$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45f48996-6c2a-31e7-850c-a7f99fa8ae5e.roa File: 45f48996-6c2a-31e7-850c-a7f99fa8ae5e.roa (raw, json) Hash identifier: LKZzG5E3E3SdluG8zAwgDXeyyWo1ATXcO8F68Fh2nns= Subject key identifier: 2D:41:97:CF:A5:FF:B5:ED:32:EF:39:89:52:D5:CD:37:0A:3A:92:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D60E4FFC4FF234676FA368D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45f48996-6c2a-31e7-850c-a7f99fa8ae5e.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 35994 IP address blocks: 104.125.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:ff:c4:ff:23:46:76:fa:36:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=014adb8d-1d6f-4991-af3c-ded48dee2322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:be:5f:78:10:70:91:b6:ea:77:18:88:c5:e3: f0:60:36:78:0d:a0:a5:b9:cd:90:14:23:36:79:cc: 92:6f:e1:d1:44:7c:fa:dd:dc:6d:a7:dc:d6:77:4a: d8:f1:ca:46:a8:ba:02:e0:8a:2e:a5:c2:32:e2:28: 7a:e2:35:65:60:5c:ce:90:d1:d0:2b:d8:4d:ed:5c: 73:0f:51:f8:fb:92:55:09:c1:5e:61:27:0d:2d:ae: c4:50:8e:4c:1d:80:e1:fa:47:40:dd:b4:90:f8:7e: be:38:a7:1c:bb:8f:4f:74:64:71:08:23:07:47:2e: 99:31:41:31:ec:92:44:02:7d:5e:b4:38:60:99:b3: 0c:f9:f3:b0:33:c6:c6:86:74:ab:db:38:f1:6b:9c: d8:45:fe:d0:4d:a9:5c:93:d1:1c:02:90:48:41:71: ec:d8:c0:71:cb:10:86:ab:77:8f:ba:76:ff:ab:36: 61:6d:22:c1:2d:10:f2:5c:2b:41:c7:b4:58:67:24: 7a:9f:ef:fb:31:f7:1e:fd:9e:c9:94:2c:c3:e5:71: d4:48:53:04:c3:7f:47:b7:cb:a0:86:ec:86:12:33: cc:7f:13:2d:46:ee:f4:4d:3e:ab:e7:53:09:3d:d9: 46:23:9a:30:54:8c:b4:57:d6:6e:17:88:40:22:fc: ac:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:41:97:CF:A5:FF:B5:ED:32:EF:39:89:52:D5:CD:37:0A:3A:92:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45f48996-6c2a-31e7-850c-a7f99fa8ae5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.125.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:83:1e:68:6c:4a:58:2c:65:3c:ad:78:41:24:ae:8a:31:42: 52:7a:f1:39:84:55:b8:f9:77:e7:cc:53:c9:09:b3:a8:4b:a2: d6:1e:88:86:89:d9:a0:e2:46:ad:f9:75:0f:3a:ef:06:ef:05: 06:bf:13:4b:77:13:7f:33:25:25:0f:d2:ad:b7:3a:e5:82:b1: 57:26:6b:cb:d7:2c:9d:81:c0:2c:0c:da:2d:d9:c9:c4:e0:59: f9:ee:4c:0e:87:aa:17:dd:e8:fa:c7:b2:84:77:ba:49:4a:75: 10:92:e7:80:bd:ff:04:51:e3:71:79:56:c9:da:cb:a6:05:84: c3:ff:5d:00:f4:52:e5:67:e1:bc:47:a7:2a:ae:16:a2:9e:60: 1b:58:27:49:ea:fa:51:4c:1a:b3:29:92:6e:30:7b:f2:8b:39: e8:26:64:d6:22:4c:63:a0:0d:05:e2:f5:72:12:e7:9c:fd:03: 92:d7:0d:c6:96:2a:39:8f:d9:f4:96:76:63:03:59:ac:9b:74: ce:a1:96:22:c7:49:f2:9d:9e:74:d7:92:c9:82:f3:76:c4:5e: b6:dd:71:51:fa:6a:ca:59:e8:7e:df:73:03:08:40:63:fa:e1: b1:6e:18:4a:f1:0e:75:2c:1c:d1:2d:4f:d5:52:d0:87:31:28: 38:e8:8a:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5P/E/yNGdvo2jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MDE0YWRiOGQtMWQ2Zi00OTkxLWFmM2MtZGVkNDhkZWUyMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb5feBBwkbbqdxiIxePwYDZ4DaCluc2QFCM2 ecySb+HRRHz63dxtp9zWd0rY8cpGqLoC4IoupcIy4ih64jVlYFzOkNHQK9hN7Vxz D1H4+5JVCcFeYScNLa7EUI5MHYDh+kdA3bSQ+H6+OKccu49PdGRxCCMHRy6ZMUEx 7JJEAn1etDhgmbMM+fOwM8bGhnSr2zjxa5zYRf7QTalck9EcApBIQXHs2MBxyxCG q3ePunb/qzZhbSLBLRDyXCtBx7RYZyR6n+/7Mfce/Z7JlCzD5XHUSFMEw39Ht8ug huyGEjPMfxMtRu70TT6r51MJPdlGI5owVIy0V9ZuF4hAIvysDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1Bl8+l/7XtMu85iVLVzTcKOpJrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDVmNDg5OTYtNmMyYS0z MWU3LTg1MGMtYTdmOTlmYThhZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaH0OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmDHmhsSlgsZTyteEEkrooxQlJ68TmEVbj5d+fMU8kJs6hLotYeiIaJ 2aDiRq35dQ867wbvBQa/E0t3E38zJSUP0q23OuWCsVcma8vXLJ2BwCwM2i3ZycTg WfnuTA6Hqhfd6PrHsoR3uklKdRCS54C9/wRR43F5Vsnay6YFhMP/XQD0UuVn4bxH pyquFqKeYBtYJ0nq+lFMGrMpkm4we/KLOegmZNYiTGOgDQXi9XIS55z9A5LXDcaW KjmP2fSWdmMDWaybdM6hliLHSfKdnnTXksmC83bEXrbdcVH6aspZ6H7fcwMIQGP6 4bFuGErxDnUsHNEtT9VS0IcxKDjoijg= -----END CERTIFICATE-----Generated at Fri Apr 17 15:30:45 2026 by rpki-client