$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/679eb7d4-fd32-3e12-9084-f9ef42f4c140.roa File: 679eb7d4-fd32-3e12-9084-f9ef42f4c140.roa (raw, json) Hash identifier: sR3Z7H/NcRkcgyUjFbQOf2x44YGWKppSq/uqQ8eonXM= Subject key identifier: 69:DF:5B:A3:FA:86:B3:B2:40:E3:9E:7F:9E:49:28:EF:D9:1D:B2:6A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497CCE139CD359DC2EE550C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/679eb7d4-fd32-3e12-9084-f9ef42f4c140.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 104.196.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:ce:13:9c:d3:59:dc:2e:e5:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3e96114d-4509-46aa-8897-f3ca32a7dd78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:a9:77:00:63:9c:59:73:43:80:7d:ec:0b: b1:d6:b4:e6:c9:02:2d:8c:ac:61:5a:5e:5e:18:cf: 13:50:b5:f7:b5:b7:00:44:b4:b5:c4:3c:12:80:16: 21:a7:87:89:2f:29:e4:a5:6b:94:ab:9d:65:1d:41: df:27:0e:2d:ce:57:89:a1:56:1c:9d:b3:35:0a:a5: 58:b7:a2:4c:0b:96:60:bf:4e:8f:e5:09:a1:d1:89: 97:70:3c:38:c5:1f:23:ca:43:c0:0c:82:0a:16:70: 9b:41:62:42:d3:4a:91:c7:a6:ed:a2:82:ae:be:b3: f5:6a:11:c6:60:81:16:74:5e:58:2f:2b:37:ee:8b: 62:64:e3:a9:f2:90:cc:5a:7d:a7:e8:b2:79:fa:f9: db:0b:f3:11:02:47:15:cd:6c:7f:d0:f8:90:1a:66: ac:ad:cc:a2:8f:67:bc:62:ce:f2:0c:b6:ee:db:9c: cc:8d:66:11:15:2a:90:fc:f2:3b:cf:12:c6:51:49: 4a:95:df:b5:e2:d3:20:48:aa:68:18:7f:c0:09:0c: 6b:55:98:e5:f0:56:e7:f2:7e:1d:7f:eb:65:b0:d3: 1c:c4:31:9a:37:3d:53:79:95:fa:27:e3:43:32:53: 15:30:a8:e1:85:31:10:31:3f:ee:65:44:b3:16:d4: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DF:5B:A3:FA:86:B3:B2:40:E3:9E:7F:9E:49:28:EF:D9:1D:B2:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/679eb7d4-fd32-3e12-9084-f9ef42f4c140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f9:28:7a:05:a1:b9:7b:c6:14:83:53:45:16:8e:74:c9:8b: c1:f0:09:a9:89:41:76:83:7d:1d:8e:47:46:e4:f7:d3:ae:d0: b9:73:0e:6b:5d:fc:0c:d4:cf:ee:ac:b5:df:39:87:80:54:f7: 2d:bd:69:e7:3d:a0:be:44:4d:8e:bb:80:af:44:02:19:b2:ca: 7a:3a:97:b4:73:f8:4b:ee:b3:cc:cf:d3:e8:dc:28:a7:c6:42: 5d:7d:3c:5e:43:b4:98:8c:15:15:0f:72:48:9c:a0:f7:63:06: 7f:37:90:b3:3c:d3:11:64:7d:30:24:a0:3f:b4:f8:82:59:5d: 14:5e:90:e3:c1:ed:96:cf:d6:d7:ab:db:92:a8:76:b2:fc:b4: 62:5c:80:29:23:d5:a7:80:c6:72:ad:a2:ef:e0:21:d5:6d:19: d4:b9:40:6e:25:14:15:e4:52:1f:2e:ed:85:0b:be:ae:4a:a3: f3:01:39:a5:a3:c3:de:37:05:91:8e:cc:43:e5:80:54:a8:1f: 97:3f:d9:9b:7a:22:58:db:a4:4c:ec:2a:fa:cf:46:f7:75:73: 88:15:63:90:68:d8:c8:26:67:58:a8:02:81:42:b3:70:1a:d9: 29:3f:ed:33:8e:0c:8a:ae:11:b3:83:b5:43:84:47:67:2d:97: 89:0e:ad:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfM4TnNNZ3C7lUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2U5NjExNGQtNDUwOS00NmFhLTg4OTctZjNjYTMyYTdkZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugOpdwBjnFlzQ4B97Aux1rTmyQItjKxhWl5e GM8TULX3tbcARLS1xDwSgBYhp4eJLynkpWuUq51lHUHfJw4tzleJoVYcnbM1CqVY t6JMC5Zgv06P5Qmh0YmXcDw4xR8jykPADIIKFnCbQWJC00qRx6btooKuvrP1ahHG YIEWdF5YLys37otiZOOp8pDMWn2n6LJ5+vnbC/MRAkcVzWx/0PiQGmasrcyij2e8 Ys7yDLbu25zMjWYRFSqQ/PI7zxLGUUlKld+14tMgSKpoGH/ACQxrVZjl8Fbn8n4d f+tlsNMcxDGaNz1TeZX6J+NDMlMVMKjhhTEQMT/uZUSzFtTFiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnfW6P6hrOyQOOef55JKO/ZHbJqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjc5ZWI3ZDQtZmQzMi0z ZTEyLTkwODQtZjllZjQyZjRjMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT5KHoFobl7xhSDU0UWjnTJi8HwCamJQXaDfR2OR0bk99Ou0LlzDmtd /AzUz+6std85h4BU9y29aec9oL5ETY67gK9EAhmyyno6l7Rz+Evus8zP0+jcKKfG Ql19PF5DtJiMFRUPckicoPdjBn83kLM80xFkfTAkoD+0+IJZXRRekOPB7ZbP1ter 25KodrL8tGJcgCkj1aeAxnKtou/gIdVtGdS5QG4lFBXkUh8u7YULvq5Ko/MBOaWj w943BZGOzEPlgFSoH5c/2Zt6IljbpEzsKvrPRvd1c4gVY5Bo2MgmZ1ioAoFCs3Aa 2Sk/7TOODIquEbODtUOER2ctl4kOrVw= -----END CERTIFICATE-----Generated at Mon Sep 28 10:35:41 2026 by rpki-client