$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a95456-83f7-3981-a0b9-515831d8b3f9.roa File: d5a95456-83f7-3981-a0b9-515831d8b3f9.roa (raw, json) Hash identifier: oXu/+Q8bBguAZDjn1WMmX6hUybhwt5pHkfeYz0wkCWE= Subject key identifier: B6:4F:A5:5B:0F:BE:35:55:88:43:38:CB:98:0C:39:A3:28:F1:51:74 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D95F00E3E8CCD7A3C0F520280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a95456-83f7-3981-a0b9-515831d8b3f9.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 16625 IP address blocks: 104.82.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0e:3e:8c:cd:7a:3c:0f:52:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=65f54c02-873a-4243-83c9-d557e51a8195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8a:61:b0:a0:bf:53:bb:40:6e:b0:a9:b3:ad: fb:bf:f2:4d:2f:ce:de:59:2c:00:16:85:3a:c7:c3: c4:e8:87:bc:e8:a2:bf:97:00:82:c0:de:ed:95:28: 61:06:81:a1:9e:3f:7f:e5:4d:b2:ed:bf:1e:5f:c4: 39:d8:c0:8e:02:ca:f5:d2:ca:82:0f:b6:bc:23:b7: f5:1a:8d:29:3f:2f:cc:42:a8:31:52:fb:b8:7c:33: f4:8c:c2:e1:36:fd:76:cf:e3:d8:c3:9d:5f:b6:e1: ee:57:b7:a0:1d:06:ee:6f:68:4a:4f:e4:7a:7b:20: 72:d2:04:bf:66:4b:9b:8c:88:f4:05:bf:ed:37:ce: b9:bd:92:eb:6f:57:07:9a:e6:4c:aa:b4:91:89:62: c1:5b:50:48:91:9f:3c:a6:61:02:61:01:14:40:21: f8:d7:c4:81:de:b3:31:82:60:66:41:ba:af:2b:32: 14:f0:1d:3d:26:70:02:54:35:40:b6:ac:6a:66:11: 08:5f:24:78:73:c6:93:4e:19:34:46:47:c2:1e:95: 17:63:94:59:b2:cb:bb:b7:ef:ad:c4:53:03:f0:10: e0:a0:ef:81:87:37:74:12:81:86:ab:d4:6d:0f:fd: 52:9d:d6:2f:79:d4:16:c7:af:76:a9:8b:a4:b1:d1: f0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4F:A5:5B:0F:BE:35:55:88:43:38:CB:98:0C:39:A3:28:F1:51:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a95456-83f7-3981-a0b9-515831d8b3f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.82.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:42:2c:73:be:ac:4f:88:20:81:6d:25:24:e7:1c:84:ac:1c: cb:55:74:d6:be:fd:2b:46:8f:ce:72:ef:7b:8e:dd:b4:f5:df: 68:24:67:bc:2a:e0:99:ce:f4:14:fa:74:c5:73:c6:e0:3c:e4: aa:d5:f6:83:6f:b0:30:ae:aa:a5:b1:56:fd:10:d4:32:45:bd: ed:90:27:fc:27:aa:3d:d0:16:97:1a:75:4e:bc:fc:c6:ce:cb: 77:58:4a:5b:47:b7:5e:44:1a:07:a5:2e:ed:87:93:89:27:ae: c6:ae:12:50:8d:e8:d0:4e:ec:d0:e5:29:c7:5e:63:34:0d:2c: fe:21:f3:fe:73:60:53:0b:d6:66:c4:0e:67:98:ef:2c:12:03: ee:46:59:88:4e:5f:71:07:e4:b3:2c:6f:b3:52:e9:95:f8:a2: af:54:68:4d:47:5c:c2:da:d3:93:52:95:ac:37:46:64:c9:86: ea:9e:47:47:5d:a9:72:fa:42:08:0e:b4:ea:bf:e1:1e:b4:aa: 21:75:31:18:c8:48:80:cf:e4:67:68:12:f0:93:ba:b5:2f:ef: 3a:98:b8:18:a2:1e:49:64:76:26:9b:3e:7a:b2:f7:e7:19:43: b2:cd:65:c2:0e:e8:26:aa:6c:a7:e7:33:6f:c8:b6:4a:66:70: e5:a6:e3:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8A4+jM16PA9SAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NjVmNTRjMDItODczYS00MjQzLTgzYzktZDU1N2U1MWE4MTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIphsKC/U7tAbrCps637v/JNL87eWSwAFoU6 x8PE6Ie86KK/lwCCwN7tlShhBoGhnj9/5U2y7b8eX8Q52MCOAsr10sqCD7a8I7f1 Go0pPy/MQqgxUvu4fDP0jMLhNv12z+PYw51ftuHuV7egHQbub2hKT+R6eyBy0gS/ ZkubjIj0Bb/tN865vZLrb1cHmuZMqrSRiWLBW1BIkZ88pmECYQEUQCH418SB3rMx gmBmQbqvKzIU8B09JnACVDVAtqxqZhEIXyR4c8aTThk0RkfCHpUXY5RZssu7t++t xFMD8BDgoO+Bhzd0EoGGq9RtD/1SndYvedQWx692qYuksdHwDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZPpVsPvjVViEM4y5gMOaMo8VF0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVhOTU0NTYtODNmNy0z OTgxLWEwYjktNTE1ODMxZDhiM2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRCLHO+rE+IIIFtJSTnHISsHMtVdNa+/StGj85y73uO3bT132gkZ7wq 4JnO9BT6dMVzxuA85KrV9oNvsDCuqqWxVv0Q1DJFve2QJ/wnqj3QFpcadU68/MbO y3dYSltHt15EGgelLu2Hk4knrsauElCN6NBO7NDlKcdeYzQNLP4h8/5zYFML1mbE DmeY7ywSA+5GWYhOX3EH5LMsb7NS6ZX4oq9UaE1HXMLa05NSlaw3RmTJhuqeR0dd qXL6QggOtOq/4R60qiF1MRjISIDP5GdoEvCTurUv7zqYuBiiHklkdiabPnqy9+cZ Q7LNZcIO6CaqbKfnM2/ItkpmcOWm46k= -----END CERTIFICATE-----Generated at Wed May 13 11:17:19 2026 by rpki-client