$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ff253e-bade-3cc0-93f8-33c6f6022fa0.roa File: d4ff253e-bade-3cc0-93f8-33c6f6022fa0.roa (raw, json) Hash identifier: RGBqSF0B6XwIydhxUo3BYN7rkwclQqqeURurLa/gFYo= Subject key identifier: C1:79:36:41:CF:19:AD:1D:9C:5F:91:F6:CB:E1:24:5A:38:14:B8:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7634EE9A62B753B052CEE080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ff253e-bade-3cc0-93f8-33c6f6022fa0.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 20940 IP address blocks: 104.89.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:ee:9a:62:b7:53:b0:52:ce:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=8d16f94c-59b7-43ad-9141-90c710204e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:96:df:38:0c:3c:53:d4:e8:c4:eb:89:3a: a0:b2:c3:8e:fd:60:94:c3:2c:a6:bf:04:f7:34:bf: 0f:11:50:50:f9:95:e5:78:93:91:49:23:9b:4a:1d: 55:24:1d:4a:13:85:52:8d:3f:f4:b5:04:8f:08:0d: 1e:3f:a3:0a:21:7f:85:cc:0e:23:39:03:0d:a4:9a: 6b:f7:cc:98:80:01:6b:f5:40:1e:76:74:b9:9c:70: ae:02:c8:04:e6:21:62:4b:1b:df:a1:bd:d2:01:04: bc:14:5e:a7:25:e8:96:d6:51:3d:a3:90:94:20:cd: 11:ae:c6:67:f0:32:e1:64:5e:8b:04:f2:78:48:ea: 7e:2b:82:dc:72:da:5e:2a:1a:4d:e7:46:e6:91:b7: 22:7c:2b:5d:a1:67:43:28:9d:7c:98:d6:ea:93:be: bf:35:ee:ec:c0:4c:98:88:dc:ae:2f:de:ff:a7:a7: 6a:75:bf:e8:d4:d8:b6:03:7c:b9:d0:e0:0e:64:bf: 42:0a:d8:c9:5d:2f:15:43:26:0c:a1:c6:6f:77:a1: bf:84:fb:19:e2:03:36:83:5b:ea:20:5d:ca:0e:73: a9:e9:7d:f8:e8:d3:e5:99:1c:9e:5e:2e:7b:e4:df: fa:49:74:a6:77:fa:d2:25:9d:2d:88:73:6b:a1:e7: 6b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:79:36:41:CF:19:AD:1D:9C:5F:91:F6:CB:E1:24:5A:38:14:B8:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ff253e-bade-3cc0-93f8-33c6f6022fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.89.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:23:c1:56:d0:5d:40:36:f5:09:49:ce:a8:67:5e:e9:50:f2: ad:ec:15:ea:18:08:57:c5:f6:74:94:89:42:ae:e5:f5:7f:3e: c1:ef:3f:63:2d:37:df:8f:69:06:6a:26:75:ba:2e:f5:d7:a8: de:22:58:91:a7:56:08:91:32:10:60:21:ed:ae:02:96:50:78: 4d:42:4b:3c:c9:e7:31:43:89:2f:89:1f:47:a6:ee:1f:8e:8d: 22:e7:2e:f6:c9:4e:7e:5b:7e:94:3f:06:93:2b:ca:81:fb:63: 5a:73:89:37:85:99:07:4d:f3:23:9a:5e:a3:88:94:a5:48:68: 09:44:75:58:bb:4b:cf:47:93:00:b3:07:b8:ac:d9:c2:6a:48: c6:5d:89:51:35:4d:40:8a:8e:00:fa:26:f5:0d:7e:c5:51:fe: cf:d9:eb:d6:16:1c:74:81:aa:2c:53:ad:4a:78:9b:4f:b0:4a: 50:29:86:b0:b9:f3:fc:21:01:c8:8f:29:9a:12:5a:07:55:22: a8:2f:fa:a6:4a:b1:51:ef:6d:90:db:cb:6f:ac:cb:64:9e:3d: 59:d0:59:a7:59:8a:33:a7:bd:8f:8c:9c:5b:53:c8:c7:d2:a9: e5:c3:ed:c6:3a:07:bf:16:24:98:a0:c7:59:7f:e2:d4:90:f3: 5e:8e:d9:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NO6aYrdTsFLO4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk OGQxNmY5NGMtNTliNy00M2FkLTkxNDEtOTBjNzEwMjA0ZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsluW3zgMPFPU6MTriTqgssOO/WCUwyymvwT3 NL8PEVBQ+ZXleJORSSObSh1VJB1KE4VSjT/0tQSPCA0eP6MKIX+FzA4jOQMNpJpr 98yYgAFr9UAednS5nHCuAsgE5iFiSxvfob3SAQS8FF6nJeiW1lE9o5CUIM0RrsZn 8DLhZF6LBPJ4SOp+K4LcctpeKhpN50bmkbcifCtdoWdDKJ18mNbqk76/Ne7swEyY iNyuL97/p6dqdb/o1Ni2A3y50OAOZL9CCtjJXS8VQyYMocZvd6G/hPsZ4gM2g1vq IF3KDnOp6X346NPlmRyeXi575N/6SXSmd/rSJZ0tiHNroedrQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF5NkHPGa0dnF+R9svhJFo4FLiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDRmZjI1M2UtYmFkZS0z Y2MwLTkzZjgtMzNjNmY2MDIyZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYjwVbQXUA29QlJzqhnXulQ8q3sFeoYCFfF9nSUiUKu5fV/PsHvP2Mt N9+PaQZqJnW6LvXXqN4iWJGnVgiRMhBgIe2uApZQeE1CSzzJ5zFDiS+JH0em7h+O jSLnLvbJTn5bfpQ/BpMryoH7Y1pziTeFmQdN8yOaXqOIlKVIaAlEdVi7S89HkwCz B7is2cJqSMZdiVE1TUCKjgD6JvUNfsVR/s/Z69YWHHSBqixTrUp4m0+wSlAphrC5 8/whAciPKZoSWgdVIqgv+qZKsVHvbZDby2+sy2SePVnQWadZijOnvY+MnFtTyMfS qeXD7cY6B78WJJigx1l/4tSQ816O2SA= -----END CERTIFICATE-----Generated at Tue Jul 21 20:50:33 2026 by rpki-client