$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b224a0f-a4e1-3e98-a52a-0ece7d3957d6.roa File: 4b224a0f-a4e1-3e98-a52a-0ece7d3957d6.roa (raw, json) Hash identifier: /2VAAZ0tOe5HxlBhbfprPzWEPvjjlzlkNk3Bqty+KTM= Subject key identifier: E1:1E:FE:30:A2:41:F3:BF:35:06:BE:A8:7F:DE:34:20:54:DA:04:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D93255FC234CE0368DEAC8080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b224a0f-a4e1-3e98-a52a-0ece7d3957d6.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 104.76.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:5f:c2:34:ce:03:68:de:ac:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=efd66255-0d50-43f1-a0bd-56f908b586c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3d:4d:84:58:83:84:8c:1d:4f:e1:4b:bc:e8: 31:d1:bb:d2:bc:2e:11:83:d9:a2:17:c9:72:f2:32: 44:8f:47:e8:26:05:0a:6e:8d:4f:84:8b:71:91:c7: 3f:2b:39:5a:a7:1a:5f:a8:06:6c:96:15:64:59:4e: 4d:be:b3:40:a7:40:52:6a:9c:e5:50:0a:cf:cf:8f: c6:41:57:2b:47:1b:21:b9:34:e9:93:aa:97:53:b1: 23:21:32:9f:76:c4:9b:28:0a:fa:fc:5b:e6:92:70: dd:60:97:e0:a8:4b:11:a0:22:91:d0:d5:cf:1a:f6: f2:88:4d:39:ae:8c:90:17:71:0d:0b:c3:e9:06:48: 95:f8:fe:99:3f:88:36:87:34:49:73:3f:ee:92:ee: fa:20:a7:de:00:58:1f:51:34:87:2c:69:ec:bb:51: cc:2e:cb:44:c8:5c:16:49:86:a2:8b:fe:a6:ff:47: ae:af:37:5d:62:71:86:a0:73:af:5e:40:e1:24:ef: ca:82:6a:58:29:8d:33:87:08:0c:0e:51:35:8b:ff: 01:25:df:87:11:25:0b:4c:a2:ed:87:df:0c:e9:42: 13:85:15:ef:2b:7f:e1:03:7a:4b:07:e2:6b:60:4b: 21:a2:43:41:65:a9:03:ca:26:af:ed:47:aa:aa:8a: 10:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1E:FE:30:A2:41:F3:BF:35:06:BE:A8:7F:DE:34:20:54:DA:04:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b224a0f-a4e1-3e98-a52a-0ece7d3957d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.76.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:8b:9e:50:49:a3:41:c0:94:45:5d:a1:d2:06:4c:c3:2b:0d: c3:e8:06:29:78:78:6d:23:d3:ef:12:4b:36:a8:ce:f9:80:9f: 06:e9:fa:92:47:16:91:66:ec:65:a1:c3:dd:ed:7a:33:af:72: df:62:a3:d9:4f:6c:c3:6d:fb:7e:62:bb:3d:d2:34:77:c6:45: e9:e8:89:b4:69:8e:24:1a:92:f5:1e:7a:2f:61:3d:ad:1d:df: f3:5e:d9:3d:82:83:b1:e9:0e:af:c7:d7:35:85:fd:6f:9a:1e: d9:65:15:3d:24:95:00:57:57:54:70:96:68:9d:4e:c1:d8:f9: 95:fc:86:a4:41:7b:8f:08:75:b3:30:74:81:f4:53:83:c0:a5: 17:20:5c:03:d6:ee:e0:58:31:3d:34:87:25:8b:82:a4:98:d0: 2f:1b:f8:96:92:7c:71:37:c5:85:fb:49:6a:49:2d:e1:05:81: f7:d3:2a:e8:6e:35:d0:aa:13:8e:67:2d:47:08:03:36:5b:80: f0:57:03:70:e7:92:f0:96:30:a2:4f:57:48:ca:ee:26:fa:67: 61:56:4e:97:cc:3a:0d:82:ee:49:72:8c:77:5a:28:ae:ee:f7: 3c:10:41:bd:b4:ac:2c:32:f4:4b:2d:d4:55:d1:92:30:32:f7: 6c:f1:7d:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJV/CNM4DaN6sgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZWZkNjYyNTUtMGQ1MC00M2YxLWEwYmQtNTZmOTA4YjU4NmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz1NhFiDhIwdT+FLvOgx0bvSvC4Rg9miF8ly 8jJEj0foJgUKbo1PhItxkcc/KzlapxpfqAZslhVkWU5NvrNAp0BSapzlUArPz4/G QVcrRxshuTTpk6qXU7EjITKfdsSbKAr6/FvmknDdYJfgqEsRoCKR0NXPGvbyiE05 royQF3ENC8PpBkiV+P6ZP4g2hzRJcz/uku76IKfeAFgfUTSHLGnsu1HMLstEyFwW SYaii/6m/0eurzddYnGGoHOvXkDhJO/KgmpYKY0zhwgMDlE1i/8BJd+HESULTKLt h98M6UIThRXvK3/hA3pLB+JrYEshokNBZakDyiav7UeqqooQzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEe/jCiQfO/NQa+qH/eNCBU2gTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGIyMjRhMGYtYTRlMS0z ZTk4LWE1MmEtMGVjZTdkMzk1N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaExsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+LnlBJo0HAlEVdodIGTMMrDcPoBil4eG0j0+8SSzaozvmAnwbp+pJH FpFm7GWhw93tejOvct9io9lPbMNt+35iuz3SNHfGRenoibRpjiQakvUeei9hPa0d 3/Ne2T2Cg7HpDq/H1zWF/W+aHtllFT0klQBXV1RwlmidTsHY+ZX8hqRBe48IdbMw dIH0U4PApRcgXAPW7uBYMT00hyWLgqSY0C8b+JaSfHE3xYX7SWpJLeEFgffTKuhu NdCqE45nLUcIAzZbgPBXA3DnkvCWMKJPV0jK7ib6Z2FWTpfMOg2C7klyjHdaKK7u 9zwQQb20rCwy9Est1FXRkjAy92zxfQQ= -----END CERTIFICATE-----Generated at Tue Apr 21 21:48:12 2026 by rpki-client