$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f985fbc-4302-3d29-883b-e715ee05ef6a.roa File: 5f985fbc-4302-3d29-883b-e715ee05ef6a.roa (raw, json) Hash identifier: wT8y3V/1cLn2gsfWseI74HMXO7mg8MFkwM/InyMSU14= Subject key identifier: 7F:03:8D:F7:0F:4F:76:A0:4E:C6:C4:DA:9D:C7:A0:81:DE:43:BD:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB552021A9EDCBE869D75E340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f985fbc-4302-3d29-883b-e715ee05ef6a.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 20940 IP address blocks: 104.102.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:52:02:1a:9e:dc:be:86:9d:75:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=fa4565ea-05c5-4f99-8f92-6b53e0dc7c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:8a:ac:80:b7:7d:5a:d0:59:b1:81:a6:8c: 50:00:cd:70:c4:9a:f3:cb:ac:3f:47:4a:cb:2e:84: 02:cf:15:a6:87:c4:a6:59:a7:83:86:d9:8f:3c:6d: 1f:4c:40:7b:85:f0:64:76:bb:a5:e2:97:27:e3:cc: 92:b4:e1:00:0b:fd:b7:c3:7e:74:b8:94:75:38:e8: ee:bb:72:ec:ae:58:e5:54:7d:1c:2d:09:43:a7:f0: 5e:1c:a1:df:c5:d3:2d:2b:fd:3a:62:85:33:81:33: 07:97:35:0a:93:2c:a5:ec:f0:70:10:d7:d1:df:3f: 42:a6:94:d5:33:52:47:86:95:6f:a3:14:95:cd:12: 25:96:ed:32:c0:12:9a:20:ca:e5:c4:d8:4d:56:c9: 05:db:39:e9:bd:a6:08:4b:8d:93:e9:a0:43:f0:92: fd:d2:a7:d8:1c:b5:47:03:23:00:4e:44:37:61:38: eb:75:7f:97:57:e7:93:a5:e4:a2:a5:af:2c:7e:e2: 5c:5e:f1:6e:82:00:a7:6b:31:38:b5:37:87:2b:69: 11:82:a5:01:71:92:04:80:fd:61:50:a1:2c:22:c2: 65:19:16:82:8a:82:e0:f5:cb:ed:ab:92:06:61:54: b6:57:f4:36:e2:87:08:90:0b:d0:33:b0:ef:25:6d: 27:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:03:8D:F7:0F:4F:76:A0:4E:C6:C4:DA:9D:C7:A0:81:DE:43:BD:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f985fbc-4302-3d29-883b-e715ee05ef6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.102.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:77:3b:ee:8a:d3:1f:96:8a:48:1a:b0:90:f2:00:8d:be:09: d9:a2:0e:92:f5:a6:8f:1a:04:55:6c:3b:20:5d:7c:55:4e:d0: 75:9f:50:a8:05:46:a3:49:b6:ac:d7:4f:56:7e:2e:e5:7f:88: 26:9d:0e:f2:d3:d1:71:a6:ed:17:26:f7:d9:d1:3a:82:e3:78: 73:34:e2:20:7f:78:2c:e3:ed:d2:aa:a8:50:9b:dc:fa:ed:6e: 82:9d:a0:e8:c4:99:4f:6f:d0:8b:a8:85:5a:58:06:62:a0:f3: 6a:5f:ef:54:bd:1d:7b:8c:92:a1:76:3e:de:0a:7c:65:68:b2: c6:ff:81:58:f0:86:a9:cc:8c:3c:69:64:ed:ea:22:02:64:b7: 23:da:c2:a0:7c:0b:96:f7:fe:8d:58:88:94:b5:41:ff:0d:cd: 13:a2:cf:17:39:71:24:c3:5d:7b:0b:b5:52:72:51:d2:e4:69: 67:55:0f:5e:67:82:a9:23:e4:c7:87:e2:8e:69:1a:de:8f:51: dc:d3:df:d8:7c:e7:93:b7:af:f9:9e:96:df:7c:1d:91:dd:ee: c3:06:32:00:e1:a1:37:2d:8f:6b:98:21:d6:33:e3:f8:28:2a: 8d:1f:39:96:35:7f:eb:37:43:75:4d:06:13:94:d7:7f:71:e6: 6f:fe:5c:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UgIanty+hp1140AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk ZmE0NTY1ZWEtMDVjNS00Zjk5LThmOTItNmI1M2UwZGM3YzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWCKrIC3fVrQWbGBpoxQAM1wxJrzy6w/R0rL LoQCzxWmh8SmWaeDhtmPPG0fTEB7hfBkdrul4pcn48yStOEAC/23w350uJR1OOju u3LsrljlVH0cLQlDp/BeHKHfxdMtK/06YoUzgTMHlzUKkyyl7PBwENfR3z9CppTV M1JHhpVvoxSVzRIllu0ywBKaIMrlxNhNVskF2znpvaYIS42T6aBD8JL90qfYHLVH AyMATkQ3YTjrdX+XV+eTpeSipa8sfuJcXvFuggCnazE4tTeHK2kRgqUBcZIEgP1h UKEsIsJlGRaCioLg9cvtq5IGYVS2V/Q24ocIkAvQM7DvJW0n/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8DjfcPT3agTsbE2p3HoIHeQ71vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWY5ODVmYmMtNDMwMi0z ZDI5LTg4M2ItZTcxNWVlMDVlZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp3O+6K0x+WikgasJDyAI2+CdmiDpL1po8aBFVsOyBdfFVO0HWfUKgF RqNJtqzXT1Z+LuV/iCadDvLT0XGm7Rcm99nROoLjeHM04iB/eCzj7dKqqFCb3Prt boKdoOjEmU9v0IuohVpYBmKg82pf71S9HXuMkqF2Pt4KfGVossb/gVjwhqnMjDxp ZO3qIgJktyPawqB8C5b3/o1YiJS1Qf8NzROizxc5cSTDXXsLtVJyUdLkaWdVD15n gqkj5MeH4o5pGt6PUdzT39h855O3r/melt98HZHd7sMGMgDhoTctj2uYIdYz4/go Ko0fOZY1f+s3Q3VNBhOU139x5m/+XKE= -----END CERTIFICATE-----Generated at Mon Mar 2 00:35:12 2026 by rpki-client