$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66671e48-d3f8-3810-9069-a1efd842fa99.roa File: 66671e48-d3f8-3810-9069-a1efd842fa99.roa (raw, json) Hash identifier: 77/TxfVav0gkuBEHhp+r9UkIIBnPt5GXA0S5jtAu7xs= Subject key identifier: FC:66:A0:77:2D:6A:74:36:15:12:C8:09:D6:F4:BA:97:43:05:2F:EF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D55BA399A3AF5F6142C972A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66671e48-d3f8-3810-9069-a1efd842fa99.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 32787 IP address blocks: 104.86.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:39:9a:3a:f5:f6:14:2c:97:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=d7fb807e-ea8e-42db-b364-32815311467e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:4c:a2:f3:cd:cb:06:0c:e3:cc:a9:a4:9e: 3d:e2:68:7b:82:89:69:50:9d:cd:ab:e6:61:9d:fb: 46:8d:f6:7d:75:fe:ce:bf:2e:c6:51:69:3d:d2:c7: 64:03:3a:82:f2:91:e0:de:a9:c6:e8:cf:9b:ff:5f: a0:af:f5:1d:f5:9d:39:53:48:71:a1:93:81:4d:e2: d8:88:99:7a:ca:a3:a6:38:4d:5c:74:9d:ab:01:5f: d4:cf:86:60:46:3f:5c:c2:0d:c3:96:ed:91:54:1c: 1b:bb:57:a5:47:1c:55:e1:86:ad:62:ae:29:25:2d: a0:04:76:2a:35:18:eb:9f:dc:e8:75:2a:5c:5f:c1: 14:3f:93:d5:10:03:36:05:33:9b:3d:dd:df:41:e0: 50:88:1a:df:d8:d3:d6:2b:cb:e9:01:f5:4a:ef:2c: c0:bb:17:af:a0:f0:f8:d0:c8:1f:10:94:a0:40:db: ed:b0:8f:86:b0:f5:80:e5:9c:28:3a:97:7a:f2:ad: 39:63:33:91:fe:c4:9c:02:50:71:7d:79:f2:39:7f: fe:00:ac:b2:ec:fe:1e:b7:76:70:24:ec:fc:7c:18: f8:54:ba:b7:80:e0:61:5a:9c:92:6c:3c:b9:94:42: 38:79:32:28:9a:9b:d6:4d:16:b8:04:e4:e6:8a:64: ea:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:66:A0:77:2D:6A:74:36:15:12:C8:09:D6:F4:BA:97:43:05:2F:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66671e48-d3f8-3810-9069-a1efd842fa99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.86.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:cc:bb:7a:5c:9a:64:5e:af:23:da:64:b5:d7:4e:44:d3:e9: 23:c6:7f:8a:2d:da:5f:80:3b:9e:f6:3b:7e:29:6f:77:a3:c0: 6d:1a:8c:f6:e2:55:39:89:12:3f:1b:4d:e1:cb:bf:4d:e0:e1: bf:9f:ba:63:3d:53:c9:3b:65:66:2d:3a:49:47:8a:64:5a:16: b3:f6:38:af:be:d5:66:79:76:08:a0:a6:47:43:aa:1e:26:65: d9:3f:b2:92:ce:79:18:53:ff:10:f8:12:10:c5:18:54:03:cc: 9c:93:15:07:42:e4:a4:1c:2f:26:2d:cf:a4:61:b7:79:31:45: 51:14:f5:6a:d7:f1:f6:bd:e1:d4:98:14:39:d2:bb:5a:b7:f4: a8:29:12:99:36:dc:0c:0b:6a:f8:22:e0:d0:5a:b3:bd:0e:3d: ca:f3:d3:a8:bb:6e:46:79:d0:ce:28:46:a4:55:c6:59:38:4e: 5b:24:f7:96:9b:eb:e5:41:58:dd:19:3b:92:60:7c:3a:47:62: 1e:ed:c1:5e:1c:80:b0:b8:9d:07:a6:83:0a:0b:51:8a:a3:29: c9:e6:41:ab:6b:f1:c6:0d:b8:31:5a:e1:f6:f6:43:9a:60:28: d3:db:52:45:3e:5f:a7:7c:7f:8d:81:6c:d9:c3:08:2d:c4:48: 86:bd:a5:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VujmaOvX2FCyXKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZDdmYjgwN2UtZWE4ZS00MmRiLWIzNjQtMzI4MTUzMTE0NjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocJMovPNywYM48yppJ494mh7golpUJ3Nq+Zh nftGjfZ9df7Ovy7GUWk90sdkAzqC8pHg3qnG6M+b/1+gr/Ud9Z05U0hxoZOBTeLY iJl6yqOmOE1cdJ2rAV/Uz4ZgRj9cwg3Dlu2RVBwbu1elRxxV4YatYq4pJS2gBHYq NRjrn9zodSpcX8EUP5PVEAM2BTObPd3fQeBQiBrf2NPWK8vpAfVK7yzAuxevoPD4 0MgfEJSgQNvtsI+GsPWA5ZwoOpd68q05YzOR/sScAlBxfXnyOX/+AKyy7P4et3Zw JOz8fBj4VLq3gOBhWpySbDy5lEI4eTIompvWTRa4BOTmimTqjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxmoHctanQ2FRLICdb0updDBS/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjY2NzFlNDgtZDNmOC0z ODEwLTkwNjktYTFlZmQ4NDJmYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaFZGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHMu3pcmmReryPaZLXXTkTT6SPGf4ot2l+AO572O34pb3ejwG0ajPbi VTmJEj8bTeHLv03g4b+fumM9U8k7ZWYtOklHimRaFrP2OK++1WZ5dgigpkdDqh4m Zdk/spLOeRhT/xD4EhDFGFQDzJyTFQdC5KQcLyYtz6Rht3kxRVEU9WrX8fa94dSY FDnSu1q39KgpEpk23AwLavgi4NBas70OPcrz06i7bkZ50M4oRqRVxlk4Tlsk95ab 6+VBWN0ZO5JgfDpHYh7twV4cgLC4nQemgwoLUYqjKcnmQatr8cYNuDFa4fb2Q5pg KNPbUkU+X6d8f42BbNnDCC3ESIa9pYk= -----END CERTIFICATE-----Generated at Sat Apr 18 01:50:52 2026 by rpki-client