$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2a4d41f-4cc6-3aa5-b242-b0e3f7a8be5a.roa File: e2a4d41f-4cc6-3aa5-b242-b0e3f7a8be5a.roa (raw, json) Hash identifier: VCwhmP0QPvxJSWZhopbzLxRog3bxXxg9ZmKRhtjklKg= Subject key identifier: A4:3A:C6:B8:F0:A3:01:36:35:12:AE:1B:0D:86:94:66:D8:84:87:16 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D9A201D548F57899A858C5080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2a4d41f-4cc6-3aa5-b242-b0e3f7a8be5a.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 18209 IP address blocks: 104.120.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:1d:54:8f:57:89:9a:85:8c:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=234bbb1c-a5eb-4e18-9440-d318623b6891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e7:7c:5a:6a:84:fc:67:6a:30:19:3e:38:2b: 08:b1:59:ce:38:52:d9:7e:f7:48:56:68:4d:dc:d2: 8e:7e:59:6b:4b:05:ae:1c:0a:6a:cd:f1:7a:39:07: e0:38:3d:40:45:e2:47:81:db:05:ad:38:f5:8b:b1: e8:46:29:7f:61:47:2f:60:19:26:43:b1:76:20:d1: c3:0a:04:f1:fd:47:ed:b2:ca:97:fa:4a:36:20:ed: 39:cb:ec:65:c0:47:19:39:cb:d3:d2:a3:3c:32:29: 7d:2e:06:36:7d:d9:69:93:c6:52:4c:25:a9:38:fa: 3c:cb:0f:3c:8e:4a:c2:c7:62:bc:1d:88:25:ed:40: d3:d0:36:2f:eb:68:35:5e:9f:78:d1:8d:af:61:60: ee:d3:8b:b0:29:1a:1f:6f:87:65:b6:d2:c2:24:ea: 5d:9d:e4:b2:54:e6:95:9e:d8:c8:e9:84:5a:b7:81: a6:f0:9f:c8:5c:c9:98:c2:01:43:9a:98:23:92:b8: 45:5d:74:99:27:a3:e1:f9:fe:eb:df:da:9f:1e:df: 3a:65:bd:4c:0c:81:07:fa:6e:86:f8:da:06:0d:a9: ee:10:8a:f1:7e:6a:27:17:40:11:3e:00:60:1a:d6: d7:40:fe:d3:78:5b:8b:f1:be:12:fa:96:42:75:9d: ba:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3A:C6:B8:F0:A3:01:36:35:12:AE:1B:0D:86:94:66:D8:84:87:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2a4d41f-4cc6-3aa5-b242-b0e3f7a8be5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.120.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e3:31:31:51:f4:83:e1:31:48:00:f3:3f:a8:5f:9c:2e:78: f1:2e:9a:cc:78:7c:4c:ca:f4:8e:51:10:b2:1b:c3:d8:e4:71: aa:4c:fb:1e:3e:dd:b2:c6:05:3a:94:1e:ff:21:f4:b3:9c:35: 67:a1:c7:2b:9d:2f:f1:9d:0a:b9:08:ae:0d:bd:01:4e:76:96: a2:ba:84:0b:26:04:a8:90:00:13:52:68:d3:13:6c:07:d6:a1: fe:a8:c6:34:4c:cc:38:32:34:de:ad:74:fe:a5:8d:0e:62:47: 62:65:28:f4:72:e5:58:0f:3e:5c:66:73:43:7b:83:36:b0:5a: 83:f1:0a:05:a6:3e:77:d2:a2:e2:3d:64:b3:0f:f2:1a:37:cb: 83:df:6b:74:61:d8:13:c2:97:5e:d0:b3:62:16:69:d5:0a:01: fe:86:9f:7a:66:9a:46:f2:8f:e3:8a:f2:8f:e5:d9:1d:8f:cb: 79:54:15:98:5b:3c:10:f8:9e:33:02:c0:9b:21:ef:c0:51:b2: 68:9f:7b:32:e2:b2:3b:36:da:3c:ac:56:ea:59:f7:41:88:a7: 0b:b0:77:9d:80:ee:ea:ca:e1:62:6a:92:ff:4d:ee:a7:42:e8: 5a:b5:6f:bc:e7:5a:d6:14:92:32:84:ee:2c:9b:55:88:1e:3d: 4f:90:0f:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIB1Uj1eJmoWMUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk MjM0YmJiMWMtYTVlYi00ZTE4LTk0NDAtZDMxODYyM2I2ODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+d8WmqE/GdqMBk+OCsIsVnOOFLZfvdIVmhN 3NKOfllrSwWuHApqzfF6OQfgOD1AReJHgdsFrTj1i7HoRil/YUcvYBkmQ7F2INHD CgTx/UftssqX+ko2IO05y+xlwEcZOcvT0qM8Mil9LgY2fdlpk8ZSTCWpOPo8yw88 jkrCx2K8HYgl7UDT0DYv62g1Xp940Y2vYWDu04uwKRofb4dlttLCJOpdneSyVOaV ntjI6YRat4Gm8J/IXMmYwgFDmpgjkrhFXXSZJ6Ph+f7r39qfHt86Zb1MDIEH+m6G +NoGDanuEIrxfmonF0ARPgBgGtbXQP7TeFuL8b4S+pZCdZ26PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQ6xrjwowE2NRKuGw2GlGbYhIcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTJhNGQ0MWYtNGNjNi0z YWE1LWIyNDItYjBlM2Y3YThiZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArjMTFR9IPhMUgA8z+oX5wuePEumsx4fEzK9I5RELIbw9jkcapM+x4+ 3bLGBTqUHv8h9LOcNWehxyudL/GdCrkIrg29AU52lqK6hAsmBKiQABNSaNMTbAfW of6oxjRMzDgyNN6tdP6ljQ5iR2JlKPRy5VgPPlxmc0N7gzawWoPxCgWmPnfSouI9 ZLMP8ho3y4Pfa3Rh2BPCl17Qs2IWadUKAf6Gn3pmmkbyj+OK8o/l2R2Py3lUFZhb PBD4njMCwJsh78BRsmifezLisjs22jysVupZ90GIpwuwd52A7urK4WJqkv9N7qdC 6Fq1b7znWtYUkjKE7iybVYgePU+QD6s= -----END CERTIFICATE-----Generated at Wed May 13 07:27:43 2026 by rpki-client