$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/fed345fd-8d03-3def-913f-fe4dd7109671.roa File: fed345fd-8d03-3def-913f-fe4dd7109671.roa (raw, json) Hash identifier: kXcqIyWHZoM7lWdDDHi2kOeiXIMZDioijXwhqyJx5t4= Subject key identifier: 37:A0:76:FC:5C:54:59:23:26:EF:95:4D:F7:E4:61:09:80:52:5B:F3 Certificate issuer: /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Certificate serial: 010D0C9F4328584B583C854A1F17321010979B80 Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/fed345fd-8d03-3def-913f-fe4dd7109671.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 62533 IP address blocks: 104.219.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:85:4a:1f:17:32:10:10:97:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=c4827d7f-ba9c-412b-8e2f-c20a143d7b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9c:53:71:5c:91:aa:d6:24:b7:df:7c:16:96: c4:31:52:6e:29:55:2b:09:5b:7a:40:d0:e1:62:66: 30:47:2f:1d:7e:64:2c:97:96:f3:b8:bc:1e:4d:97: e6:8c:91:5e:eb:6b:0c:7e:1b:00:e2:71:22:7a:1a: d3:69:8a:13:bf:26:af:eb:d5:e5:5d:3e:39:e3:77: c5:6e:4b:90:13:da:9b:ba:d0:57:aa:41:b5:95:e1: 23:c2:30:7a:10:a2:54:a8:13:e2:c4:23:f7:ba:f4: 38:c0:47:09:24:f1:af:41:ed:17:f5:d6:38:e9:d5: 63:73:2b:c7:92:bc:78:0d:e5:08:25:ee:6a:a3:50: 25:56:b8:4a:ca:06:3c:ed:2b:a4:61:a7:c2:c0:87: c3:5a:65:71:42:d9:c7:94:b5:f8:13:fb:ac:0f:fe: 83:4c:df:28:2a:f3:d7:22:3e:57:74:89:ad:9e:b3: 68:01:3b:9b:4e:4f:75:7c:5f:a7:1b:05:fd:0a:f6: 51:85:96:13:cb:27:51:0a:8f:41:4e:2c:08:ec:49: 7f:12:33:89:e2:e1:57:2b:14:a3:d0:62:2a:4c:a4: 93:d6:f5:2d:75:94:73:ca:1b:70:20:c3:43:08:1c: 06:79:a9:3e:25:21:95:57:c9:08:c7:36:ef:b2:1e: 55:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A0:76:FC:5C:54:59:23:26:EF:95:4D:F7:E4:61:09:80:52:5B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/fed345fd-8d03-3def-913f-fe4dd7109671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl X509v3 Authority Key Identifier: keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer sbgp-ipAddrBlock: critical IPv4: 104.219.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:11:d7:a8:38:01:6a:45:12:26:5a:c6:b0:71:74:86:64:29: 8d:ab:87:72:4d:c6:b8:c4:bc:a7:bf:00:08:dd:a1:f1:9a:a4: 27:0a:8b:8b:c7:5b:05:db:bd:9e:fa:3f:7b:d8:55:a9:9e:b2: 44:05:09:9e:c9:50:c9:3e:fe:78:d2:70:ff:c4:c0:94:0b:2d: ed:3b:14:b9:c8:d5:69:cf:1d:b2:48:0f:3d:1c:5d:ff:42:9c: 85:9d:2d:52:08:d3:ea:90:25:32:8c:76:66:fd:63:56:b9:b1: 0d:2e:38:ba:63:b4:ec:a3:dd:d7:51:85:57:ae:e9:5b:ee:7b: e7:94:07:bb:d7:29:ed:91:1e:23:aa:5c:44:de:35:f0:f9:c5: b2:29:0b:54:5a:7d:20:4f:70:9d:a7:bb:f9:8f:a8:dd:bd:2f: b2:b2:c3:44:0a:cc:46:18:04:ce:dd:42:65:da:aa:4c:34:c0: b8:26:33:de:3e:a7:ac:e4:d6:8b:77:34:6b:52:a7:90:17:5e: fd:2b:7d:96:08:f3:a0:c8:cf:6c:b4:66:96:d6:f8:42:95:4a: ed:0e:9d:0e:05:6d:57:58:2a:fe:f9:41:71:ca:28:5e:19:a7: 90:0f:6a:d9:52:15:a9:c7:40:88:63:af:bb:18:4a:ba:01:35: 04:bb:c9:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIVKHxcyEBCXm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIyNjktY2RiZmRmNWJk ZjQyMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YzQ4MjdkN2YtYmE5Yy00MTJiLThlMmYtYzIwYTE0M2Q3YjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJxTcVyRqtYkt998FpbEMVJuKVUrCVt6QNDh YmYwRy8dfmQsl5bzuLweTZfmjJFe62sMfhsA4nEiehrTaYoTvyav69XlXT4543fF bkuQE9qbutBXqkG1leEjwjB6EKJUqBPixCP3uvQ4wEcJJPGvQe0X9dY46dVjcyvH krx4DeUIJe5qo1AlVrhKygY87SukYafCwIfDWmVxQtnHlLX4E/usD/6DTN8oKvPX Ij5XdImtnrNoATubTk91fF+nGwX9CvZRhZYTyydRCo9BTiwI7El/EjOJ4uFXKxSj 0GIqTKST1vUtdZRzyhtwIMNDCBwGeak+JSGVV8kIxzbvsh5VYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDegdvxcVFkjJu+VTffkYQmAUlvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MDlm ZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJmZGY1YmRmNDIvZmVkMzQ1ZmQtOGQwMy0z ZGVmLTkxM2YtZmU0ZGQ3MTA5NjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIy NjktY2RiZmRmNWJkZjQyLzUwOWZkNjkxLWQxOGUtNDI0NC1iMjY5LWNkYmZkZjVi ZGY0Mi5jcmwwHwYDVR0jBBgwFoAUKgvAII8ic+yaPpVzcRJ1fNUDG8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MDlmZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJm ZGY1YmRmNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNtFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgR16g4AWpFEiZaxrBxdIZkKY2rh3JNxrjEvKe/AAjdofGapCcKi4vH WwXbvZ76P3vYVameskQFCZ7JUMk+/njScP/EwJQLLe07FLnI1WnPHbJIDz0cXf9C nIWdLVII0+qQJTKMdmb9Y1a5sQ0uOLpjtOyj3ddRhVeu6Vvue+eUB7vXKe2RHiOq XETeNfD5xbIpC1RafSBPcJ2nu/mPqN29L7Kyw0QKzEYYBM7dQmXaqkw0wLgmM94+ p6zk1ot3NGtSp5AXXv0rfZYI86DIz2y0ZpbW+EKVSu0OnQ4FbVdYKv75QXHKKF4Z p5APatlSFanHQIhjr7sYSroBNQS7yUA= -----END CERTIFICATE-----Generated at Tue Oct 21 01:37:17 2025 by rpki-client