$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c9cf584-3c7d-3d03-b587-2bfd3f7a4056.roa File: 2c9cf584-3c7d-3d03-b587-2bfd3f7a4056.roa (raw, json) Hash identifier: JiFiYBUZ+pxy6c/EDnNs7HyxqZblQaN+U0bfaFD6S/E= Subject key identifier: 03:9B:6D:DB:F9:26:1C:1A:44:6C:2E:04:72:44:BF:86:FE:5E:09:59 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D932555E863ABA7580D210900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c9cf584-3c7d-3d03-b587-2bfd3f7a4056.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 104.79.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:55:e8:63:ab:a7:58:0d:21:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=56ff1884-bd88-472e-9300-ef2bb00d9c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2b:44:c3:76:58:61:b4:8b:d4:97:ff:a3:b3: 8f:23:18:cd:8d:ac:90:28:97:21:2e:00:f5:4b:79: 8d:ab:0f:e8:fe:54:54:95:dd:47:52:99:a0:ba:9b: 3b:25:f2:5e:2e:41:e7:b7:80:d3:fb:08:df:25:a1: 2b:dd:c8:b1:32:4a:a1:7b:a4:67:93:1c:f7:29:86: 61:da:a3:a1:b9:6e:91:fd:d1:b7:89:8b:0e:82:b2: fd:1a:ca:b9:6a:46:1a:19:9b:31:99:87:aa:8a:fc: bc:f1:6f:db:0c:a5:c1:aa:cc:f6:0f:24:aa:96:d0: a5:01:f3:bb:b8:b7:21:e9:e7:80:28:d0:41:eb:93: 28:82:da:e9:62:61:2b:3f:2a:46:50:3c:ab:83:88: d7:e9:a8:28:97:92:46:a2:4b:ac:7f:23:fe:e9:05: 7f:d2:30:75:f7:4c:46:02:04:70:f1:8d:f0:6a:14: be:20:ae:cd:44:b4:9f:c8:9d:c6:c4:88:20:38:2b: a2:51:c1:65:f8:76:73:e0:0f:69:26:86:f7:16:9d: e1:65:08:0c:29:a3:e4:65:10:34:2a:4b:e9:fb:34: a8:5e:60:d9:e6:0c:78:ac:93:ab:9d:96:3e:2b:34: 55:22:18:8d:aa:12:7a:15:ed:08:4a:81:af:ce:6a: 2e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9B:6D:DB:F9:26:1C:1A:44:6C:2E:04:72:44:BF:86:FE:5E:09:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c9cf584-3c7d-3d03-b587-2bfd3f7a4056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.79.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:97:aa:b2:c8:cf:78:03:fb:b3:fa:99:b8:90:82:2c:c6:45: c4:73:c1:e2:28:63:61:3c:f1:36:4b:b9:a2:e5:4c:52:a6:4c: 1c:0c:e7:b9:ad:f7:f9:5a:05:70:fc:52:24:30:7f:c3:a5:be: 44:1f:d3:f0:94:88:77:4f:2c:8d:1b:90:a0:c7:96:81:2d:5e: ac:26:ea:0d:28:d0:90:22:70:ad:89:d9:b0:fb:44:5e:20:d3: 2b:24:1d:28:92:01:4a:b0:05:37:0b:2e:51:d4:d6:3c:cc:a1: 11:a3:1e:fd:71:24:16:8e:d9:7d:cd:11:57:a5:a8:d6:00:ef: b5:b9:ff:98:f4:ed:6d:7f:28:ee:3f:4d:3f:d5:23:a0:d4:64: d7:53:35:45:5c:2b:07:69:8e:30:85:3e:1e:a4:42:94:fc:83: 65:94:b9:ca:d2:c6:c3:b5:2f:ee:5a:50:85:8f:53:a1:ff:e3: 2a:cb:7d:f8:35:cc:43:e4:cc:19:21:66:d5:6d:f8:47:81:8f: fc:52:64:e2:d0:53:bf:3f:c4:63:da:86:1e:86:37:c7:d5:c4: 4d:22:32:df:4e:82:9b:1b:70:33:6c:fe:5c:5f:ec:b7:30:cc: ae:1a:e2:1d:b9:b7:02:98:8b:79:2b:d1:b6:60:88:5d:68:37: 3f:81:8a:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJVXoY6unWA0hCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NTZmZjE4ODQtYmQ4OC00NzJlLTkzMDAtZWYyYmIwMGQ5Yzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7itEw3ZYYbSL1Jf/o7OPIxjNjayQKJchLgD1 S3mNqw/o/lRUld1HUpmgups7JfJeLkHnt4DT+wjfJaEr3cixMkqhe6Rnkxz3KYZh 2qOhuW6R/dG3iYsOgrL9Gsq5akYaGZsxmYeqivy88W/bDKXBqsz2DySqltClAfO7 uLch6eeAKNBB65MogtrpYmErPypGUDyrg4jX6agol5JGokusfyP+6QV/0jB190xG AgRw8Y3wahS+IK7NRLSfyJ3GxIggOCuiUcFl+HZz4A9pJob3Fp3hZQgMKaPkZRA0 Kkvp+zSoXmDZ5gx4rJOrnZY+KzRVIhiNqhJ6Fe0ISoGvzmouwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAObbdv5JhwaRGwuBHJEv4b+XglZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmM5Y2Y1ODQtM2M3ZC0z ZDAzLWI1ODctMmJmZDNmN2E0MDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaE8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOXqrLIz3gD+7P6mbiQgizGRcRzweIoY2E88TZLuaLlTFKmTBwM57mt 9/laBXD8UiQwf8OlvkQf0/CUiHdPLI0bkKDHloEtXqwm6g0o0JAicK2J2bD7RF4g 0yskHSiSAUqwBTcLLlHU1jzMoRGjHv1xJBaO2X3NEVelqNYA77W5/5j07W1/KO4/ TT/VI6DUZNdTNUVcKwdpjjCFPh6kQpT8g2WUucrSxsO1L+5aUIWPU6H/4yrLffg1 zEPkzBkhZtVt+EeBj/xSZOLQU78/xGPahh6GN8fVxE0iMt9OgpsbcDNs/lxf7Lcw zK4a4h25twKYi3kr0bZgiF1oNz+BilE= -----END CERTIFICATE-----Generated at Tue Apr 21 21:53:30 2026 by rpki-client