$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a381271b-7870-3681-ab19-494964544e4b.roa File: a381271b-7870-3681-ab19-494964544e4b.roa (raw, json) Hash identifier: 4omtDNBHxzn+MRX/B2z+YcnNo2ebnfhATiMFAXk8t3A= Subject key identifier: 8F:E1:5B:E8:5C:B0:A3:7F:A5:A7:F1:8F:0E:D7:D8:E8:4A:DA:56:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D95F01A685805BE3AE665CEC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a381271b-7870-3681-ab19-494964544e4b.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 16625 IP address blocks: 104.96.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:1a:68:58:05:be:3a:e6:65:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=97c34608-0d2c-4f93-bd80-a5bc346e30bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:78:0d:66:99:5c:7b:8e:a0:34:e8:db:18: 3b:87:dc:88:c2:76:07:f9:ea:9e:05:f1:7b:5d:75: 27:53:83:ee:aa:69:4e:87:26:b8:c3:16:d8:7a:12: ab:90:dc:5d:4c:99:62:33:c9:1f:db:67:3b:83:4a: e1:e3:98:d7:1d:57:be:c1:ea:4d:71:c8:39:5d:e1: 69:63:f2:a0:56:20:51:e0:e7:0a:0f:09:18:81:b1: 2c:15:2e:77:9f:f6:5a:1b:ba:fd:a6:f0:48:ef:00: 96:11:98:21:9b:cf:36:45:18:61:a0:c6:84:09:01: 4d:af:0d:b1:86:11:4c:cf:99:2b:42:ce:ad:e6:19: 32:e0:02:58:77:52:c0:c6:5a:cf:27:2a:54:f7:1c: 2d:7b:a9:7c:df:60:f1:ab:2c:f1:2a:69:13:71:5b: f8:c1:8f:ef:9b:cb:33:b3:74:11:0e:a2:60:92:3a: 0a:4b:b1:40:4c:a4:2b:08:c1:77:fc:8b:ac:3f:e3: 51:9f:eb:bd:4f:36:bd:8b:5d:94:c3:d7:f2:0a:fb: 07:52:cc:68:0d:b6:75:ff:cb:bc:d9:bd:34:36:f1: 8a:90:f5:34:d4:47:0f:ff:c1:69:18:e7:5d:59:24: 6a:cd:20:40:b7:e8:b2:24:06:89:dc:cd:15:f2:86: c9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E1:5B:E8:5C:B0:A3:7F:A5:A7:F1:8F:0E:D7:D8:E8:4A:DA:56:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a381271b-7870-3681-ab19-494964544e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.96.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e4:5b:00:08:3c:b4:1e:2b:70:40:fd:55:e7:45:97:1c:ea: 7f:59:49:9b:71:c0:53:f5:de:95:8c:f2:76:7b:42:a4:b7:b6: 76:92:64:41:23:83:1b:6f:65:04:73:46:c3:25:54:b5:63:51: 82:12:44:fe:72:db:3c:44:42:4c:3a:dd:ef:62:17:11:ea:19: 23:ef:d6:9f:ce:1e:80:a1:70:f0:4e:91:1f:7c:61:eb:08:85: c4:00:6a:38:15:34:14:4b:39:85:83:70:01:62:a4:29:ae:dd: 6f:d5:e5:94:9d:76:84:5b:78:63:ce:75:7b:ee:6d:cb:c5:9f: c4:64:31:2f:44:58:84:17:2f:f9:27:51:90:e1:c2:1f:7f:43: 1f:47:69:42:81:cb:93:8a:0b:f6:6c:f3:9e:4f:41:2a:51:85: 9a:a0:48:ff:2e:ba:95:8c:9d:48:f8:1a:28:90:26:73:61:ba: 0e:ee:0f:d2:37:2f:0f:7c:8c:17:89:02:e3:06:62:12:9d:af: 4d:36:a7:2b:c5:d1:e0:a3:a8:8e:a8:d0:62:73:cc:2a:0d:cd: da:cd:9b:ad:ad:a8:9c:5d:16:2a:ef:93:ca:3d:12:90:b5:96: de:a7:b2:b1:82:14:9a:35:a8:8a:f0:cd:bb:b6:ab:87:d5:a1: f9:c9:26:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8BpoWAW+OuZlzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk OTdjMzQ2MDgtMGQyYy00ZjkzLWJkODAtYTViYzM0NmUzMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8t4DWaZXHuOoDTo2xg7h9yIwnYH+eqeBfF7 XXUnU4PuqmlOhya4wxbYehKrkNxdTJliM8kf22c7g0rh45jXHVe+wepNccg5XeFp Y/KgViBR4OcKDwkYgbEsFS53n/ZaG7r9pvBI7wCWEZghm882RRhhoMaECQFNrw2x hhFMz5krQs6t5hky4AJYd1LAxlrPJypU9xwte6l832DxqyzxKmkTcVv4wY/vm8sz s3QRDqJgkjoKS7FATKQrCMF3/IusP+NRn+u9Tza9i12Uw9fyCvsHUsxoDbZ1/8u8 2b00NvGKkPU01EcP/8FpGOddWSRqzSBAt+iyJAaJ3M0V8obJXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/hW+hcsKN/pafxjw7X2OhK2lbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTM4MTI3MWItNzg3MC0z NjgxLWFiMTktNDk0OTY0NTQ0ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfkWwAIPLQeK3BA/VXnRZcc6n9ZSZtxwFP13pWM8nZ7QqS3tnaSZEEj gxtvZQRzRsMlVLVjUYISRP5y2zxEQkw63e9iFxHqGSPv1p/OHoChcPBOkR98YesI hcQAajgVNBRLOYWDcAFipCmu3W/V5ZSddoRbeGPOdXvubcvFn8RkMS9EWIQXL/kn UZDhwh9/Qx9HaUKBy5OKC/Zs855PQSpRhZqgSP8uupWMnUj4GiiQJnNhug7uD9I3 Lw98jBeJAuMGYhKdr002pyvF0eCjqI6o0GJzzCoNzdrNm62tqJxdFirvk8o9EpC1 lt6nsrGCFJo1qIrwzbu2q4fVofnJJnM= -----END CERTIFICATE-----Generated at Wed May 13 14:00:26 2026 by rpki-client