$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d84a9409-cb97-33dc-a3c7-ea8271fdd02b.roa File: d84a9409-cb97-33dc-a3c7-ea8271fdd02b.roa (raw, json) Hash identifier: 1k7qQb22Q0A29pT8+HpQyvttxlG3PFThJwRKUOQ+h04= Subject key identifier: 25:8E:15:D2:CB:06:2C:0A:F6:F9:AA:0D:04:31:56:61:C6:02:84:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D98BAAE3A02983F3ECCC41A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d84a9409-cb97-33dc-a3c7-ea8271fdd02b.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 104.107.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:ae:3a:02:98:3f:3e:cc:c4:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=52132cf1-0a1c-4351-a71f-f02770da0903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0b:d6:cc:c9:b9:38:e7:46:70:86:33:5e:89: 21:d1:4a:45:3a:0c:6d:4f:ac:9f:b9:5c:02:db:b9: b2:81:5a:a8:7e:e4:4b:e9:8e:a8:98:05:20:7b:34: 65:0e:99:7c:74:b6:13:d5:0b:ee:07:d9:3b:00:6e: 91:91:ea:97:2f:3f:6d:03:84:a8:4c:e3:fe:29:96: dc:6b:df:44:ae:ea:a2:ee:c6:1d:6d:90:de:09:f0: 6d:d4:9c:bd:45:5e:08:35:64:d3:51:3f:63:d9:e4: d4:ab:a2:a1:9d:0f:24:f1:9a:6c:14:db:14:8d:20: 1b:57:b8:41:6f:51:32:eb:8a:03:72:96:29:9e:c6: a6:72:36:74:02:2c:27:56:d6:10:3f:38:18:a6:dd: 48:d2:de:79:09:f8:a5:85:4f:3a:0f:78:f3:b2:6d: 3e:56:5e:e5:a3:25:29:cd:1d:c3:91:2e:55:77:9d: 42:21:f4:7b:53:77:1f:5b:45:3c:67:9e:19:f3:ed: b1:b8:20:d9:f1:79:15:75:51:71:0d:b2:9a:f2:84: 86:64:65:c3:de:89:33:aa:10:17:8f:01:98:43:cf: fe:a8:91:0d:7c:19:75:cc:be:c4:cd:97:85:21:70: f5:d5:39:f7:70:e2:0a:a0:c0:7d:35:7b:7d:a9:de: 13:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8E:15:D2:CB:06:2C:0A:F6:F9:AA:0D:04:31:56:61:C6:02:84:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d84a9409-cb97-33dc-a3c7-ea8271fdd02b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.107.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:01:94:49:0a:58:94:86:8f:8c:f1:e8:a7:2a:20:31:78:30: 53:57:20:95:37:31:26:96:24:82:ad:36:d2:da:7b:84:10:60: d5:e9:42:c4:35:fb:5f:cc:67:77:21:85:55:06:7b:85:a4:c5: d5:d5:96:77:3a:0e:e5:78:f1:ce:23:6a:fa:2d:de:8a:df:25: 81:74:09:10:7f:67:26:7e:d6:2a:06:17:8c:01:ca:2a:47:b3: 1d:f7:ad:a6:52:a2:33:0b:35:98:18:f7:50:87:cd:81:51:db: e2:4f:9f:8b:8c:13:4e:3d:ce:07:97:d1:60:21:db:0e:f4:42: b0:56:4f:66:89:89:d3:35:63:b3:c1:24:ec:00:dc:04:30:db: 49:19:00:0c:1d:c5:54:dd:fa:58:9a:8c:46:b6:c9:bd:bf:2b: bc:4f:eb:65:5c:10:d1:36:ed:95:66:bd:01:86:21:59:76:3d: 63:44:ed:91:f8:b8:97:ef:09:21:3e:ca:bc:f8:2a:de:26:1a: af:1d:66:dc:57:16:97:77:4c:f3:4e:9d:cb:95:3a:c5:d4:1d: 76:dd:94:38:d8:49:08:2a:b0:90:22:98:f8:ca:0e:84:ed:6e: 8d:6f:4b:5b:b1:76:0a:16:4d:52:97:1a:bb:06:5c:85:d8:e6: f3:51:bb:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Yuq46Apg/PszEGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk NTIxMzJjZjEtMGExYy00MzUxLWE3MWYtZjAyNzcwZGEwOTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwvWzMm5OOdGcIYzXokh0UpFOgxtT6yfuVwC 27mygVqofuRL6Y6omAUgezRlDpl8dLYT1QvuB9k7AG6RkeqXLz9tA4SoTOP+KZbc a99Eruqi7sYdbZDeCfBt1Jy9RV4INWTTUT9j2eTUq6KhnQ8k8ZpsFNsUjSAbV7hB b1Ey64oDcpYpnsamcjZ0AiwnVtYQPzgYpt1I0t55CfilhU86D3jzsm0+Vl7loyUp zR3DkS5Vd51CIfR7U3cfW0U8Z54Z8+2xuCDZ8XkVdVFxDbKa8oSGZGXD3okzqhAX jwGYQ8/+qJENfBl1zL7EzZeFIXD11Tn3cOIKoMB9NXt9qd4TZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWOFdLLBiwK9vmqDQQxVmHGAoQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDg0YTk0MDktY2I5Ny0z M2RjLWEzYzctZWE4MjcxZmRkMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaGtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwBlEkKWJSGj4zx6KcqIDF4MFNXIJU3MSaWJIKtNtLae4QQYNXpQsQ1 +1/MZ3chhVUGe4WkxdXVlnc6DuV48c4javot3orfJYF0CRB/ZyZ+1ioGF4wByipH sx33raZSojMLNZgY91CHzYFR2+JPn4uME049zgeX0WAh2w70QrBWT2aJidM1Y7PB JOwA3AQw20kZAAwdxVTd+liajEa2yb2/K7xP62VcENE27ZVmvQGGIVl2PWNE7ZH4 uJfvCSE+yrz4Kt4mGq8dZtxXFpd3TPNOncuVOsXUHXbdlDjYSQgqsJAimPjKDoTt bo1vS1uxdgoWTVKXGrsGXIXY5vNRu40= -----END CERTIFICATE-----Generated at Wed May 13 05:21:14 2026 by rpki-client