$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d44b0198-b97a-323c-a64d-5ba7ec51a675.roa File: d44b0198-b97a-323c-a64d-5ba7ec51a675.roa (raw, json) Hash identifier: l1qYRVsHW4ZwFjX4a9pm8FnswgL6/SCYZJEnKLEbvRA= Subject key identifier: EC:68:D0:E0:C2:CB:7F:45:F0:5F:4E:31:75:E2:B3:3D:61:A1:B8:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB981EB8D5CF3CD1F38B4CF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d44b0198-b97a-323c-a64d-5ba7ec51a675.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 20940 IP address blocks: 104.123.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:eb:8d:5c:f3:cd:1f:38:b4:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=66f04097-bea7-466a-bac0-b3119259d853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:03:6a:63:2f:44:24:6e:25:50:3a:87:8f:76: b2:78:e7:12:3b:dc:91:f1:bb:8d:78:76:e9:b5:a2: 01:a1:90:96:0c:c6:37:e6:f2:29:64:4d:1a:73:b4: e2:02:ac:7e:cf:25:6b:17:2a:34:f4:77:ec:6a:0a: f0:15:46:c4:99:a7:1e:1f:f1:84:cf:71:ee:aa:d5: 44:96:43:35:30:3c:77:ca:cf:4a:23:07:6f:3e:f4: db:66:1a:f8:12:b0:29:b8:e4:9e:85:c9:e5:a9:e2: 91:59:07:f9:71:15:c6:3c:e2:fd:51:1b:e8:64:5d: ce:f5:af:21:e2:2b:9d:06:c3:14:45:63:4a:27:1e: b9:b7:8d:e2:a0:92:de:e0:8d:87:c7:62:00:ad:69: 02:72:3f:b3:ee:93:00:8b:a2:b5:a5:da:38:b0:06: 61:08:22:43:33:5b:48:89:34:59:34:5e:f0:ad:69: 7b:bb:19:ff:63:05:b2:c2:5c:7b:15:53:d1:bf:ad: 7d:18:27:87:75:2a:60:08:3c:a6:7b:77:8d:68:bb: 14:c7:b8:6c:51:4a:31:b6:c7:ab:d3:e5:cb:c1:d6: 41:0a:7e:c9:ef:98:95:15:94:e6:98:e9:42:0e:aa: 6b:50:c6:2d:9f:7b:f3:82:a3:40:21:94:27:ef:e8: 01:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:68:D0:E0:C2:CB:7F:45:F0:5F:4E:31:75:E2:B3:3D:61:A1:B8:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d44b0198-b97a-323c-a64d-5ba7ec51a675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:16:c2:42:72:84:73:f3:8f:bd:0b:11:c5:6a:c2:3f:4e:77: b1:24:54:19:d0:84:35:1d:c3:f2:03:3b:a6:e5:9c:e9:b1:26: 0c:98:01:ce:68:66:67:3a:9b:68:7f:27:d9:71:00:9f:e3:3d: a1:00:f0:97:01:73:69:22:02:2e:3a:a8:8f:a3:7e:f6:f3:28: 6d:a5:3a:2d:d6:3c:e0:81:2b:39:13:d5:86:db:b5:32:17:66: 9d:01:b3:dc:fb:50:c4:5a:67:fc:10:51:23:b0:fb:5d:38:79: 37:21:16:70:38:39:85:33:f6:f2:c0:a5:9b:79:13:2e:6d:99: d5:c2:4a:94:73:b3:58:d0:a3:18:0d:b2:68:81:6a:bb:0f:fc: d9:fd:bd:d1:47:a9:1d:c5:96:6e:22:29:31:cc:09:a2:2e:40: 0b:50:53:8b:d9:fd:9d:ce:7e:8c:1f:4e:99:7c:52:8a:d4:a4: 22:aa:ce:b0:d5:04:3e:a1:f6:fb:2a:33:d5:9c:4f:32:d2:e2: 11:7a:83:9f:a3:86:41:76:e3:fc:7d:06:fe:85:06:ee:20:75: 88:e0:0f:8b:55:40:18:8c:3d:b8:d0:ef:a5:8a:21:1a:1a:bd: ae:50:79:80:20:90:a4:1a:38:6a:6b:2f:56:8c:54:5b:6b:4f: 70:cb:35:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5geuNXPPNHzi0zwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk NjZmMDQwOTctYmVhNy00NjZhLWJhYzAtYjMxMTkyNTlkODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQNqYy9EJG4lUDqHj3ayeOcSO9yR8buNeHbp taIBoZCWDMY35vIpZE0ac7TiAqx+zyVrFyo09HfsagrwFUbEmaceH/GEz3HuqtVE lkM1MDx3ys9KIwdvPvTbZhr4ErApuOSehcnlqeKRWQf5cRXGPOL9URvoZF3O9a8h 4iudBsMURWNKJx65t43ioJLe4I2Hx2IArWkCcj+z7pMAi6K1pdo4sAZhCCJDM1tI iTRZNF7wrWl7uxn/YwWywlx7FVPRv619GCeHdSpgCDyme3eNaLsUx7hsUUoxtser 0+XLwdZBCn7J75iVFZTmmOlCDqprUMYtn3vzgqNAIZQn7+gBLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxo0ODCy39F8F9OMXXisz1hobiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDQ0YjAxOTgtYjk3YS0z MjNjLWE2NGQtNWJhN2VjNTFhNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHvWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgWwkJyhHPzj70LEcVqwj9Od7EkVBnQhDUdw/IDO6blnOmxJgyYAc5o Zmc6m2h/J9lxAJ/jPaEA8JcBc2kiAi46qI+jfvbzKG2lOi3WPOCBKzkT1YbbtTIX Zp0Bs9z7UMRaZ/wQUSOw+104eTchFnA4OYUz9vLApZt5Ey5tmdXCSpRzs1jQoxgN smiBarsP/Nn9vdFHqR3Flm4iKTHMCaIuQAtQU4vZ/Z3OfowfTpl8UorUpCKqzrDV BD6h9vsqM9WcTzLS4hF6g5+jhkF24/x9Bv6FBu4gdYjgD4tVQBiMPbjQ76WKIRoa va5QeYAgkKQaOGprL1aMVFtrT3DLNcA= -----END CERTIFICATE-----Generated at Mon Mar 2 06:53:47 2026 by rpki-client