$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbaf5636-5213-3437-8c45-5556d1d350a0.roa File: bbaf5636-5213-3437-8c45-5556d1d350a0.roa (raw, json) Hash identifier: kbpTt/D4vonpkDZQMJI7yDQX4/hdYWktarea55oEEl4= Subject key identifier: DA:48:88:2D:41:5D:1E:E2:D3:F5:C0:83:3B:72:C6:D2:ED:A7:F7:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE512A9E11F360638F8C1F900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbaf5636-5213-3437-8c45-5556d1d350a0.roa Signing time: Wed 20 May 2026 09:19:17 +0000 ROA not before: Wed 20 May 2026 09:19:17 +0000 ROA not after: Tue 18 Aug 2026 09:19:17 +0000 asID: 55410 IP address blocks: 104.94.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:12:a9:e1:1f:36:06:38:f8:c1:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 09:19:17 2026 GMT Not After : Aug 18 09:19:17 2026 GMT Subject: CN=1a8c0261-67c6-441d-afbf-0ec0f7f81c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:46:9f:cb:30:6a:92:e0:35:cd:65:85:81:20: ce:32:2c:db:26:d2:79:1d:bd:cd:d0:39:db:94:55: 71:9c:68:46:ba:50:79:b4:7f:5a:c1:28:6f:c0:6f: f1:6f:6b:d5:40:fc:59:83:99:bd:19:70:fa:08:1b: cb:31:00:0a:8e:c4:54:d7:c3:bb:ea:ee:bc:79:5c: 81:2e:53:f2:4e:0d:e8:e2:13:43:5a:69:86:f6:3b: 57:bc:a6:29:68:ef:f3:41:0c:91:8a:59:13:d2:31: e5:3a:79:73:d1:e7:0f:48:e0:f4:d4:fb:1c:88:75: c2:ea:98:83:da:23:70:c2:5f:20:01:1c:d0:01:fa: 03:3b:3e:df:96:d7:d7:cf:af:9e:f7:49:31:7c:6f: ff:f4:57:0c:bd:d6:22:6b:24:91:21:19:9b:6e:58: a8:4c:41:2d:36:79:34:61:c0:3d:57:eb:b9:93:c5: 34:1a:e1:b9:19:8d:a4:86:7d:af:de:b1:bb:2b:2d: 01:a8:32:10:35:75:b0:3e:2e:fd:ce:cc:34:4f:3b: fb:23:68:0d:07:a7:7c:70:65:4f:df:2f:b0:c0:93: 92:20:95:55:ce:63:ce:c0:dc:51:0a:25:8a:1a:9e: 70:42:56:75:e7:c9:13:ad:3c:b1:91:2d:29:b0:86: ea:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:48:88:2D:41:5D:1E:E2:D3:F5:C0:83:3B:72:C6:D2:ED:A7:F7:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbaf5636-5213-3437-8c45-5556d1d350a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.94.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:1d:d6:bb:6c:c3:87:9e:0a:9d:16:1a:3d:d2:8a:18:4d:e0: c0:bb:a7:2e:b0:70:60:e7:1e:0e:04:8f:17:6b:cd:26:9a:ef: de:a2:8a:04:6d:09:c6:4e:9a:5d:71:f4:be:df:51:70:ce:e9: 28:ee:83:ba:48:aa:23:cf:96:6c:c9:2c:b7:56:cd:16:4c:56: 77:c8:03:ed:a9:e9:2b:11:03:3c:16:03:48:ba:5b:32:98:ce: 37:a9:18:bd:cb:b9:5b:d4:38:1c:f6:9d:1e:1e:6a:ef:37:d1: 84:1c:01:5d:83:88:81:55:98:c0:b0:83:47:b4:d0:86:45:8e: f2:2c:f2:84:e8:dd:b5:b8:fc:2f:40:db:05:a1:62:44:73:15: 43:4b:ae:ca:9e:82:f3:aa:6e:23:2b:55:b1:8a:c5:62:ae:74: fc:e3:10:d5:cc:70:1c:e0:3d:cb:bb:dd:dc:3f:c4:e2:62:d3: 93:a9:42:16:e9:66:34:d9:be:65:56:5c:68:cc:f0:c6:27:cc: b3:d2:02:dd:ed:2d:5c:cb:1a:66:77:ca:1c:be:c1:22:78:b0: 73:9b:d0:60:02:59:45:fb:3a:c9:c2:42:e9:5e:7a:59:cf:2d: 12:f6:b2:17:71:c1:86:9b:00:64:c5:a9:44:63:80:45:0b:1f: 0f:ba:c1:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3lEqnhHzYGOPjB+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMDA5MTkxN1oXDTI2MDgxODA5MTkxN1owLzEtMCsGA1UEAxMk MWE4YzAyNjEtNjdjNi00NDFkLWFmYmYtMGVjMGY3ZjgxYzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkafyzBqkuA1zWWFgSDOMizbJtJ5Hb3N0Dnb lFVxnGhGulB5tH9awShvwG/xb2vVQPxZg5m9GXD6CBvLMQAKjsRU18O76u68eVyB LlPyTg3o4hNDWmmG9jtXvKYpaO/zQQyRilkT0jHlOnlz0ecPSOD01PsciHXC6piD 2iNwwl8gARzQAfoDOz7fltfXz6+e90kxfG//9FcMvdYiaySRIRmbblioTEEtNnk0 YcA9V+u5k8U0GuG5GY2khn2v3rG7Ky0BqDIQNXWwPi79zsw0Tzv7I2gNB6d8cGVP 3y+wwJOSIJVVzmPOwNxRCiWKGp5wQlZ158kTrTyxkS0psIbq+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpIiC1BXR7i0/XAgztyxtLtp/dwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmJhZjU2MzYtNTIxMy0z NDM3LThjNDUtNTU1NmQxZDM1MGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaF5mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUd1rtsw4eeCp0WGj3SihhN4MC7py6wcGDnHg4EjxdrzSaa796iigRt CcZOml1x9L7fUXDO6Sjug7pIqiPPlmzJLLdWzRZMVnfIA+2p6SsRAzwWA0i6WzKY zjepGL3LuVvUOBz2nR4eau830YQcAV2DiIFVmMCwg0e00IZFjvIs8oTo3bW4/C9A 2wWhYkRzFUNLrsqegvOqbiMrVbGKxWKudPzjENXMcBzgPcu73dw/xOJi05OpQhbp ZjTZvmVWXGjM8MYnzLPSAt3tLVzLGmZ3yhy+wSJ4sHOb0GACWUX7OsnCQuleelnP LRL2shdxwYabAGTFqURjgEULHw+6wZw= -----END CERTIFICATE-----Generated at Sat Jun 6 05:40:55 2026 by rpki-client