$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa File: 3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa (raw, json) Hash identifier: D3DyN+pTQFQ+IFlHutJdCTWBNYaaMpzZB9AHj9xPCKc= Subject key identifier: A2:59:3A:BE:EA:35:2F:67:5B:C0:03:1D:9E:5E:31:2C:5E:A4:C3:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8AC54FB580B47C39BAACD080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 104.70.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:4f:b5:80:b4:7c:39:ba:ac:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=e51474b2-d2ba-4417-b2dc-4bf0611df4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4e:2a:86:e0:0f:83:5e:2c:a2:22:f0:d2:94: 01:e7:7d:c5:d3:f7:0c:d8:fc:4f:dd:c7:8f:d8:c6: 4d:88:36:89:11:d4:45:74:81:6f:53:b1:86:8f:a7: 7d:34:2f:6c:96:10:e1:fd:a1:26:04:90:3b:b5:54: a0:db:4f:d3:8a:92:9e:44:1c:c4:f0:df:7f:1e:d7: c2:b6:69:01:80:27:3d:b2:00:8a:33:26:ea:95:50: b0:f5:e5:41:13:83:60:1b:ef:7e:0b:45:55:f1:79: 01:7c:25:28:fa:ab:88:a4:24:38:df:10:43:f8:b8: 67:10:7b:9d:54:83:b9:15:31:e7:55:3b:12:57:8f: b1:42:e0:64:02:93:a3:b3:f0:31:83:8e:3c:fb:6d: 12:61:09:3d:50:fa:cc:69:fa:ee:ae:a0:a1:0c:a2: c5:33:a6:c3:0d:13:8b:c0:3d:b2:84:4e:a8:5c:96: f9:ab:d4:38:12:aa:03:ce:4a:4e:26:b9:55:53:71: 41:c5:93:6a:04:f1:01:78:9a:1d:7c:00:5f:91:46: f3:09:78:bb:9b:3d:51:38:b5:7c:8a:aa:5f:5d:97: c7:1b:fb:f4:ae:64:45:15:a8:54:de:08:fb:a1:e7: 94:8a:d8:5c:d3:31:c2:79:b1:18:2c:1f:bd:c7:8c: f1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:59:3A:BE:EA:35:2F:67:5B:C0:03:1D:9E:5E:31:2C:5E:A4:C3:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:63:0f:64:e0:52:65:35:be:d0:ff:9a:1f:c9:7d:aa:12:0d: dc:c6:79:29:a1:95:f6:b4:6f:81:c1:09:72:a9:f2:61:c2:34: a3:f7:32:5d:03:d9:ab:01:e8:5d:d6:5e:1e:d6:da:17:ba:9a: 77:1f:79:28:e6:da:01:07:88:63:d8:84:a7:1a:a4:99:2b:af: 66:c7:a7:1c:a3:1e:31:23:a1:b9:26:88:76:3f:85:05:07:ce: 16:9c:30:3f:8d:d8:30:d9:29:bc:a4:f6:f7:4c:b7:14:2e:81: 6a:f9:82:63:22:a2:2f:b3:ab:86:ee:97:28:a7:df:e8:8a:3d: 1f:dc:96:70:8b:98:d0:40:23:c3:48:d6:f4:5c:ef:5f:f8:df: 07:a0:41:f7:43:fc:10:e6:d8:2c:19:2a:c1:e3:ba:bd:29:c9: 94:2d:2b:9f:f2:2c:73:11:ad:75:db:10:bd:f8:7f:35:13:f2: 12:3e:22:0d:6b:33:9e:ca:44:61:60:8f:ab:64:fb:d6:7d:7f: 50:56:37:66:0e:60:e0:2c:67:09:69:37:32:78:00:6b:ab:a9: db:89:99:1a:e8:f5:63:eb:6f:81:70:57:3d:4f:dc:04:a4:31: a4:60:c5:cc:6c:4b:00:1c:9f:4b:d9:aa:e8:fc:3b:d4:f2:2a: 9d:59:92:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxU+1gLR8Obqs0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZTUxNDc0YjItZDJiYS00NDE3LWIyZGMtNGJmMDYxMWRmNGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi04qhuAPg14soiLw0pQB533F0/cM2PxP3ceP 2MZNiDaJEdRFdIFvU7GGj6d9NC9slhDh/aEmBJA7tVSg20/TipKeRBzE8N9/HtfC tmkBgCc9sgCKMybqlVCw9eVBE4NgG+9+C0VV8XkBfCUo+quIpCQ43xBD+LhnEHud VIO5FTHnVTsSV4+xQuBkApOjs/Axg448+20SYQk9UPrMafrurqChDKLFM6bDDROL wD2yhE6oXJb5q9Q4EqoDzkpOJrlVU3FBxZNqBPEBeJodfABfkUbzCXi7mz1ROLV8 iqpfXZfHG/v0rmRFFahU3gj7oeeUithc0zHCebEYLB+9x4zxQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJZOr7qNS9nW8ADHZ5eMSxepMMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2QwNzMzYWItOGY5YS0z ZWQ3LThkMDYtNjUzZGU0MGRhMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaEZ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEljD2TgUmU1vtD/mh/JfaoSDdzGeSmhlfa0b4HBCXKp8mHCNKP3Ml0D 2asB6F3WXh7W2he6mncfeSjm2gEHiGPYhKcapJkrr2bHpxyjHjEjobkmiHY/hQUH zhacMD+N2DDZKbyk9vdMtxQugWr5gmMioi+zq4bulyin3+iKPR/clnCLmNBAI8NI 1vRc71/43wegQfdD/BDm2CwZKsHjur0pyZQtK5/yLHMRrXXbEL34fzUT8hI+Ig1r M57KRGFgj6tk+9Z9f1BWN2YOYOAsZwlpNzJ4AGurqduJmRro9WPrb4FwVz1P3ASk MaRgxcxsSwAcn0vZquj8O9TyKp1Zkls= -----END CERTIFICATE-----Generated at Wed Apr 22 00:10:59 2026 by rpki-client