$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa File: 7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa (raw, json) Hash identifier: Yz6p8Xya0w4sYjTtBmX4J0HYZP1YXtJKmJ6s0YZWjCk= Subject key identifier: E7:F2:70:A2:B3:41:1D:8D:50:B7:1F:CC:65:B3:EC:57:42:6E:6A:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CAA2728F7BC673E04ACB43A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 20940 IP address blocks: 104.70.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:28:f7:bc:67:3e:04:ac:b4:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=041e462a-e1cf-4dd7-bb07-d58d6e66d004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d0:51:ac:09:34:8d:af:65:be:ea:fa:dd:f4: 15:a4:92:cf:6c:73:99:1d:89:95:3a:da:62:25:65: c9:84:8a:73:a2:f5:cf:5f:b8:75:65:80:8a:33:09: 84:ee:ee:f0:37:70:24:ba:73:15:5e:9a:08:e4:29: 5a:57:81:44:c4:9b:e8:27:69:60:a3:5c:ab:8c:a9: 89:f9:70:65:4d:9c:a6:13:6f:2e:05:07:5e:d7:67: 6a:23:ee:24:55:a7:4e:55:f6:9a:7a:87:82:18:01: 8d:b7:1b:00:47:6c:5d:81:d5:d6:86:f2:52:3f:f5: e8:1e:54:19:67:e3:dc:ae:d1:3e:d4:0c:bd:9c:2d: 02:94:6d:04:2b:38:e2:b7:5c:9b:c1:3c:80:66:db: 27:c3:39:ee:3b:d1:7a:c6:c9:ac:88:c4:e9:48:94: 04:7b:33:80:6c:ff:a7:08:81:1c:f3:65:c7:28:fd: cb:0a:fe:de:47:12:dc:83:75:f7:b5:8b:73:56:c9: 14:48:67:83:d1:df:08:f1:5d:9d:bd:46:0b:d6:b1: 3f:4b:80:b2:ad:6c:5e:68:28:8d:4c:0c:de:a4:e6: db:ec:f3:4a:68:ef:62:2f:bb:c1:e9:97:a2:4b:48: 94:cb:11:8e:9e:6f:5f:23:4e:27:59:ac:2e:1e:1f: 9d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F2:70:A2:B3:41:1D:8D:50:B7:1F:CC:65:B3:EC:57:42:6E:6A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:cb:f7:73:3e:cb:ad:94:21:5f:25:73:88:c0:a1:8f:d1:0e: 7b:dd:e5:a8:e8:c5:f5:79:88:88:5d:9a:81:a6:19:aa:b2:9b: 6e:50:bb:88:06:27:64:66:01:e0:d6:63:79:ff:95:df:56:6b: c9:bc:9b:e3:fd:43:b1:32:a9:2f:8f:0c:6f:0d:5c:d7:bc:fc: eb:d3:69:12:c5:a9:22:ca:fc:d8:fe:2e:6e:1c:89:03:4b:ce: 2a:98:95:f6:e1:18:cc:32:a4:70:9b:be:6f:45:85:37:30:60: 02:a2:e7:26:62:25:d4:60:28:d7:6c:26:d2:16:ba:3d:b2:09: 9a:12:af:12:28:c2:d1:98:44:99:27:fa:47:cd:0b:1e:e6:57: 04:58:cc:97:88:45:98:98:e7:47:d7:23:3a:85:a6:34:ec:7b: 70:98:9e:20:7a:05:26:ab:cc:29:eb:19:d0:75:00:b1:a3:87: 5c:a3:4b:44:0f:69:db:ed:a4:c2:3a:e0:34:f6:37:58:80:b9: fb:87:6d:12:b9:8b:6c:d7:d9:34:4e:8c:cc:2e:df:0a:91:b9: 24:8c:62:c8:7f:bc:49:f0:63:e3:c2:28:54:3e:b2:63:84:b8: 41:fd:2d:89:13:2b:7e:83:85:86:56:85:46:d3:dc:41:9d:10: 40:91:40:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJyj3vGc+BKy0OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MDQxZTQ2MmEtZTFjZi00ZGQ3LWJiMDctZDU4ZDZlNjZkMDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9BRrAk0ja9lvur63fQVpJLPbHOZHYmVOtpi JWXJhIpzovXPX7h1ZYCKMwmE7u7wN3AkunMVXpoI5ClaV4FExJvoJ2lgo1yrjKmJ +XBlTZymE28uBQde12dqI+4kVadOVfaaeoeCGAGNtxsAR2xdgdXWhvJSP/XoHlQZ Z+PcrtE+1Ay9nC0ClG0EKzjit1ybwTyAZtsnwznuO9F6xsmsiMTpSJQEezOAbP+n CIEc82XHKP3LCv7eRxLcg3X3tYtzVskUSGeD0d8I8V2dvUYL1rE/S4CyrWxeaCiN TAzepObb7PNKaO9iL7vB6ZeiS0iUyxGOnm9fI04nWawuHh+d/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfycKKzQR2NULcfzGWz7FdCbmrOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2M5YWNjOTUtYjNmNy0z ZDA4LWFlZmUtNTUyM2RkMGU1MmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEZ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDL93M+y62UIV8lc4jAoY/RDnvd5ajoxfV5iIhdmoGmGaqym25Qu4gG J2RmAeDWY3n/ld9Wa8m8m+P9Q7EyqS+PDG8NXNe8/OvTaRLFqSLK/Nj+Lm4ciQNL ziqYlfbhGMwypHCbvm9FhTcwYAKi5yZiJdRgKNdsJtIWuj2yCZoSrxIowtGYRJkn +kfNCx7mVwRYzJeIRZiY50fXIzqFpjTse3CYniB6BSarzCnrGdB1ALGjh1yjS0QP advtpMI64DT2N1iAufuHbRK5i2zX2TROjMwu3wqRuSSMYsh/vEnwY+PCKFQ+smOE uEH9LYkTK36DhYZWhUbT3EGdEECRQPA= -----END CERTIFICATE-----Generated at Mon Mar 2 01:11:23 2026 by rpki-client