$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db217d05-2151-337c-981c-de867fa6c103.roa File: db217d05-2151-337c-981c-de867fa6c103.roa (raw, json) Hash identifier: XCcpH3eTZfsDOf5Gd3irrIpRutU2z3Bhd6kYrvlN8vo= Subject key identifier: 3D:A9:61:E0:1E:DE:E2:51:68:0B:A4:CF:58:C4:A6:62:1A:E5:4E:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D9A2024FD4DF122434E988240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db217d05-2151-337c-981c-de867fa6c103.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 20940 IP address blocks: 104.120.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:24:fd:4d:f1:22:43:4e:98:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=ffc5aa0c-9295-42ca-a445-2e7115546b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:40:24:c5:51:3a:24:d1:f1:38:e3:4b:71: fa:22:9b:a5:e1:f7:51:f1:71:5e:7c:0c:3c:39:8a: a3:90:3c:1c:20:cc:2d:29:b3:52:0b:3e:2b:38:40: e5:25:18:68:0a:d9:1d:14:9a:84:34:89:05:39:e4: 85:d9:05:52:d2:ae:24:7f:0b:b4:a7:61:8c:72:5b: d5:1f:ff:93:1b:03:17:44:d7:76:3d:fe:d1:6b:a5: 2b:38:ca:65:03:b1:8a:4f:a8:77:ff:7d:97:f1:75: 05:be:2d:32:16:2c:ea:cb:e9:f0:3e:3d:76:37:09: 81:ef:3f:08:c4:cc:0e:ec:d8:7a:6d:7f:ab:20:de: 8a:03:df:ec:9e:72:7b:e3:47:62:c0:3a:0f:a3:86: da:f7:58:a4:5c:06:82:a7:2e:57:64:13:9c:03:7b: 58:f4:79:f1:1b:48:03:fb:8e:85:7a:b7:43:23:ed: 44:f3:ec:f8:b1:4d:cb:99:95:8b:db:15:32:84:9d: 01:b9:14:ec:a6:19:33:a2:32:f2:d5:a3:f1:27:e0: 23:6b:42:bd:3d:3c:4a:02:79:4c:07:f9:1c:fa:1d: ac:ff:b1:14:37:2d:b4:88:84:5e:74:e7:cb:b9:14: b7:7f:ea:79:58:8b:56:b1:a3:e7:cc:cb:34:d2:1c: 5a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A9:61:E0:1E:DE:E2:51:68:0B:A4:CF:58:C4:A6:62:1A:E5:4E:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db217d05-2151-337c-981c-de867fa6c103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.120.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ed:db:cf:34:8a:e9:2e:b1:ee:45:6c:0c:4f:fb:54:53:05: a5:15:f2:97:06:f2:5f:c0:83:43:8d:c7:d3:3a:8e:b3:6a:62: 17:03:3d:27:d9:83:29:2b:f4:b9:0c:45:20:dd:32:7f:2b:19: f2:89:48:ad:ef:6c:b3:80:0f:1c:05:33:82:a9:bb:b7:d7:c6: 07:76:36:9d:f9:54:ec:ff:64:c3:03:08:a4:2f:36:93:0d:a8: af:77:6a:c3:a7:04:00:6a:06:4d:4d:98:b8:67:80:d9:c8:53: 84:44:ff:68:26:52:1a:ef:4c:cf:16:08:3a:11:fa:72:6b:42: eb:07:04:54:4e:4e:7a:d6:06:f6:57:09:8b:97:19:64:17:11: 57:ab:d0:ce:93:92:ed:0b:7d:f6:30:30:79:bd:c7:93:8f:9b: a3:ec:e9:00:8a:0c:76:2a:31:7d:70:f2:95:1f:46:04:5a:47: d0:42:61:11:98:44:37:5b:29:15:a9:a0:c4:26:3e:4f:ef:79: 31:39:22:02:bf:25:b9:10:ff:dc:86:8e:b1:87:34:d5:0c:3e: da:df:3e:e9:9d:cc:50:88:2c:95:f0:f8:cc:d8:6c:b8:03:35: cf:d1:dc:26:e8:15:c0:aa:10:de:a0:38:2a:65:dd:79:2d:15: 4d:0f:dd:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aICT9TfEiQ06YgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk ZmZjNWFhMGMtOTI5NS00MmNhLWE0NDUtMmU3MTE1NTQ2Yjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW5AJMVROiTR8TjjS3H6Ipul4fdR8XFefAw8 OYqjkDwcIMwtKbNSCz4rOEDlJRhoCtkdFJqENIkFOeSF2QVS0q4kfwu0p2GMclvV H/+TGwMXRNd2Pf7Ra6UrOMplA7GKT6h3/32X8XUFvi0yFizqy+nwPj12NwmB7z8I xMwO7Nh6bX+rIN6KA9/snnJ740diwDoPo4ba91ikXAaCpy5XZBOcA3tY9HnxG0gD +46FerdDI+1E8+z4sU3LmZWL2xUyhJ0BuRTsphkzojLy1aPxJ+Aja0K9PTxKAnlM B/kc+h2s/7EUNy20iIRedOfLuRS3f+p5WItWsaPnzMs00hxacQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2pYeAe3uJRaAukz1jEpmIa5U4BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGIyMTdkMDUtMjE1MS0z MzdjLTk4MWMtZGU4NjdmYTZjMTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3t2880iukuse5FbAxP+1RTBaUV8pcG8l/Ag0ONx9M6jrNqYhcDPSfZ gykr9LkMRSDdMn8rGfKJSK3vbLOADxwFM4Kpu7fXxgd2Np35VOz/ZMMDCKQvNpMN qK93asOnBABqBk1NmLhngNnIU4RE/2gmUhrvTM8WCDoR+nJrQusHBFROTnrWBvZX CYuXGWQXEVer0M6Tku0LffYwMHm9x5OPm6Ps6QCKDHYqMX1w8pUfRgRaR9BCYRGY RDdbKRWpoMQmPk/veTE5IgK/JbkQ/9yGjrGHNNUMPtrfPumdzFCILJXw+MzYbLgD Nc/R3CboFcCqEN6gOCpl3XktFU0P3T8= -----END CERTIFICATE-----Generated at Wed May 13 14:19:16 2026 by rpki-client