$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a241e1d4-e357-39a9-a211-387c06975e8a.roa File: a241e1d4-e357-39a9-a211-387c06975e8a.roa (raw, json) Hash identifier: 1ndlNx/72EUmeHvFoQvb6xOUTFjPdhblAcD+VGmKUzo= Subject key identifier: 74:83:54:FE:2B:82:34:02:7F:12:A7:C9:89:15:E4:BB:20:C2:6B:EF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7A64E2A307DD05829C4F2780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a241e1d4-e357-39a9-a211-387c06975e8a.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 20940 IP address blocks: 104.120.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:e2:a3:07:dd:05:82:9c:4f:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=7974d79f-4b4b-4e20-8dd4-18265166ac21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d3:53:8a:ed:f1:c4:6e:29:17:1c:64:9d:ec: 4a:4b:3b:9d:a2:47:15:ea:63:a9:7d:f9:19:c3:17: f3:86:0c:14:cd:4b:4c:d1:e1:57:bd:f7:f6:7f:b1: 82:ce:0c:88:0e:62:5d:22:45:cc:5a:63:b6:1e:3b: 23:4e:db:9a:a8:76:ee:57:e7:33:24:b7:39:68:04: 16:19:2d:11:c6:1f:f1:04:ee:cf:76:6f:fa:05:72: 2f:f3:83:15:5f:e2:65:a7:b3:25:93:62:37:f9:24: db:83:41:20:af:1f:86:39:42:1c:4c:ab:31:2a:95: 41:81:bc:75:b1:d8:e9:63:4c:f2:69:1a:00:72:8c: 4f:d9:eb:2e:59:5e:e9:31:1f:99:1f:59:5e:f6:3e: dd:7d:8d:59:37:b3:4f:ac:7e:75:da:e9:e6:ee:a2: 33:c1:e3:15:44:fb:76:82:17:ad:de:f1:27:70:3c: 59:84:5b:25:9b:75:0e:76:6b:ee:73:9d:12:29:b2: 0f:52:d9:c0:a7:51:27:7d:3a:df:8c:0c:12:6c:01: e8:e2:c3:fc:2c:ed:68:a3:3f:67:4a:d6:22:f8:a0: 3a:dc:28:5d:de:bf:b7:1f:e2:8f:8b:23:cb:1b:88: 2d:a0:9a:af:74:85:24:2f:fb:29:c0:60:a6:9f:a6: da:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:83:54:FE:2B:82:34:02:7F:12:A7:C9:89:15:E4:BB:20:C2:6B:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a241e1d4-e357-39a9-a211-387c06975e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.120.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:49:76:77:dd:e1:2d:ce:ba:32:b8:7f:32:c7:88:6e:dd:9f: 5e:a2:f4:ca:95:30:82:7f:e4:9f:b7:39:73:56:3b:a1:2c:26: 96:8d:fd:c8:dc:19:2b:c9:b5:cc:17:8e:4a:c5:64:9b:d4:41: cf:e4:83:94:eb:1d:c3:61:29:a9:9b:fe:d9:5d:54:77:61:e7: bc:97:bb:9b:17:80:9e:d8:e8:80:df:43:db:09:6c:13:66:bc: 0c:bd:1e:fc:1c:a8:09:ee:48:3b:93:66:e5:98:37:32:fe:7a: e2:7c:fa:2a:74:48:4e:cb:49:65:24:c9:46:61:1b:41:10:7b: 23:1f:cc:9c:d4:68:11:18:84:b6:24:ee:78:5b:47:e9:76:e0: c1:56:7d:70:f4:4d:71:97:4c:66:74:b0:c0:cd:11:e5:f4:ba: 7c:61:58:49:85:ec:20:af:4f:eb:e1:56:7a:7a:35:0b:14:1a: 3f:43:94:1c:20:65:a7:19:3f:7b:f5:cb:48:a7:8f:d7:46:50: 71:ae:c3:c7:e5:b2:1e:89:a2:5a:9e:e5:3d:63:7c:98:1e:5c: e0:ae:a2:e4:2f:1e:4a:6f:05:c5:04:5d:07:de:b7:6b:13:5a: 37:7a:2e:e2:e9:02:9a:ab:09:a5:dd:b2:18:ea:39:ab:cc:f8: 8d:e1:d5:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZOKjB90FgpxPJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk Nzk3NGQ3OWYtNGI0Yi00ZTIwLThkZDQtMTgyNjUxNjZhYzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NNTiu3xxG4pFxxknexKSzudokcV6mOpffkZ wxfzhgwUzUtM0eFXvff2f7GCzgyIDmJdIkXMWmO2HjsjTtuaqHbuV+czJLc5aAQW GS0Rxh/xBO7Pdm/6BXIv84MVX+Jlp7Mlk2I3+STbg0Egrx+GOUIcTKsxKpVBgbx1 sdjpY0zyaRoAcoxP2esuWV7pMR+ZH1le9j7dfY1ZN7NPrH512unm7qIzweMVRPt2 ghet3vEncDxZhFslm3UOdmvuc50SKbIPUtnAp1EnfTrfjAwSbAHo4sP8LO1ooz9n StYi+KA63Chd3r+3H+KPiyPLG4gtoJqvdIUkL/spwGCmn6balwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSDVP4rgjQCfxKnyYkV5LsgwmvvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTI0MWUxZDQtZTM1Ny0z OWE5LWEyMTEtMzg3YzA2OTc1ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHiBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJJdnfd4S3OujK4fzLHiG7dn16i9MqVMIJ/5J+3OXNWO6EsJpaN/cjc GSvJtcwXjkrFZJvUQc/kg5TrHcNhKamb/tldVHdh57yXu5sXgJ7Y6IDfQ9sJbBNm vAy9HvwcqAnuSDuTZuWYNzL+euJ8+ip0SE7LSWUkyUZhG0EQeyMfzJzUaBEYhLYk 7nhbR+l24MFWfXD0TXGXTGZ0sMDNEeX0unxhWEmF7CCvT+vhVnp6NQsUGj9DlBwg ZacZP3v1y0inj9dGUHGuw8flsh6Jolqe5T1jfJgeXOCuouQvHkpvBcUEXQfet2sT Wjd6LuLpApqrCaXdshjqOavM+I3h1Tg= -----END CERTIFICATE-----Generated at Tue Jul 21 20:50:23 2026 by rpki-client