$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/7454f8ef-50a0-3be6-ad8a-80f181155e30.roa File: 7454f8ef-50a0-3be6-ad8a-80f181155e30.roa (raw, json) Hash identifier: I6XxyNZLRBDLNdaIImxabxk2WkMzeU4IfEraPQGMDH0= Subject key identifier: D5:0D:31:BD:EA:FE:72:2E:1A:97:4B:11:96:DF:B7:83:74:C7:45:A0 Certificate issuer: /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Certificate serial: 010D0C9F4328584D7F9A8A1BFCB0F9EFDA572430 Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/7454f8ef-50a0-3be6-ad8a-80f181155e30.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 62533 IP address blocks: 104.219.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8a:1b:fc:b0:f9:ef:da:57:24:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=5fd1e8d7-55f3-4a98-a522-b6bf7ab5781d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4b:90:f3:c4:8b:20:33:a4:0d:24:44:73:26: f3:8b:39:69:81:d8:58:af:8e:78:43:18:a9:92:c8: a4:98:a3:6d:5a:d2:d3:0d:24:31:c4:a1:cc:fb:8a: ca:34:77:3a:42:35:90:ce:ad:e1:e6:12:35:4b:6d: 9e:58:a3:db:a1:a1:86:bf:7f:83:75:7b:a9:b3:c3: c4:bb:ee:a7:97:8c:24:78:3c:73:d4:e6:ef:2a:a7: 93:8e:30:f9:f1:af:03:05:f5:73:e4:89:6e:83:2a: 92:f3:7a:73:05:e1:10:22:bb:40:de:10:98:b0:3b: 55:d8:18:b8:9a:83:ea:58:72:ae:43:bc:8a:98:a6: e7:3b:6d:d0:50:62:56:39:81:04:b2:57:d6:fb:7f: 14:50:e9:f2:6a:16:6f:2f:73:f2:25:65:55:01:ec: df:3f:ec:b0:55:bb:a9:a4:51:73:04:a6:34:18:39: e8:2e:ae:4b:01:8c:54:9b:29:46:c3:88:ea:61:e9: 1d:63:bb:40:85:69:4b:a8:c3:1f:29:8b:07:8d:a6: a9:d4:04:c8:ef:f0:c7:2b:39:f4:2a:54:82:ba:14: ec:26:00:43:52:89:b5:62:bf:a4:6b:0b:7e:3a:e4: 50:53:47:34:3e:6e:58:06:60:a5:d8:0c:45:47:bf: f2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0D:31:BD:EA:FE:72:2E:1A:97:4B:11:96:DF:B7:83:74:C7:45:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/7454f8ef-50a0-3be6-ad8a-80f181155e30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl X509v3 Authority Key Identifier: keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer sbgp-ipAddrBlock: critical IPv4: 104.219.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:6f:d0:9c:6e:21:65:7e:d0:44:3d:86:0c:50:d7:37:54:19: 0c:ef:ad:46:1d:82:e6:78:7e:c9:ec:f6:4d:a3:e0:65:51:ed: 3e:b6:02:f2:3e:f9:89:1d:d9:76:81:00:27:34:cd:76:fa:1e: 8c:e0:01:86:06:4f:d1:82:4b:7c:b0:66:b4:30:f6:53:e8:e2: 16:23:36:df:a4:ae:19:35:de:b6:ae:dd:55:af:0c:f4:fe:41: ee:38:e7:6d:df:d8:f2:99:de:f0:0f:20:57:c0:60:f4:62:a1: 53:b4:f1:5a:c6:ec:79:22:19:02:0f:e0:28:26:66:9d:bb:5d: bf:eb:22:a6:3b:51:ef:a9:71:0a:e0:80:70:1b:da:f8:50:55: 59:a0:84:da:94:75:f2:5f:58:9d:e3:0d:b1:cd:00:3d:5e:24: 1f:5e:5a:03:68:89:36:7e:60:56:e9:b7:61:44:36:df:e2:c2: f4:70:1d:c1:0c:73:e9:e3:4e:99:a7:a4:50:29:45:70:2c:2b: 8b:fe:82:8a:dc:96:4c:11:c9:e0:1e:7a:1d:b3:a5:5b:a9:c7: 4a:18:c2:6f:74:4d:78:76:33:cb:c6:24:a8:10:6d:2a:0c:87: cd:dd:33:47:ee:7f:9c:9d:61:49:04:a5:39:02:22:bb:f2:55: aa:f0:7a:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moob/LD579pXJDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIyNjktY2RiZmRmNWJk ZjQyMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NWZkMWU4ZDctNTVmMy00YTk4LWE1MjItYjZiZjdhYjU3ODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEuQ88SLIDOkDSREcybzizlpgdhYr454Qxip ksikmKNtWtLTDSQxxKHM+4rKNHc6QjWQzq3h5hI1S22eWKPboaGGv3+DdXups8PE u+6nl4wkeDxz1ObvKqeTjjD58a8DBfVz5IlugyqS83pzBeEQIrtA3hCYsDtV2Bi4 moPqWHKuQ7yKmKbnO23QUGJWOYEEslfW+38UUOnyahZvL3PyJWVVAezfP+ywVbup pFFzBKY0GDnoLq5LAYxUmylGw4jqYekdY7tAhWlLqMMfKYsHjaap1ATI7/DHKzn0 KlSCuhTsJgBDUom1Yr+kawt+OuRQU0c0Pm5YBmCl2AxFR7/yzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUNMb3q/nIuGpdLEZbft4N0x0WgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MDlm ZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJmZGY1YmRmNDIvNzQ1NGY4ZWYtNTBhMC0z YmU2LWFkOGEtODBmMTgxMTU1ZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIy NjktY2RiZmRmNWJkZjQyLzUwOWZkNjkxLWQxOGUtNDI0NC1iMjY5LWNkYmZkZjVi ZGY0Mi5jcmwwHwYDVR0jBBgwFoAUKgvAII8ic+yaPpVzcRJ1fNUDG8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MDlmZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJm ZGY1YmRmNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNtGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJv0JxuIWV+0EQ9hgxQ1zdUGQzvrUYdguZ4fsns9k2j4GVR7T62AvI+ +Ykd2XaBACc0zXb6HozgAYYGT9GCS3ywZrQw9lPo4hYjNt+krhk13rau3VWvDPT+ Qe44523f2PKZ3vAPIFfAYPRioVO08VrG7HkiGQIP4CgmZp27Xb/rIqY7Ue+pcQrg gHAb2vhQVVmghNqUdfJfWJ3jDbHNAD1eJB9eWgNoiTZ+YFbpt2FENt/iwvRwHcEM c+njTpmnpFApRXAsK4v+gorclkwRyeAeeh2zpVupx0oYwm90TXh2M8vGJKgQbSoM h83dM0fuf5ydYUkEpTkCIrvyVarwem0= -----END CERTIFICATE-----Generated at Fri Apr 17 22:24:30 2026 by rpki-client