$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa File: 9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa (raw, json) Hash identifier: hfnJetKe1fsp6Nbc4q1tQGfi76OKzoLkvsV+DUpqlQc= Subject key identifier: F9:A0:BF:CD:51:CF:E4:57:68:1D:04:DC:02:70:07:2E:A7:01:AD:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB5520B9968DF16C6EB49A800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 20940 IP address blocks: 104.101.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:52:0b:99:68:df:16:c6:eb:49:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=5a056137-e457-4229-95de-e5f03f441ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:aa:a6:e8:d7:8e:76:8e:1d:71:b5:f8:48: ef:3d:9a:46:b8:d3:cf:74:03:bf:d4:73:99:9a:83: 35:df:c4:8b:41:ac:45:40:bd:70:66:43:f1:48:8c: 75:d8:a8:57:e9:f5:46:d2:e6:ab:fa:21:35:27:bc: e5:ae:ef:1e:37:4e:18:2c:fc:86:b3:19:b3:58:44: 40:db:23:7f:42:7e:32:d3:1e:6a:3e:02:5f:8d:b8: 04:f3:d7:82:a0:c2:93:5d:e6:77:10:d7:8a:41:48: 93:d6:e9:5b:c6:a1:8e:ce:02:f0:42:08:90:99:7b: d7:7b:9c:4e:d4:3a:e8:35:6b:4f:7b:5a:a0:0d:2c: 74:1d:ac:ec:59:7b:bd:5a:7c:82:92:b9:54:ac:72: 49:2c:40:b0:a0:8a:c7:20:fb:cf:83:71:0e:9c:b9: 76:9e:ed:58:8e:8c:91:bc:c9:a9:ec:5f:75:01:2b: 9b:06:1e:bb:cd:a2:56:da:df:44:85:d3:28:c6:5a: f0:f9:21:84:00:9e:24:d8:96:31:f5:c5:4c:ec:5d: ae:e1:d8:9b:8d:b7:e1:bf:e7:21:18:63:6c:5a:98: 51:6d:44:05:71:de:ad:9a:d2:2c:46:15:89:ff:b3: b2:e0:e4:40:f4:57:a6:36:09:3e:19:2b:af:c9:59: 1e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A0:BF:CD:51:CF:E4:57:68:1D:04:DC:02:70:07:2E:A7:01:AD:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.101.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:25:2e:c7:6a:37:e8:91:6a:3d:a8:95:1b:35:89:5c:6f:b9: d4:52:05:08:bf:f1:2b:4a:bd:9e:df:f5:c4:0b:14:a3:65:03: 28:18:d6:0a:aa:cd:82:cc:8f:52:53:57:c5:a1:aa:9b:31:4e: af:19:28:eb:1a:5b:5e:e9:ff:8f:26:71:37:d9:0f:52:69:05: bf:60:a0:12:6f:52:f2:5e:01:5a:a2:76:52:a5:c8:26:f0:55: 6b:31:82:c0:ff:7f:c9:10:19:d0:97:64:f0:ed:9f:db:4b:64: f3:ff:f4:8d:93:53:2f:84:55:7f:c2:2d:eb:f8:32:24:44:71: ba:a2:06:a7:a3:23:31:ed:d9:58:35:60:63:df:cb:4e:d5:92: 21:9f:bc:33:96:b4:dd:90:96:45:dc:3a:2b:22:5b:d7:3d:4e: 9e:f3:1f:6f:cd:46:bd:18:44:f5:dd:79:60:48:29:6f:62:47: ba:63:5c:ab:34:f8:50:b2:76:bd:7e:7f:d3:8e:83:f4:a4:2b: fa:a9:ca:87:0e:6b:9b:64:20:66:69:bb:20:b3:0a:92:1c:39: de:f4:8d:6a:96:bc:8d:ce:e8:67:ac:04:49:bd:4f:89:98:ff: 8d:bd:d5:02:5c:7f:61:05:87:1b:39:2b:a4:b5:4b:3a:c5:a6: 08:f1:07:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UguZaN8WxutJqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk NWEwNTYxMzctZTQ1Ny00MjI5LTk1ZGUtZTVmMDNmNDQxYWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/OqpujXjnaOHXG1+EjvPZpGuNPPdAO/1HOZ moM138SLQaxFQL1wZkPxSIx12KhX6fVG0uar+iE1J7zlru8eN04YLPyGsxmzWERA 2yN/Qn4y0x5qPgJfjbgE89eCoMKTXeZ3ENeKQUiT1ulbxqGOzgLwQgiQmXvXe5xO 1DroNWtPe1qgDSx0HazsWXu9WnyCkrlUrHJJLECwoIrHIPvPg3EOnLl2nu1YjoyR vMmp7F91ASubBh67zaJW2t9EhdMoxlrw+SGEAJ4k2JYx9cVM7F2u4dibjbfhv+ch GGNsWphRbUQFcd6tmtIsRhWJ/7Oy4ORA9FemNgk+GSuvyVkeiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmgv81Rz+RXaB0E3AJwBy6nAa0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWFjZDdhMDQtNDNlZi0z MmYwLThlOGMtZDlkMzJlNTJmMTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGUVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYlLsdqN+iRaj2olRs1iVxvudRSBQi/8StKvZ7f9cQLFKNlAygY1gqq zYLMj1JTV8WhqpsxTq8ZKOsaW17p/48mcTfZD1JpBb9goBJvUvJeAVqidlKlyCbw VWsxgsD/f8kQGdCXZPDtn9tLZPP/9I2TUy+EVX/CLev4MiREcbqiBqejIzHt2Vg1 YGPfy07VkiGfvDOWtN2QlkXcOisiW9c9Tp7zH2/NRr0YRPXdeWBIKW9iR7pjXKs0 +FCydr1+f9OOg/SkK/qpyocOa5tkIGZpuyCzCpIcOd70jWqWvI3O6GesBEm9T4mY /4291QJcf2EFhxs5K6S1SzrFpgjxBy4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:54:17 2026 by rpki-client