$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4479f807-1108-38b1-ac4e-814281b35deb.roa File: 4479f807-1108-38b1-ac4e-814281b35deb.roa (raw, json) Hash identifier: cMitchJeT0tQ+/w9WEkk58Uqgvfx/jdTT1E6Fwfv8Po= Subject key identifier: 6C:3B:C9:EF:13:EC:89:C4:4A:F5:45:EA:DA:FA:EC:7C:6B:67:FA:AB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D93255E119E89FC7AF3A0B580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4479f807-1108-38b1-ac4e-814281b35deb.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 104.70.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:5e:11:9e:89:fc:7a:f3:a0:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=cdcab59b-f3cf-4b57-be49-3627def944a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:37:51:b5:74:5d:f0:fa:97:64:a3:94:d7:37: 19:9a:73:d0:4a:f4:6f:1d:e3:cc:da:f5:6d:e4:51: cb:07:d6:14:91:47:d4:70:e3:ad:2c:e8:58:f0:98: 7b:84:f9:24:b2:3d:32:9f:e8:f1:e3:b1:1d:d2:cf: 4b:ee:a9:4b:08:40:93:68:33:54:07:46:41:e2:a1: 8a:a9:51:b2:7f:6c:69:2d:2d:04:25:15:d7:15:c0: ea:f3:24:3e:e5:c9:75:08:6c:22:13:e0:8e:8a:04: e5:77:87:8d:57:93:dd:2b:d4:85:eb:e7:76:a6:db: 88:be:9d:e5:ec:d7:ad:f9:a5:56:06:49:f4:a2:cd: c9:9a:f6:89:f9:19:1f:b3:79:78:f0:d6:ef:54:fe: 3f:a2:c6:cc:1e:90:91:28:1f:a1:57:2e:9e:e7:2f: 43:51:f7:3a:71:0d:41:05:07:7b:eb:33:20:d4:aa: dd:74:4d:8f:35:38:67:8d:f8:1a:07:a5:e8:43:2f: 48:65:02:a9:c5:53:dc:7a:7d:79:5a:1d:db:43:e3: 26:b0:f5:74:75:31:16:fd:d3:ea:98:4c:2c:48:de: 88:14:68:ae:70:c6:cb:a0:ab:06:01:e2:cd:95:ca: 8a:9d:9b:19:a8:cf:8b:04:5d:0b:01:bd:76:ae:1e: 6e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3B:C9:EF:13:EC:89:C4:4A:F5:45:EA:DA:FA:EC:7C:6B:67:FA:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4479f807-1108-38b1-ac4e-814281b35deb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:dd:6b:2a:7f:ad:60:f1:49:c3:fe:2c:53:7a:60:08:cf:f7: 79:d0:53:fb:fd:59:b9:41:e3:b4:fa:bc:be:ba:aa:72:ab:df: dd:2b:90:3a:ba:3e:2c:a9:f7:d3:71:34:bf:d3:e9:5a:e8:a6: 39:04:ad:85:41:a8:9f:55:70:b4:3d:a2:03:ca:d8:02:4a:fa: df:38:32:4a:f1:27:8e:58:f5:2e:9e:a0:92:28:15:5a:53:89: a6:ba:03:f9:6c:64:8c:33:f8:12:38:34:86:08:d4:aa:62:74: 78:b7:ae:64:fa:40:6e:14:cf:4a:d4:0a:74:a5:4a:6f:d2:e0: 98:3c:38:ca:8c:50:ab:0f:7a:94:2f:c3:66:65:bb:03:e6:a3: 96:a2:96:97:9e:1e:28:42:3f:fa:28:d8:59:d4:21:2c:bc:52: e2:4d:f1:b6:20:40:09:12:79:3b:1b:4f:1e:54:e8:b6:90:f4: 15:2c:98:bc:51:dd:19:3c:8b:8a:81:0a:ae:d6:59:81:2a:10: 48:af:ec:ea:47:aa:81:7e:1d:d7:5f:d0:74:69:15:ce:a6:87: 4b:79:5d:6d:30:a8:81:e3:f8:86:91:93:a7:97:fe:1e:66:79: aa:47:b8:42:53:20:8d:bc:aa:64:2a:70:d1:73:f7:a2:bc:d9: 5c:e3:db:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJV4Rnon8evOgtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk Y2RjYWI1OWItZjNjZi00YjU3LWJlNDktMzYyN2RlZjk0NGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTdRtXRd8PqXZKOU1zcZmnPQSvRvHePM2vVt 5FHLB9YUkUfUcOOtLOhY8Jh7hPkksj0yn+jx47Ed0s9L7qlLCECTaDNUB0ZB4qGK qVGyf2xpLS0EJRXXFcDq8yQ+5cl1CGwiE+COigTld4eNV5PdK9SF6+d2ptuIvp3l 7Net+aVWBkn0os3JmvaJ+Rkfs3l48NbvVP4/osbMHpCRKB+hVy6e5y9DUfc6cQ1B BQd76zMg1KrddE2PNThnjfgaB6XoQy9IZQKpxVPcen15Wh3bQ+MmsPV0dTEW/dPq mEwsSN6IFGiucMbLoKsGAeLNlcqKnZsZqM+LBF0LAb12rh5uVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGw7ye8T7InESvVF6tr67HxrZ/qrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDQ3OWY4MDctMTEwOC0z OGIxLWFjNGUtODE0MjgxYjM1ZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbdayp/rWDxScP+LFN6YAjP93nQU/v9WblB47T6vL66qnKr390rkDq6 Piyp99NxNL/T6VropjkErYVBqJ9VcLQ9ogPK2AJK+t84MkrxJ45Y9S6eoJIoFVpT iaa6A/lsZIwz+BI4NIYI1KpidHi3rmT6QG4Uz0rUCnSlSm/S4Jg8OMqMUKsPepQv w2ZluwPmo5ailpeeHihCP/oo2FnUISy8UuJN8bYgQAkSeTsbTx5U6LaQ9BUsmLxR 3Rk8i4qBCq7WWYEqEEiv7OpHqoF+Hddf0HRpFc6mh0t5XW0wqIHj+IaRk6eX/h5m eapHuEJTII28qmQqcNFz96K82Vzj278= -----END CERTIFICATE-----Generated at Wed Apr 22 00:23:13 2026 by rpki-client