$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58e0eca7-0d81-3a6e-8687-a69f16c9f794.roa File: 58e0eca7-0d81-3a6e-8687-a69f16c9f794.roa (raw, json) Hash identifier: 8xypC8KOvz4Oo9cIM9GqNjDQ6dohaiIsRLuuTjt2nyQ= Subject key identifier: 11:33:DB:F8:FD:82:2F:94:0F:78:37:FB:4C:7C:23:ED:71:57:E0:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB2873C0045154C0D75BFBCC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58e0eca7-0d81-3a6e-8687-a69f16c9f794.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 20940 IP address blocks: 104.77.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:3c:00:45:15:4c:0d:75:bf:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=5f64b41c-c7ba-4e2f-9541-cd52e185d411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:b1:0d:31:cf:fb:2e:37:1d:21:3c:9f:74: 18:58:0d:ee:dd:d4:b8:ee:82:82:8a:36:ff:76:04: cd:36:3c:c2:ae:cd:5b:d6:83:9f:13:bd:ab:0a:f0: 5a:a6:06:59:60:fd:2e:45:e1:ed:e1:f6:9b:89:7a: ca:b2:59:70:70:be:7f:5b:dd:7c:87:22:3c:32:f9: 6e:95:2d:a1:bb:34:d6:cf:e3:de:5d:29:10:9f:b7: f7:76:37:c1:ee:f1:c1:5e:11:ce:04:8a:a9:3a:39: 67:6e:d9:3c:88:f5:15:29:d5:93:52:22:c6:37:3a: e5:ca:0e:ea:96:80:4c:c5:ca:de:66:09:88:32:6c: 37:56:eb:36:0c:a4:5c:d3:3f:aa:06:75:10:1c:d0: 7b:d9:29:aa:39:bf:1b:8b:62:df:37:37:23:44:d3: 7c:73:db:c2:ac:cd:a0:3e:46:55:62:88:3a:f0:ea: 5c:eb:11:91:f4:17:fc:22:e6:d6:43:00:6b:05:cf: b0:34:42:b3:82:d2:5e:36:5e:d8:63:30:b7:94:26: 0f:9d:8b:2e:3d:36:69:a8:23:2a:fb:0e:d6:91:40: ba:ac:bf:cd:71:f9:b4:d6:ca:74:b9:4a:94:e9:32: be:4a:ff:fb:e7:4e:6f:40:f5:1a:05:b7:15:15:b5: ee:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:33:DB:F8:FD:82:2F:94:0F:78:37:FB:4C:7C:23:ED:71:57:E0:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58e0eca7-0d81-3a6e-8687-a69f16c9f794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.77.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:83:97:2e:cf:4c:6c:4b:ca:74:1e:80:e6:86:a4:8e:03:34: 4c:c3:3f:3c:3a:51:9f:42:0a:dd:e0:b8:c4:3b:ff:19:c5:7c: e6:87:2e:a5:4c:73:f1:9a:77:4c:a5:a3:56:b4:ae:35:06:08: 14:8d:3d:42:bb:63:ae:ed:94:21:87:a4:20:38:ac:72:ac:0b: cc:f2:f5:a5:8d:63:fa:80:ed:c6:dd:18:6f:f6:64:71:4e:bb: 5f:85:19:48:a7:04:d2:19:62:83:31:38:d1:cd:9d:81:b8:1f: 5e:2a:5f:14:ab:9e:c4:da:21:e4:9b:d1:a8:50:77:8e:c0:45: 4a:da:9d:17:44:c5:ca:3c:a6:10:b6:7d:80:7f:bd:6c:39:45: 95:87:ba:c0:23:6f:59:5f:da:f1:2a:1d:d8:4a:98:26:4a:5f: bc:8c:ce:6c:3c:29:b1:7f:50:e6:9e:07:40:d0:af:84:da:4a: 25:d9:e9:50:94:78:dd:5f:99:85:18:34:52:e4:d6:67:7c:e8: cc:19:b0:df:d6:64:45:a6:a7:58:e5:6c:65:67:9a:ab:40:5c: f9:33:bb:5a:e1:7b:5b:44:c3:e6:4e:43:88:07:84:d0:ab:2b: a5:79:a8:bd:c1:63:51:32:57:76:29:07:d5:a7:7d:13:f4:06: c3:82:d5:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhzwARRVMDXW/vMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk NWY2NGI0MWMtYzdiYS00ZTJmLTk1NDEtY2Q1MmUxODVkNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3CxDTHP+y43HSE8n3QYWA3u3dS47oKCijb/ dgTNNjzCrs1b1oOfE72rCvBapgZZYP0uReHt4fabiXrKsllwcL5/W918hyI8Mvlu lS2huzTWz+PeXSkQn7f3djfB7vHBXhHOBIqpOjlnbtk8iPUVKdWTUiLGNzrlyg7q loBMxcreZgmIMmw3Vus2DKRc0z+qBnUQHNB72SmqOb8bi2LfNzcjRNN8c9vCrM2g PkZVYog68Opc6xGR9Bf8IubWQwBrBc+wNEKzgtJeNl7YYzC3lCYPnYsuPTZpqCMq +w7WkUC6rL/Ncfm01sp0uUqU6TK+Sv/7505vQPUaBbcVFbXurwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEz2/j9gi+UD3g3+0x8I+1xV+DAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNThlMGVjYTctMGQ4MS0z YTZlLTg2ODctYTY5ZjE2YzlmNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaE2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHODly7PTGxLynQegOaGpI4DNEzDPzw6UZ9CCt3guMQ7/xnFfOaHLqVM c/Gad0ylo1a0rjUGCBSNPUK7Y67tlCGHpCA4rHKsC8zy9aWNY/qA7cbdGG/2ZHFO u1+FGUinBNIZYoMxONHNnYG4H14qXxSrnsTaIeSb0ahQd47ARUranRdExco8phC2 fYB/vWw5RZWHusAjb1lf2vEqHdhKmCZKX7yMzmw8KbF/UOaeB0DQr4TaSiXZ6VCU eN1fmYUYNFLk1md86MwZsN/WZEWmp1jlbGVnmqtAXPkzu1rhe1tEw+ZOQ4gHhNCr K6V5qL3BY1EyV3YpB9WnfRP0BsOC1Sg= -----END CERTIFICATE-----Generated at Mon Mar 2 08:19:32 2026 by rpki-client