$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11f5fa37-d466-3eba-8f11-219ac6c9cc1b.roa File: 11f5fa37-d466-3eba-8f11-219ac6c9cc1b.roa (raw, json) Hash identifier: YFkCghHYrIZV3z6QHmWwq4AomEbNmfLR944bOYfhhkY= Subject key identifier: EA:9C:D0:DD:D5:90:12:53:66:0C:B4:57:FB:93:54:3D:07:0D:99:AB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E66DA2719FF9271165CB59440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11f5fa37-d466-3eba-8f11-219ac6c9cc1b.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 16625 IP address blocks: 104.103.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:27:19:ff:92:71:16:5c:b5:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=18abdc60-847e-4e12-a13e-f3d1ec8605de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:98:23:92:51:3b:aa:e2:ae:96:6b:00:c5:50: 6c:e5:60:18:20:54:73:61:a9:88:72:f8:a6:9b:12: c9:70:5c:b8:bb:ad:bf:27:fe:00:27:54:fe:69:c6: a1:bb:4d:7f:6b:f0:06:45:ee:4c:09:80:e2:61:64: f7:b6:9c:02:46:9f:7b:e9:1e:c3:da:81:57:89:9f: f0:aa:6a:79:e8:c2:22:41:43:1e:b4:0f:45:03:8a: f9:c0:9c:4b:d8:60:c6:16:47:12:08:69:f4:3a:ec: 46:2b:32:ee:e7:bc:5a:15:d7:58:e7:77:a4:ee:47: 74:0e:ee:4b:1a:da:0f:54:29:af:d7:a9:82:69:f3: 2b:4b:69:59:3a:f1:ef:6d:e9:95:31:89:65:c8:eb: 0f:24:f4:06:89:50:6e:b6:76:0d:fd:7b:1a:34:e5: b2:d2:f7:90:c4:d0:79:66:ca:52:ea:30:e3:05:3e: 0d:c9:84:85:7f:1d:05:6a:04:2e:6f:eb:9f:44:10: 2e:a1:3f:4c:33:87:aa:25:c0:de:86:3d:ef:10:e9: 1a:a7:79:a4:78:3f:c6:b9:58:8e:90:66:17:c5:4f: 28:c1:6f:c1:d1:62:bb:be:f0:65:f0:b5:35:4b:14: 1c:12:91:a5:43:6f:20:a0:9a:1b:25:79:83:4e:1d: 91:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9C:D0:DD:D5:90:12:53:66:0C:B4:57:FB:93:54:3D:07:0D:99:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11f5fa37-d466-3eba-8f11-219ac6c9cc1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.103.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f9:a1:7b:24:b1:d1:e8:69:e4:a4:27:47:b2:a3:80:29:49: 3b:c3:0e:d6:fd:9a:2a:16:54:35:7a:a0:fd:60:db:66:ec:c3: 8f:25:ac:4c:09:3b:f9:74:52:c8:e4:b1:b8:aa:49:e2:b7:03: ff:13:c8:d7:52:89:eb:32:c2:82:5b:a1:53:7c:49:60:87:ff: 64:39:50:35:82:fe:c6:50:15:f4:9e:39:fb:00:db:a5:a2:6d: 05:9d:f4:74:53:a4:3d:0a:6e:5a:e5:fb:64:9f:34:64:20:0b: 78:41:03:ba:d3:2a:e0:68:a9:31:0f:88:b3:d9:75:09:ac:ce: 7e:8c:08:89:84:bb:d2:e5:75:e6:09:75:fb:96:f6:c0:bc:68: d7:5a:a7:7c:c7:50:d1:f8:c3:d7:33:86:c2:0f:a2:11:c6:00: a9:12:2e:08:1b:3f:82:07:80:09:18:38:21:8a:f3:da:12:e9: 6b:68:c1:dd:12:41:6f:8d:d7:32:56:cc:6a:89:c2:98:08:2f: 2e:34:d3:87:e3:ac:b9:e7:7d:d4:81:82:fd:56:36:6a:55:67: b7:f4:72:fb:74:1d:c5:53:1f:b1:1d:84:43:3d:fb:d7:55:df: ec:37:e2:cd:39:43:e6:45:d9:bf:77:9a:ef:6d:ac:8d:e8:36: 6b:0e:bc:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2icZ/5JxFly1lEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk MThhYmRjNjAtODQ3ZS00ZTEyLWExM2UtZjNkMWVjODYwNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpgjklE7quKulmsAxVBs5WAYIFRzYamIcvim mxLJcFy4u62/J/4AJ1T+acahu01/a/AGRe5MCYDiYWT3tpwCRp976R7D2oFXiZ/w qmp56MIiQUMetA9FA4r5wJxL2GDGFkcSCGn0OuxGKzLu57xaFddY53ek7kd0Du5L GtoPVCmv16mCafMrS2lZOvHvbemVMYllyOsPJPQGiVButnYN/XsaNOWy0veQxNB5 ZspS6jDjBT4NyYSFfx0FagQub+ufRBAuoT9MM4eqJcDehj3vEOkap3mkeD/GuViO kGYXxU8owW/B0WK7vvBl8LU1SxQcEpGlQ28goJobJXmDTh2RUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqc0N3VkBJTZgy0V/uTVD0HDZmrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTFmNWZhMzctZDQ2Ni0z ZWJhLThmMTEtMjE5YWM2YzljYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaGd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADj5oXsksdHoaeSkJ0eyo4ApSTvDDtb9mioWVDV6oP1g22bsw48lrEwJ O/l0UsjksbiqSeK3A/8TyNdSiesywoJboVN8SWCH/2Q5UDWC/sZQFfSeOfsA26Wi bQWd9HRTpD0Kblrl+2SfNGQgC3hBA7rTKuBoqTEPiLPZdQmszn6MCImEu9LldeYJ dfuW9sC8aNdap3zHUNH4w9czhsIPohHGAKkSLggbP4IHgAkYOCGK89oS6Wtowd0S QW+N1zJWzGqJwpgILy4004fjrLnnfdSBgv1WNmpVZ7f0cvt0HcVTH7EdhEM9+9dV 3+w34s05Q+ZF2b93mu9trI3oNmsOvPE= -----END CERTIFICATE-----Generated at Tue Jul 21 19:59:51 2026 by rpki-client