$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5212fcb2-576b-3228-b2dd-442e930e3b3f.roa File: 5212fcb2-576b-3228-b2dd-442e930e3b3f.roa (raw, json) Hash identifier: IIKttyJsPkBe7RohYFCPMiSqB0qE4IRlTmmey7IOm8I= Subject key identifier: 2A:79:7A:19:E8:CF:89:4C:E0:2B:B5:56:65:43:52:EA:B5:91:9B:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F0D6CEF8CBDB3DCB033FE88E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5212fcb2-576b-3228-b2dd-442e930e3b3f.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 104.71.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:ef:8c:bd:b3:dc:b0:33:fe:88:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=987037c2-7227-41a6-81b3-3385f857e2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ad:29:5f:aa:fb:16:2a:37:18:2a:ae:38:51: f0:92:a0:0b:bf:37:e1:fa:0d:37:9b:df:df:73:18: bc:53:7b:c0:d1:25:b7:8c:10:40:4c:0f:cc:1f:93: f1:85:35:0f:53:3c:db:d2:05:35:4d:d8:b2:38:14: ee:c8:af:22:ea:98:d1:a1:33:21:77:85:4e:c1:f6: e5:b9:66:a0:48:bb:17:08:ac:a1:fb:61:da:50:96: 89:74:eb:d3:3c:06:b5:02:ab:26:31:ef:b2:f0:20: 44:2b:2f:26:9b:4d:b3:34:62:ed:d3:8c:d4:51:1c: 33:b7:e0:f2:4c:3d:9d:87:2e:f1:cc:17:4d:39:a9: 02:8e:e9:76:be:b9:4b:b2:1a:a1:69:be:be:e6:1c: 06:aa:1b:1a:58:2a:b8:e1:a6:57:db:d9:d0:1b:ca: 61:f5:35:be:13:18:d0:f0:d6:30:20:17:88:9b:b0: a1:a6:cf:d0:07:56:10:1c:9a:a1:d8:2b:9a:b6:61: 0a:5b:86:0f:16:34:d4:b4:88:7f:65:67:e5:45:2c: d9:2a:25:ee:f2:1f:17:2d:6b:a5:6b:a2:a7:e8:99: 2d:3d:f4:f9:43:27:c9:5a:51:4f:25:fb:29:95:77: ca:a3:3a:91:e7:04:e9:4e:bb:46:92:b1:50:3e:95: c1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:79:7A:19:E8:CF:89:4C:E0:2B:B5:56:65:43:52:EA:B5:91:9B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5212fcb2-576b-3228-b2dd-442e930e3b3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.71.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:d6:c8:ac:82:a2:7f:38:d0:8b:82:28:a9:ec:5d:26:77:59: 01:eb:8e:09:01:54:a6:0a:45:b2:e7:0c:fb:77:d4:49:9f:48: 7c:61:66:a5:a3:82:fc:31:c8:26:b1:b6:c9:2f:90:45:61:32: 14:6d:a2:2f:dc:77:06:a8:fb:c8:c6:3e:d1:8d:b3:a2:6d:a4: ef:2a:87:57:b7:f1:bc:da:d5:45:aa:6c:91:84:29:06:81:ec: 42:0a:5d:06:14:c9:d1:06:9b:27:1a:41:bf:14:e2:c5:e3:c9: 4b:de:e2:24:31:eb:b0:d0:98:98:6b:93:c4:de:55:fc:5f:47: 0c:96:e0:ae:71:e0:23:f5:6f:72:4a:40:2f:cb:5b:dd:32:92: 0f:7c:43:39:dd:39:f3:ec:ef:4d:dd:7b:03:05:6b:96:31:ab: 79:c3:29:db:a7:a6:68:54:bd:4f:5a:25:ff:72:ee:84:86:f5: 5f:16:56:b0:fe:85:45:41:69:4d:ec:37:07:eb:7a:4d:cf:2b: 6a:28:87:46:86:a3:a1:30:ca:bb:8b:35:09:4a:1c:4c:29:22: 70:c4:87:35:54:fb:13:08:e2:7b:a3:95:9a:a2:6d:c9:27:14: d8:f8:da:bf:a6:df:9e:6f:78:c8:02:47:34:17:97:fd:55:ef: 20:ea:b1:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbO+MvbPcsDP+iOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk OTg3MDM3YzItNzIyNy00MWE2LTgxYjMtMzM4NWY4NTdlMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK0pX6r7Fio3GCquOFHwkqALvzfh+g03m9/f cxi8U3vA0SW3jBBATA/MH5PxhTUPUzzb0gU1TdiyOBTuyK8i6pjRoTMhd4VOwfbl uWagSLsXCKyh+2HaUJaJdOvTPAa1AqsmMe+y8CBEKy8mm02zNGLt04zUURwzt+Dy TD2dhy7xzBdNOakCjul2vrlLshqhab6+5hwGqhsaWCq44aZX29nQG8ph9TW+ExjQ 8NYwIBeIm7Chps/QB1YQHJqh2CuatmEKW4YPFjTUtIh/ZWflRSzZKiXu8h8XLWul a6Kn6JktPfT5QyfJWlFPJfsplXfKozqR5wTpTrtGkrFQPpXBrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCp5ehnoz4lM4Cu1VmVDUuq1kZsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTIxMmZjYjItNTc2Yi0z MjI4LWIyZGQtNDQyZTkzMGUzYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEc8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbWyKyCon840IuCKKnsXSZ3WQHrjgkBVKYKRbLnDPt31EmfSHxhZqWj gvwxyCaxtskvkEVhMhRtoi/cdwao+8jGPtGNs6JtpO8qh1e38bza1UWqbJGEKQaB 7EIKXQYUydEGmycaQb8U4sXjyUve4iQx67DQmJhrk8TeVfxfRwyW4K5x4CP1b3JK QC/LW90ykg98QzndOfPs703dewMFa5Yxq3nDKdunpmhUvU9aJf9y7oSG9V8WVrD+ hUVBaU3sNwfrek3PK2ooh0aGo6EwyruLNQlKHEwpInDEhzVU+xMI4nujlZqibckn FNj42r+m355veMgCRzQXl/1V7yDqsQE= -----END CERTIFICATE-----Generated at Sat Sep 5 02:50:08 2026 by rpki-client