$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c144d7ca-e5f9-3aca-baeb-e45cbe841855.roa File: c144d7ca-e5f9-3aca-baeb-e45cbe841855.roa (raw, json) Hash identifier: MFL9oV6yHfGMdfImH9/djalbUCE2a6Q4K1f0DKlMmSM= Subject key identifier: 47:C0:22:1F:B6:EB:EC:35:36:95:D1:62:12:0B:12:29:91:86:F2:0B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D9A202612D956F3ABE5A7A9D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c144d7ca-e5f9-3aca-baeb-e45cbe841855.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 16625 IP address blocks: 104.123.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:26:12:d9:56:f3:ab:e5:a7:a9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=bc02bf28-0ec8-4379-8812-70043bb8bcf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:9c:ba:3d:93:c0:09:ea:fc:0e:47:e4:c1: 6e:01:41:2d:56:b1:79:20:33:7f:a3:f4:c1:b6:91: e7:14:d9:9b:e2:56:24:60:93:b8:6d:0f:d4:0d:02: 92:8e:65:ee:fa:44:05:0d:83:bf:56:04:57:de:84: 27:02:d1:7c:7f:4f:95:00:5b:6e:43:11:70:65:fb: 7c:9f:20:e2:f9:f9:74:a4:c2:69:8a:12:d7:7b:ae: 14:08:92:69:95:7d:15:21:e7:b2:9d:96:bf:d1:6d: 62:3d:d2:1d:6d:d3:ae:a9:92:8a:ef:97:1b:5f:a4: 97:c9:5a:6c:26:79:15:3c:c8:20:25:a3:ee:c1:ad: 7a:a5:e9:fb:1f:41:e5:84:a0:40:c8:b4:49:96:51: 38:bb:43:88:be:4d:5c:71:66:12:bf:84:62:2e:10: e5:29:ac:f1:15:8c:40:d3:97:cd:eb:18:65:ba:b0: 84:d7:fc:70:26:a9:aa:d1:f6:d3:16:89:6d:8e:ba: 1b:92:00:1f:a8:67:78:f1:0c:74:48:c9:e7:bc:ae: 62:ef:9a:dd:69:3c:21:c4:33:34:04:f8:b2:ba:c8: a8:64:c9:bb:c3:17:91:1a:80:2f:02:7e:c9:1a:c6: 08:ca:ec:30:1d:ed:bf:d6:fa:bb:83:7c:2d:11:be: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C0:22:1F:B6:EB:EC:35:36:95:D1:62:12:0B:12:29:91:86:F2:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c144d7ca-e5f9-3aca-baeb-e45cbe841855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:2a:1b:93:e6:e2:ce:23:ec:e8:4b:08:ae:19:56:d7:f8:44: 26:f0:04:fd:07:94:a0:9f:89:82:ac:4d:7a:fa:c2:cc:5a:d3: b1:c0:ca:aa:70:b6:c3:6a:e2:73:ad:50:45:79:b5:c5:aa:68: 9e:c8:4a:de:0e:02:a0:56:56:e2:0a:c2:3d:b9:f4:24:45:d0: aa:37:7b:cb:91:d9:9a:21:96:8d:30:bb:ef:ca:a7:55:48:cc: 26:c0:97:c5:8c:52:fc:f5:c3:03:b2:32:a6:f9:1c:5e:0d:8c: d0:25:00:71:a3:47:aa:de:fe:0f:fe:35:8e:8f:13:d0:d6:41: 8b:5f:03:84:d0:85:bd:82:28:8a:4f:7c:ad:8c:33:0d:e8:7d: ed:9b:4f:57:59:ef:34:35:25:61:98:60:06:bf:80:90:a6:a2: af:03:ee:9e:7e:25:89:b5:79:b4:a2:cf:a6:e5:96:bc:aa:78: 0a:82:d1:01:65:32:7e:b2:e2:83:d5:28:2b:0f:17:c1:cb:e5: fc:94:f0:f1:e1:3f:09:7e:e3:82:87:f0:a3:f6:75:87:49:f3: ba:58:d1:35:96:0e:5e:28:29:30:4b:a8:a2:d4:8b:14:92:89: 64:f2:2e:58:63:62:53:34:9f:d8:90:92:ad:aa:45:42:11:90: ae:07:a5:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aICYS2Vbzq+WnqdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk YmMwMmJmMjgtMGVjOC00Mzc5LTg4MTItNzAwNDNiYjhiY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqqcuj2TwAnq/A5H5MFuAUEtVrF5IDN/o/TB tpHnFNmb4lYkYJO4bQ/UDQKSjmXu+kQFDYO/VgRX3oQnAtF8f0+VAFtuQxFwZft8 nyDi+fl0pMJpihLXe64UCJJplX0VIeeynZa/0W1iPdIdbdOuqZKK75cbX6SXyVps JnkVPMggJaPuwa16pen7H0HlhKBAyLRJllE4u0OIvk1ccWYSv4RiLhDlKazxFYxA 05fN6xhlurCE1/xwJqmq0fbTFoltjrobkgAfqGd48Qx0SMnnvK5i75rdaTwhxDM0 BPiyusioZMm7wxeRGoAvAn7JGsYIyuwwHe2/1vq7g3wtEb4CoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfAIh+26+w1NpXRYhILEimRhvILMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzE0NGQ3Y2EtZTVmOS0z YWNhLWJhZWItZTQ1Y2JlODQxODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHtUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUqG5Pm4s4j7OhLCK4ZVtf4RCbwBP0HlKCfiYKsTXr6wsxa07HAyqpw tsNq4nOtUEV5tcWqaJ7ISt4OAqBWVuIKwj259CRF0Ko3e8uR2Zohlo0wu+/Kp1VI zCbAl8WMUvz1wwOyMqb5HF4NjNAlAHGjR6re/g/+NY6PE9DWQYtfA4TQhb2CKIpP fK2MMw3ofe2bT1dZ7zQ1JWGYYAa/gJCmoq8D7p5+JYm1ebSiz6bllryqeAqC0QFl Mn6y4oPVKCsPF8HL5fyU8PHhPwl+44KH8KP2dYdJ87pY0TWWDl4oKTBLqKLUixSS iWTyLlhjYlM0n9iQkq2qRUIRkK4HpQI= -----END CERTIFICATE-----Generated at Wed May 13 03:25:53 2026 by rpki-client