$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e9e42c3-28c2-3a43-8c5b-49ffa29e97d4.roa File: 9e9e42c3-28c2-3a43-8c5b-49ffa29e97d4.roa (raw, json) Hash identifier: J0wj76SAlymVZue9ZAT8+aYXrEVXDizgcYTDg/JpF+w= Subject key identifier: 46:68:D1:76:E1:99:4A:CC:C9:1C:6C:1A:E3:31:E6:3C:04:44:07:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8AC54F30A88DBB878A8BE8B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e9e42c3-28c2-3a43-8c5b-49ffa29e97d4.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 104.119.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:4f:30:a8:8d:bb:87:8a:8b:e8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=37b358ff-7fe5-415e-9104-aa83f12360d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:65:2f:d4:19:fb:e8:1b:0d:d0:75:d4:d5: c0:47:fc:4e:21:a3:87:2e:08:41:39:a2:1e:5a:e6: 6e:05:a6:ce:d0:81:eb:8b:7d:85:bb:d8:04:04:eb: 54:b7:e2:87:0b:34:c0:92:3d:59:5b:60:0f:fa:82: 58:67:96:ab:db:ce:47:ca:ba:bb:44:f7:7a:90:b9: 86:76:46:9e:f1:72:57:09:76:e0:1b:d3:80:a4:6e: e8:1a:7b:ad:64:ec:96:bf:6e:5a:08:4d:c2:b0:32: bb:0a:59:28:69:88:df:4a:1b:1f:da:78:e2:6a:b8: 96:7a:36:ee:cf:01:49:c3:12:a0:de:a7:6b:c8:b2: 48:6b:a9:83:9b:58:26:87:58:24:7f:5f:12:74:9d: 81:4a:40:9c:85:59:4d:e1:62:9b:01:7c:99:c8:83: 45:e8:07:a7:35:8e:e1:31:4c:c2:40:ac:a1:31:71: 9a:73:72:22:bc:71:8c:d2:79:5a:9d:f7:25:c8:9f: e9:4f:a0:4e:eb:9b:05:d1:8e:0c:a0:d0:e2:85:59: dd:d6:bb:51:74:38:7f:c6:2d:61:d6:3c:6f:b6:4a: 87:06:53:4d:94:7b:d2:ea:dc:77:63:4b:93:03:42: ec:20:e0:29:75:f7:68:92:a2:73:75:b8:de:5b:90: 31:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:68:D1:76:E1:99:4A:CC:C9:1C:6C:1A:E3:31:E6:3C:04:44:07:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e9e42c3-28c2-3a43-8c5b-49ffa29e97d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.119.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a4:e0:7f:bb:9a:cb:8c:2e:be:a1:87:2f:85:bc:fb:fb:21: 11:e5:3e:6e:fb:7d:65:17:b7:bb:a4:16:66:60:51:5e:12:0c: 0c:13:24:7c:e4:b9:e7:6e:64:df:f9:1e:ef:b8:9d:1a:ab:af: 76:78:07:b7:96:07:72:c5:5a:ff:a7:91:58:d6:18:fc:8b:03: 35:90:7b:73:60:cc:c4:49:65:c3:ac:d4:97:04:9b:b1:93:0b: 06:ad:72:d7:f2:35:b1:13:c1:fd:be:cc:1d:02:b4:a3:57:57: f7:38:cf:1f:0d:69:41:05:27:43:7e:f6:8e:e4:75:3a:88:9d: f3:b9:04:fd:96:a2:63:13:25:81:73:eb:0b:81:c3:46:6e:a5: ce:c9:4a:2b:5a:6c:4e:a0:92:6e:21:68:3e:ed:03:be:7e:52: 69:ba:bd:df:09:02:41:2e:4e:f4:47:35:03:3f:ff:7b:b4:15: aa:1c:bf:6a:58:0c:cc:8e:73:fb:3f:35:41:c2:7b:9d:14:14: c3:02:18:47:82:13:09:4a:54:8d:8c:b9:a7:00:68:f2:87:bc: ea:12:8c:8c:82:0d:90:f9:4f:4f:73:f1:54:09:8c:45:23:52: 34:c4:25:a5:c9:fc:3f:ca:e2:63:b9:59:4b:37:e3:af:dc:64: 8b:92:41:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxU8wqI27h4qL6LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk MzdiMzU4ZmYtN2ZlNS00MTVlLTkxMDQtYWE4M2YxMjM2MGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUplL9QZ++gbDdB11NXAR/xOIaOHLghBOaIe WuZuBabO0IHri32Fu9gEBOtUt+KHCzTAkj1ZW2AP+oJYZ5ar285Hyrq7RPd6kLmG dkae8XJXCXbgG9OApG7oGnutZOyWv25aCE3CsDK7ClkoaYjfShsf2njiariWejbu zwFJwxKg3qdryLJIa6mDm1gmh1gkf18SdJ2BSkCchVlN4WKbAXyZyINF6AenNY7h MUzCQKyhMXGac3IivHGM0nlanfclyJ/pT6BO65sF0Y4MoNDihVnd1rtRdDh/xi1h 1jxvtkqHBlNNlHvS6tx3Y0uTA0LsIOApdfdokqJzdbjeW5AxKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZo0XbhmUrMyRxsGuMx5jwERAd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWU5ZTQyYzMtMjhjMi0z YTQzLThjNWItNDlmZmEyOWU5N2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHctMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOk4H+7msuMLr6hhy+FvPv7IRHlPm77fWUXt7ukFmZgUV4SDAwTJHzk ueduZN/5Hu+4nRqrr3Z4B7eWB3LFWv+nkVjWGPyLAzWQe3NgzMRJZcOs1JcEm7GT CwatctfyNbETwf2+zB0CtKNXV/c4zx8NaUEFJ0N+9o7kdTqInfO5BP2WomMTJYFz 6wuBw0Zupc7JSitabE6gkm4haD7tA75+Umm6vd8JAkEuTvRHNQM//3u0Faocv2pY DMyOc/s/NUHCe50UFMMCGEeCEwlKVI2MuacAaPKHvOoSjIyCDZD5T09z8VQJjEUj UjTEJaXJ/D/K4mO5WUs346/cZIuSQVc= -----END CERTIFICATE-----Generated at Tue Apr 21 20:37:24 2026 by rpki-client