$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd5b1e88-de65-37f4-b0ad-c165ce9a176d.roa File: dd5b1e88-de65-37f4-b0ad-c165ce9a176d.roa (raw, json) Hash identifier: kk2irwRTgIf3fDYkI9TgZXrYAB6NUoWg4vychl54o3Q= Subject key identifier: C4:AF:ED:75:E3:0E:F5:70:79:01:F4:F3:A3:9A:56:D4:A0:52:20:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E6B0A2458D2ED4D16BE900280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd5b1e88-de65-37f4-b0ad-c165ce9a176d.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 16625 IP address blocks: 104.80.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:24:58:d2:ed:4d:16:be:90:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=3ae14963-147d-4ec5-8b7a-4a9ff9e82a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:42:cb:9e:3f:6e:d2:3b:1d:4a:d9:a0:b5:5a: 63:e7:4a:2b:99:00:e1:94:94:19:f7:42:fd:8a:0a: 0a:66:28:b0:8c:f1:7f:10:e7:a0:14:c0:07:3d:2a: 55:30:a5:ba:55:7c:e7:46:8b:6a:d9:8a:5d:d7:44: 90:d8:f1:25:df:33:e4:b0:e1:ae:17:b5:94:06:c9: da:7f:a8:4c:5f:64:a8:a3:0a:57:23:3b:ef:6e:33: f3:09:41:21:c2:50:10:37:4d:da:b4:8c:3a:ac:d4: a5:4d:28:7d:a4:e1:b0:4d:e3:72:e5:83:8e:94:ee: c2:48:37:98:58:16:2d:e3:b7:4e:d5:d4:82:65:8b: eb:af:29:a2:f7:b1:c8:da:30:21:dd:db:59:a6:f5: 30:b3:a4:1e:07:5c:bf:55:d8:b4:1c:da:55:0b:df: 28:c8:58:3a:21:0c:6f:bf:11:28:91:b8:a8:ee:43: 2d:cc:f7:a6:13:08:0f:fe:e5:19:d9:41:ed:1d:4a: a8:a3:ab:cb:6e:5b:4c:a5:b7:55:39:77:33:81:11: 8a:37:03:dc:4d:07:ee:21:24:4b:13:26:13:1f:2c: 5a:3f:6f:78:b0:d9:40:31:9d:fe:e2:0b:00:f8:d5: e3:e7:d1:7b:e4:ff:ad:d5:d1:7d:a2:90:f9:a5:6b: f3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AF:ED:75:E3:0E:F5:70:79:01:F4:F3:A3:9A:56:D4:A0:52:20:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd5b1e88-de65-37f4-b0ad-c165ce9a176d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.80.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:bd:7b:6c:71:ec:f5:87:1f:4e:e9:91:dd:3d:46:5a:7d:37: 2b:30:b7:4a:22:e3:b7:f6:c9:5e:6a:d1:e5:b4:fc:66:84:47: 95:d9:4a:b0:d8:d5:ac:f9:e4:a9:8e:7e:ec:5e:e5:d4:38:96: 0e:4d:92:d1:e1:5b:4a:cf:ab:a7:5e:cd:fe:2d:80:32:27:2e: 16:98:b4:7d:68:76:65:f7:3f:98:c0:a5:f2:81:db:1a:29:e4: 74:cb:80:35:af:ec:6f:c5:c6:af:76:06:af:79:d1:2e:8a:0a: c1:e3:87:df:76:d5:e0:da:6f:aa:4e:b9:69:7a:87:7a:4a:df: 24:00:44:10:25:4d:41:d6:e5:30:15:f5:64:fd:7e:bb:04:ad: cb:c9:39:51:7e:26:5b:6c:e7:92:90:a5:e9:16:55:b2:9d:9d: 5f:d6:be:37:0c:6e:22:5b:6f:a2:4b:39:14:1f:a6:2b:70:a6: 91:44:9f:70:a7:65:3c:de:82:ee:93:a6:16:0d:99:d2:bc:e2: c8:e6:9f:6f:23:b2:70:60:73:2f:25:e8:6e:1a:b4:a6:45:ad: 4f:50:ff:bb:db:59:19:fe:f9:99:5d:91:c0:e5:c7:39:95:b1: e6:8c:4d:73:f4:65:09:df:81:06:55:31:fb:02:8a:ae:1b:74: a0:95:38:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCiRY0u1NFr6QAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk M2FlMTQ5NjMtMTQ3ZC00ZWM1LThiN2EtNGE5ZmY5ZTgyYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00LLnj9u0jsdStmgtVpj50ormQDhlJQZ90L9 igoKZiiwjPF/EOegFMAHPSpVMKW6VXznRotq2Ypd10SQ2PEl3zPksOGuF7WUBsna f6hMX2SoowpXIzvvbjPzCUEhwlAQN03atIw6rNSlTSh9pOGwTeNy5YOOlO7CSDeY WBYt47dO1dSCZYvrrymi97HI2jAh3dtZpvUws6QeB1y/Vdi0HNpVC98oyFg6IQxv vxEokbio7kMtzPemEwgP/uUZ2UHtHUqoo6vLbltMpbdVOXczgRGKNwPcTQfuISRL EyYTHyxaP294sNlAMZ3+4gsA+NXj59F75P+t1dF9opD5pWvzkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSv7XXjDvVweQH086OaVtSgUiCpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQ1YjFlODgtZGU2NS0z N2Y0LWIwYWQtYzE2NWNlOWExNzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaFAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm9e2xx7PWHH07pkd09Rlp9Nyswt0oi47f2yV5q0eW0/GaER5XZSrDY 1az55KmOfuxe5dQ4lg5NktHhW0rPq6dezf4tgDInLhaYtH1odmX3P5jApfKB2xop 5HTLgDWv7G/Fxq92Bq950S6KCsHjh9921eDab6pOuWl6h3pK3yQARBAlTUHW5TAV 9WT9frsErcvJOVF+Jlts55KQpekWVbKdnV/WvjcMbiJbb6JLORQfpitwppFEn3Cn ZTzegu6TphYNmdK84sjmn28jsnBgcy8l6G4atKZFrU9Q/7vbWRn++ZldkcDlxzmV seaMTXP0ZQnfgQZVMfsCiq4bdKCVONM= -----END CERTIFICATE-----Generated at Fri Jul 24 07:54:52 2026 by rpki-client