$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59f07b4d-cb34-32ed-981a-201e9fd7815e.roa File: 59f07b4d-cb34-32ed-981a-201e9fd7815e.roa (raw, json) Hash identifier: ZFEHtWDgCvZXU5uQAPF7XGdEd9hN1TdQPZvPmAymzLg= Subject key identifier: 37:A4:A1:51:92:16:63:54:BD:E9:51:83:A8:CA:D0:E5:27:BB:1F:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB2874C5AE76175D6A0201100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59f07b4d-cb34-32ed-981a-201e9fd7815e.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 20940 IP address blocks: 104.77.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:4c:5a:e7:61:75:d6:a0:20:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=e1b4c3ee-3cd3-434e-8ff9-e8ee56e029c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:4b:dc:4d:4f:96:98:e5:c9:eb:7a:ac:1e: 3d:7a:65:75:1e:01:72:57:0f:d2:38:f9:62:00:86: 34:75:bc:01:86:68:33:66:85:a7:fe:15:3a:34:4b: 14:06:5b:ba:48:40:77:17:21:21:5f:c9:2e:7b:39: 8d:9b:ab:95:30:fe:d6:fa:ae:1a:17:36:be:b1:0a: 31:0b:1d:92:71:d1:eb:87:b2:ff:ed:e4:49:c3:f4: 82:25:66:18:5f:ad:0b:b5:07:0c:9b:ea:c1:04:69: 8e:0b:e8:0b:69:ea:47:15:d6:f5:5f:c6:4a:35:1a: 4b:be:3f:f3:2d:ec:db:b5:6d:05:7f:b8:79:1a:22: 4b:5c:ac:dd:e7:37:5a:a0:9e:12:b6:c3:61:5b:f9: bb:2d:2f:8d:3d:a9:21:ca:52:a2:73:dc:b2:98:16: 82:35:cb:00:23:b3:04:65:fb:a1:bc:03:f6:42:fa: a6:8d:81:9f:28:6c:e0:11:0c:89:7a:c1:db:fc:38: 3e:ce:be:d8:72:3b:4d:03:06:27:da:a3:b9:d2:3c: b0:9a:f8:71:00:12:4c:dc:a1:0a:cd:a1:c6:00:03: 72:e5:65:43:44:55:72:e2:1c:c9:be:70:2e:cd:b4: 98:b0:8f:c8:ee:be:48:ae:95:14:2b:f1:30:f0:28: af:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A4:A1:51:92:16:63:54:BD:E9:51:83:A8:CA:D0:E5:27:BB:1F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59f07b4d-cb34-32ed-981a-201e9fd7815e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.77.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e1:87:64:02:40:5e:65:17:12:0d:92:2b:78:90:9a:9f:ee: 42:2a:7a:f7:84:7a:2f:07:e5:a7:4a:e7:45:4b:a7:78:6f:ea: 53:1b:8f:94:67:9a:37:b1:b9:c6:47:d8:f2:32:3f:65:bb:2b: 16:c1:3c:ff:90:e8:6f:f5:0e:a5:19:15:87:4d:9d:09:a1:0e: d2:15:8e:1c:64:0d:71:e4:7b:f9:6b:19:14:bb:cd:c7:02:88: 97:ee:1c:f6:9c:d8:4d:cc:55:df:b8:7c:f1:14:32:4d:45:70: 28:3e:71:36:ed:24:21:6a:8e:75:52:71:87:2a:fd:98:ca:94: 98:a8:d9:4f:27:ff:7e:79:5b:6c:ae:e0:42:1f:10:28:47:6e: 2f:7a:e9:a4:72:3c:5b:9d:70:9f:7d:09:2c:26:dc:19:ba:a2: ae:ef:c5:f1:6f:be:fd:17:fb:31:a7:95:01:88:bd:da:6f:5a: 0b:09:e3:4c:af:d5:31:02:13:5a:0e:d4:52:e6:2f:c8:44:1c: ff:9d:4f:74:d3:38:7f:4f:3f:20:7d:26:59:cc:4e:b6:07:30: a6:41:22:d6:c6:83:2c:1c:04:7f:33:91:d5:d3:ab:e2:7b:02: da:a6:87:0e:0f:a7:3b:32:93:bd:52:43:3c:e8:08:da:7f:6a: 89:0a:8b:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyh0xa52F11qAgEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTFiNGMzZWUtM2NkMy00MzRlLThmZjktZThlZTU2ZTAyOWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUZL3E1Plpjlyet6rB49emV1HgFyVw/SOPli AIY0dbwBhmgzZoWn/hU6NEsUBlu6SEB3FyEhX8kuezmNm6uVMP7W+q4aFza+sQox Cx2ScdHrh7L/7eRJw/SCJWYYX60LtQcMm+rBBGmOC+gLaepHFdb1X8ZKNRpLvj/z LezbtW0Ff7h5GiJLXKzd5zdaoJ4StsNhW/m7LS+NPakhylKic9yymBaCNcsAI7ME ZfuhvAP2QvqmjYGfKGzgEQyJesHb/Dg+zr7YcjtNAwYn2qO50jywmvhxABJM3KEK zaHGAANy5WVDRFVy4hzJvnAuzbSYsI/I7r5IrpUUK/Ew8CivqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDekoVGSFmNUvelRg6jK0OUnux+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTlmMDdiNGQtY2IzNC0z MmVkLTk4MWEtMjAxZTlmZDc4MTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaE3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErhh2QCQF5lFxINkit4kJqf7kIqeveEei8H5adK50VLp3hv6lMbj5Rn mjexucZH2PIyP2W7KxbBPP+Q6G/1DqUZFYdNnQmhDtIVjhxkDXHke/lrGRS7zccC iJfuHPac2E3MVd+4fPEUMk1FcCg+cTbtJCFqjnVScYcq/ZjKlJio2U8n/355W2yu 4EIfEChHbi966aRyPFudcJ99CSwm3Bm6oq7vxfFvvv0X+zGnlQGIvdpvWgsJ40yv 1TECE1oO1FLmL8hEHP+dT3TTOH9PPyB9JlnMTrYHMKZBItbGgywcBH8zkdXTq+J7 Atqmhw4Ppzsyk71SQzzoCNp/aokKi74= -----END CERTIFICATE-----Generated at Mon Mar 2 02:37:54 2026 by rpki-client