$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d55b35e9-c386-375b-a25f-baf47ef2f095.roa File: d55b35e9-c386-375b-a25f-baf47ef2f095.roa (raw, json) Hash identifier: WkHqywgOZKMf6njXKw3S/+mHcFtCL1k1jyJuK6uRnSk= Subject key identifier: 1A:08:6F:95:DF:66:52:AF:9A:B9:31:58:C0:D4:D6:A3:DC:E0:F8:B3 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584F4112B891C9365D61A231BEB0 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d55b35e9-c386-375b-a25f-baf47ef2f095.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 26548 IP address blocks: 104.218.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b8:91:c9:36:5d:61:a2:31:be:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=e2d6e8aa-f0e1-4064-887e-f1b7379a1668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c9:2c:cd:13:b4:0a:e9:dd:32:ef:27:08:b5: 1f:f1:d4:c5:f7:86:5c:81:a2:25:09:90:cb:2c:f3: fa:a3:58:07:c8:ec:0a:bc:b0:e8:bc:fa:d3:e9:d1: 59:75:28:76:f9:f4:23:47:69:39:bc:6c:86:dd:6e: 23:2d:9b:74:e9:a4:3e:b6:ce:3a:be:97:9b:e0:b1: 59:a5:15:72:b6:8f:07:e5:e3:2e:d7:7f:9d:37:b1: d6:52:98:f7:e7:2f:cc:70:ad:95:70:43:32:02:20: fd:67:2f:90:80:77:11:68:a7:f2:1d:b6:8e:9c:fd: c5:5e:d9:3c:96:87:a5:86:fb:f6:34:4a:c5:94:b7: 84:9d:c3:86:a0:6c:40:71:61:5a:70:8e:cf:74:66: 68:c1:ac:cb:c4:94:fb:58:51:03:d4:67:ce:a6:72: 34:df:0e:9a:4a:b5:be:3f:5e:6e:e4:b2:18:c3:fe: 14:ea:2a:97:95:86:d2:f4:95:23:8a:f2:88:fc:40: 14:2d:62:b6:5c:40:c4:8d:ff:0b:09:b0:5e:b7:e5: 5b:15:ab:04:cd:96:98:d9:b5:1a:db:7b:89:03:f1: 7a:35:4b:17:0c:59:33:ac:91:23:8b:60:c5:aa:f0: 0d:25:23:59:a4:9c:82:37:b6:3a:a5:29:fe:04:06: b3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:08:6F:95:DF:66:52:AF:9A:B9:31:58:C0:D4:D6:A3:DC:E0:F8:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d55b35e9-c386-375b-a25f-baf47ef2f095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 104.218.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:9c:c7:b2:09:59:9f:e1:6c:18:8f:09:2f:49:ca:e0:c6:55: 54:20:59:04:43:2a:6a:1c:b6:a8:5c:96:7f:5d:fa:11:3e:09: 32:c6:6a:94:bf:53:50:ee:e4:ed:24:1d:24:6f:66:c0:3c:ad: 78:ff:87:eb:23:e0:b7:10:92:b1:15:69:75:09:f7:54:98:62: fb:b4:1f:ac:c7:26:1f:76:07:ff:c5:24:f1:22:3f:42:41:71: 9a:ad:3f:30:1b:32:7a:82:b4:b6:aa:dd:48:c5:cd:12:ab:ba: 07:45:ad:5b:50:09:da:26:53:2f:2a:d6:3c:6a:33:34:e9:8d: 36:c1:52:26:e1:48:34:1b:f2:79:96:60:33:3b:57:d8:8f:ad: 26:e3:28:4a:5e:dc:d8:7a:cc:d1:b1:0b:77:01:8d:28:31:80: 09:48:b5:92:ba:40:42:32:11:17:f8:97:33:0a:ec:30:12:cb: ac:3e:19:98:28:f6:88:2a:97:28:ec:4d:4c:88:bb:a4:00:e7: 59:a0:55:59:e8:b0:04:69:31:03:82:c9:f1:33:72:e4:c8:3f: fd:f5:45:d7:99:0d:59:3f:da:72:2b:31:93:f7:a9:88:c2:84: c9:80:d6:f5:ba:cb:f5:b4:a7:6f:6f:f5:b9:b5:06:bd:d8:7e: ba:09:85:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEriRyTZdYaIxvrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZTJkNmU4YWEtZjBlMS00MDY0LTg4N2UtZjFiNzM3OWExNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtskszRO0CundMu8nCLUf8dTF94ZcgaIlCZDL LPP6o1gHyOwKvLDovPrT6dFZdSh2+fQjR2k5vGyG3W4jLZt06aQ+ts46vpeb4LFZ pRVyto8H5eMu13+dN7HWUpj35y/McK2VcEMyAiD9Zy+QgHcRaKfyHbaOnP3FXtk8 loelhvv2NErFlLeEncOGoGxAcWFacI7PdGZowazLxJT7WFED1GfOpnI03w6aSrW+ P15u5LIYw/4U6iqXlYbS9JUjivKI/EAULWK2XEDEjf8LCbBet+VbFasEzZaY2bUa 23uJA/F6NUsXDFkzrJEji2DFqvANJSNZpJyCN7Y6pSn+BAazKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoIb5XfZlKvmrkxWMDU1qPc4PizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvZDU1YjM1ZTktYzM4Ni0z NzViLWEyNWYtYmFmNDdlZjJmMDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaNpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKacx7IJWZ/hbBiPCS9JyuDGVVQgWQRDKmoctqhcln9d+hE+CTLGapS/ U1Du5O0kHSRvZsA8rXj/h+sj4LcQkrEVaXUJ91SYYvu0H6zHJh92B//FJPEiP0JB cZqtPzAbMnqCtLaq3UjFzRKrugdFrVtQCdomUy8q1jxqMzTpjTbBUibhSDQb8nmW YDM7V9iPrSbjKEpe3Nh6zNGxC3cBjSgxgAlItZK6QEIyERf4lzMK7DASy6w+GZgo 9ogqlyjsTUyIu6QA51mgVVnosARpMQOCyfEzcuTIP/31RdeZDVk/2nIrMZP3qYjC hMmA1vW6y/W0p29v9bm1Br3YfroJhaw= -----END CERTIFICATE-----Generated at Sat Sep 26 01:57:19 2026 by rpki-client