$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf568f2e-a0e6-3097-8ecc-0bfe96bbc867.roa File: bf568f2e-a0e6-3097-8ecc-0bfe96bbc867.roa (raw, json) Hash identifier: n4iB9JZM9UKguC3Ybzmc74qgT8O8m4fg+WwG70TFc9U= Subject key identifier: 9C:B0:30:29:85:19:62:E4:C8:57:86:A3:72:71:6C:8A:77:BC:08:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB2873AF251B330F2DB762E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf568f2e-a0e6-3097-8ecc-0bfe96bbc867.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 20940 IP address blocks: 104.74.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:3a:f2:51:b3:30:f2:db:76:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=5f7bf1cf-20dc-43a4-9618-358b0e757d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:df:66:8f:23:a1:1f:46:a5:1e:dd:a2:fc:5f: bf:de:1b:e8:8f:bf:4e:84:e4:b3:e9:5f:e7:26:52: 0e:3c:e7:75:f6:01:43:52:1f:05:d7:07:0b:7f:d0: 70:2c:70:be:86:70:21:e3:84:ce:bc:f2:5c:e1:34: e4:2f:88:cb:bc:bb:5d:c0:96:a5:bb:99:c1:a4:d4: b9:1f:86:ce:2e:6c:24:95:73:2f:cc:6b:03:10:15: 4e:48:5c:ca:a3:75:ec:d1:d5:41:07:4e:c0:3f:2d: bf:2e:57:49:c5:fc:6d:20:b3:4a:cf:07:55:05:8c: 78:1e:41:6f:f5:3a:6a:05:a4:13:65:ec:61:96:22: f7:c4:ef:d2:af:33:bf:64:30:1c:a5:cc:42:ac:e4: 95:b2:f5:d4:ec:69:b8:94:25:be:ec:dd:31:a4:0f: 15:1f:fd:e3:de:7f:f7:33:2a:f6:56:13:33:d4:40: 39:5e:41:56:4e:39:28:1e:56:b0:ab:b4:98:92:1e: 25:fa:f3:a8:3b:34:b5:e2:1e:d2:a2:24:47:b6:ce: f4:35:40:f4:a8:09:46:94:9a:d3:32:08:8e:c6:63: 1e:c9:71:7e:2a:f1:d8:ea:47:b9:fe:d2:e6:a5:a6: 4a:05:b4:68:e7:00:f1:b3:7d:25:58:1c:a0:5b:0f: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B0:30:29:85:19:62:E4:C8:57:86:A3:72:71:6C:8A:77:BC:08:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf568f2e-a0e6-3097-8ecc-0bfe96bbc867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.74.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:1a:6b:74:6c:ce:e1:e3:39:86:78:50:32:c2:e1:73:ec:78: fe:42:7a:0b:f6:fe:ef:cc:d7:45:5e:b5:72:3e:d1:ae:a3:03: ac:0a:a0:ba:ac:5f:70:96:14:9b:37:dc:0a:b0:12:d7:be:70: 4e:de:05:31:be:37:a8:ee:4a:1a:6c:32:05:2e:91:e1:f5:bb: 96:36:ca:75:4b:da:ca:b9:58:f5:1c:28:fe:52:fa:3b:1a:66: 70:93:2d:dd:27:4a:68:7e:71:1e:06:85:4b:3f:8e:e0:cf:61: c2:9a:f4:fa:b4:4a:78:7c:fd:a5:fe:b0:39:ba:77:f0:d8:85: fd:e4:69:06:da:99:a2:0f:1a:7a:4b:90:32:0f:9e:87:cb:6c: 3f:c0:b3:3b:5d:ce:e0:bb:9e:1d:9e:c9:7d:6f:1e:36:0c:21: 83:9d:ee:e9:89:bf:e9:ce:44:e1:41:db:e6:66:df:a2:37:64: 02:dd:d8:67:48:4f:46:b2:1b:ec:66:74:44:5a:fa:4d:36:f0: da:73:9a:45:3d:95:81:cb:94:20:47:ce:e6:f1:86:91:ce:db: dd:f4:2e:76:7f:d2:07:c7:31:31:dd:37:2a:51:b9:81:ab:ee: 14:88:56:84:06:41:83:63:80:07:b0:f2:7b:5c:d4:98:ba:c2: 2b:35:86:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhzryUbMw8tt2LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk NWY3YmYxY2YtMjBkYy00M2E0LTk2MTgtMzU4YjBlNzU3ZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd9mjyOhH0alHt2i/F+/3hvoj79OhOSz6V/n JlIOPOd19gFDUh8F1wcLf9BwLHC+hnAh44TOvPJc4TTkL4jLvLtdwJalu5nBpNS5 H4bOLmwklXMvzGsDEBVOSFzKo3Xs0dVBB07APy2/LldJxfxtILNKzwdVBYx4HkFv 9TpqBaQTZexhliL3xO/SrzO/ZDAcpcxCrOSVsvXU7Gm4lCW+7N0xpA8VH/3j3n/3 Myr2VhMz1EA5XkFWTjkoHlawq7SYkh4l+vOoOzS14h7SoiRHts70NUD0qAlGlJrT MgiOxmMeyXF+KvHY6ke5/tLmpaZKBbRo5wDxs30lWBygWw+V1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJywMCmFGWLkyFeGo3JxbIp3vAguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmY1NjhmMmUtYTBlNi0z MDk3LThlY2MtMGJmZTk2YmJjODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaEoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMaa3RszuHjOYZ4UDLC4XPseP5Cegv2/u/M10VetXI+0a6jA6wKoLqs X3CWFJs33AqwEte+cE7eBTG+N6juShpsMgUukeH1u5Y2ynVL2sq5WPUcKP5S+jsa ZnCTLd0nSmh+cR4GhUs/juDPYcKa9Pq0Snh8/aX+sDm6d/DYhf3kaQbamaIPGnpL kDIPnofLbD/AsztdzuC7nh2eyX1vHjYMIYOd7umJv+nOROFB2+Zm36I3ZALd2GdI T0ayG+xmdERa+k028NpzmkU9lYHLlCBHzubxhpHO2930LnZ/0gfHMTHdNypRuYGr 7hSIVoQGQYNjgAew8ntc1Ji6wis1hmM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:40:10 2026 by rpki-client