$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa File: bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa (raw, json) Hash identifier: Zigl0B3zO8a1alAiHt8vl6iwajzMZ7uxzAR9PQmYKNQ= Subject key identifier: 0B:4A:67:2F:8F:23:F5:4D:E7:59:6C:65:D1:42:0E:5E:D2:E5:C9:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E4129CCBB2B4D45A67E68B200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 35994 IP address blocks: 104.120.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:cc:bb:2b:4d:45:a6:7e:68:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=b955aea3-7216-416a-bd84-8f7aa5a1a78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:54:f2:85:8b:ff:9f:c4:14:12:22:b5:0a:b3: 20:75:fa:01:82:73:41:a9:fb:53:37:4a:07:a4:54: da:14:0b:f6:33:4d:77:56:06:ef:c2:ca:92:b3:18: 25:e8:88:cd:9a:00:78:59:4c:ed:74:91:f6:3a:1d: 23:f2:79:93:b0:3e:04:c1:ac:4b:87:73:fc:c1:8a: 1c:f5:28:3c:6c:ca:cc:83:77:92:95:0e:eb:08:87: 01:05:76:55:6b:d2:4e:21:40:80:02:ae:41:68:3e: 77:c0:f1:67:72:93:7a:e8:ef:cc:ec:d3:c2:01:ea: 86:22:65:55:1a:f4:50:64:85:62:0f:55:09:d0:b0: 65:27:96:aa:e3:cd:fb:d3:8e:62:ae:be:1e:c4:22: 75:b5:53:c5:ea:e4:19:86:9d:ef:ac:d9:75:dd:37: c1:f9:60:24:66:95:88:86:f9:24:d5:6e:4d:8a:dc: 3f:a2:5b:00:a1:84:0e:48:55:f5:79:64:ce:f2:62: 5b:0f:a7:ba:a3:ec:93:74:3d:70:35:75:b2:85:ac: dc:cd:8b:7b:08:36:94:98:4d:40:c9:f4:32:b7:6c: 48:13:9e:b8:02:44:ba:aa:02:1f:06:e4:66:ca:f6: 4f:f6:7c:66:08:4e:b0:b4:7f:d0:f7:76:65:f1:cb: 32:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4A:67:2F:8F:23:F5:4D:E7:59:6C:65:D1:42:0E:5E:D2:E5:C9:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.120.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:83:ef:5e:10:7f:b0:bf:11:42:d1:4e:9a:25:4c:8c:6a:6c: 98:cd:d0:c5:25:b7:00:1e:e3:78:f5:85:22:03:22:bc:2a:2a: eb:d6:ba:41:db:91:67:d1:9b:84:a5:12:c7:61:a4:bd:0b:b6: 77:15:d9:c7:7f:4d:eb:7a:43:bf:32:4b:6f:43:13:ca:c5:19: 7b:8e:6f:9e:65:1c:01:01:4c:76:0f:f0:8f:ca:81:1f:cd:25: bf:7a:50:e5:40:2f:04:dc:f7:c8:38:7b:de:c8:bf:65:52:4e: c9:dc:c3:b2:63:72:44:f7:92:7c:6f:f1:3f:cd:82:63:1c:47: 1e:0d:b3:27:81:97:dc:d9:0b:1b:f5:59:0d:88:d6:a9:3e:04: b6:04:81:c6:0d:96:bd:cd:60:cb:10:fe:38:97:d9:3e:3c:0d: 05:ad:53:7a:87:8d:04:5c:03:a2:cb:2a:d5:60:9e:e7:91:03: 8a:09:2a:81:f1:57:b3:e3:d1:5b:4d:a4:eb:4a:92:05:dd:14: 78:45:a1:c9:ea:2d:65:54:da:14:44:10:bf:ff:19:19:35:d2: 2c:be:d4:25:96:31:a6:38:1d:1c:dd:5c:7d:68:eb:21:7a:c4: 2f:2b:79:63:a5:f8:f2:fa:f9:b2:a6:94:33:2a:41:0d:c3:5f: a3:ee:81:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKcy7K01Fpn5osgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk Yjk1NWFlYTMtNzIxNi00MTZhLWJkODQtOGY3YWE1YTFhNzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVTyhYv/n8QUEiK1CrMgdfoBgnNBqftTN0oH pFTaFAv2M013VgbvwsqSsxgl6IjNmgB4WUztdJH2Oh0j8nmTsD4EwaxLh3P8wYoc 9Sg8bMrMg3eSlQ7rCIcBBXZVa9JOIUCAAq5BaD53wPFncpN66O/M7NPCAeqGImVV GvRQZIViD1UJ0LBlJ5aq4837045irr4exCJ1tVPF6uQZhp3vrNl13TfB+WAkZpWI hvkk1W5Nitw/olsAoYQOSFX1eWTO8mJbD6e6o+yTdD1wNXWyhazczYt7CDaUmE1A yfQyt2xIE564AkS6qgIfBuRmyvZP9nxmCE6wtH/Q93Zl8csy0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtKZy+PI/VN51lsZdFCDl7S5cncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmNhOGNjYWItNGY3My0z ZGQzLWFiYzEtZDhhMzc4MzY3MGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKD714Qf7C/EULRTpolTIxqbJjN0MUltwAe43j1hSIDIrwqKuvWukHb kWfRm4SlEsdhpL0LtncV2cd/Tet6Q78yS29DE8rFGXuOb55lHAEBTHYP8I/KgR/N Jb96UOVALwTc98g4e97Iv2VSTsncw7JjckT3knxv8T/NgmMcRx4NsyeBl9zZCxv1 WQ2I1qk+BLYEgcYNlr3NYMsQ/jiX2T48DQWtU3qHjQRcA6LLKtVgnueRA4oJKoHx V7Pj0VtNpOtKkgXdFHhFocnqLWVU2hREEL//GRk10iy+1CWWMaY4HRzdXH1o6yF6 xC8reWOl+PL6+bKmlDMqQQ3DX6PugWo= -----END CERTIFICATE-----Generated at Tue Jul 21 21:44:05 2026 by rpki-client