$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa File: bf34a922-0471-34af-bb29-1cebd856cee0.roa (raw, json) Hash identifier: YINIBJsLMVqqMLcismsxjfnfyrnzy9jwBKPGZ2wbDrA= Subject key identifier: D4:1E:00:27:F4:16:54:11:7F:10:D1:F6:E5:54:73:4A:8C:A1:E2:35 Certificate issuer: /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Certificate serial: 010D0C9F4328584D7F9A8A0F0343150463874780 Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 62533 IP address blocks: 104.219.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8a:0f:03:43:15:04:63:87:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=6b448eca-5019-4d78-9433-a2d693444eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c5:f8:3e:ac:fc:1e:f3:88:fa:1f:82:7a:bd: 61:38:3c:fa:6f:65:d7:08:0e:a6:b9:45:24:5a:91: 26:27:69:db:4d:50:0c:40:59:00:01:56:00:f5:8b: fe:89:82:98:0f:be:46:e9:48:d2:44:ca:cc:3d:5c: b8:3e:ab:83:3e:db:b3:03:f5:e8:d9:36:24:4e:2c: 38:98:c3:f2:22:7e:a1:17:5c:ff:ab:19:d0:d5:8d: de:c1:e9:42:3f:19:5d:3e:3c:52:51:74:b7:54:f0: fc:bc:a0:42:ae:c2:e1:0a:71:50:e1:c9:1d:84:6c: cd:cb:d1:1e:5d:97:7e:02:b2:a9:5d:72:5b:67:be: e9:87:1d:b7:12:80:8e:d4:22:45:0c:79:d6:21:8e: e3:95:05:16:ea:53:f6:87:d8:5c:a5:20:b6:d5:83: 67:85:05:32:e8:86:0f:72:ee:f9:5f:e5:aa:3f:4e: 2a:ad:48:15:55:79:4d:15:b8:5a:58:e1:2e:ff:21: 93:ef:52:87:8b:76:92:57:3a:5b:05:1e:1e:30:d0: d5:99:7e:b0:0e:f8:73:b7:f3:6d:b5:8d:89:9a:48: fa:5a:23:1c:43:ab:51:25:a8:39:c9:41:f4:cb:4b: a6:27:99:a3:ee:64:01:d9:4b:79:b7:b6:51:76:8c: f2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1E:00:27:F4:16:54:11:7F:10:D1:F6:E5:54:73:4A:8C:A1:E2:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl X509v3 Authority Key Identifier: keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer sbgp-ipAddrBlock: critical IPv4: 104.219.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:9b:c2:e4:b9:7e:a8:9a:08:b3:22:6e:e6:f7:d1:5e:48:aa: e6:fd:16:bc:66:f9:63:5f:e7:31:2c:01:bc:e0:61:68:96:56: 01:8f:d8:a5:68:db:f6:81:3e:d7:06:d8:a3:dd:50:20:46:b7: 9d:dd:de:2d:cc:30:9e:8e:30:96:ed:03:33:43:21:48:dd:23: 21:c5:f2:83:fb:46:8e:a3:33:6d:b3:7d:4b:79:da:00:62:18: ba:ff:33:ad:95:48:e2:f8:7a:ab:97:af:f3:a2:b7:6f:cb:08: 5d:33:b9:3e:89:1d:72:04:9f:de:c2:4c:f0:5d:0c:43:00:0f: e2:96:c0:db:37:d3:cc:e6:83:46:5f:52:f3:33:83:78:80:6e: c8:48:21:10:a1:dd:f3:e7:89:d4:78:24:14:8c:2d:a0:64:b3: 39:e1:dc:04:ba:b6:a4:99:2f:b5:ff:6c:72:3c:3e:52:0c:e2: 2e:f7:74:fa:7c:fd:b0:af:cc:dd:c2:c7:fd:66:b5:6c:57:36: f1:1c:ce:ea:9e:39:7e:a8:b6:ce:8f:94:0c:d7:4b:ed:9d:bd: 02:94:9b:aa:64:7b:f9:6e:e3:0b:1f:3d:0c:d8:46:56:76:eb: ef:78:a6:d0:e4:fa:02:91:48:e4:38:87:47:01:9a:b4:b5:43: 40:39:d5:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mooPA0MVBGOHR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIyNjktY2RiZmRmNWJk ZjQyMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NmI0NDhlY2EtNTAxOS00ZDc4LTk0MzMtYTJkNjkzNDQ0ZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisX4Pqz8HvOI+h+Cer1hODz6b2XXCA6muUUk WpEmJ2nbTVAMQFkAAVYA9Yv+iYKYD75G6UjSRMrMPVy4PquDPtuzA/Xo2TYkTiw4 mMPyIn6hF1z/qxnQ1Y3ewelCPxldPjxSUXS3VPD8vKBCrsLhCnFQ4ckdhGzNy9Ee XZd+ArKpXXJbZ77phx23EoCO1CJFDHnWIY7jlQUW6lP2h9hcpSC21YNnhQUy6IYP cu75X+WqP04qrUgVVXlNFbhaWOEu/yGT71KHi3aSVzpbBR4eMNDVmX6wDvhzt/Nt tY2Jmkj6WiMcQ6tRJag5yUH0y0umJ5mj7mQB2Ut5t7ZRdozyTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQeACf0FlQRfxDR9uVUc0qMoeI1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MDlm ZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJmZGY1YmRmNDIvYmYzNGE5MjItMDQ3MS0z NGFmLWJiMjktMWNlYmQ4NTZjZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIy NjktY2RiZmRmNWJkZjQyLzUwOWZkNjkxLWQxOGUtNDI0NC1iMjY5LWNkYmZkZjVi ZGY0Mi5jcmwwHwYDVR0jBBgwFoAUKgvAII8ic+yaPpVzcRJ1fNUDG8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MDlmZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJm ZGY1YmRmNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNtEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALObwuS5fqiaCLMibub30V5Iqub9Frxm+WNf5zEsAbzgYWiWVgGP2KVo 2/aBPtcG2KPdUCBGt53d3i3MMJ6OMJbtAzNDIUjdIyHF8oP7Ro6jM22zfUt52gBi GLr/M62VSOL4equXr/Oit2/LCF0zuT6JHXIEn97CTPBdDEMAD+KWwNs308zmg0Zf UvMzg3iAbshIIRCh3fPnidR4JBSMLaBksznh3AS6tqSZL7X/bHI8PlIM4i73dPp8 /bCvzN3Cx/1mtWxXNvEczuqeOX6ots6PlAzXS+2dvQKUm6pke/lu4wsfPQzYRlZ2 6+94ptDk+gKRSOQ4h0cBmrS1Q0A51cc= -----END CERTIFICATE-----Generated at Fri Apr 17 16:24:14 2026 by rpki-client