$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa File: 643b1254-d7f1-376e-9ab7-2d0174638962.roa (raw, json) Hash identifier: mqhoHJ8kpAKhL5bfzf5J2SXoFIGaJfolEk+sSNDDDuc= Subject key identifier: AB:0A:82:C0:E1:FE:1C:50:47:82:71:36:0D:74:A7:35:EE:43:C5:F9 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584DE2B5E6DFE10E32AD899B1980 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 397423 IP address blocks: 104.245.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:e6:df:e1:0e:32:ad:89:9b:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=75f70a3d-fb96-464b-83bb-f20200b03d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5a:61:52:b0:bb:24:99:33:05:0a:21:c1:c6: 35:04:c1:3f:30:3a:de:84:9d:ae:f0:6e:e0:20:95: fd:9b:54:7d:8d:e1:ce:50:f4:59:e7:7e:10:15:85: db:29:8b:96:57:8e:58:78:9d:0d:90:69:8a:89:5e: 51:c5:33:0e:5a:cc:92:2e:fe:77:bd:23:f4:89:25: 46:36:be:72:b2:96:33:d3:22:fb:79:a9:59:d1:ac: ab:c2:bc:fc:bd:91:69:ef:45:eb:be:f2:61:17:30: 47:10:6a:bf:b6:2a:26:f9:d4:a0:9a:d0:64:30:59: 07:b0:0c:24:44:c6:ec:f9:c8:17:46:cc:3f:5f:45: fa:49:db:4a:ed:f3:fb:de:cf:5e:13:d2:e4:5e:04: b4:7e:66:ee:f8:74:d8:dd:e7:a5:14:4c:03:f8:11: d2:92:58:72:2b:eb:85:71:3e:1f:5d:8f:f4:9a:f7: 63:56:69:59:c1:f5:b4:12:11:f8:5c:47:e4:e1:a5: b2:0c:04:c0:5c:a5:44:1b:e6:40:6b:6d:68:c7:ee: d7:90:3e:36:35:07:17:4e:38:dd:ed:33:91:be:b5: c6:16:c9:c5:42:02:ef:df:e8:99:08:bb:4d:1c:2f: e1:47:06:48:ca:a2:c0:88:3f:aa:5c:f2:2c:4f:3e: be:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0A:82:C0:E1:FE:1C:50:47:82:71:36:0D:74:A7:35:EE:43:C5:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 104.245.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:99:9e:e8:33:55:23:7f:48:41:62:15:1b:e8:fd:25:55:37: 5a:de:6a:e1:8c:a5:68:b0:40:98:4a:88:85:75:12:b7:db:07: 24:6b:ee:61:54:91:97:59:71:fb:cf:dc:73:b0:17:97:4f:ff: 6e:6f:cc:8e:b4:f0:d1:5d:c1:2a:65:13:fd:ac:ca:f6:77:cb: 6f:13:ee:b8:7a:73:4b:17:c5:70:7d:66:b9:da:16:13:b2:09: 1c:7d:3c:34:6a:7e:38:12:f8:0c:dc:d4:0e:52:09:e7:52:0d: 74:98:e0:79:94:ef:09:87:a9:b1:f9:49:39:8d:c9:bf:0a:fc: bc:e4:5d:70:e3:5d:23:f7:d7:f0:23:6d:e8:cf:d4:4c:42:97: 25:9c:5c:a9:27:67:ae:99:93:0b:d1:68:ed:6a:ac:1c:4e:aa: 72:e1:73:48:4f:1a:29:85:f8:e1:c7:0d:2a:91:f7:c4:0e:2c: c9:16:78:57:dd:38:a7:26:69:85:55:62:67:b7:7f:54:9b:43: db:2a:4e:c8:b2:d7:fc:48:68:07:40:c8:5d:8e:58:40:8a:41: 03:e8:21:ab:f1:8d:3e:87:a4:f8:9a:c9:95:10:2f:cc:5a:7d: 0e:82:ca:71:28:a6:c0:a0:b0:c2:6d:fa:4c:d7:bb:13:fc:3a: f1:92:da:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itebf4Q4yrYmbGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk NzVmNzBhM2QtZmI5Ni00NjRiLTgzYmItZjIwMjAwYjAzZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1phUrC7JJkzBQohwcY1BME/MDrehJ2u8G7g IJX9m1R9jeHOUPRZ534QFYXbKYuWV45YeJ0NkGmKiV5RxTMOWsySLv53vSP0iSVG Nr5yspYz0yL7ealZ0ayrwrz8vZFp70XrvvJhFzBHEGq/tiom+dSgmtBkMFkHsAwk RMbs+cgXRsw/X0X6SdtK7fP73s9eE9LkXgS0fmbu+HTY3eelFEwD+BHSklhyK+uF cT4fXY/0mvdjVmlZwfW0EhH4XEfk4aWyDATAXKVEG+ZAa21ox+7XkD42NQcXTjjd 7TORvrXGFsnFQgLv3+iZCLtNHC/hRwZIyqLAiD+qXPIsTz6+BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsKgsDh/hxQR4JxNg10pzXuQ8X5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNjQzYjEyNTQtZDdmMS0z NzZlLTlhYjctMmQwMTc0NjM4OTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWZnugzVSN/SEFiFRvo/SVVN1reauGMpWiwQJhKiIV1ErfbByRr7mFU kZdZcfvP3HOwF5dP/25vzI608NFdwSplE/2syvZ3y28T7rh6c0sXxXB9ZrnaFhOy CRx9PDRqfjgS+Azc1A5SCedSDXSY4HmU7wmHqbH5STmNyb8K/LzkXXDjXSP31/Aj bejP1ExClyWcXKknZ66ZkwvRaO1qrBxOqnLhc0hPGimF+OHHDSqR98QOLMkWeFfd OKcmaYVVYme3f1SbQ9sqTsiy1/xIaAdAyF2OWECKQQPoIavxjT6HpPiayZUQL8xa fQ6CynEopsCgsMJt+kzXuxP8OvGS2gQ= -----END CERTIFICATE-----Generated at Fri Jun 12 12:42:41 2026 by rpki-client