$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb08152e-b32b-3310-9bce-be12c11c8498.roa File: bb08152e-b32b-3310-9bce-be12c11c8498.roa (raw, json) Hash identifier: OC13iYXnDA9CaXH1geTh1xq3VHo9u3rxILDyvgQ+R2g= Subject key identifier: A8:04:D9:9D:D0:6A:73:6F:5E:BC:AF:F8:99:08:D8:FA:88:06:03:D6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8AC54F79E1A14008F9B31D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb08152e-b32b-3310-9bce-be12c11c8498.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 104.70.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:4f:79:e1:a1:40:08:f9:b3:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=99add896-d06e-404d-845a-34098807af74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:40:72:5f:18:42:43:d0:76:33:5e:a2:c0: 59:80:fe:0f:d4:36:7d:e0:96:e2:3b:5e:ea:84:15: 03:56:a3:79:bd:92:91:64:3a:33:06:cd:f7:c4:46: 71:2b:2c:34:60:f5:8a:6c:2d:97:b7:f1:3a:9c:35: a2:25:76:c5:19:4c:54:c1:c5:11:3a:0b:f7:df:a0: 34:76:30:f8:5d:81:f8:c6:ff:62:0d:b4:7a:86:47: d7:6e:f8:26:17:28:c5:51:92:f4:48:dc:23:77:d4: 07:bc:49:df:e7:96:72:d2:8b:34:47:6a:f4:9b:23: b1:24:0e:e5:60:ac:7c:29:70:ab:95:e0:0f:1d:d4: 47:af:55:a5:cd:d9:ba:2b:9a:3a:1a:3a:17:af:8a: 0b:fd:f9:c0:86:9a:73:2a:03:8f:7f:21:17:45:c6: 11:8d:cd:a0:01:4f:5a:9c:a7:54:cd:0a:b0:80:49: 21:5c:5f:50:5e:1e:4c:14:13:d6:ea:cb:16:aa:9f: 45:14:15:cb:e1:ac:2d:ad:70:0a:3a:45:e6:f8:fd: 1c:f0:1a:d6:9e:5b:36:69:50:e1:57:f8:91:68:ee: 7c:f9:bb:fe:47:3c:cb:eb:f2:11:05:8d:81:9b:db: 01:a1:7a:64:e8:d6:af:75:74:f1:46:bc:fe:ba:99: 87:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:04:D9:9D:D0:6A:73:6F:5E:BC:AF:F8:99:08:D8:FA:88:06:03:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb08152e-b32b-3310-9bce-be12c11c8498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:98:b9:19:40:66:93:ac:c4:9c:69:02:d9:34:7a:81:b5:44: d3:ab:69:92:e1:22:10:2c:c2:31:8a:a2:c5:fe:f2:57:a0:0c: fb:6f:c5:9d:8f:01:c2:4e:8e:b2:cf:2f:e5:bc:26:ab:69:15: 23:a9:68:55:af:dd:d5:fa:cc:2a:ba:05:e4:b5:cb:51:f3:e0: 7b:4c:66:52:da:7c:1a:9d:7c:05:6c:88:01:c9:65:59:68:b8: 55:9d:15:bf:42:0e:05:76:12:e6:99:b6:73:a5:24:71:92:54: 14:a8:37:f2:f5:1d:37:15:8a:e7:4c:15:fc:bf:dd:48:31:22: 2a:72:46:48:73:e1:d4:8a:b5:0e:16:d7:e6:40:e9:c9:84:3b: c0:a5:d4:97:3a:af:82:82:ec:4b:b1:b2:5c:89:8f:ef:91:90: 7b:46:82:ba:19:2f:ad:65:39:1f:a0:20:2c:df:fb:19:76:5e: e6:50:a8:a2:3c:c2:ea:eb:db:d4:9d:c1:18:2e:1e:fc:de:34: 9c:31:d1:5d:4d:b2:84:28:b6:9e:be:ae:c2:4e:9d:69:6c:19: f3:8e:14:24:11:bc:c6:cd:3c:ae:4d:29:cd:1e:56:61:c3:93: 7a:2c:4e:5b:7c:b6:a6:e2:c8:dc:cb:d9:fd:71:03:e6:6b:c2: b6:f1:be:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxU954aFACPmzHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk OTlhZGQ4OTYtZDA2ZS00MDRkLTg0NWEtMzQwOTg4MDdhZjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmpAcl8YQkPQdjNeosBZgP4P1DZ94JbiO17q hBUDVqN5vZKRZDozBs33xEZxKyw0YPWKbC2Xt/E6nDWiJXbFGUxUwcUROgv336A0 djD4XYH4xv9iDbR6hkfXbvgmFyjFUZL0SNwjd9QHvEnf55Zy0os0R2r0myOxJA7l YKx8KXCrleAPHdRHr1Wlzdm6K5o6GjoXr4oL/fnAhppzKgOPfyEXRcYRjc2gAU9a nKdUzQqwgEkhXF9QXh5MFBPW6ssWqp9FFBXL4awtrXAKOkXm+P0c8BrWnls2aVDh V/iRaO58+bv+RzzL6/IRBY2Bm9sBoXpk6NavdXTxRrz+upmH7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgE2Z3QanNvXryv+JkI2PqIBgPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmIwODE1MmUtYjMyYi0z MzEwLTliY2UtYmUxMmMxMWM4NDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaEZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeYuRlAZpOsxJxpAtk0eoG1RNOraZLhIhAswjGKosX+8legDPtvxZ2P AcJOjrLPL+W8JqtpFSOpaFWv3dX6zCq6BeS1y1Hz4HtMZlLafBqdfAVsiAHJZVlo uFWdFb9CDgV2EuaZtnOlJHGSVBSoN/L1HTcViudMFfy/3UgxIipyRkhz4dSKtQ4W 1+ZA6cmEO8Cl1Jc6r4KC7EuxslyJj++RkHtGgroZL61lOR+gICzf+xl2XuZQqKI8 wurr29SdwRguHvzeNJwx0V1NsoQotp6+rsJOnWlsGfOOFCQRvMbNPK5NKc0eVmHD k3osTlt8tqbiyNzL2f1xA+Zrwrbxvic= -----END CERTIFICATE-----Generated at Tue Apr 21 21:51:55 2026 by rpki-client