$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41d58a20-66e9-367b-9971-ce3975c90a2c.roa File: 41d58a20-66e9-367b-9971-ce3975c90a2c.roa (raw, json) Hash identifier: 3DAYqTXx7KhBxsHeB61bWoSwajRc7mY8YoWn1B2BK/0= Subject key identifier: FD:E6:A0:0B:8D:A8:50:6B:21:B1:B0:00:CF:65:5F:34:7B:14:E4:E0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB55209A373CDAD8476AF6900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41d58a20-66e9-367b-9971-ce3975c90a2c.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 20940 IP address blocks: 104.96.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:52:09:a3:73:cd:ad:84:76:af:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=0c3d02ac-992e-45a2-bddc-e73a05642a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ca:62:17:7c:b7:d0:34:f1:db:3e:e2:05:a2: 03:30:af:ae:21:ec:8c:73:d0:ec:53:ef:f8:0e:2c: d0:2c:99:ef:71:58:81:1e:db:9e:b8:52:06:01:bd: 47:1f:ca:47:05:54:51:97:d3:b3:e5:03:d0:4b:0b: 7f:15:fb:39:0a:57:21:b8:02:5b:2f:a8:e3:d3:71: c2:a1:8b:6c:d5:7e:d8:c3:3e:cb:65:c9:f2:96:3e: c1:59:69:d2:9a:07:5f:f5:d0:c3:f3:95:0d:64:d4: 61:c4:fb:f0:05:28:99:4e:bd:23:b0:8f:b5:f6:a5: bc:0b:96:4f:a2:51:e1:51:6f:25:dd:2d:fe:2e:f6: 5c:c3:29:f2:fb:02:33:38:51:80:db:f9:b5:4c:bb: fb:30:c8:0a:44:d5:0e:c8:20:65:b1:c4:5c:c7:d9: 08:14:13:1b:38:57:1e:94:23:c8:fb:c1:93:30:5f: 9a:34:63:dc:10:ca:73:ab:d0:c9:26:19:0d:c4:54: 4f:fa:a3:95:34:ac:41:6d:bc:49:eb:da:40:cf:1d: ff:b9:46:a9:40:9a:95:09:0e:a3:5e:e1:9a:cc:c3: 89:38:f3:00:ea:a3:15:17:c6:08:d8:3f:d3:e3:b1: fe:ce:65:90:d1:3d:f4:40:4e:d7:ab:34:84:10:75: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E6:A0:0B:8D:A8:50:6B:21:B1:B0:00:CF:65:5F:34:7B:14:E4:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41d58a20-66e9-367b-9971-ce3975c90a2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.96.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:09:43:c4:41:d9:ff:76:20:6e:5a:1d:af:c9:9e:64:c0:32: 93:0c:3f:12:11:8e:c5:70:d6:4f:84:f5:e0:92:c3:02:60:30: 13:37:80:43:54:7c:10:5d:59:bb:62:eb:77:6b:5c:a0:f9:05: e2:11:41:77:9a:8b:0b:d8:38:74:0d:e4:66:e4:a6:68:34:b3: d7:f8:17:77:ce:59:8c:bf:60:9b:55:6f:f2:1d:a4:bc:33:fb: 7f:8f:e7:8d:ab:f5:ef:54:63:fa:38:d5:a3:5e:ee:13:28:86: 11:71:94:49:c3:1a:da:70:8a:cc:67:99:0b:c6:16:82:88:13: 74:14:8b:6e:41:33:74:25:1c:4a:03:d7:4e:7d:d6:2b:b7:22: 5d:59:53:1e:fe:86:f9:74:63:f6:36:99:b9:36:23:14:f6:59: 44:eb:7d:f7:c4:c8:6a:49:3f:fd:12:23:f9:ba:1b:12:84:84: 70:cd:80:f3:56:db:1b:8b:d8:f1:f9:0f:a6:a9:fc:44:57:de: 53:63:ca:ff:fe:8f:ca:47:90:61:9b:e6:49:e0:6a:8b:2d:72: 2b:11:de:be:d7:4b:45:ae:e7:16:5b:6d:92:36:9c:b0:98:fa: 63:23:33:64:c0:8f:4c:5c:18:48:f7:d4:a7:32:48:98:db:aa: 51:91:33:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1Ugmjc82thHavaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk MGMzZDAyYWMtOTkyZS00NWEyLWJkZGMtZTczYTA1NjQyYTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwspiF3y30DTx2z7iBaIDMK+uIeyMc9DsU+/4 DizQLJnvcViBHtueuFIGAb1HH8pHBVRRl9Oz5QPQSwt/Ffs5ClchuAJbL6jj03HC oYts1X7Ywz7LZcnylj7BWWnSmgdf9dDD85UNZNRhxPvwBSiZTr0jsI+19qW8C5ZP olHhUW8l3S3+LvZcwyny+wIzOFGA2/m1TLv7MMgKRNUOyCBlscRcx9kIFBMbOFce lCPI+8GTMF+aNGPcEMpzq9DJJhkNxFRP+qOVNKxBbbxJ69pAzx3/uUapQJqVCQ6j XuGazMOJOPMA6qMVF8YI2D/T47H+zmWQ0T30QE7XqzSEEHVxnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3moAuNqFBrIbGwAM9lXzR7FOTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDFkNThhMjAtNjZlOS0z NjdiLTk5NzEtY2UzOTc1YzkwYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGCjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYJQ8RB2f92IG5aHa/JnmTAMpMMPxIRjsVw1k+E9eCSwwJgMBM3gENU fBBdWbti63drXKD5BeIRQXeaiwvYOHQN5Gbkpmg0s9f4F3fOWYy/YJtVb/IdpLwz +3+P542r9e9UY/o41aNe7hMohhFxlEnDGtpwisxnmQvGFoKIE3QUi25BM3QlHEoD 10591iu3Il1ZUx7+hvl0Y/Y2mbk2IxT2WUTrfffEyGpJP/0SI/m6GxKEhHDNgPNW 2xuL2PH5D6ap/ERX3lNjyv/+j8pHkGGb5kngaostcisR3r7XS0Wu5xZbbZI2nLCY +mMjM2TAj0xcGEj31KcySJjbqlGRMzg= -----END CERTIFICATE-----Generated at Mon Mar 2 06:51:05 2026 by rpki-client