$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3ae0500-8079-36ae-8a26-0437290bca3c.roa File: b3ae0500-8079-36ae-8a26-0437290bca3c.roa (raw, json) Hash identifier: VNIy2acS+O51bANSoQSw9OyVyLk9nCvBwRUbzL9VCdo= Subject key identifier: 04:86:B5:C3:D7:13:CE:3B:91:65:A2:48:A6:54:4E:03:A3:33:38:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D9A20262B437FEEBD37A01380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3ae0500-8079-36ae-8a26-0437290bca3c.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 20940 IP address blocks: 104.123.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:26:2b:43:7f:ee:bd:37:a0:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=4144f414-68f9-43aa-83be-b8c4779d5849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:33:1e:a0:78:0d:12:36:ee:e8:97:cc:22: f5:32:f7:b5:4b:f0:c6:a6:27:1d:09:f9:b4:7e:0a: f4:d4:27:4c:ac:f4:d7:35:5e:3e:00:9c:7c:a4:18: ee:59:c5:7f:3e:7f:e4:02:21:fd:c3:dd:25:b8:d4: 17:55:89:84:b9:ad:fd:57:bb:23:a3:f9:6c:24:80: 9b:b6:f3:ca:dc:90:58:24:17:5f:24:08:fa:3b:67: 1d:d8:c9:5f:54:34:38:44:e3:91:3a:7b:19:51:55: 9f:66:71:35:3f:08:60:71:39:47:2e:05:e6:bc:79: 89:3e:4f:60:c7:e8:5c:39:af:64:33:05:8f:cc:ec: 22:0a:ea:7b:58:d6:3f:08:eb:f0:f2:e1:01:78:54: f9:23:6a:14:9d:3c:8d:c0:44:73:ba:dd:b6:f3:71: d8:54:e3:83:24:98:0b:1c:97:fe:31:a1:c7:ac:3c: c5:78:e8:1c:01:57:cf:63:f8:d5:24:cb:e2:cb:62: 17:02:3b:f8:f1:bc:a6:01:ae:28:9b:f9:b9:10:bf: 88:75:b0:98:46:6f:cf:31:02:98:af:bf:8d:03:6e: e4:25:6b:7a:aa:07:e6:77:03:71:ee:82:d0:6e:0d: a7:4f:e7:23:a3:ab:13:ea:1e:0c:ec:3a:e0:81:f2: d3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:86:B5:C3:D7:13:CE:3B:91:65:A2:48:A6:54:4E:03:A3:33:38:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3ae0500-8079-36ae-8a26-0437290bca3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:70:5c:73:17:56:ad:bb:1d:07:9c:bc:fe:6e:87:b5:1b:31: 7d:f8:aa:8c:df:b3:76:e3:14:1c:00:80:dd:f2:2f:27:18:fc: bd:09:9a:8c:e5:09:10:50:22:44:f8:2f:ad:aa:76:1d:d1:ad: dc:8f:5a:ad:ea:53:14:49:b4:a2:ff:b1:42:7f:9b:62:08:7b: 24:fd:94:f6:30:dd:50:a0:6f:a5:f1:98:e1:8d:94:26:df:5b: 5b:11:d6:26:7e:61:b1:66:5a:24:41:00:cf:2c:3c:8f:1d:4c: 03:c5:25:e0:40:37:a1:c7:85:2b:1b:8b:78:e5:df:d7:ee:c8: f6:f5:90:08:6d:49:ef:29:f5:d0:8a:df:eb:fd:e8:69:cf:06: 8e:29:63:50:23:88:65:82:eb:88:cb:06:4a:b4:fe:3f:99:77: 73:4c:54:7d:87:bb:e2:79:3f:94:e4:71:5f:c4:6b:1e:8d:02: 98:99:9d:0c:a8:bf:9e:3c:c3:65:42:fa:8a:cf:41:56:3e:bc: 57:80:bc:63:b5:d9:c1:14:38:d9:d2:20:f9:bc:ac:dc:97:0d: 13:61:30:16:a3:1f:69:d6:32:08:80:33:19:24:21:5f:46:1d: 36:58:53:17:df:23:4b:b3:3a:02:67:c6:99:69:06:65:87:d9: 4b:c1:45:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aICYrQ3/uvTegE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk NDE0NGY0MTQtNjhmOS00M2FhLTgzYmUtYjhjNDc3OWQ1ODQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7UzHqB4DRI27uiXzCL1Mve1S/DGpicdCfm0 fgr01CdMrPTXNV4+AJx8pBjuWcV/Pn/kAiH9w90luNQXVYmEua39V7sjo/lsJICb tvPK3JBYJBdfJAj6O2cd2MlfVDQ4ROOROnsZUVWfZnE1PwhgcTlHLgXmvHmJPk9g x+hcOa9kMwWPzOwiCup7WNY/COvw8uEBeFT5I2oUnTyNwERzut2283HYVOODJJgL HJf+MaHHrDzFeOgcAVfPY/jVJMviy2IXAjv48bymAa4om/m5EL+IdbCYRm/PMQKY r7+NA27kJWt6qgfmdwNx7oLQbg2nT+cjo6sT6h4M7DrggfLTdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASGtcPXE847kWWiSKZUTgOjMzjuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjNhZTA1MDAtODA3OS0z NmFlLThhMjYtMDQzNzI5MGJjYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHuaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtwXHMXVq27HQecvP5uh7UbMX34qozfs3bjFBwAgN3yLycY/L0Jmozl CRBQIkT4L62qdh3RrdyPWq3qUxRJtKL/sUJ/m2IIeyT9lPYw3VCgb6XxmOGNlCbf W1sR1iZ+YbFmWiRBAM8sPI8dTAPFJeBAN6HHhSsbi3jl39fuyPb1kAhtSe8p9dCK 3+v96GnPBo4pY1AjiGWC64jLBkq0/j+Zd3NMVH2Hu+J5P5TkcV/Eax6NApiZnQyo v548w2VC+orPQVY+vFeAvGO12cEUONnSIPm8rNyXDRNhMBajH2nWMgiAMxkkIV9G HTZYUxffI0uzOgJnxplpBmWH2UvBRZk= -----END CERTIFICATE-----Generated at Wed May 13 09:14:16 2026 by rpki-client