$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/d1087e91-df5b-397b-914d-19b3b91f8595.roa File: d1087e91-df5b-397b-914d-19b3b91f8595.roa (raw, json) Hash identifier: WBD6iVu5iTOZc++2/E62NTiHMLGBm4k1cvBjQ+cvs98= Subject key identifier: 20:1D:3C:BF:05:F3:2B:7F:60:FB:BA:E7:28:B3:E2:CB:F2:3B:8E:7F Certificate issuer: /CN=b40433ec-94a2-4c25-adea-c7cb2bd2bb1b Certificate serial: 010D0C9F4328584D80FFEB9C193188102608EF80 Authority key identifier: D1:F0:E4:49:18:3A:E3:63:CC:22:68:CD:F4:46:C3:95:09:BA:75:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/d1087e91-df5b-397b-914d-19b3b91f8595.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 63089 IP address blocks: 104.156.16.0/20 maxlen: 24 104.243.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:eb:9c:19:31:88:10:26:08:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40433ec-94a2-4c25-adea-c7cb2bd2bb1b Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=e5608c11-12ab-461f-87a9-a3a1fa20a5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8c:5f:7a:72:a2:48:ff:e7:ae:02:66:c6:fe: 41:7f:36:72:ff:0f:91:29:8a:25:0c:c6:c4:35:95: d1:05:20:32:34:ac:32:a3:31:d6:5a:dc:d4:89:4c: 76:61:29:ee:d5:88:ff:9e:ac:2c:09:13:c8:f2:78: b6:1c:96:33:76:f0:3f:8b:77:6a:56:b7:5e:89:66: 22:e6:3e:11:ae:d1:d5:89:63:34:37:cd:39:6f:35: 7e:5c:1f:56:61:b8:83:35:4f:d2:31:e8:9c:7e:e0: f5:63:99:19:ce:21:91:ac:8b:c6:bd:cd:7e:d6:43: 24:e6:fd:6a:57:c1:72:45:88:58:1b:ec:be:0d:30: 80:cd:46:f6:ef:e2:23:4d:e6:01:5c:a5:67:de:0d: 25:d2:ae:af:62:78:64:f1:f5:c6:97:2d:ad:b8:04: 39:d9:f9:3a:56:a6:23:6f:c1:1d:a7:fa:00:a6:eb: e8:3a:8b:0e:71:31:69:72:33:b3:28:40:62:bc:30: f3:13:d1:01:af:42:5b:fa:de:05:08:bd:eb:b1:fa: 36:27:bd:6c:c8:ae:b0:27:67:3e:af:b2:25:51:82: 1a:f3:a4:11:e4:04:68:4f:11:0c:8c:7a:61:d1:aa: d5:84:82:0b:24:42:b0:17:fe:f6:14:79:7c:cc:69: 56:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1D:3C:BF:05:F3:2B:7F:60:FB:BA:E7:28:B3:E2:CB:F2:3B:8E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/d1087e91-df5b-397b-914d-19b3b91f8595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.crl X509v3 Authority Key Identifier: keyid:D1:F0:E4:49:18:3A:E3:63:CC:22:68:CD:F4:46:C3:95:09:BA:75:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.cer sbgp-ipAddrBlock: critical IPv4: 104.156.16.0/20 104.243.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:1d:49:ae:42:8c:d8:af:98:5c:23:cc:c5:26:62:c6:14:e9: fe:63:ac:7b:b9:4e:8b:20:81:cc:a8:a0:e4:6e:b2:ab:48:dc: 5a:5e:17:d4:0a:78:35:c5:b1:ff:29:1e:81:f0:d9:a0:71:00: bc:fa:57:11:dd:4f:57:6a:43:f3:ae:8b:42:57:0a:f8:40:d8: d8:c8:53:d9:83:8e:ca:11:ab:6c:f7:bc:90:5c:54:06:62:be: 59:69:5a:0c:13:f4:f5:03:cc:f7:0d:58:42:4f:70:52:49:98: 55:39:8d:a8:d8:a5:31:2b:d5:db:66:66:f7:9f:a6:0e:4e:30: 1b:5e:7c:92:40:8d:20:43:09:71:3c:c5:ef:42:f9:28:03:f2: d0:a5:84:f8:e2:e0:60:bc:25:32:5a:9e:35:41:3b:90:4c:f0: c3:03:99:63:e4:10:5a:bf:f9:ae:2e:b2:b2:07:61:b0:1f:2d: ed:bf:01:1b:e4:c3:6f:95:80:ed:f4:e2:88:66:5d:f5:35:d8: dc:0c:94:ff:80:36:11:06:24:79:d0:03:1f:ef:f3:e2:56:24: c9:fa:93:30:81:57:03:3b:64:01:9f:99:51:b5:19:58:d4:f4: e2:8a:ec:b9:38:1a:ad:17:af:87:c7:1b:86:d6:f1:92:48:20: 01:a8:f8:9c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2A/+ucGTGIECYI74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQwNDMzZWMtOTRhMi00YzI1LWFkZWEtYzdjYjJiZDJi YjFiMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk ZTU2MDhjMTEtMTJhYi00NjFmLTg3YTktYTNhMWZhMjBhNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoxfenKiSP/nrgJmxv5BfzZy/w+RKYolDMbE NZXRBSAyNKwyozHWWtzUiUx2YSnu1Yj/nqwsCRPI8ni2HJYzdvA/i3dqVrdeiWYi 5j4RrtHViWM0N805bzV+XB9WYbiDNU/SMeicfuD1Y5kZziGRrIvGvc1+1kMk5v1q V8FyRYhYG+y+DTCAzUb27+IjTeYBXKVn3g0l0q6vYnhk8fXGly2tuAQ52fk6VqYj b8Edp/oApuvoOosOcTFpcjOzKEBivDDzE9EBr0Jb+t4FCL3rsfo2J71syK6wJ2c+ r7IlUYIa86QR5ARoTxEMjHph0arVhIILJEKwF/72FHl8zGlWFQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCAdPL8F8yt/YPu65yiz4svyO45/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNDA0 MzNlYy05NGEyLTRjMjUtYWRlYS1jN2NiMmJkMmJiMWIvZDEwODdlOTEtZGY1Yi0z OTdiLTkxNGQtMTliM2I5MWY4NTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjQwNDMzZWMtOTRhMi00YzI1LWFk ZWEtYzdjYjJiZDJiYjFiL2I0MDQzM2VjLTk0YTItNGMyNS1hZGVhLWM3Y2IyYmQy YmIxYi5jcmwwHwYDVR0jBBgwFoAU0fDkSRg642PMImjN9EbDlQm6dbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNDA0MzNlYy05NGEyLTRjMjUtYWRlYS1jN2Ni MmJkMmJiMWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEaJwQAwQE aPOwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACkdSa5CjNivmFwjzMUmYsYU6f5jrHu5TosggcyooORusqtI 3FpeF9QKeDXFsf8pHoHw2aBxALz6VxHdT1dqQ/Oui0JXCvhA2NjIU9mDjsoRq2z3 vJBcVAZivllpWgwT9PUDzPcNWEJPcFJJmFU5jajYpTEr1dtmZvefpg5OMBtefJJA jSBDCXE8xe9C+SgD8tClhPji4GC8JTJanjVBO5BM8MMDmWPkEFq/+a4usrIHYbAf Le2/ARvkw2+VgO304ohmXfU12NwMlP+ANhEGJHnQAx/v8+JWJMn6kzCBVwM7ZAGf mVG1GVjU9OKK7Lk4Gq0Xr4fHG4bW8ZJIIAGo+Jw= -----END CERTIFICATE-----Generated at Sun Apr 19 12:51:50 2026 by rpki-client