$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8b45b42-ec63-3d32-aca7-8cc9586be0ae.roa File: a8b45b42-ec63-3d32-aca7-8cc9586be0ae.roa (raw, json) Hash identifier: /ImQDyLt0eqdxKJNiY9sl5Ylgf2c7Ey/KM4SZmU6wn0= Subject key identifier: 8C:9D:09:EC:E5:A8:42:47:BB:2D:40:52:B6:89:DF:82:C7:3F:0C:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D98BAB0943F0C61832D6F9900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8b45b42-ec63-3d32-aca7-8cc9586be0ae.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 16625 IP address blocks: 104.109.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:b0:94:3f:0c:61:83:2d:6f:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=337945d4-6733-495e-a1f9-58cdd0a06cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f5:bb:68:48:4f:b4:3f:c8:39:1f:8b:97:43: e2:f6:b6:ea:70:42:5a:fb:db:67:b4:97:a5:55:b6: 5b:3f:38:c3:c4:f8:dd:dd:8c:90:e0:e1:7c:de:c4: 2f:79:9d:43:84:79:cd:0a:15:39:d3:e9:c2:59:5e: cb:64:7b:e9:73:00:f4:b9:26:60:2e:2c:57:98:5c: 4d:9b:40:73:ab:3b:48:12:8b:68:0f:e4:43:73:6a: 8f:7f:51:6c:6d:dd:b2:c1:f2:51:c2:75:6c:37:e7: 14:bc:b8:82:e9:b1:de:39:38:28:d1:f3:43:08:a1: 77:d5:c1:ce:a7:8a:08:ec:5a:41:07:8d:3c:5e:4e: d0:11:18:37:67:8b:38:19:cc:8f:6e:e8:0e:54:69: 71:4f:6f:e7:e3:61:67:fa:22:63:71:43:36:3a:36: 4c:6e:33:d5:e1:c2:43:f5:98:8d:63:37:40:df:1c: e1:87:e3:61:ca:05:be:56:22:8d:51:32:2a:06:02: 71:7d:ea:9c:30:f0:6a:27:87:40:b4:20:3c:d7:50: 34:38:19:b4:b7:50:85:c5:db:0a:19:09:77:f5:38: d0:4a:23:5a:be:6b:0f:af:e4:01:48:2d:20:c4:8b: e7:e9:53:5c:4a:24:a5:3b:e9:2d:3c:33:3b:86:56: 5c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9D:09:EC:E5:A8:42:47:BB:2D:40:52:B6:89:DF:82:C7:3F:0C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8b45b42-ec63-3d32-aca7-8cc9586be0ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.109.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:27:a1:5b:3d:35:0a:22:3a:55:15:38:27:1d:e7:c2:54:42: 43:f2:33:9c:ba:9d:10:c7:1c:08:5d:00:b0:ab:f2:4b:ad:e3: a8:d4:b4:8d:19:f8:f2:8e:2d:58:1c:17:a9:88:8c:ff:c4:5f: 5a:ef:5f:45:88:78:a2:65:49:96:0b:bc:40:85:29:f4:99:90: 9f:49:c6:c9:0d:e6:b3:1c:12:13:49:38:b5:cd:2b:b4:c0:83: d3:00:84:94:45:ad:e5:8a:6c:87:68:75:dd:b8:ed:0c:43:16: 55:ec:ab:82:b2:30:0c:eb:f8:33:d8:73:97:47:cb:b3:ae:3e: 0d:85:0c:f4:1e:a1:59:b7:88:19:5c:b8:6a:cf:41:64:98:67: 85:a1:d8:69:20:d1:09:8f:52:aa:90:a6:bd:ba:87:3f:85:65: de:27:6b:d9:79:57:78:cc:bb:cd:3b:b3:b9:d6:68:0f:cb:7c: b2:5f:93:e9:75:91:e4:09:22:db:d4:3d:33:52:fd:3d:e8:7a: d9:43:b9:ab:0f:02:94:03:fe:f1:5d:2f:82:77:13:b8:3e:c6: 4e:d8:7a:23:46:63:1f:3d:28:94:cf:c2:61:f7:3c:e5:d8:c4: 43:4e:f3:34:f9:67:14:14:e1:6f:81:7d:6b:30:81:4c:eb:f5: 52:ed:54:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YurCUPwxhgy1vmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk MzM3OTQ1ZDQtNjczMy00OTVlLWExZjktNThjZGQwYTA2Y2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvW7aEhPtD/IOR+Ll0Pi9rbqcEJa+9tntJel VbZbPzjDxPjd3YyQ4OF83sQveZ1DhHnNChU50+nCWV7LZHvpcwD0uSZgLixXmFxN m0BzqztIEotoD+RDc2qPf1Fsbd2ywfJRwnVsN+cUvLiC6bHeOTgo0fNDCKF31cHO p4oI7FpBB408Xk7QERg3Z4s4GcyPbugOVGlxT2/n42Fn+iJjcUM2OjZMbjPV4cJD 9ZiNYzdA3xzhh+NhygW+ViKNUTIqBgJxfeqcMPBqJ4dAtCA811A0OBm0t1CFxdsK GQl39TjQSiNavmsPr+QBSC0gxIvn6VNcSiSlO+ktPDM7hlZcewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIydCezlqEJHuy1AUraJ34LHPwxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYThiNDViNDItZWM2My0z ZDMyLWFjYTctOGNjOTU4NmJlMGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaG34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGInoVs9NQoiOlUVOCcd58JUQkPyM5y6nRDHHAhdALCr8kut46jUtI0Z +PKOLVgcF6mIjP/EX1rvX0WIeKJlSZYLvECFKfSZkJ9JxskN5rMcEhNJOLXNK7TA g9MAhJRFreWKbIdodd247QxDFlXsq4KyMAzr+DPYc5dHy7OuPg2FDPQeoVm3iBlc uGrPQWSYZ4Wh2Gkg0QmPUqqQpr26hz+FZd4na9l5V3jMu807s7nWaA/LfLJfk+l1 keQJItvUPTNS/T3oetlDuasPApQD/vFdL4J3E7g+xk7YeiNGYx89KJTPwmH3POXY xENO8zT5ZxQU4W+BfWswgUzr9VLtVIE= -----END CERTIFICATE-----Generated at Wed May 13 08:38:03 2026 by rpki-client