$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa File: 7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa (raw, json) Hash identifier: N4vLQH4+lu7ydax1UNpIRvBFEcbdmzbGVUcTzYQ2kf8= Subject key identifier: C9:10:D1:7D:12:C9:85:D3:B1:A2:FA:C3:EC:FD:C1:6A:CF:65:02:BB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8AC54F9DA02835F070118F40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 104.70.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:4f:9d:a0:28:35:f0:70:11:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=b388bc52-e7ba-4e3d-9bf0-89cb2e911a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a0:4a:7b:6a:af:65:dd:d6:e5:ac:6b:8e:62: 2f:3b:3d:97:9f:1c:32:23:41:50:a2:e7:69:de:08: 9c:89:6d:d6:1a:8f:d4:57:db:f4:83:04:20:13:51: 70:c6:1f:cd:f8:64:6e:d6:fe:fc:fb:dc:90:56:40: 9c:af:ea:79:a6:96:9f:96:e8:ab:0c:81:b8:25:fa: 07:5a:c5:13:cb:95:95:b0:2b:50:fe:da:a5:7b:91: ce:49:b5:c5:2d:c3:79:27:43:ef:aa:b3:ef:4d:79: 46:e1:96:1d:07:d2:43:0d:c8:92:6f:d1:6f:ce:9f: 35:db:ab:12:28:b5:b3:c2:0a:20:c1:12:b4:03:e5: 94:59:e7:22:0d:c2:bb:51:b9:90:db:94:3a:cf:84: 26:15:f9:3b:3a:0e:b7:a6:dd:5a:86:a2:66:b8:b4: dc:02:74:b7:9c:28:7c:8b:93:f2:dd:41:56:87:a2: 5c:8f:02:b3:c0:fb:d1:4c:84:49:4c:ee:14:eb:cb: a8:e7:ce:08:a7:19:db:4f:6a:0e:98:8a:58:c1:db: ca:5b:99:71:df:30:a4:46:13:56:82:28:2e:3c:b0: 1f:73:f7:9b:07:91:95:6c:10:97:95:3e:bd:b5:13: d8:ec:db:7b:bd:41:0f:94:9e:88:de:9e:1c:a6:36: 13:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:10:D1:7D:12:C9:85:D3:B1:A2:FA:C3:EC:FD:C1:6A:CF:65:02:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ee:96:59:89:74:df:46:e3:6c:de:2d:b3:e2:ba:8c:a6:53: d3:b3:46:0b:64:9b:52:f5:e4:b0:1d:74:11:b7:99:40:54:a7: 54:b9:9e:8b:f7:ab:09:36:05:b6:d9:55:d6:3a:7f:61:19:56: 8b:33:b5:17:ae:92:f2:4d:a2:0d:d7:3f:b6:a3:53:5a:0a:1f: 6c:9a:59:3a:c0:bb:5b:96:b5:f3:76:51:cc:53:f4:31:57:a5: 22:7d:87:60:cd:17:bf:c1:b2:35:bb:a3:50:97:96:64:3f:e4: a0:a6:7e:eb:56:ad:67:64:63:0a:85:9a:9f:97:61:f1:29:ad: 2a:97:ee:2f:c5:e3:05:10:6f:dc:0d:28:b4:2a:6b:af:32:4f: 95:46:d0:02:b7:02:fe:70:b7:5a:bd:13:7e:c7:ef:10:77:8e: 9a:1a:69:cc:f5:e0:3b:80:8b:d5:cd:ac:1e:67:d1:e0:ca:c0: 14:ca:93:ed:31:93:a0:47:fe:87:68:f9:2e:d2:70:7f:ac:54: 07:d0:c6:45:3a:c2:34:32:42:10:73:77:1f:01:a2:c3:7d:86: 37:df:a0:2c:82:73:f5:27:d0:9a:29:3c:3f:15:bb:4e:2e:02: db:55:87:8a:6e:fb:44:bf:b8:ff:39:c6:22:5c:0b:49:73:fd: ed:99:a2:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxU+doCg18HARj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk YjM4OGJjNTItZTdiYS00ZTNkLTliZjAtODljYjJlOTExYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaBKe2qvZd3W5axrjmIvOz2XnxwyI0FQoudp 3giciW3WGo/UV9v0gwQgE1Fwxh/N+GRu1v78+9yQVkCcr+p5ppafluirDIG4JfoH WsUTy5WVsCtQ/tqle5HOSbXFLcN5J0PvqrPvTXlG4ZYdB9JDDciSb9Fvzp8126sS KLWzwgogwRK0A+WUWeciDcK7UbmQ25Q6z4QmFfk7Og63pt1ahqJmuLTcAnS3nCh8 i5Py3UFWh6JcjwKzwPvRTIRJTO4U68uo584IpxnbT2oOmIpYwdvKW5lx3zCkRhNW giguPLAfc/ebB5GVbBCXlT69tRPY7Nt7vUEPlJ6I3p4cpjYTvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkQ0X0SyYXTsaL6w+z9wWrPZQK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2M5YWNjOTUtYjNmNy0z ZDA4LWFlZmUtNTUyM2RkMGU1MmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEZ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHullmJdN9G42zeLbPiuoymU9OzRgtkm1L15LAddBG3mUBUp1S5nov3 qwk2BbbZVdY6f2EZVosztReukvJNog3XP7ajU1oKH2yaWTrAu1uWtfN2UcxT9DFX pSJ9h2DNF7/BsjW7o1CXlmQ/5KCmfutWrWdkYwqFmp+XYfEprSqX7i/F4wUQb9wN KLQqa68yT5VG0AK3Av5wt1q9E37H7xB3jpoaacz14DuAi9XNrB5n0eDKwBTKk+0x k6BH/odo+S7ScH+sVAfQxkU6wjQyQhBzdx8BosN9hjffoCyCc/Un0JopPD8Vu04u AttVh4pu+0S/uP85xiJcC0lz/e2Zogg= -----END CERTIFICATE-----Generated at Tue Apr 21 20:43:20 2026 by rpki-client