$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5cefe4c-e3ba-307a-b454-85c8a48a788e.roa File: d5cefe4c-e3ba-307a-b454-85c8a48a788e.roa (raw, json) Hash identifier: GCfBBitM3vDKWGxlfrKLATsKGEdH/wPDS29Uc4ptHAw= Subject key identifier: A0:A3:9A:CC:35:50:7F:5B:34:BB:6E:25:EC:6F:0C:35:6B:07:6A:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB981EC94D2BEB6D1B9836380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5cefe4c-e3ba-307a-b454-85c8a48a788e.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 20940 IP address blocks: 104.126.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:ec:94:d2:be:b6:d1:b9:83:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=4c9b8d66-772a-4860-8479-64fcabbafeda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:35:c1:10:91:7f:d9:01:7e:6b:66:08:fa:0d: 13:94:82:8c:a6:12:67:6a:f7:6c:79:c1:02:3b:8c: 9f:1d:3d:2a:af:da:87:38:49:dd:06:c5:58:61:3e: 6b:8c:e0:1e:5a:74:59:af:fb:e9:bd:db:d1:64:33: 2d:62:2b:8f:01:bd:16:7c:29:e2:ef:b1:b1:f9:d3: c9:63:0d:6d:fd:b8:b3:0d:a8:29:66:cf:8f:50:7c: ec:74:b4:d1:77:e1:43:07:29:56:9f:b6:bd:c8:0b: e2:7f:7d:5d:01:2b:14:e8:3e:90:6a:07:24:9e:f4: 3a:9e:35:2c:d6:30:f1:d8:fc:2b:b7:1d:e9:ec:a9: c5:57:f5:eb:49:60:88:5e:f4:e9:c3:0d:8a:94:49: b4:96:a3:e2:25:ff:1d:8e:75:3d:6d:37:e3:98:ae: ba:00:c2:32:4d:b2:3d:a9:c4:e3:a6:25:c6:33:f7: fd:8d:4f:3d:93:59:88:6e:5a:7b:ee:20:32:a0:ad: cc:24:10:40:e2:1c:f6:f2:fe:0f:7a:e0:37:96:e0: f4:02:42:19:8c:18:6c:5c:c3:83:7e:49:b7:b3:bd: 60:5e:f4:16:f2:25:d3:bf:73:83:a0:61:5c:80:e1: 53:25:95:0d:9c:1b:02:28:15:9c:86:77:1c:32:c1: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A3:9A:CC:35:50:7F:5B:34:BB:6E:25:EC:6F:0C:35:6B:07:6A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5cefe4c-e3ba-307a-b454-85c8a48a788e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.126.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:bc:c1:96:1d:c5:64:20:86:9e:1a:96:06:53:59:df:fe:de: cd:f4:34:e3:26:dc:87:30:7d:58:74:ae:13:1e:cd:4a:5f:66: 30:f0:85:a7:cf:de:5c:c4:21:67:6b:d8:72:3a:4a:7c:d4:85: 72:cc:22:25:ba:6d:87:50:f4:43:57:95:ba:9b:4e:79:94:9d: 2e:93:11:ef:21:30:0f:47:57:02:e5:31:dd:29:07:92:47:b1: e4:af:b0:06:42:79:17:44:7a:54:7c:9a:ff:59:a5:7c:aa:67: 93:cb:6a:19:8e:de:a3:1f:ac:04:8c:4a:be:59:9f:66:ff:82: 59:e6:3f:51:1c:02:6d:b7:5e:06:55:8b:38:fc:52:db:fa:73: a8:12:ad:c2:60:64:fa:2b:91:e4:fc:3e:9e:8f:bf:b5:74:91: 50:46:60:c0:4e:04:9a:58:a6:00:3c:70:40:4c:90:e7:17:c6: cc:ef:48:60:93:04:73:38:88:33:a0:3a:a1:e8:bc:62:f0:0c: e4:8e:f8:5b:a2:b9:2e:68:33:21:f9:f2:1e:8c:4a:a7:5f:64: 8e:d8:2b:ca:d5:b0:74:e9:d8:03:0a:77:d9:cf:d4:14:95:20: e4:74:34:f2:88:4d:c1:2a:b4:62:74:d2:a4:f3:4f:7d:29:c7: e6:4d:9a:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5geyU0r620bmDY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk NGM5YjhkNjYtNzcyYS00ODYwLTg0NzktNjRmY2FiYmFmZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzXBEJF/2QF+a2YI+g0TlIKMphJnavdsecEC O4yfHT0qr9qHOEndBsVYYT5rjOAeWnRZr/vpvdvRZDMtYiuPAb0WfCni77Gx+dPJ Yw1t/bizDagpZs+PUHzsdLTRd+FDBylWn7a9yAvif31dASsU6D6QagcknvQ6njUs 1jDx2Pwrtx3p7KnFV/XrSWCIXvTpww2KlEm0lqPiJf8djnU9bTfjmK66AMIyTbI9 qcTjpiXGM/f9jU89k1mIblp77iAyoK3MJBBA4hz28v4PeuA3luD0AkIZjBhsXMOD fkm3s71gXvQW8iXTv3ODoGFcgOFTJZUNnBsCKBWchnccMsFIvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCjmsw1UH9bNLtuJexvDDVrB2reMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVjZWZlNGMtZTNiYS0z MDdhLWI0NTQtODVjOGE0OGE3ODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaH4kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEG8wZYdxWQghp4algZTWd/+3s30NOMm3IcwfVh0rhMezUpfZjDwhafP 3lzEIWdr2HI6SnzUhXLMIiW6bYdQ9ENXlbqbTnmUnS6TEe8hMA9HVwLlMd0pB5JH seSvsAZCeRdEelR8mv9ZpXyqZ5PLahmO3qMfrASMSr5Zn2b/glnmP1EcAm23XgZV izj8Utv6c6gSrcJgZPorkeT8Pp6Pv7V0kVBGYMBOBJpYpgA8cEBMkOcXxszvSGCT BHM4iDOgOqHovGLwDOSO+FuiuS5oMyH58h6MSqdfZI7YK8rVsHTp2AMKd9nP1BSV IOR0NPKITcEqtGJ00qTzT30px+ZNmtw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:34:38 2026 by rpki-client