$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/475f8028-24da-3c36-8620-35a8d917a580.roa File: 475f8028-24da-3c36-8620-35a8d917a580.roa (raw, json) Hash identifier: H8sbr/vq7+MX3iaXqCyu7Q6m3jNagZfReGsq6l0PBC8= Subject key identifier: 1F:85:78:15:79:AA:05:2C:BB:A2:D9:29:E1:08:2D:6B:E1:F5:31:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB2873998712A9457B6B7E860 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/475f8028-24da-3c36-8620-35a8d917a580.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 20940 IP address blocks: 104.70.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:39:98:71:2a:94:57:b6:b7:e8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=ec30cfdd-ea30-4d01-a29c-aad2d68a8f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4a:1f:4e:6a:11:37:af:40:b7:b5:2f:cb:75: c2:cf:1f:2f:ec:b8:15:68:68:23:86:74:13:87:86: 5f:48:5e:ee:7c:9e:da:63:f6:6d:61:ed:d8:57:c6: db:cf:78:96:08:42:0a:58:29:dc:86:30:e6:46:03: f9:74:7b:8c:60:15:42:05:10:3f:50:b4:a4:8b:7d: 64:0d:d6:c6:e9:12:a3:fb:2c:ee:33:66:3e:3e:be: d8:25:dc:d9:fe:05:a7:3d:57:ea:7e:b0:2b:0b:6f: 7e:3d:8c:99:f1:81:0c:c7:aa:25:de:b7:47:ce:b8: 13:91:9f:c6:1f:b7:38:f8:e1:13:4c:93:e8:92:5e: 23:ac:36:0c:b2:fd:a8:3a:6f:0f:50:3a:57:d9:e4: 50:fd:5e:8b:16:92:f3:6d:7a:1d:4a:a5:4c:c3:c6: ac:ad:81:60:59:b5:cb:70:77:29:76:6b:3d:7d:51: 62:d9:6f:40:a5:54:44:49:29:4b:84:d2:88:2d:d0: be:24:67:23:b7:6e:33:33:f5:1b:86:98:64:6e:9f: 58:b0:70:30:c3:be:dc:05:2d:f3:1b:47:8e:6c:e3: 5b:be:fb:8a:ba:e2:f7:65:c5:7f:fa:7d:49:cf:e8: 1a:b6:ff:a0:c8:c9:3a:5c:9e:d8:df:84:ed:2d:d8: b7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:85:78:15:79:AA:05:2C:BB:A2:D9:29:E1:08:2D:6B:E1:F5:31:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/475f8028-24da-3c36-8620-35a8d917a580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:31:27:bb:40:a5:77:db:58:58:3b:79:df:91:e7:b4:04:d1: b4:32:53:a0:dd:f0:fc:ce:ac:33:b2:4b:4b:9e:a4:23:1b:e9: 6b:7c:7f:1f:f1:97:8c:9d:de:ec:30:52:62:5b:65:46:82:d2: 51:99:01:4e:f6:ca:e6:b5:6c:78:d5:30:24:d4:66:b5:70:79: 8d:4e:ec:4c:35:6d:fe:c2:1a:6b:a6:85:87:8f:f5:50:08:f7: 3a:f2:95:c5:fe:91:91:59:00:ca:0e:d8:7d:90:1e:b1:75:86: 04:00:e2:ed:03:3e:02:86:6b:27:d6:bb:3e:e2:ab:f1:a5:62: f3:31:fd:ad:0a:38:35:9b:7c:2f:16:ab:c4:87:3e:3a:aa:a0: c3:1a:30:af:0c:64:24:6f:20:8b:e3:5a:67:ab:e0:3b:44:8f: 25:9e:01:98:2d:46:cf:cd:05:a7:4b:9b:cc:02:8c:23:bd:94: 8e:47:83:4c:09:23:35:b8:1a:67:25:df:2c:44:91:53:f9:20: 23:98:1f:a8:91:39:82:a8:1b:ba:5c:38:fa:59:f6:e0:9c:3e: 4a:7f:2e:5a:b8:22:64:3c:71:87:76:d5:78:55:77:84:03:cd: d9:48:63:3b:0e:d7:dc:ff:73:80:fa:c7:fb:46:f2:b8:12:aa: 98:4b:a0:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhzmYcSqUV7a36GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk ZWMzMGNmZGQtZWEzMC00ZDAxLWEyOWMtYWFkMmQ2OGE4ZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkofTmoRN69At7Uvy3XCzx8v7LgVaGgjhnQT h4ZfSF7ufJ7aY/ZtYe3YV8bbz3iWCEIKWCnchjDmRgP5dHuMYBVCBRA/ULSki31k DdbG6RKj+yzuM2Y+Pr7YJdzZ/gWnPVfqfrArC29+PYyZ8YEMx6ol3rdHzrgTkZ/G H7c4+OETTJPokl4jrDYMsv2oOm8PUDpX2eRQ/V6LFpLzbXodSqVMw8asrYFgWbXL cHcpdms9fVFi2W9ApVRESSlLhNKILdC+JGcjt24zM/Ubhphkbp9YsHAww77cBS3z G0eObONbvvuKuuL3ZcV/+n1Jz+gatv+gyMk6XJ7Y34TtLdi32QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+FeBV5qgUsu6LZKeEILWvh9TH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDc1ZjgwMjgtMjRkYS0z YzM2LTg2MjAtMzVhOGQ5MTdhNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEa0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUxJ7tApXfbWFg7ed+R57QE0bQyU6Dd8PzOrDOyS0uepCMb6Wt8fx/x l4yd3uwwUmJbZUaC0lGZAU72yua1bHjVMCTUZrVweY1O7Ew1bf7CGmumhYeP9VAI 9zrylcX+kZFZAMoO2H2QHrF1hgQA4u0DPgKGayfWuz7iq/GlYvMx/a0KODWbfC8W q8SHPjqqoMMaMK8MZCRvIIvjWmer4DtEjyWeAZgtRs/NBadLm8wCjCO9lI5Hg0wJ IzW4Gmcl3yxEkVP5ICOYH6iROYKoG7pcOPpZ9uCcPkp/Llq4ImQ8cYd21XhVd4QD zdlIYzsO19z/c4D6x/tG8rgSqphLoFE= -----END CERTIFICATE-----Generated at Mon Mar 2 10:57:07 2026 by rpki-client