$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa File: 0bde66e0-ee94-3e23-97de-fad631a974c8.roa (raw, json) Hash identifier: LlXXxCELbZrvsyg2O94dP7lLPApw6xGKaZYMQiSX+6s= Subject key identifier: 0A:B3:61:DF:4D:E2:DB:CE:C1:39:6F:CE:47:ED:D6:12:B2:6B:B7:74 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB55203680D25812F418B0B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 9498 IP address blocks: 104.104.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:52:03:68:0d:25:81:2f:41:8b:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=3b44ea34-8874-48d9-b2a0-f5e6e0d21985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:be:b3:e8:e7:18:ab:0f:b7:38:77:81:50:52: db:4c:9b:70:26:8b:9d:28:73:a4:ce:df:a3:c2:2b: 09:7c:60:a3:09:4e:61:62:b0:fd:09:31:e3:7b:3f: 0f:57:52:43:bc:c4:d9:77:38:df:e9:0d:a3:e7:1c: 07:8e:24:16:3b:8b:d3:7e:a9:e6:6e:f7:45:91:da: 14:af:81:22:e4:be:96:97:88:39:a9:eb:73:b6:98: f4:e9:f8:79:9e:7e:a2:5f:0c:5b:21:a1:79:97:e9: 15:01:e8:67:f6:a7:52:23:53:a0:7d:08:73:44:e1: 82:e6:95:d9:06:12:d3:49:38:a1:5d:6d:9c:e5:29: df:91:ab:44:56:b7:c2:98:a8:97:48:21:fe:31:0a: 7a:d3:58:28:61:55:09:e1:1f:be:8f:22:6f:e2:be: c3:fa:7a:de:4b:37:c1:8c:9b:ef:a1:ed:59:25:5e: d7:bd:5b:47:9d:a5:cd:dc:e4:a7:42:ee:5a:70:cc: 94:2b:77:32:f5:ed:85:9f:bc:3a:34:50:55:d1:60: 48:4d:05:dc:d2:ff:59:67:04:29:7b:8c:9f:41:61: 76:6f:91:d8:d5:dd:a5:e5:64:71:ff:a8:1b:4c:2a: 5a:7e:00:e0:a0:b3:61:2e:6f:2b:e1:78:6a:41:5f: 1d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B3:61:DF:4D:E2:DB:CE:C1:39:6F:CE:47:ED:D6:12:B2:6B:B7:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.104.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:98:b6:77:cd:49:31:2c:e4:d1:24:80:37:3e:48:53:82:db: 20:a3:ea:6a:1d:be:ba:ff:13:21:42:01:70:a6:1f:84:bc:93: 82:c3:96:6e:38:b2:ce:1d:36:75:3f:1b:9f:78:b6:30:0f:c4: 64:f1:b6:00:22:70:d9:27:e4:4d:be:82:76:73:a0:4b:aa:38: 00:2f:43:88:74:85:84:0a:c8:a4:82:36:b7:e0:7a:e7:f3:5b: 79:04:6a:01:76:74:59:1b:27:49:d1:b4:d5:39:6a:9a:cf:3b: 4b:cf:19:c7:2f:72:4c:16:1a:fd:9a:59:75:d4:63:a6:39:c6: 4c:f5:c0:b1:b5:fc:f3:f6:a4:02:93:97:eb:08:30:d0:a2:85: c4:7e:8a:ec:98:d2:9e:45:26:f3:e5:67:a3:71:4a:2e:24:33: 42:f6:00:47:a4:9e:e9:5e:8b:8d:95:35:b8:a7:4b:dc:39:51: 3f:e3:28:d4:61:36:46:46:f2:24:b1:06:5b:92:c5:38:08:3e: 4f:72:4b:ba:29:66:4b:9c:41:e4:a3:8d:ad:d5:69:b7:8c:80: 05:81:51:e7:ef:cd:b2:bc:e5:0e:9f:b8:62:1f:75:80:2a:47: 15:37:90:87:62:e5:3d:e0:8b:e9:d8:0f:ed:d4:fb:41:64:98: 5f:cb:93:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UgNoDSWBL0GLC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk M2I0NGVhMzQtODg3NC00OGQ5LWIyYTAtZjVlNmUwZDIxOTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh76z6OcYqw+3OHeBUFLbTJtwJoudKHOkzt+j wisJfGCjCU5hYrD9CTHjez8PV1JDvMTZdzjf6Q2j5xwHjiQWO4vTfqnmbvdFkdoU r4Ei5L6Wl4g5qetztpj06fh5nn6iXwxbIaF5l+kVAehn9qdSI1OgfQhzROGC5pXZ BhLTSTihXW2c5SnfkatEVrfCmKiXSCH+MQp601goYVUJ4R++jyJv4r7D+nreSzfB jJvvoe1ZJV7XvVtHnaXN3OSnQu5acMyUK3cy9e2Fn7w6NFBV0WBITQXc0v9ZZwQp e4yfQWF2b5HY1d2l5WRx/6gbTCpafgDgoLNhLm8r4XhqQV8diQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqzYd9N4tvOwTlvzkft1hKya7d0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGJkZTY2ZTAtZWU5NC0z ZTIzLTk3ZGUtZmFkNjMxYTk3NGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2YtnfNSTEs5NEkgDc+SFOC2yCj6modvrr/EyFCAXCmH4S8k4LDlm44 ss4dNnU/G594tjAPxGTxtgAicNkn5E2+gnZzoEuqOAAvQ4h0hYQKyKSCNrfgeufz W3kEagF2dFkbJ0nRtNU5aprPO0vPGccvckwWGv2aWXXUY6Y5xkz1wLG1/PP2pAKT l+sIMNCihcR+iuyY0p5FJvPlZ6NxSi4kM0L2AEeknulei42VNbinS9w5UT/jKNRh NkZG8iSxBluSxTgIPk9yS7opZkucQeSjja3VabeMgAWBUefvzbK85Q6fuGIfdYAq RxU3kIdi5T3gi+nYD+3U+0FkmF/Lk8I= -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:59 2026 by rpki-client