$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72e795f5-60df-3423-9f93-1780d7ce2d6c.roa File: 72e795f5-60df-3423-9f93-1780d7ce2d6c.roa (raw, json) Hash identifier: kz5kgVsxfSaQnzFzSJi5pLfaggl7bkT/VsVNro96Owk= Subject key identifier: D0:68:C5:69:D6:88:92:6C:92:E1:9E:31:17:A0:2B:52:3B:B9:CC:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CAA272817D907FC2E765A1B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72e795f5-60df-3423-9f93-1780d7ce2d6c.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 20940 IP address blocks: 104.119.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:28:17:d9:07:fc:2e:76:5a:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=df91d6a5-2c21-4ec5-b7dd-e77f6ed46fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:45:75:e0:91:6e:c1:a0:ac:64:6f:b0:d0: 7f:06:8b:d9:5a:30:37:cd:2c:e2:a8:ef:36:e1:15: 8d:b7:cb:8f:f9:7d:0c:4f:a3:09:ec:06:c7:fe:65: da:a4:e3:fd:da:10:08:d9:0c:90:1a:9c:f5:e7:98: d4:de:40:a8:c0:1d:c1:ee:0b:88:ac:24:c0:d4:b0: ca:82:73:72:61:ef:b2:65:78:8f:67:4e:33:4f:53: 78:15:51:ad:23:13:ec:6d:06:c8:e0:08:5b:88:73: 43:5c:04:7e:87:42:f2:bc:0a:a4:95:2d:cb:e1:fc: db:ce:44:30:0d:bd:d0:da:59:da:d7:27:4a:16:f7: 23:80:2a:bc:2d:ab:5c:98:35:aa:bb:cb:ec:57:d3: 7a:53:8b:ee:c7:46:82:ea:6e:d4:4c:32:20:7d:a6: 2b:32:57:8e:23:20:a2:aa:7e:8b:33:85:00:d6:bc: 53:bf:48:4c:e4:d0:44:49:4f:22:93:ec:7f:ba:7d: 7f:6a:bc:e3:3d:9e:56:24:bb:32:96:1b:dd:ac:c4: 5f:f7:e5:8a:69:00:a7:47:ca:08:a0:74:78:08:25: 59:19:c5:87:9e:ef:23:67:52:9e:e3:aa:e6:fc:96: 2f:ae:ae:1a:b1:fa:16:0c:5d:53:0e:15:f8:7d:5d: fb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:68:C5:69:D6:88:92:6C:92:E1:9E:31:17:A0:2B:52:3B:B9:CC:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72e795f5-60df-3423-9f93-1780d7ce2d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.119.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:8c:4a:c7:48:be:36:84:f2:76:17:a1:3e:53:90:aa:c8:61: 11:25:bf:a5:2e:7e:e2:10:ad:c3:1f:31:c8:d5:04:92:b1:33: b8:71:07:37:6c:e1:e9:85:4e:fc:18:75:88:3e:db:6d:16:fe: 99:43:8a:ae:70:75:bd:43:ca:56:98:e3:62:77:38:dc:b2:24: 0f:e6:e4:df:7a:4d:2c:46:85:29:c3:0c:02:05:07:c7:63:89: 68:bc:16:b9:3f:40:97:f5:9a:62:d8:06:2a:c5:dd:42:92:b7: 2a:f4:06:85:d7:1d:b8:6b:a0:83:73:67:a0:76:63:e0:7e:49: 08:45:28:ad:ee:4e:b0:56:5c:8c:9c:9c:d7:b9:53:5e:05:a1: a1:bc:9e:86:4f:a6:c5:73:0e:c7:24:5d:97:44:39:a7:8c:ef: c2:f2:fb:eb:ea:59:1c:fb:7e:bb:9d:8a:2a:95:f8:e2:47:5f: da:dc:09:68:9e:3a:0c:93:5b:5a:d7:ae:32:c2:93:13:d1:2c: 44:ad:fe:95:34:75:94:b5:5c:3a:f7:cf:f5:81:b1:d1:29:05: 4f:76:7b:af:b4:fb:53:4b:d6:aa:42:a5:1e:f3:13:2c:f0:77: 14:f0:bf:01:4f:77:b5:23:22:67:6a:e2:9e:b5:ea:09:79:81: 5e:c3:2b:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJygX2Qf8LnZaGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk ZGY5MWQ2YTUtMmMyMS00ZWM1LWI3ZGQtZTc3ZjZlZDQ2ZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQxFdeCRbsGgrGRvsNB/BovZWjA3zSziqO82 4RWNt8uP+X0MT6MJ7AbH/mXapOP92hAI2QyQGpz155jU3kCowB3B7guIrCTA1LDK gnNyYe+yZXiPZ04zT1N4FVGtIxPsbQbI4AhbiHNDXAR+h0LyvAqklS3L4fzbzkQw Db3Q2lna1ydKFvcjgCq8LatcmDWqu8vsV9N6U4vux0aC6m7UTDIgfaYrMleOIyCi qn6LM4UA1rxTv0hM5NBESU8ik+x/un1/arzjPZ5WJLsylhvdrMRf9+WKaQCnR8oI oHR4CCVZGcWHnu8jZ1Ke46rm/JYvrq4asfoWDF1TDhX4fV373QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBoxWnWiJJskuGeMRegK1I7ucwGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzJlNzk1ZjUtNjBkZi0z NDIzLTlmOTMtMTc4MGQ3Y2UyZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHcpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOMSsdIvjaE8nYXoT5TkKrIYRElv6UufuIQrcMfMcjVBJKxM7hxBzds 4emFTvwYdYg+220W/plDiq5wdb1DylaY42J3ONyyJA/m5N96TSxGhSnDDAIFB8dj iWi8Frk/QJf1mmLYBirF3UKStyr0BoXXHbhroINzZ6B2Y+B+SQhFKK3uTrBWXIyc nNe5U14FoaG8noZPpsVzDsckXZdEOaeM78Ly++vqWRz7frudiiqV+OJHX9rcCWie OgyTW1rXrjLCkxPRLESt/pU0dZS1XDr3z/WBsdEpBU92e6+0+1NL1qpCpR7zEyzw dxTwvwFPd7UjImdq4p616gl5gV7DK+Y= -----END CERTIFICATE-----Generated at Sun Mar 1 23:13:54 2026 by rpki-client