$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/fed345fd-8d03-3def-913f-fe4dd7109671.roa File: fed345fd-8d03-3def-913f-fe4dd7109671.roa (raw, json) Hash identifier: C3UD3PzllxSmmpcTy1Qu1rVfTkDfWO9ejz3ykFfq3Pc= Subject key identifier: 9E:4B:ED:46:FE:B1:C4:36:B8:3C:04:6B:4B:9F:87:CA:41:7B:11:A7 Certificate issuer: /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Certificate serial: 010D0C9F4328584F49740073CF0B68BEA4EEE400 Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/fed345fd-8d03-3def-913f-fe4dd7109671.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 62533 IP address blocks: 104.219.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:00:73:cf:0b:68:be:a4:ee:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f8b037c0-8bb9-43d4-967c-db5f0ff96be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d7:c6:49:2b:9e:29:81:95:31:29:5a:48:e1: cd:ed:12:c0:d9:c2:7c:35:92:cd:60:4d:00:25:a6: 16:3f:9d:54:2d:d0:6f:31:6d:33:99:66:97:88:fd: 92:d9:e5:d8:d9:2b:e3:5e:d9:24:af:cb:ef:5a:dd: ce:b7:ca:59:2d:04:c2:b5:30:fd:e7:1e:5e:b8:ef: 2f:20:d0:fe:50:db:38:57:6c:a2:ec:48:6c:27:98: f7:5a:45:70:df:52:b6:57:ee:f8:ea:0f:5c:ff:03: 5a:67:9d:eb:bf:e7:fa:56:cc:35:d9:90:ec:a5:4c: f9:65:7c:17:28:d5:a9:3f:d0:40:46:30:36:a9:d9: 1f:be:b7:0f:a6:bc:44:76:44:c8:54:4d:b8:c1:53: 14:9a:54:bd:d7:8f:a7:a7:04:a5:4f:c1:60:18:e4: f7:01:d7:a5:54:e0:0e:75:3f:82:8f:31:95:6b:02: 3c:79:80:35:e8:7b:85:e9:51:82:80:87:4b:c6:b5: 10:4d:84:cc:a2:ad:4c:39:62:43:75:fc:6d:03:b2: 2c:2a:c1:21:e3:ad:c9:8f:61:29:96:fe:2d:2a:72: 4a:18:47:22:36:25:12:e4:ad:ac:36:65:0c:f2:57: fe:09:27:65:97:0b:0b:57:4a:cb:87:d9:7f:73:6d: 24:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4B:ED:46:FE:B1:C4:36:B8:3C:04:6B:4B:9F:87:CA:41:7B:11:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/fed345fd-8d03-3def-913f-fe4dd7109671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl X509v3 Authority Key Identifier: keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer sbgp-ipAddrBlock: critical IPv4: 104.219.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:30:51:c9:2e:23:97:56:e1:35:8a:b5:e7:5f:ad:d2:f7:c2: 48:19:28:c8:1b:0e:04:4d:fc:22:23:9e:25:67:1b:14:3e:06: 8c:32:14:90:fb:2f:1d:ea:65:06:5a:47:0d:28:c2:f7:df:b1: b6:fb:7f:aa:d9:99:ac:3e:12:90:02:94:73:db:63:d9:43:5d: 31:ce:b6:0b:56:f3:b3:91:83:b6:4a:70:5a:f2:db:2d:28:7e: 5e:13:97:a4:aa:5a:ef:9b:8a:ba:c6:af:b8:34:ea:bb:15:7c: f9:e1:93:35:79:6b:cf:13:71:39:a2:e7:f5:fb:9a:a2:71:ee: 38:ca:b6:a6:20:5a:a9:74:17:44:c5:94:dc:b9:95:67:05:d0: 52:98:5f:aa:55:28:19:aa:34:83:29:ac:f1:60:25:73:2e:41: dd:00:1c:af:a7:dd:37:50:35:37:53:59:36:19:d1:b7:ee:57: 7e:57:00:6b:bc:5d:e8:2c:ae:c0:d5:6a:c4:ab:ba:75:f4:20: 47:ac:2a:1c:bd:6a:7b:d6:b6:a7:5c:82:96:65:bd:bf:8f:4c: 85:0b:f1:4c:bc:17:50:4d:53:2f:1e:dc:5d:4e:b1:ff:b1:0a: e1:64:1b:e9:2f:ac:43:6a:c1:18:9e:95:d0:39:92:0a:54:a6: 4c:19:88:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdABzzwtovqTu5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIyNjktY2RiZmRmNWJk ZjQyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjhiMDM3YzAtOGJiOS00M2Q0LTk2N2MtZGI1ZjBmZjk2YmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9fGSSueKYGVMSlaSOHN7RLA2cJ8NZLNYE0A JaYWP51ULdBvMW0zmWaXiP2S2eXY2SvjXtkkr8vvWt3Ot8pZLQTCtTD95x5euO8v IND+UNs4V2yi7EhsJ5j3WkVw31K2V+746g9c/wNaZ53rv+f6Vsw12ZDspUz5ZXwX KNWpP9BARjA2qdkfvrcPprxEdkTIVE24wVMUmlS914+npwSlT8FgGOT3AdelVOAO dT+CjzGVawI8eYA16HuF6VGCgIdLxrUQTYTMoq1MOWJDdfxtA7IsKsEh463Jj2Ep lv4tKnJKGEciNiUS5K2sNmUM8lf+CSdllwsLV0rLh9l/c20k0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5L7Ub+scQ2uDwEa0ufh8pBexGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MDlm ZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJmZGY1YmRmNDIvZmVkMzQ1ZmQtOGQwMy0z ZGVmLTkxM2YtZmU0ZGQ3MTA5NjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIy NjktY2RiZmRmNWJkZjQyLzUwOWZkNjkxLWQxOGUtNDI0NC1iMjY5LWNkYmZkZjVi ZGY0Mi5jcmwwHwYDVR0jBBgwFoAUKgvAII8ic+yaPpVzcRJ1fNUDG8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MDlmZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJm ZGY1YmRmNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNtFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0wUckuI5dW4TWKtedfrdL3wkgZKMgbDgRN/CIjniVnGxQ+BowyFJD7 Lx3qZQZaRw0owvffsbb7f6rZmaw+EpAClHPbY9lDXTHOtgtW87ORg7ZKcFry2y0o fl4Tl6SqWu+birrGr7g06rsVfPnhkzV5a88TcTmi5/X7mqJx7jjKtqYgWql0F0TF lNy5lWcF0FKYX6pVKBmqNIMprPFgJXMuQd0AHK+n3TdQNTdTWTYZ0bfuV35XAGu8 XegsrsDVasSrunX0IEesKhy9anvWtqdcgpZlvb+PTIUL8Uy8F1BNUy8e3F1Osf+x CuFkG+kvrENqwRieldA5kgpUpkwZiGk= -----END CERTIFICATE-----Generated at Sun Oct 4 11:11:15 2026 by rpki-client