$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30a75e43-1203-3f39-b03f-81ce682144bd.roa File: 30a75e43-1203-3f39-b03f-81ce682144bd.roa (raw, json) Hash identifier: R2L9fZYyvuKLp2zrZ+dujJMm4F1MxH1WmFjy3Mj4hpE= Subject key identifier: 33:57:DA:74:3C:18:4C:E8:96:CA:12:EA:C1:4E:F4:EA:07:3E:E7:1B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D932555CF6C1C2B2362BC9160 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30a75e43-1203-3f39-b03f-81ce682144bd.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 104.78.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:55:cf:6c:1c:2b:23:62:bc:91:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=7589fb0e-6db5-44b2-b24c-8c4ec5f2d938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a0:25:67:b5:75:48:30:30:7b:9c:d4:0f:70: ce:cf:34:ff:7e:2c:5b:f0:2b:5e:5b:88:36:1c:89: 91:b2:41:ac:95:f4:2b:9f:fe:29:b0:7a:d0:35:e6: 9b:5f:ab:20:c2:4e:96:20:a5:00:57:30:cb:6d:c7: f4:32:a0:76:6b:06:46:2a:30:25:97:66:ac:74:6d: 78:82:d8:5b:58:8d:b5:99:05:3f:ae:63:08:2f:70: 58:f8:bf:5d:de:4c:73:cb:d1:ca:29:cc:3d:bb:c5: 54:d7:4d:6f:a9:e8:92:d7:73:46:78:6a:24:fc:05: 68:80:3c:5f:0b:46:23:fc:c3:2e:8f:96:a1:7b:e6: 81:3d:1d:ae:85:15:30:24:c9:44:2c:ed:f1:44:90: 8b:f2:f7:c4:87:40:fc:6a:7f:90:8c:64:16:49:bd: da:bf:62:82:90:29:3a:44:d5:a8:37:4e:8a:94:71: 75:b0:8d:b9:93:dd:63:11:22:69:b9:06:47:0f:e5: ba:cc:a1:8e:63:bf:05:35:ac:c7:f6:61:fd:81:46: 97:67:52:f4:15:13:d7:c1:04:a7:61:06:c1:57:5f: 2d:b6:a4:9f:07:16:f6:4b:88:b7:8d:7c:aa:6e:31: 4f:17:c2:fc:b8:4c:22:68:54:68:31:28:1e:08:50: 0c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:57:DA:74:3C:18:4C:E8:96:CA:12:EA:C1:4E:F4:EA:07:3E:E7:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30a75e43-1203-3f39-b03f-81ce682144bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.78.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:75:d5:c2:b3:02:09:3f:99:53:21:dd:13:42:59:14:34:e9: ca:ea:ff:df:d7:09:a8:ca:1d:aa:36:3a:4e:3e:9d:63:f7:0e: f0:6d:9a:54:7d:79:6c:b8:f9:97:9b:76:fe:2c:3c:9b:88:15: ee:eb:c4:ea:15:d1:61:79:48:6a:a0:2b:df:44:6d:4d:f7:7a: 44:b2:1d:63:a0:91:da:9f:48:8d:a5:34:ce:b4:ed:fd:be:98: 2f:a7:51:5f:21:ab:6f:0f:3f:a2:7c:b0:f3:d4:d9:7f:bd:4e: 82:3d:ec:65:b7:36:82:cc:70:c5:6e:08:10:b4:bd:e9:d9:b9: 58:b6:c9:a0:89:51:d5:b5:18:8e:b6:75:63:0d:1e:28:a9:5c: 50:b0:9e:b5:01:d1:50:78:f6:84:00:a5:d7:b2:70:fd:98:9c: 00:ea:09:6f:be:b0:62:82:8c:ef:82:38:b6:3c:04:3a:b8:29: e3:72:fe:ca:08:6a:5a:d6:91:2e:fd:38:68:1f:aa:56:f5:f0: df:37:c5:50:b8:a5:c7:54:4b:15:86:e8:cf:b2:a7:a7:df:26: 31:d8:f2:a3:84:fa:08:82:f5:5a:1a:4c:b9:d5:c9:7b:72:c5: 8c:d7:42:8d:07:b0:7a:bd:2e:e0:e2:a7:b0:fd:84:89:5d:19: 98:d2:8c:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJVXPbBwrI2K8kWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NzU4OWZiMGUtNmRiNS00NGIyLWIyNGMtOGM0ZWM1ZjJkOTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KAlZ7V1SDAwe5zUD3DOzzT/fixb8CteW4g2 HImRskGslfQrn/4psHrQNeabX6sgwk6WIKUAVzDLbcf0MqB2awZGKjAll2asdG14 gthbWI21mQU/rmMIL3BY+L9d3kxzy9HKKcw9u8VU101vqeiS13NGeGok/AVogDxf C0Yj/MMuj5ahe+aBPR2uhRUwJMlELO3xRJCL8vfEh0D8an+QjGQWSb3av2KCkCk6 RNWoN06KlHF1sI25k91jESJpuQZHD+W6zKGOY78FNazH9mH9gUaXZ1L0FRPXwQSn YQbBV18ttqSfBxb2S4i3jXyqbjFPF8L8uEwiaFRoMSgeCFAM5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNX2nQ8GEzolsoS6sFO9OoHPucbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzBhNzVlNDMtMTIwMy0z ZjM5LWIwM2YtODFjZTY4MjE0NGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaE67MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABx11cKzAgk/mVMh3RNCWRQ06crq/9/XCajKHao2Ok4+nWP3DvBtmlR9 eWy4+Zebdv4sPJuIFe7rxOoV0WF5SGqgK99EbU33ekSyHWOgkdqfSI2lNM607f2+ mC+nUV8hq28PP6J8sPPU2X+9ToI97GW3NoLMcMVuCBC0venZuVi2yaCJUdW1GI62 dWMNHiipXFCwnrUB0VB49oQApdeycP2YnADqCW++sGKCjO+COLY8BDq4KeNy/soI alrWkS79OGgfqlb18N83xVC4pcdUSxWG6M+yp6ffJjHY8qOE+giC9VoaTLnVyXty xYzXQo0HsHq9LuDip7D9hIldGZjSjPE= -----END CERTIFICATE-----Generated at Tue Apr 21 20:43:26 2026 by rpki-client