$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa File: a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa (raw, json) Hash identifier: CbQIm6kP4CXDzCQI93Ayl7/YsiTPj0x2u1monYn1hLk= Subject key identifier: 4A:BB:1A:9E:8B:87:A9:BA:4C:1D:69:F3:75:B6:9C:E0:74:1B:72:CB Certificate issuer: /CN=4d929512-7541-4207-be46-8af4cc4a4800 Certificate serial: 010D0C9F4328584DE1508944B537D1B3D5A3E580 Authority key identifier: 50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 26658 IP address blocks: 104.232.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:89:44:b5:37:d1:b3:d5:a3:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d929512-7541-4207-be46-8af4cc4a4800 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=d829c731-5058-43d5-837a-b5dd1b2baa0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:89:bd:9f:36:85:11:59:be:6a:95:20:d5: 70:1d:a7:c8:c9:dd:66:ff:d3:d6:80:33:34:1e:46: c3:25:63:60:9c:6d:9e:2f:f0:5d:b8:12:26:c1:c8: fe:ef:f7:4b:87:7b:7b:92:00:04:db:52:c5:23:ad: 29:16:43:39:e1:7b:e4:5a:b3:8b:1b:1d:b2:8e:c7: f9:40:2c:29:c0:f6:3f:5d:68:91:99:f0:37:76:3a: 36:59:77:74:48:d6:df:31:22:fd:a7:25:48:42:86: e2:81:f1:77:61:6c:65:e8:d4:45:25:a3:7d:82:c2: 11:f0:91:b4:f3:fc:96:ec:5b:10:27:42:cf:cd:1c: 31:d5:74:90:01:5d:bc:a5:3b:0a:ae:22:38:89:d2: fc:6b:64:b9:50:90:96:9c:37:1e:d6:e2:96:e1:a9: ec:68:b3:24:83:90:89:df:f0:c9:55:46:49:07:85: 04:a2:c6:0b:43:61:5f:35:22:6e:a2:f4:46:89:11: 4b:b5:37:f3:ef:7c:a1:fc:2f:25:8b:26:d1:df:0f: 10:d5:0c:9c:42:40:c9:49:ab:da:b5:4c:1c:ea:e4: 03:04:c5:f6:b5:ae:99:59:99:d6:09:ff:06:5e:e9: 68:3b:41:7d:0a:3a:97:9e:69:c9:86:3f:e4:34:84: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BB:1A:9E:8B:87:A9:BA:4C:1D:69:F3:75:B6:9C:E0:74:1B:72:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl X509v3 Authority Key Identifier: keyid:50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer sbgp-ipAddrBlock: critical IPv4: 104.232.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:28:a3:8d:bc:ec:c7:25:dd:2c:66:02:84:3e:74:93:a6:dc: 92:29:f2:93:95:75:f1:4a:14:47:39:b5:7b:f6:cc:56:9a:5c: 63:b3:12:c0:2c:d9:10:95:fe:02:9f:87:98:7b:4c:b7:ed:13: 74:b1:b2:7e:4b:47:2c:08:45:7c:9a:6e:a2:c9:f8:3a:03:57: 1e:b9:84:28:89:27:69:10:be:2c:1e:7e:4b:d1:8e:58:2f:83: 65:a2:60:01:29:8a:fe:51:3b:fb:2b:45:f8:c3:be:f8:02:64: b0:52:9f:fb:68:5d:b0:23:8e:f8:3b:43:01:1c:4f:39:bc:58: 1c:d4:86:7f:e5:c7:5a:16:6e:b1:bc:9b:23:d3:7d:a3:8b:fc: b9:03:1f:a2:b2:23:b5:fa:ed:c7:23:df:99:41:b2:46:d0:99: ca:c9:73:9d:45:a8:82:28:1a:d4:ba:9d:0a:a0:95:cd:99:1b: 79:a0:47:37:59:ef:75:a1:fd:bd:99:d6:8d:55:75:d3:31:e7: 3f:52:21:fe:d4:70:1b:62:3c:76:3c:70:45:be:87:ed:a4:63: 97:a1:82:80:29:5a:7b:ec:bd:4a:34:9c:3f:ad:49:e7:e3:99: ca:c5:38:63:42:8c:a0:a4:5f:30:30:76:89:53:0a:e2:df:46: a1:33:06:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUIlEtTfRs9Wj5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5Mjk1MTItNzU0MS00MjA3LWJlNDYtOGFmNGNjNGE0 ODAwMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZDgyOWM3MzEtNTA1OC00M2Q1LTgzN2EtYjVkZDFiMmJhYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmCJvZ82hRFZvmqVINVwHafIyd1m/9PWgDM0 HkbDJWNgnG2eL/BduBImwcj+7/dLh3t7kgAE21LFI60pFkM54XvkWrOLGx2yjsf5 QCwpwPY/XWiRmfA3djo2WXd0SNbfMSL9pyVIQobigfF3YWxl6NRFJaN9gsIR8JG0 8/yW7FsQJ0LPzRwx1XSQAV28pTsKriI4idL8a2S5UJCWnDce1uKW4ansaLMkg5CJ 3/DJVUZJB4UEosYLQ2FfNSJuovRGiRFLtTfz73yh/C8liybR3w8Q1QycQkDJSava tUwc6uQDBMX2ta6ZWZnWCf8GXuloO0F9CjqXnmnJhj/kNIQ5lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq7Gp6Lh6m6TB1p83W2nOB0G3LLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80ZDky OTUxMi03NTQxLTQyMDctYmU0Ni04YWY0Y2M0YTQ4MDAvYTFhMjA2MGEtNjg4MS0z ZWY1LWFhN2MtMWMzOWY4MzliMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGQ5Mjk1MTItNzU0MS00MjA3LWJl NDYtOGFmNGNjNGE0ODAwLzRkOTI5NTEyLTc1NDEtNDIwNy1iZTQ2LThhZjRjYzRh NDgwMC5jcmwwHwYDVR0jBBgwFoAUUHbGsA5Pv93rRfzEAudPVstdNTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80ZDkyOTUxMi03NTQxLTQyMDctYmU0Ni04YWY0 Y2M0YTQ4MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8oo4287Mcl3SxmAoQ+dJOm3JIp8pOVdfFKFEc5tXv2zFaaXGOzEsAs 2RCV/gKfh5h7TLftE3Sxsn5LRywIRXyabqLJ+DoDVx65hCiJJ2kQviwefkvRjlgv g2WiYAEpiv5RO/srRfjDvvgCZLBSn/toXbAjjvg7QwEcTzm8WBzUhn/lx1oWbrG8 myPTfaOL/LkDH6KyI7X67ccj35lBskbQmcrJc51FqIIoGtS6nQqglc2ZG3mgRzdZ 73Wh/b2Z1o1VddMx5z9SIf7UcBtiPHY8cEW+h+2kY5ehgoApWnvsvUo0nD+tSefj mcrFOGNCjKCkXzAwdolTCuLfRqEzBrc= -----END CERTIFICATE-----Generated at Sun May 24 06:45:45 2026 by rpki-client