$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f542f7a7-f5f9-36ad-9b74-ef92d136ad83.roa File: f542f7a7-f5f9-36ad-9b74-ef92d136ad83.roa (raw, json) Hash identifier: i/IFZwyVlSP4Meqx91D8n2ZHpfvssSmW6aJ4QBlKB1M= Subject key identifier: 42:29:39:A3:E7:6E:41:E2:D2:92:DB:D5:35:B0:C2:68:12:7A:7B:BC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D93255E1D8CB0B7A9D79AC880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f542f7a7-f5f9-36ad-9b74-ef92d136ad83.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 104.70.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:5e:1d:8c:b0:b7:a9:d7:9a:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=cabd1a3b-caf5-4dc5-9462-b8b9c4b27dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:54:fb:8b:61:32:44:d3:d4:7e:7e:8e:98:62: fd:fc:c8:56:f0:9b:a7:20:0a:3d:73:53:d6:01:6c: 8b:d5:cb:c8:1b:64:d6:1a:5f:bc:de:c9:37:44:ea: da:71:b2:78:25:1e:a6:a8:6a:e4:66:71:d7:32:b3: 2c:a5:f2:27:47:bf:b4:f5:c5:20:10:79:1b:e8:49: f7:e3:e2:1c:6d:4f:57:fc:b3:97:cf:47:7c:58:4c: 73:80:c1:2d:3f:58:6b:30:94:7c:6a:8e:3a:95:99: c8:55:fa:fb:bf:1a:c7:76:06:7e:a7:ae:b1:3b:f0: 7e:6b:3f:05:31:ee:f2:3f:64:67:79:99:84:06:db: d1:27:1e:bc:87:f4:1a:26:e7:41:0a:dc:43:e9:0f: ac:58:5a:ae:d7:69:11:50:43:13:70:73:2d:63:16: ec:e2:68:18:c3:9c:0a:18:d5:54:49:96:28:de:6a: 51:f9:f8:e0:a4:80:17:27:81:5d:26:41:50:32:64: fa:23:2b:70:3c:ed:db:26:27:74:57:2f:0d:fb:95: f4:c8:60:33:67:0a:c1:ae:e7:f5:39:19:ed:83:41: 77:8b:80:79:86:b3:b0:35:09:f2:44:c3:b7:50:4f: 2f:06:30:d1:a5:0e:1c:fb:3f:8d:2e:c2:3d:25:0e: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:29:39:A3:E7:6E:41:E2:D2:92:DB:D5:35:B0:C2:68:12:7A:7B:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f542f7a7-f5f9-36ad-9b74-ef92d136ad83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f8:29:fe:cd:d5:45:80:f9:1f:0a:ce:08:c0:e8:22:b4:4b: 6d:db:31:52:d0:c3:e7:fd:0a:d5:93:85:d0:c4:5c:f1:63:05: a5:e3:97:d7:63:14:6f:d8:14:a0:8d:12:ec:65:da:84:cf:95: 06:5f:f3:0e:73:98:30:9f:b2:f0:e5:48:1e:6c:03:f6:30:4d: 27:13:06:fa:5b:2d:94:fa:0e:8e:5b:1f:57:1e:29:e2:11:0c: 84:2d:6f:00:31:00:4b:ba:f2:de:a4:fe:5e:7a:04:1b:bf:10: 1c:65:27:92:75:8d:a2:6d:80:67:c2:9a:a7:d0:13:d2:4c:7a: 92:8a:3a:c9:f6:c8:02:c4:28:ff:a4:75:e7:33:ed:36:e4:8a: 75:8a:9b:82:2b:c1:09:2c:f2:ef:d3:65:12:cd:6f:8b:f5:b7: 47:fd:83:e1:2f:da:1d:1f:d8:f2:c9:17:a7:63:08:8e:9f:fc: 36:a2:60:06:1e:cd:bb:7f:b0:1a:88:38:98:44:fb:23:a0:b1: 03:df:6f:5f:3c:5e:28:62:f9:3b:7d:94:95:58:60:5e:20:e5: df:06:39:3f:3c:6b:24:f8:7b:ae:1a:72:54:86:20:7f:4e:46: d0:b5:c9:0e:1f:9a:3b:0b:34:19:36:04:29:6a:56:5a:06:b7: f3:93:23:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJV4djLC3qdeayIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk Y2FiZDFhM2ItY2FmNS00ZGM1LTk0NjItYjhiOWM0YjI3ZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFT7i2EyRNPUfn6OmGL9/MhW8JunIAo9c1PW AWyL1cvIG2TWGl+83sk3ROracbJ4JR6mqGrkZnHXMrMspfInR7+09cUgEHkb6En3 4+IcbU9X/LOXz0d8WExzgMEtP1hrMJR8ao46lZnIVfr7vxrHdgZ+p66xO/B+az8F Me7yP2RneZmEBtvRJx68h/QaJudBCtxD6Q+sWFqu12kRUEMTcHMtYxbs4mgYw5wK GNVUSZYo3mpR+fjgpIAXJ4FdJkFQMmT6IytwPO3bJid0Vy8N+5X0yGAzZwrBruf1 ORntg0F3i4B5hrOwNQnyRMO3UE8vBjDRpQ4c+z+NLsI9JQ4QVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIpOaPnbkHi0pLb1TWwwmgSenu8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjU0MmY3YTctZjVmOS0z NmFkLTliNzQtZWY5MmQxMzZhZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEazMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID4Kf7N1UWA+R8KzgjA6CK0S23bMVLQw+f9CtWThdDEXPFjBaXjl9dj FG/YFKCNEuxl2oTPlQZf8w5zmDCfsvDlSB5sA/YwTScTBvpbLZT6Do5bH1ceKeIR DIQtbwAxAEu68t6k/l56BBu/EBxlJ5J1jaJtgGfCmqfQE9JMepKKOsn2yALEKP+k decz7TbkinWKm4IrwQks8u/TZRLNb4v1t0f9g+Ev2h0f2PLJF6djCI6f/DaiYAYe zbt/sBqIOJhE+yOgsQPfb188Xihi+Tt9lJVYYF4g5d8GOT88ayT4e64aclSGIH9O RtC1yQ4fmjsLNBk2BClqVloGt/OTIzE= -----END CERTIFICATE-----Generated at Tue Apr 21 23:32:32 2026 by rpki-client