$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37fd18e6-5f92-35f1-adf9-ba09addc6047.roa File: 37fd18e6-5f92-35f1-adf9-ba09addc6047.roa (raw, json) Hash identifier: bd/ZNk06FsZLfHGIIxnU6ArvO+nB8UKT22z+cju/ut8= Subject key identifier: 42:EF:B0:07:BD:5C:13:67:E6:C1:7A:E1:84:B5:8C:7F:3A:E5:94:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8AC54FA992CD789D4C46E980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37fd18e6-5f92-35f1-adf9-ba09addc6047.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 104.70.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:4f:a9:92:cd:78:9d:4c:46:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=be2d3fa6-9c6c-4060-8b09-a03655f1f651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:d4:9f:fb:5f:fa:46:8c:3d:53:13:3c:53: ce:d3:65:e9:46:05:db:c3:c6:c3:9a:7e:c3:92:0e: ad:90:55:99:e2:f4:77:67:08:b4:07:df:e9:60:bb: c2:59:6d:10:8d:55:9e:30:ac:c4:03:fe:45:83:2f: 59:92:68:57:c7:13:11:ac:2d:7d:40:16:5a:2b:ac: ef:78:b1:f3:d8:08:7f:98:ad:0a:be:77:a8:59:d6: 87:78:06:8e:bd:39:19:c9:5a:18:3f:58:0c:5c:6d: 9d:dd:ed:57:d1:0a:19:60:57:45:31:2e:27:b5:e2: ad:39:b6:20:b4:ca:f3:cb:f2:25:5a:0a:78:71:47: 01:2f:33:0b:cc:31:be:eb:fe:77:4b:44:0e:f0:3a: 4d:0f:91:2b:45:6d:5e:59:04:6f:3f:44:34:d7:38: 36:4f:57:98:be:e3:ed:38:03:05:7e:65:64:6e:a4: 4d:2d:dc:cc:d1:70:8a:f1:67:2b:ca:71:db:e8:68: 4e:5e:df:17:75:d2:3c:24:e1:54:1e:46:9f:07:bc: 30:e3:90:a8:0b:2c:45:70:65:4e:e3:26:d4:71:62: ad:da:a7:4f:f1:ae:6d:21:33:17:80:bd:ae:8a:8f: 03:6d:7c:9a:f9:65:40:03:23:91:e6:a9:b2:e3:2a: 82:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EF:B0:07:BD:5C:13:67:E6:C1:7A:E1:84:B5:8C:7F:3A:E5:94:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37fd18e6-5f92-35f1-adf9-ba09addc6047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e9:e1:9d:88:b5:de:b8:1b:7c:12:aa:1e:45:ae:1d:51:85: f8:c8:f6:89:5c:62:df:8a:53:5a:30:0a:5f:fc:cc:33:11:82: dd:84:32:76:33:db:ed:90:a6:75:ce:b0:48:fc:2b:c1:71:a8: af:cc:b1:7d:8d:0e:2a:a7:0d:f9:f8:17:61:1c:1a:ba:2f:f2: 66:c7:71:21:eb:12:76:e8:e5:3c:78:60:c3:b8:25:81:9b:e1: 26:f2:71:4c:71:70:ff:95:53:6f:30:55:67:3f:fb:84:64:f9: f7:82:9a:0a:13:30:9d:cf:71:1b:33:4e:22:05:d0:f1:54:e0: 90:32:4c:dc:fc:85:78:39:00:c0:02:db:3e:87:77:ce:1d:f3: ec:42:15:39:b4:80:b7:e1:4f:86:f3:b2:cf:02:8a:77:aa:8f: b6:e8:62:10:58:57:e5:59:62:e4:f4:52:63:e3:62:b7:4b:14: 73:5c:f9:2a:93:33:1a:8c:15:b0:ff:ed:56:55:cd:dd:a0:07: 38:45:3b:a3:1e:9f:e8:2b:8d:11:ef:01:3a:f8:5e:88:7d:57: ed:6f:f0:9b:ef:10:cc:38:b0:bd:52:d8:f2:c2:2f:d4:17:e3: 40:df:72:80:02:79:a4:88:88:91:39:29:8b:0f:09:39:39:de: 04:1f:81:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxU+pks14nUxG6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk YmUyZDNmYTYtOWM2Yy00MDYwLThiMDktYTAzNjU1ZjFmNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3nUn/tf+kaMPVMTPFPO02XpRgXbw8bDmn7D kg6tkFWZ4vR3Zwi0B9/pYLvCWW0QjVWeMKzEA/5Fgy9ZkmhXxxMRrC19QBZaK6zv eLHz2Ah/mK0KvneoWdaHeAaOvTkZyVoYP1gMXG2d3e1X0QoZYFdFMS4nteKtObYg tMrzy/IlWgp4cUcBLzMLzDG+6/53S0QO8DpND5ErRW1eWQRvP0Q01zg2T1eYvuPt OAMFfmVkbqRNLdzM0XCK8WcrynHb6GhOXt8XddI8JOFUHkafB7ww45CoCyxFcGVO 4ybUcWKt2qdP8a5tITMXgL2uio8DbXya+WVAAyOR5qmy4yqCGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELvsAe9XBNn5sF64YS1jH865ZSpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzdmZDE4ZTYtNWY5Mi0z NWYxLWFkZjktYmEwOWFkZGM2MDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEZ1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjp4Z2Itd64G3wSqh5Frh1RhfjI9olcYt+KU1owCl/8zDMRgt2EMnYz 2+2QpnXOsEj8K8FxqK/MsX2NDiqnDfn4F2EcGrov8mbHcSHrEnbo5Tx4YMO4JYGb 4SbycUxxcP+VU28wVWc/+4Rk+feCmgoTMJ3PcRszTiIF0PFU4JAyTNz8hXg5AMAC 2z6Hd84d8+xCFTm0gLfhT4bzss8Cineqj7boYhBYV+VZYuT0UmPjYrdLFHNc+SqT MxqMFbD/7VZVzd2gBzhFO6Men+grjRHvATr4Xoh9V+1v8JvvEMw4sL1S2PLCL9QX 40DfcoACeaSIiJE5KYsPCTk53gQfgeU= -----END CERTIFICATE-----Generated at Sat Apr 18 04:40:28 2026 by rpki-client