$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d17fe32e-8697-3d88-942e-551251da617e.roa File: d17fe32e-8697-3d88-942e-551251da617e.roa (raw, json) Hash identifier: Xf2q2Aq2iZBX9cHO6RjpC0K1pi/tZJuCAXrTPxAS9H0= Subject key identifier: 5B:8E:8B:E0:97:65:CB:48:BB:1A:E4:6A:33:61:D1:C4:F3:17:E4:DB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB981E9E78ED2B924FAB4A120 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d17fe32e-8697-3d88-942e-551251da617e.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 9002 IP address blocks: 104.121.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:e9:e7:8e:d2:b9:24:fa:b4:a1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=8fcaeea0-95b5-4167-a311-c7c2c5a7c8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:a6:13:36:bb:36:bb:6f:4b:cb:fd:de:c7: fb:47:5b:1c:e6:5e:46:df:58:62:33:c7:0d:e3:e5: f7:ca:fd:c1:4e:0f:79:bc:fb:96:e2:62:10:bb:43: 84:33:61:65:3e:a4:c1:98:dc:6a:1f:55:b5:91:db: 85:57:32:7b:e6:54:40:58:36:d7:52:0f:d2:eb:f8: 77:0d:3d:dd:95:99:4d:4a:63:9c:15:96:e2:1d:22: 0e:8a:a6:90:a4:45:16:90:ac:a7:68:40:34:66:af: 7b:48:f7:40:c2:f4:19:03:67:09:4b:d3:54:83:db: 04:63:e9:f9:97:8c:36:07:45:17:7e:81:44:6c:c7: 01:76:85:cb:ac:35:6c:98:4a:4c:8b:f2:46:16:56: a1:87:b4:d3:e2:b9:e1:b6:d3:68:3d:0a:3f:88:78: 49:46:c3:68:ec:7d:79:1d:85:aa:26:04:64:cb:c2: f8:99:b2:16:66:31:d1:53:aa:34:aa:40:1b:e1:03: a6:df:bd:5e:6e:d4:35:63:e3:93:bd:74:fc:b1:65: 58:8a:af:87:4b:a1:c3:bb:af:e5:15:f2:18:b2:b9: b7:09:6a:cc:dc:e4:eb:38:18:e4:cc:83:54:08:2c: a1:84:3c:30:9e:62:7d:73:35:c7:8b:7a:49:75:6f: 05:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8E:8B:E0:97:65:CB:48:BB:1A:E4:6A:33:61:D1:C4:F3:17:E4:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d17fe32e-8697-3d88-942e-551251da617e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.121.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:7b:8c:e7:bd:1e:ce:1c:7d:6b:72:b9:1a:49:62:8f:76:66: f9:a1:69:c5:3a:12:44:98:cc:19:84:6b:90:11:51:20:ea:84: 8f:12:75:7b:12:c7:0a:61:f3:06:3f:b9:d2:11:42:07:dd:9d: 8d:81:e3:cf:72:6a:78:ea:44:1b:fd:3d:16:b8:ab:26:a9:df: d4:09:7d:4d:1f:67:89:1a:9f:b6:cd:09:b5:36:d5:4c:48:ea: 2b:e9:78:7b:3a:8a:fd:94:14:07:0e:eb:8c:a3:cc:3a:d1:2f: 21:d9:7f:40:c5:f3:5a:a8:df:f1:8c:a8:f5:b9:47:84:35:15: a5:6a:0a:9b:51:44:c5:0b:fe:eb:51:cb:f6:5b:a4:71:d7:b4: 75:6d:06:ff:cf:08:37:6c:61:9f:64:b2:ba:ab:80:4b:95:c0: 90:73:aa:2f:cb:b6:11:76:8a:09:a2:f2:18:45:64:b0:f2:42: 36:3d:17:d0:c6:66:83:b0:e7:c6:f6:7a:15:26:17:09:84:8f: bd:6b:16:32:ac:2d:26:4b:4b:49:7a:bb:dd:92:a1:75:85:66: e2:d2:6b:26:3b:36:c8:39:78:99:a7:ac:05:ec:e5:51:84:e3: 4f:23:d2:a7:d3:5b:75:27:06:c6:72:63:7b:00:e9:d3:b1:4d: c1:d5:19:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gennjtK5JPq0oSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk OGZjYWVlYTAtOTViNS00MTY3LWEzMTEtYzdjMmM1YTdjOGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd6mEza7NrtvS8v93sf7R1sc5l5G31hiM8cN 4+X3yv3BTg95vPuW4mIQu0OEM2FlPqTBmNxqH1W1kduFVzJ75lRAWDbXUg/S6/h3 DT3dlZlNSmOcFZbiHSIOiqaQpEUWkKynaEA0Zq97SPdAwvQZA2cJS9NUg9sEY+n5 l4w2B0UXfoFEbMcBdoXLrDVsmEpMi/JGFlahh7TT4rnhttNoPQo/iHhJRsNo7H15 HYWqJgRky8L4mbIWZjHRU6o0qkAb4QOm371ebtQ1Y+OTvXT8sWVYiq+HS6HDu6/l FfIYsrm3CWrM3OTrOBjkzINUCCyhhDwwnmJ9czXHi3pJdW8FYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuOi+CXZctIuxrkajNh0cTzF+TbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDE3ZmUzMmUtODY5Ny0z ZDg4LTk0MmUtNTUxMjUxZGE2MTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaHlCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt7jOe9Hs4cfWtyuRpJYo92ZvmhacU6EkSYzBmEa5ARUSDqhI8SdXsS xwph8wY/udIRQgfdnY2B489yanjqRBv9PRa4qyap39QJfU0fZ4kan7bNCbU21UxI 6ivpeHs6iv2UFAcO64yjzDrRLyHZf0DF81qo3/GMqPW5R4Q1FaVqCptRRMUL/utR y/ZbpHHXtHVtBv/PCDdsYZ9ksrqrgEuVwJBzqi/LthF2igmi8hhFZLDyQjY9F9DG ZoOw58b2ehUmFwmEj71rFjKsLSZLS0l6u92SoXWFZuLSayY7Nsg5eJmnrAXs5VGE 408j0qfTW3UnBsZyY3sA6dOxTcHVGVk= -----END CERTIFICATE-----Generated at Sun Mar 1 22:51:22 2026 by rpki-client