$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4156c8c-ef0c-3847-9cd3-4a2cda957d56.roa File: a4156c8c-ef0c-3847-9cd3-4a2cda957d56.roa (raw, json) Hash identifier: 1hFwERPPShwYB5y0CF4PYX1aH2pJS7Nq1vTzJjN3ezI= Subject key identifier: B5:BB:37:52:10:1A:4E:CE:9C:F3:3C:99:38:5A:FA:59:C1:27:BA:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D95F00FF8E8F2CEBE3439AE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4156c8c-ef0c-3847-9cd3-4a2cda957d56.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 577 IP address blocks: 104.88.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0f:f8:e8:f2:ce:be:34:39:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=3c7aa425-b201-488f-9243-a758b36096fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7a:13:24:05:b5:22:3b:8b:b5:a2:8b:bd:84: 3f:7a:59:1d:fc:82:4d:e0:64:0e:5a:2f:2c:d7:e6: 29:76:f7:be:d6:89:7c:45:30:22:0a:a8:89:fc:ca: d6:61:84:38:e5:7b:17:fd:f7:16:ce:a9:d6:49:74: 46:a1:4f:58:16:3a:b5:97:39:cf:12:d8:4b:99:49: dd:33:0b:25:ab:07:4a:b9:fd:eb:83:6f:63:43:b0: 88:6c:07:32:92:9b:85:e9:f7:d9:22:5e:9e:4b:01: 3b:2e:e4:80:87:b7:28:57:21:b4:01:24:e7:fa:1b: 9d:94:89:b0:8b:e8:e3:fa:31:1f:73:4b:2e:62:7c: 1a:56:6f:7a:7c:15:e5:db:6e:8c:5d:ff:61:a5:d9: d3:e4:3b:90:6b:f1:84:33:e3:1e:4b:c4:87:dc:51: 2b:f1:f8:3f:cb:ce:75:f3:69:16:68:c1:47:20:00: ad:56:aa:b3:28:d3:ff:f8:f7:f1:8c:66:72:83:44: 74:27:eb:c9:4a:2d:97:03:77:62:c9:a6:b6:7d:74: 2d:cd:09:4e:89:97:4b:a5:02:a4:3d:2b:d4:6a:04: 7b:ef:3c:93:2d:fd:4d:d8:7c:54:fd:f4:8d:a3:a0: 77:5d:dd:92:45:d9:02:50:fc:32:1b:85:75:e0:6a: f5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BB:37:52:10:1A:4E:CE:9C:F3:3C:99:38:5A:FA:59:C1:27:BA:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4156c8c-ef0c-3847-9cd3-4a2cda957d56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.88.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c8:35:21:84:0a:6c:cd:4a:94:48:05:f5:b0:29:45:0e:9f: 32:d9:ce:e7:d3:fa:26:92:5e:96:ae:25:d2:2c:08:76:d9:b7: 49:68:12:10:2d:b4:a5:7a:38:b3:62:d3:d3:d9:ee:4b:98:4d: 86:5f:e5:a8:17:40:86:a7:99:17:5c:eb:82:ea:93:94:1a:83: 54:cb:cd:d9:1f:ab:f7:a8:a7:86:21:f0:c6:df:0d:f3:3b:9f: b6:80:4a:eb:97:b3:16:06:44:42:4e:73:fe:aa:0c:9d:5d:54: 9a:e8:1b:35:fd:92:40:9c:74:85:3d:24:09:66:ca:e0:02:19: 00:a1:06:23:53:7e:84:a2:a3:c4:05:01:b9:8c:b6:86:8c:58: c9:da:62:97:05:55:0e:bd:a6:63:bd:a6:54:7a:b0:64:c5:4f: a3:26:43:2c:59:4f:9e:02:0e:dc:b7:b9:53:57:61:22:5c:58: 8c:6b:8e:aa:1d:36:e2:ee:57:58:8e:ca:3a:7a:3f:07:33:d8: c1:0e:30:b3:16:97:ff:0c:19:2d:ed:49:f6:62:38:1d:d1:a2: a7:bb:ea:cc:f4:b5:6a:44:a1:7f:73:bd:61:45:ab:e0:68:e1: d0:34:e6:61:0a:9a:fb:4a:e9:30:9d:87:8e:43:98:73:9a:4f: 7f:43:2b:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8A/46PLOvjQ5roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk M2M3YWE0MjUtYjIwMS00ODhmLTkyNDMtYTc1OGIzNjA5NmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnoTJAW1IjuLtaKLvYQ/elkd/IJN4GQOWi8s 1+Ypdve+1ol8RTAiCqiJ/MrWYYQ45XsX/fcWzqnWSXRGoU9YFjq1lznPEthLmUnd MwslqwdKuf3rg29jQ7CIbAcykpuF6ffZIl6eSwE7LuSAh7coVyG0ASTn+hudlImw i+jj+jEfc0suYnwaVm96fBXl226MXf9hpdnT5DuQa/GEM+MeS8SH3FEr8fg/y851 82kWaMFHIACtVqqzKNP/+PfxjGZyg0R0J+vJSi2XA3diyaa2fXQtzQlOiZdLpQKk PSvUagR77zyTLf1N2HxU/fSNo6B3Xd2SRdkCUPwyG4V14Gr1lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLW7N1IQGk7OnPM8mTha+lnBJ7o2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTQxNTZjOGMtZWYwYy0z ODQ3LTljZDMtNGEyY2RhOTU3ZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnINSGECmzNSpRIBfWwKUUOnzLZzufT+iaSXpauJdIsCHbZt0loEhAt tKV6OLNi09PZ7kuYTYZf5agXQIanmRdc64Lqk5Qag1TLzdkfq/eop4Yh8MbfDfM7 n7aASuuXsxYGREJOc/6qDJ1dVJroGzX9kkCcdIU9JAlmyuACGQChBiNTfoSio8QF AbmMtoaMWMnaYpcFVQ69pmO9plR6sGTFT6MmQyxZT54CDty3uVNXYSJcWIxrjqod NuLuV1iOyjp6Pwcz2MEOMLMWl/8MGS3tSfZiOB3Roqe76sz0tWpEoX9zvWFFq+Bo 4dA05mEKmvtK6TCdh45DmHOaT39DK1M= -----END CERTIFICATE-----Generated at Thu Apr 30 22:37:29 2026 by rpki-client