$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa File: a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa (raw, json) Hash identifier: PBz6x/A5d/pMuQIxqEeSBK8QjAetyHgDIc0rfBfWsu0= Subject key identifier: 16:7E:2C:D8:B9:63:9F:CA:5C:81:15:B8:FC:82:8C:1E:53:EE:F7:2C Certificate issuer: /CN=4d929512-7541-4207-be46-8af4cc4a4800 Certificate serial: 010D0C9F4328584F4976DBE2F09E75150FAC4340 Authority key identifier: 50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 26658 IP address blocks: 104.232.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:db:e2:f0:9e:75:15:0f:ac:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d929512-7541-4207-be46-8af4cc4a4800 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b6e846fe-581a-4595-abf2-7fc225c81963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:58:cb:39:0f:81:61:39:96:b3:32:e4:88: 5a:8e:08:31:54:97:b9:ee:b7:4f:4c:8e:cc:42:7a: 27:73:3a:11:84:fa:b3:65:73:59:2c:aa:88:3b:b0: e8:66:aa:37:91:21:49:da:17:74:dd:bf:5d:8f:21: f3:69:ec:6a:88:55:74:7d:e7:b4:fa:20:4f:2a:9c: 2d:32:7f:8a:24:6d:8d:be:90:bc:4a:52:6c:3e:83: d6:23:1e:d7:7e:21:03:0d:5e:da:4d:1a:9b:9c:d1: 37:bf:8e:43:e2:d5:45:b7:a1:b1:86:79:68:bf:5f: 86:c6:0e:0b:b2:44:94:ff:e4:b1:85:ea:6d:da:18: a7:0f:98:fd:5a:1a:17:70:dd:ef:c3:95:f9:29:02: 22:00:c3:a7:08:db:74:da:63:10:2c:fd:06:3e:ee: 7b:5a:8c:b5:df:59:dc:77:df:0d:d8:71:9b:ff:94: 2b:66:ba:ec:81:29:6b:4b:ea:12:8b:10:25:ca:4b: 99:35:40:2e:d2:b6:2f:62:1f:7b:91:99:46:8b:36: 08:80:8f:20:a7:fe:b9:72:49:40:95:9d:89:dd:3d: b4:3c:a7:e4:e6:fa:1d:75:04:13:08:95:73:88:9e: 73:52:4b:f5:48:41:f3:24:a4:ca:24:63:27:1d:0b: 12:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7E:2C:D8:B9:63:9F:CA:5C:81:15:B8:FC:82:8C:1E:53:EE:F7:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl X509v3 Authority Key Identifier: keyid:50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer sbgp-ipAddrBlock: critical IPv4: 104.232.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f3:36:63:ba:25:c2:ab:f3:e0:17:5d:18:30:75:5b:82:0f: 7e:09:a0:3c:6c:6d:b7:8f:24:f1:2c:7f:12:35:07:59:cc:00: 3b:c5:61:17:d3:3b:df:a2:fb:d9:ba:5b:d9:3b:80:55:4c:5a: cf:15:22:31:7e:bc:69:06:69:f1:f8:1a:3d:62:a6:a8:b1:c9: 5e:e2:43:fb:1b:ed:4f:49:e0:16:00:58:41:5b:bc:b8:b8:d7: d2:75:d0:f0:f8:ea:93:43:bf:80:f6:9b:bc:21:0f:f2:65:4a: 7f:e2:9f:8e:ed:e1:d5:92:7c:79:69:4f:e0:4f:27:f8:de:45: af:fe:50:c0:e1:57:39:4d:8c:bb:f5:35:f4:e1:79:25:c2:ae: 63:f2:bc:74:75:df:05:33:f3:ad:13:44:3b:bb:14:30:b4:93: b1:f6:00:bb:17:04:73:71:fe:f3:bb:5b:60:29:d0:1b:dc:3e: 75:69:48:76:9c:74:c4:82:e7:23:67:91:a3:4b:12:7c:10:dc: 6e:9d:0c:93:17:61:8b:63:2b:02:27:c8:06:22:5e:70:cb:49: a8:b2:e5:c5:83:2c:3b:16:7d:71:0b:4d:ce:e0:82:28:db:c8: 32:de:99:1d:ab:4e:5a:dc:37:bd:be:f2:a7:ee:91:52:5c:e4: db:71:01:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdtvi8J51FQ+sQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5Mjk1MTItNzU0MS00MjA3LWJlNDYtOGFmNGNjNGE0 ODAwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjZlODQ2ZmUtNTgxYS00NTk1LWFiZjItN2ZjMjI1YzgxOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPlYyzkPgWE5lrMy5IhajggxVJe57rdPTI7M QnonczoRhPqzZXNZLKqIO7DoZqo3kSFJ2hd03b9djyHzaexqiFV0fee0+iBPKpwt Mn+KJG2NvpC8SlJsPoPWIx7XfiEDDV7aTRqbnNE3v45D4tVFt6Gxhnlov1+Gxg4L skSU/+Sxhept2hinD5j9WhoXcN3vw5X5KQIiAMOnCNt02mMQLP0GPu57Woy131nc d98N2HGb/5QrZrrsgSlrS+oSixAlykuZNUAu0rYvYh97kZlGizYIgI8gp/65cklA lZ2J3T20PKfk5voddQQTCJVziJ5zUkv1SEHzJKTKJGMnHQsSYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZ+LNi5Y5/KXIEVuPyCjB5T7vcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80ZDky OTUxMi03NTQxLTQyMDctYmU0Ni04YWY0Y2M0YTQ4MDAvYTFhMjA2MGEtNjg4MS0z ZWY1LWFhN2MtMWMzOWY4MzliMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGQ5Mjk1MTItNzU0MS00MjA3LWJl NDYtOGFmNGNjNGE0ODAwLzRkOTI5NTEyLTc1NDEtNDIwNy1iZTQ2LThhZjRjYzRh NDgwMC5jcmwwHwYDVR0jBBgwFoAUUHbGsA5Pv93rRfzEAudPVstdNTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80ZDkyOTUxMi03NTQxLTQyMDctYmU0Ni04YWY0 Y2M0YTQ4MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPzNmO6JcKr8+AXXRgwdVuCD34JoDxsbbePJPEsfxI1B1nMADvFYRfT O9+i+9m6W9k7gFVMWs8VIjF+vGkGafH4Gj1ipqixyV7iQ/sb7U9J4BYAWEFbvLi4 19J10PD46pNDv4D2m7whD/JlSn/in47t4dWSfHlpT+BPJ/jeRa/+UMDhVzlNjLv1 NfTheSXCrmPyvHR13wUz860TRDu7FDC0k7H2ALsXBHNx/vO7W2Ap0BvcPnVpSHac dMSC5yNnkaNLEnwQ3G6dDJMXYYtjKwInyAYiXnDLSaiy5cWDLDsWfXELTc7ggijb yDLemR2rTlrcN72+8qfukVJc5NtxAY8= -----END CERTIFICATE-----Generated at Sat Oct 3 21:17:31 2026 by rpki-client