$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a63b78ae-144d-3233-81b6-c95cd2b419f6.roa File: a63b78ae-144d-3233-81b6-c95cd2b419f6.roa (raw, json) Hash identifier: /j9kKndauY+/onxo6WNP6gkKL5PcqcENMZ8kFRA/VwA= Subject key identifier: 33:DC:D8:39:6C:0A:57:3F:F4:B5:A3:5F:A1:63:BA:1E:7C:88:10:4E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8AC54B79D87F353741FB7000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a63b78ae-144d-3233-81b6-c95cd2b419f6.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 104.116.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:4b:79:d8:7f:35:37:41:fb:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=b696d97b-b85f-4620-bfdd-0c7e60ab2f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3c:48:39:3f:fc:2f:35:93:db:9c:f8:d5:e7: 91:2c:91:3e:71:10:ec:64:22:24:81:9c:b5:07:f4: 73:c8:17:48:23:a2:5e:68:a4:e7:18:6b:db:6c:27: ce:3e:86:c9:ed:c0:81:7c:d4:6a:17:22:ec:cd:db: 6f:97:4f:3f:62:a3:98:d1:da:ef:ba:1d:e0:9e:17: fc:d0:9c:bf:8b:42:cc:9b:69:b2:8d:15:f4:c1:67: b5:2e:f7:85:f7:e6:24:69:70:97:ab:93:01:b3:19: dd:16:f0:09:11:89:f6:1b:e4:5e:72:d0:ea:54:4f: d0:00:07:ee:f2:b5:10:ae:cd:5f:59:ea:10:01:94: 4b:35:b7:09:00:a3:c8:d8:82:37:80:8e:8a:06:10: 0c:42:95:23:f2:da:c4:10:48:01:cf:ce:0f:47:90: 06:9e:e9:dc:3d:2d:92:ff:bc:14:e9:48:4c:60:18: db:69:36:0c:da:de:49:3e:90:9b:10:51:e0:47:05: 78:d7:5a:33:29:56:07:e6:72:f0:55:04:25:51:47: c0:6c:e7:6f:a2:30:e1:3b:f4:82:f5:02:5a:92:4b: 39:6f:89:51:36:ce:62:4f:5d:06:1d:df:51:28:d1: b5:8e:57:59:83:e6:1f:16:83:7b:a1:f8:cc:ca:79: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DC:D8:39:6C:0A:57:3F:F4:B5:A3:5F:A1:63:BA:1E:7C:88:10:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a63b78ae-144d-3233-81b6-c95cd2b419f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.116.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:94:21:1c:74:67:81:c2:70:a2:4d:aa:eb:f5:ee:12:81:97: 9a:22:8b:c1:ea:85:96:22:0d:37:4c:c4:5f:be:59:4b:a8:a6: 72:1e:1f:6c:8b:31:16:78:6f:4b:d9:28:6a:4c:87:07:1c:45: c0:db:4e:a8:c6:21:35:67:15:88:23:f3:1d:2c:f3:cc:1d:12: f9:81:61:6d:94:b7:40:b7:8b:42:f4:29:14:40:3c:56:3d:0a: 14:c5:b6:7c:78:89:4b:87:1c:cd:86:03:12:b5:df:a3:20:5a: 6f:05:4d:76:10:00:1c:65:f3:40:e7:ce:78:29:c9:c0:b3:5b: 31:42:f2:05:3d:e2:e8:f5:31:1b:46:bc:9c:5d:cb:06:88:f7: 4c:e2:6c:a6:80:00:24:37:c7:cf:24:f6:7a:d5:b1:b6:06:8e: 4b:94:47:fa:bf:8f:4a:4a:bf:37:d6:35:86:f6:33:55:9a:f6: d7:7c:41:4a:fc:fe:a6:cb:b9:f4:3d:75:f9:19:b8:c6:6e:02: 23:3b:6e:3c:55:2f:63:9d:c8:7d:96:14:e9:f9:c1:5f:00:a0: f4:56:dd:96:ba:bb:2c:c3:a8:00:cc:86:58:53:77:d0:d7:1a: c0:a3:f1:c3:24:08:b9:41:e2:d1:21:82:bf:e8:9e:b8:16:41: d2:3a:dd:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUt52H81N0H7cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk YjY5NmQ5N2ItYjg1Zi00NjIwLWJmZGQtMGM3ZTYwYWIyZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zxIOT/8LzWT25z41eeRLJE+cRDsZCIkgZy1 B/RzyBdII6JeaKTnGGvbbCfOPobJ7cCBfNRqFyLszdtvl08/YqOY0drvuh3gnhf8 0Jy/i0LMm2myjRX0wWe1LveF9+YkaXCXq5MBsxndFvAJEYn2G+RectDqVE/QAAfu 8rUQrs1fWeoQAZRLNbcJAKPI2II3gI6KBhAMQpUj8trEEEgBz84PR5AGnuncPS2S /7wU6UhMYBjbaTYM2t5JPpCbEFHgRwV411ozKVYH5nLwVQQlUUfAbOdvojDhO/SC 9QJakks5b4lRNs5iT10GHd9RKNG1jldZg+YfFoN7ofjMynkk3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPc2DlsClc/9LWjX6Fjuh58iBBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTYzYjc4YWUtMTQ0ZC0z MjMzLTgxYjYtYzk1Y2QyYjQxOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqUIRx0Z4HCcKJNquv17hKBl5oii8HqhZYiDTdMxF++WUuopnIeH2yL MRZ4b0vZKGpMhwccRcDbTqjGITVnFYgj8x0s88wdEvmBYW2Ut0C3i0L0KRRAPFY9 ChTFtnx4iUuHHM2GAxK136MgWm8FTXYQABxl80DnzngpycCzWzFC8gU94uj1MRtG vJxdywaI90zibKaAACQ3x88k9nrVsbYGjkuUR/q/j0pKvzfWNYb2M1Wa9td8QUr8 /qbLufQ9dfkZuMZuAiM7bjxVL2OdyH2WFOn5wV8AoPRW3Za6uyzDqADMhlhTd9DX GsCj8cMkCLlB4tEhgr/onrgWQdI63co= -----END CERTIFICATE-----Generated at Tue Apr 21 20:42:28 2026 by rpki-client