$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa File: dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa (raw, json) Hash identifier: vheSKjEQ+/Q6bhMhEkoyCFhIX230wSEa9WrXsmCGma0= Subject key identifier: AE:E5:36:9B:AB:21:17:A1:A8:29:9E:5F:DA:1B:07:35:71:A5:4F:6C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB552075FEFD95B791C8C4B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 20940 IP address blocks: 104.89.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:52:07:5f:ef:d9:5b:79:1c:8c:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=869fd797-5256-4627-ba35-576699a73a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:15:98:76:69:87:06:a8:81:9a:aa:84:df:c4: 7b:07:5f:97:21:de:18:b5:65:ce:11:67:78:52:b2: 2c:cd:7b:e7:ad:b8:b8:3b:6d:4d:26:2a:cc:4f:68: 7c:f4:f3:f3:cd:a4:85:82:b6:19:03:13:95:ff:6e: eb:8a:b7:97:60:70:5d:01:79:90:e0:03:38:23:9f: 5b:0e:b1:e9:71:0b:2c:3c:2b:f9:20:3f:6c:ea:67: f4:69:56:7e:99:18:43:10:5f:f9:08:7b:d1:9b:da: 19:c9:87:2a:32:30:68:b8:4e:7d:5f:d6:4d:3b:ec: 7c:64:8f:92:57:cd:d9:88:6c:47:b7:a5:b0:5f:a1: 61:df:72:48:35:ec:d0:d4:33:ec:60:b8:a7:4a:2c: 83:b2:29:1a:3d:3f:68:e4:02:90:99:19:01:dc:4e: ad:e3:5f:01:1e:88:33:d8:74:7a:af:aa:e6:d4:62: b9:12:af:08:e5:74:f9:ec:5a:af:0a:35:2d:f7:fc: 5d:3f:94:5a:4d:1c:a3:3d:84:bb:1d:11:cf:26:84: 9b:e2:fa:b7:0d:0f:13:53:cc:18:fa:bf:e5:c6:e4: 9e:dd:93:af:e7:35:04:83:b0:ca:89:dc:ab:17:6c: 8c:76:76:aa:98:ec:25:44:b0:a6:81:cd:03:14:28: 7e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E5:36:9B:AB:21:17:A1:A8:29:9E:5F:DA:1B:07:35:71:A5:4F:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.89.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:e1:90:92:3e:85:95:1b:ad:c5:27:96:31:08:2d:87:5e:e0: 41:9d:8e:b0:f3:17:57:ed:6c:7d:96:87:1e:61:96:ad:6e:72: 4b:65:77:2d:2e:0a:0c:46:86:47:12:f5:96:cb:43:5a:8f:2f: fb:63:98:a1:a3:14:58:b8:1e:e7:cd:54:bc:4b:44:42:fb:93: 71:29:27:33:ce:82:9d:07:09:df:92:22:e3:ae:f2:e0:3d:3e: 96:04:ee:2b:29:58:1d:e5:2b:18:7d:e5:15:28:b6:bb:43:a4: 60:ea:74:1b:72:05:b9:b4:2b:97:9c:71:42:ec:06:07:41:18: 83:3e:d4:d4:73:07:be:c0:6f:c2:45:3b:50:18:f2:19:8c:38: d6:31:3a:27:e3:6b:89:2d:74:d8:e8:02:44:44:09:ee:81:82: 83:25:7a:cc:7c:1d:f0:3b:93:eb:e9:1c:4d:1e:55:21:4e:28: e0:d8:1d:a5:63:a2:32:65:19:43:e4:68:ab:57:01:ae:b4:25: 53:fb:8a:ce:80:98:ac:15:17:bb:8f:d3:4f:48:cd:d3:9e:5c: bb:db:15:e8:9d:04:ec:59:03:21:af:04:84:4c:34:c7:e9:6a: b1:c9:b0:ba:30:5a:fc:de:3b:f3:5e:ce:70:f4:47:99:3d:ef: 70:68:db:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1Ugdf79lbeRyMS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk ODY5ZmQ3OTctNTI1Ni00NjI3LWJhMzUtNTc2Njk5YTczYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRWYdmmHBqiBmqqE38R7B1+XId4YtWXOEWd4 UrIszXvnrbi4O21NJirMT2h89PPzzaSFgrYZAxOV/27rireXYHBdAXmQ4AM4I59b DrHpcQssPCv5ID9s6mf0aVZ+mRhDEF/5CHvRm9oZyYcqMjBouE59X9ZNO+x8ZI+S V83ZiGxHt6WwX6Fh33JINezQ1DPsYLinSiyDsikaPT9o5AKQmRkB3E6t418BHogz 2HR6r6rm1GK5Eq8I5XT57FqvCjUt9/xdP5RaTRyjPYS7HRHPJoSb4vq3DQ8TU8wY +r/lxuSe3ZOv5zUEg7DKidyrF2yMdnaqmOwlRLCmgc0DFCh+pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7lNpurIRehqCmeX9obBzVxpU9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQ5ZTNhNTEtZDZmYi0z OWU3LTg5OWItNDdjOWE1MmJmYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFl0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXhkJI+hZUbrcUnljEILYde4EGdjrDzF1ftbH2Whx5hlq1ucktldy0u CgxGhkcS9ZbLQ1qPL/tjmKGjFFi4HufNVLxLREL7k3EpJzPOgp0HCd+SIuOu8uA9 PpYE7ispWB3lKxh95RUotrtDpGDqdBtyBbm0K5eccULsBgdBGIM+1NRzB77Ab8JF O1AY8hmMONYxOifja4ktdNjoAkRECe6BgoMlesx8HfA7k+vpHE0eVSFOKODYHaVj ojJlGUPkaKtXAa60JVP7is6AmKwVF7uP009IzdOeXLvbFeidBOxZAyGvBIRMNMfp arHJsLowWvzeO/NeznD0R5k973Bo20A= -----END CERTIFICATE-----Generated at Mon Mar 2 04:37:08 2026 by rpki-client