4NWRmY2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC73tDnGBv/5DAzj5QUemO8X6e34yquogZQ9 tJPtXeTNOxlwRX+ayqljqJOUzr3eGbJqlJxjmUDoYiweUciVpNVWeyK6dndEDfJL 6OjWZy+bQJtnQX4lvZKMVmrfI8YcF5NsWGT8zQOTzIsu204DSbLalF/gRRBHMw7G ph84zJ3toPdyF5maFAiGh52rSu+RGy3W6y8dk/GJ2fqqTb2Gediu0Mrp4QjmyKcH KgL0uKU/4VetP9GJYzKklVnnPDLFNUMV3KzBGA7L3BREFC7yALycwzZnIoUqtXUe NAz7duVjORdZUYWpvAVvW4WpRET/MoLwQGekH8sUYd4lZKcjNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0PdHgUdEfkrJGbD1gfhIioEhpTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWFjZDdhMDQtNDNlZi0z MmYwLThlOGMtZDlkMzJlNTJmMTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGUVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHpaYZMcZZSoBE6BBdo8MXnE6oVVYZRMC3V4gMn0r1fsuN+4lJZNZhV IPdV7UO5tZaYp0I+YqEg2BQDxZG0iQNQJWBziT6TQS5q7v5KzSJmdMHgG8VSlKh7 dGtk5jR5cpa1Fw46OqRFSspebAtqwG1G1hv1/UDw2/cMCOs/wtH1NBhU/v7hMaKw o8mrG7MKkgO3YdzxMrOr813KywucdsX3noJjF8fc8gsxrfagS8U+ZfMpLNzfM+LE NlJhWJHQXAEJzpI9X7OrE8B6gchuCxlEu/LyzRhYEXsJ2jIzDN9E+B6QWxWdpVib FGdJM+Ayw1m0/fgFGSha+v5DOKdcV80= -----END CERTIFICATE-----Generated at Wed May 13 06:22:57 2026 by rpki-client