$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aff2cda-5b52-35ed-9334-92ee4fc2e70d.roa File: 4aff2cda-5b52-35ed-9334-92ee4fc2e70d.roa (raw, json) Hash identifier: z+zkl1KDsVO65W9RPdqnzyre6rach6dLmKJzaViiwuk= Subject key identifier: 59:CD:5F:C2:CF:DC:04:F1:09:CE:FA:FF:42:65:83:31:BF:0C:E3:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB5520C6CD6915DDC183F4B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aff2cda-5b52-35ed-9334-92ee4fc2e70d.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 1299 IP address blocks: 104.103.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:52:0c:6c:d6:91:5d:dc:18:3f:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=2b7d3129-71c6-42eb-aa77-1e8bc5b1261d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5f:c8:09:71:af:63:e2:89:8d:6c:4c:25:71: a3:89:8a:79:fa:ac:6c:d5:46:b7:95:b8:ca:d1:14: a6:a5:01:12:39:d9:e7:45:a7:bb:8d:6f:fc:ac:9d: cd:b3:ff:b6:6e:90:20:0a:9e:cc:66:d4:9f:dc:ee: 84:52:a9:e0:8e:bf:49:be:62:5d:ba:0a:1b:59:af: cd:b5:f4:bf:f8:d8:3e:30:31:1f:9a:07:db:3b:05: 99:82:b4:5a:3c:14:e9:3e:e5:92:e8:0f:bf:e6:12: fe:ab:a7:84:14:86:24:01:21:c5:6b:b7:66:c1:54: 60:e5:3b:a7:00:7f:31:2d:ea:16:d4:c9:c3:23:e8: ad:61:9f:a4:a1:ac:c7:f2:cf:6a:b1:09:d2:67:e4: e0:9b:6d:07:94:9a:0f:ed:aa:1b:c6:f5:0d:03:68: aa:ba:f4:69:f4:c1:f7:80:eb:38:93:ef:71:f6:09: c0:7b:e3:da:99:67:f4:f3:d8:81:ab:dc:8b:f1:28: dd:32:c7:10:d3:83:76:ab:99:5a:29:b4:b0:e4:1c: eb:20:a9:6a:90:a4:45:f2:07:5b:93:a2:9a:92:c2: 19:19:b7:73:b0:08:a3:e2:a4:21:fd:7c:c6:c8:4b: 15:be:71:60:0d:38:3d:d2:ec:ce:8e:20:38:4b:8c: 73:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CD:5F:C2:CF:DC:04:F1:09:CE:FA:FF:42:65:83:31:BF:0C:E3:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aff2cda-5b52-35ed-9334-92ee4fc2e70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.103.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:25:dc:cd:96:f3:49:30:47:3e:97:52:4a:03:44:08:4e:77: 4f:c6:78:c6:a4:dd:b8:fb:7f:02:44:fe:d6:a5:9f:24:90:36: fd:46:43:cd:d9:fe:6a:31:85:c4:6a:87:44:9f:d8:82:dd:15: 9a:86:3a:20:a2:0d:00:48:c7:7b:7e:87:5e:97:dd:c5:c1:45: c1:cd:61:e6:af:00:08:8c:37:8c:e2:0e:56:8f:a9:c2:ca:61: 7a:e7:54:47:5d:fa:1d:b9:81:b2:61:d7:2f:64:aa:6e:6f:20: 60:53:2c:72:db:6a:7e:38:12:6a:4f:fb:30:68:ba:9d:00:da: da:eb:7a:b2:4a:1b:50:b3:c1:72:59:e5:98:8b:4d:9a:59:7b: 0f:e8:0a:60:8f:c5:65:13:5c:74:9e:0c:15:8b:a4:be:3a:3b: b6:5e:48:6e:87:f6:43:1d:83:11:ba:6a:fd:3d:77:2d:8a:ab: 37:7f:6d:4b:58:8a:9c:85:aa:e4:8d:2a:a1:97:75:8c:f5:69: 20:d6:ff:cb:a0:f7:3c:4d:4e:ee:fc:40:d9:a2:a5:f6:a7:1a: 77:ed:ca:f0:fa:9c:93:e8:63:76:4c:4e:6d:56:4a:82:c0:12: 33:26:99:48:ba:b1:13:3b:c1:ad:39:d8:84:6d:13:cd:6d:ce: f9:b5:79:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1Ugxs1pFd3Bg/S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk MmI3ZDMxMjktNzFjNi00MmViLWFhNzctMWU4YmM1YjEyNjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F/ICXGvY+KJjWxMJXGjiYp5+qxs1Ua3lbjK 0RSmpQESOdnnRae7jW/8rJ3Ns/+2bpAgCp7MZtSf3O6EUqngjr9JvmJdugobWa/N tfS/+Ng+MDEfmgfbOwWZgrRaPBTpPuWS6A+/5hL+q6eEFIYkASHFa7dmwVRg5Tun AH8xLeoW1MnDI+itYZ+koazH8s9qsQnSZ+Tgm20HlJoP7aobxvUNA2iquvRp9MH3 gOs4k+9x9gnAe+PamWf089iBq9yL8SjdMscQ04N2q5laKbSw5BzrIKlqkKRF8gdb k6KaksIZGbdzsAij4qQh/XzGyEsVvnFgDTg90uzOjiA4S4xz2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnNX8LP3ATxCc76/0JlgzG/DONoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGFmZjJjZGEtNWI1Mi0z NWVkLTkzMzQtOTJlZTRmYzJlNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4l3M2W80kwRz6XUkoDRAhOd0/GeMak3bj7fwJE/talnySQNv1GQ83Z /moxhcRqh0Sf2ILdFZqGOiCiDQBIx3t+h16X3cXBRcHNYeavAAiMN4ziDlaPqcLK YXrnVEdd+h25gbJh1y9kqm5vIGBTLHLban44EmpP+zBoup0A2trrerJKG1CzwXJZ 5ZiLTZpZew/oCmCPxWUTXHSeDBWLpL46O7ZeSG6H9kMdgxG6av09dy2Kqzd/bUtY ipyFquSNKqGXdYz1aSDW/8ug9zxNTu78QNmipfanGnftyvD6nJPoY3ZMTm1WSoLA EjMmmUi6sRM7wa052IRtE81tzvm1eQI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:42:25 2026 by rpki-client