$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab9c971f-56a0-37f8-bf5a-069c0800cb9e.roa File: ab9c971f-56a0-37f8-bf5a-069c0800cb9e.roa (raw, json) Hash identifier: 3FhSUIsJU0BR6XEs9qj5IvSbuUEaKbD85GK+X41QZYg= Subject key identifier: 2A:F2:3D:E0:85:F1:AE:99:B1:ED:8E:CB:EE:7E:DD:F2:58:28:39:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D932553D1E11F0BAB6CE6DB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab9c971f-56a0-37f8-bf5a-069c0800cb9e.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 104.71.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:53:d1:e1:1f:0b:ab:6c:e6:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=b426c7ca-c8f2-43e4-84ba-769f2f4a556d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:42:6b:a5:37:ea:68:a1:6c:6e:1e:da:e8: 5d:51:18:46:c0:4e:5d:f4:a1:46:a5:45:12:dd:6a: dc:66:41:6b:31:de:49:5a:1f:5e:4f:c8:42:25:f8: 72:a9:fb:2c:1d:11:5a:de:14:47:ae:65:38:b6:e1: 5a:94:98:ad:50:3e:ee:87:cc:4c:af:2f:1e:42:d9: 73:a8:e2:9f:d0:9d:4a:48:3f:c7:ba:aa:c3:ea:a7: 37:c2:89:d0:ad:34:12:cf:21:88:f6:7f:e1:7e:6c: 65:b1:7a:de:e7:97:6d:9c:cf:73:7f:d5:f9:bf:40: 42:6f:56:9c:3a:4a:7a:6e:d8:34:f7:16:3d:cb:b4: be:0f:f9:62:9b:f8:8c:e8:40:94:ff:2e:60:f2:cc: df:7a:a6:6d:49:ce:9e:1c:df:3f:d2:72:8e:42:d0: f9:24:8b:34:72:0c:0a:53:fa:34:f2:e0:4c:c5:c6: ad:3e:38:b4:9d:b5:8e:fb:75:38:2b:8a:d3:ea:47: 61:0e:93:bf:dc:ff:e1:ee:10:83:12:77:82:fb:2b: 3f:84:67:19:0b:8d:70:69:32:c2:09:51:4d:aa:d9: 89:09:67:f5:fe:56:a8:e3:14:6d:20:25:8d:f6:75: 0b:6b:da:7c:d5:2e:af:7d:50:79:f4:36:ea:da:73: cb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F2:3D:E0:85:F1:AE:99:B1:ED:8E:CB:EE:7E:DD:F2:58:28:39:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab9c971f-56a0-37f8-bf5a-069c0800cb9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.71.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ef:f8:c7:1f:48:e6:d2:54:f4:60:a5:8c:a2:1b:f0:46:f4: 71:85:0e:96:50:f2:d3:5b:3b:b2:bf:42:ef:2f:1a:de:25:4d: 63:ec:4d:1f:b9:4c:0a:ef:ce:ad:ea:f4:40:25:9c:9d:82:09: 0f:e1:14:cd:b3:5d:7f:76:b6:14:42:cd:88:7b:69:e6:09:14: 58:fc:a3:73:5c:84:e0:dc:32:7c:ed:a2:ac:e4:ef:72:5b:79: 8d:b4:b0:59:fc:0b:e9:6a:8f:4f:dc:49:63:6b:c8:2b:5d:8b: 8b:0c:21:b0:07:4a:fc:9c:ed:d2:02:6a:65:0b:50:4e:a3:df: 78:a9:13:62:4d:47:e4:24:37:90:f9:6f:71:b3:71:db:f4:fd: 71:9f:f4:49:7a:23:00:bb:34:22:68:f7:3c:e7:73:94:83:55: 26:d7:e7:5d:2d:72:ad:db:33:f1:4e:8f:1b:10:20:42:5e:bd: 3d:87:bb:5d:6f:99:dd:c4:38:93:26:84:4a:7f:0d:3e:d3:96: a6:d8:b3:38:0d:09:36:a9:fb:df:7b:fe:a8:b3:9b:5d:b7:5a: fa:9e:53:94:19:01:6c:c9:e0:8f:3a:60:f1:f0:c5:cd:a1:91: 9d:14:8f:73:c9:fb:1e:cc:92:1b:db:05:32:ca:1c:ca:ed:4e: 04:27:a9:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJVPR4R8Lq2zm24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk YjQyNmM3Y2EtYzhmMi00M2U0LTg0YmEtNzY5ZjJmNGE1NTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprhCa6U36mihbG4e2uhdURhGwE5d9KFGpUUS 3WrcZkFrMd5JWh9eT8hCJfhyqfssHRFa3hRHrmU4tuFalJitUD7uh8xMry8eQtlz qOKf0J1KSD/HuqrD6qc3wonQrTQSzyGI9n/hfmxlsXre55dtnM9zf9X5v0BCb1ac Okp6btg09xY9y7S+D/lim/iM6ECU/y5g8szfeqZtSc6eHN8/0nKOQtD5JIs0cgwK U/o08uBMxcatPji0nbWO+3U4K4rT6kdhDpO/3P/h7hCDEneC+ys/hGcZC41waTLC CVFNqtmJCWf1/lao4xRtICWN9nULa9p81S6vfVB59Dbq2nPL8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCryPeCF8a6Zse2Oy+5+3fJYKDlYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWI5Yzk3MWYtNTZhMC0z N2Y4LWJmNWEtMDY5YzA4MDBjYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLv+McfSObSVPRgpYyiG/BG9HGFDpZQ8tNbO7K/Qu8vGt4lTWPsTR+5 TArvzq3q9EAlnJ2CCQ/hFM2zXX92thRCzYh7aeYJFFj8o3NchODcMnztoqzk73Jb eY20sFn8C+lqj0/cSWNryCtdi4sMIbAHSvyc7dICamULUE6j33ipE2JNR+QkN5D5 b3Gzcdv0/XGf9El6IwC7NCJo9zznc5SDVSbX510tcq3bM/FOjxsQIEJevT2Hu11v md3EOJMmhEp/DT7TlqbYszgNCTap+997/qizm123WvqeU5QZAWzJ4I86YPHwxc2h kZ0Uj3PJ+x7MkhvbBTLKHMrtTgQnqck= -----END CERTIFICATE-----Generated at Tue Apr 21 20:42:44 2026 by rpki-client