$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/717ce85f-cda7-3619-be01-cfe3aed71f3a.roa File: 717ce85f-cda7-3619-be01-cfe3aed71f3a.roa (raw, json) Hash identifier: HTke+ZiDg6V99DuQFy3mQzg6m+XmKBnq66mMiMaEKEg= Subject key identifier: 21:A6:63:C8:EC:AB:1E:63:7A:3A:5E:22:6B:D7:82:A3:1A:6B:FA:74 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D932554055E3B01B240001F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/717ce85f-cda7-3619-be01-cfe3aed71f3a.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 104.71.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:54:05:5e:3b:01:b2:40:00:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=76d6bdfc-8fb9-4c27-80df-58d316f4b295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8a:f1:2d:70:3b:a5:12:fa:ad:c2:0a:b0:2e: 9c:d3:0e:ef:d3:b0:98:b6:b0:14:3b:77:73:7e:71: 88:c2:a8:88:15:36:22:79:62:74:44:df:ab:92:bf: cd:42:cd:30:e3:1f:8a:b6:ef:00:56:c9:29:88:4c: 56:77:77:f1:1d:ce:e2:f3:9e:1e:49:bd:92:23:3a: a4:bc:d4:93:d2:f9:16:fc:ff:a7:76:c2:31:0e:76: 5c:c3:1b:e0:e6:20:7d:cc:be:d0:95:7f:a7:3f:96: ad:a9:a7:f0:c6:9e:74:29:19:cb:74:0a:ca:d5:5e: c3:47:b2:81:79:5f:16:97:53:31:8d:f4:5d:67:1c: 2d:5c:87:e4:b2:c7:6d:72:76:7b:09:df:74:12:d7: f4:e2:25:db:11:99:2c:23:c7:85:8b:c0:90:a1:9b: 67:ed:99:ac:34:1a:c2:b7:ad:56:94:6a:bd:18:ee: 54:56:b3:1d:28:78:6f:ba:84:6b:a2:c8:a8:41:5d: cf:ec:09:7f:f4:91:2d:f7:67:1e:da:7f:7b:8e:33: a5:d4:e2:9c:7d:cc:e5:b6:c0:44:1d:c5:80:5e:27: 2d:21:c7:20:a0:c9:fb:b9:91:29:60:c9:73:f4:fe: b5:6d:8a:97:4d:fc:7b:f7:24:87:ff:32:71:42:29: 46:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A6:63:C8:EC:AB:1E:63:7A:3A:5E:22:6B:D7:82:A3:1A:6B:FA:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/717ce85f-cda7-3619-be01-cfe3aed71f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.71.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4f:ee:8d:92:6a:83:47:68:52:e1:f9:43:3a:c1:7c:72:65: 2c:47:87:5e:98:f9:6d:e9:43:57:eb:9d:ae:e4:97:45:65:e0: 82:3b:a5:75:84:49:b0:44:32:9e:37:bd:2e:0c:fc:5f:a4:90: ad:a9:d7:eb:da:37:7d:38:87:df:f5:2a:30:2c:52:67:db:04: af:34:6b:ca:1c:06:c2:de:05:a0:d7:5a:93:eb:4e:06:42:b6: e8:cc:79:77:34:6f:cc:cc:74:5f:d2:6f:df:f1:06:5b:b2:3a: f1:a9:d2:c8:43:06:b1:30:64:02:f5:a3:07:a3:e4:a0:61:3a: d0:5a:1e:2f:bd:d1:6d:bf:e0:4b:4b:b8:49:35:b5:69:11:8e: 6d:63:fb:cc:b0:23:02:d7:a3:5e:f8:9d:ad:9e:44:96:df:10: ed:ea:e3:97:90:65:e2:12:24:3b:d4:5f:35:db:13:ef:1b:4a: 52:a9:cf:51:d6:d2:6f:35:43:4f:ef:a8:a0:24:c7:81:b3:fc: 46:33:07:3a:a8:ad:88:c9:d8:61:f2:89:50:35:a1:51:e8:74: e9:0a:90:47:3e:e1:12:61:40:f1:ed:e1:62:56:4b:30:e4:56: 14:be:b5:d6:7d:c4:4f:87:81:68:98:d5:f4:e3:7e:95:47:12: 92:a9:19:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJVQFXjsBskAAH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NzZkNmJkZmMtOGZiOS00YzI3LTgwZGYtNThkMzE2ZjRiMjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlorxLXA7pRL6rcIKsC6c0w7v07CYtrAUO3dz fnGIwqiIFTYieWJ0RN+rkr/NQs0w4x+Ktu8AVskpiExWd3fxHc7i854eSb2SIzqk vNST0vkW/P+ndsIxDnZcwxvg5iB9zL7QlX+nP5atqafwxp50KRnLdArK1V7DR7KB eV8Wl1MxjfRdZxwtXIfkssdtcnZ7Cd90Etf04iXbEZksI8eFi8CQoZtn7ZmsNBrC t61WlGq9GO5UVrMdKHhvuoRrosioQV3P7Al/9JEt92ce2n97jjOl1OKcfczltsBE HcWAXictIccgoMn7uZEpYMlz9P61bYqXTfx79ySH/zJxQilGIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGmY8jsqx5jejpeImvXgqMaa/p0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzE3Y2U4NWYtY2RhNy0z NjE5LWJlMDEtY2ZlM2FlZDcxZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEfaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxP7o2SaoNHaFLh+UM6wXxyZSxHh16Y+W3pQ1frna7kl0Vl4II7pXWE SbBEMp43vS4M/F+kkK2p1+vaN304h9/1KjAsUmfbBK80a8ocBsLeBaDXWpPrTgZC tujMeXc0b8zMdF/Sb9/xBluyOvGp0shDBrEwZAL1owej5KBhOtBaHi+90W2/4EtL uEk1tWkRjm1j+8ywIwLXo174na2eRJbfEO3q45eQZeISJDvUXzXbE+8bSlKpz1HW 0m81Q0/vqKAkx4Gz/EYzBzqorYjJ2GHyiVA1oVHodOkKkEc+4RJhQPHt4WJWSzDk VhS+tdZ9xE+HgWiY1fTjfpVHEpKpGek= -----END CERTIFICATE-----Generated at Tue Apr 21 21:52:52 2026 by rpki-client