$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a63b78ae-144d-3233-81b6-c95cd2b419f6.roa File: a63b78ae-144d-3233-81b6-c95cd2b419f6.roa (raw, json) Hash identifier: NCaMXC0v3jub/15RLj+MAF1zzIGA+UMoTaFz+hjEsYI= Subject key identifier: F3:48:99:39:80:08:D4:8D:0D:49:78:49:06:A1:A9:A1:3B:E1:5A:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CAA2722B290FE698FD6DC7300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a63b78ae-144d-3233-81b6-c95cd2b419f6.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 20940 IP address blocks: 104.116.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:22:b2:90:fe:69:8f:d6:dc:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=bbe484a4-d82f-4df5-9470-4740ea902610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d6:84:72:4d:76:d6:06:93:fe:18:b9:44:cf: d8:28:8b:92:26:58:f2:ce:94:74:07:cb:94:19:9d: 4c:49:03:97:99:48:9d:8e:a6:f6:72:3c:ac:0b:99: 78:e2:08:e4:32:90:34:08:38:db:a7:da:13:25:9a: ff:d9:f2:f4:36:61:2b:b4:e0:b7:e4:97:cf:81:97: 16:cc:bc:8e:8b:d9:99:0e:21:e7:63:bf:f1:00:c8: 51:bf:06:1e:22:3c:4f:4c:e9:1f:37:22:5d:74:84: d6:0a:e4:92:c1:0a:61:ee:e0:1c:d3:b6:73:05:d8: d6:e6:e0:2a:9b:ed:f5:46:53:28:ff:86:27:5b:bf: bc:f2:bc:ac:0f:34:66:c6:72:16:a4:6d:ce:b3:47: b0:55:f5:f7:3e:eb:a8:84:2e:47:cc:55:d9:b9:b7: 05:55:8b:f5:92:21:65:1a:38:3f:28:2b:75:46:c3: d9:57:1b:d6:21:9b:7e:e4:72:d0:04:73:99:b2:8f: 02:0e:6f:8d:1d:0a:36:ac:01:5a:df:ff:8f:c8:94: 89:f6:6a:74:b5:bf:a6:c8:56:85:7f:1e:c3:d1:c1: e7:b5:e9:08:32:60:04:ce:d7:27:5d:f0:03:b6:8c: f9:09:89:5f:df:ed:4b:8c:42:fe:ed:64:66:39:26: 4a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:48:99:39:80:08:D4:8D:0D:49:78:49:06:A1:A9:A1:3B:E1:5A:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a63b78ae-144d-3233-81b6-c95cd2b419f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.116.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:d7:27:32:3c:c0:45:f2:a2:c0:4c:de:88:6e:5a:76:3a:3e: 45:b5:1b:a2:dd:34:f5:f8:5c:62:79:00:d0:da:2f:af:99:76: d1:24:8b:6a:c9:16:d8:ec:9c:2f:a8:2d:4d:31:ab:f5:73:20: bc:c7:e2:85:88:01:07:35:13:4c:a6:38:ee:f4:30:3b:8e:9b: 00:22:54:a5:b4:14:ee:f1:eb:6a:e9:99:05:b0:37:a0:fa:91: 07:14:95:97:02:f3:aa:42:3c:c1:c5:97:3b:54:83:b9:2d:0c: e3:64:0d:98:ac:c9:47:eb:c1:6e:58:87:84:b6:66:0b:b9:bd: 1c:24:e1:cc:54:b2:d5:43:7e:ac:46:61:b7:f8:1b:7b:2e:65: 90:1f:cd:74:55:4d:b5:e8:1d:e1:8e:ac:bd:c5:29:69:1d:72: 67:4d:00:dd:aa:f8:8c:8f:20:0c:b8:bd:6f:42:a8:94:4f:fe: 73:86:2e:13:95:01:f0:19:3e:40:35:8b:b1:a3:17:9c:12:4d: 58:59:53:a5:f7:34:4a:21:8e:17:da:40:cf:4c:d9:36:fd:71: 65:5e:71:18:5f:f5:d2:6b:2e:57:53:f3:aa:7d:d9:8a:43:1e: 39:78:86:0f:35:85:68:4a:80:a4:6f:77:5d:92:de:7c:c7:07: d5:57:c3:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJyKykP5pj9bccwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk YmJlNDg0YTQtZDgyZi00ZGY1LTk0NzAtNDc0MGVhOTAyNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNaEck121gaT/hi5RM/YKIuSJljyzpR0B8uU GZ1MSQOXmUidjqb2cjysC5l44gjkMpA0CDjbp9oTJZr/2fL0NmErtOC35JfPgZcW zLyOi9mZDiHnY7/xAMhRvwYeIjxPTOkfNyJddITWCuSSwQph7uAc07ZzBdjW5uAq m+31RlMo/4YnW7+88rysDzRmxnIWpG3Os0ewVfX3PuuohC5HzFXZubcFVYv1kiFl Gjg/KCt1RsPZVxvWIZt+5HLQBHOZso8CDm+NHQo2rAFa3/+PyJSJ9mp0tb+myFaF fx7D0cHntekIMmAEztcnXfADtoz5CYlf3+1LjEL+7WRmOSZK9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNImTmACNSNDUl4SQahqaE74VphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTYzYjc4YWUtMTQ0ZC0z MjMzLTgxYjYtYzk1Y2QyYjQxOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrXJzI8wEXyosBM3ohuWnY6PkW1G6LdNPX4XGJ5ANDaL6+ZdtEki2rJ FtjsnC+oLU0xq/VzILzH4oWIAQc1E0ymOO70MDuOmwAiVKW0FO7x62rpmQWwN6D6 kQcUlZcC86pCPMHFlztUg7ktDONkDZisyUfrwW5Yh4S2Zgu5vRwk4cxUstVDfqxG Ybf4G3suZZAfzXRVTbXoHeGOrL3FKWkdcmdNAN2q+IyPIAy4vW9CqJRP/nOGLhOV AfAZPkA1i7GjF5wSTVhZU6X3NEohjhfaQM9M2Tb9cWVecRhf9dJrLldT86p92YpD Hjl4hg81hWhKgKRvd12S3nzHB9VXw3Y= -----END CERTIFICATE-----Generated at Mon Mar 2 02:56:38 2026 by rpki-client