$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa File: a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa (raw, json) Hash identifier: wuz2ZPleGt6QGArTf7ctkjTb/DoOKxFP/VZcx5AkzBo= Subject key identifier: 71:84:A0:85:27:CB:5C:C7:7F:26:90:B6:1F:49:70:26:7E:53:5E:B5 Certificate issuer: /CN=900920d7-dc26-412d-b92a-7af35af2cc24 Certificate serial: 010D0C9F4328584F6292D7206197527E25FCC280 Authority key identifier: D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36694 IP address blocks: 104.219.228.0/22 maxlen: 24 2620:11d:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:d7:20:61:97:52:7e:25:fc:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900920d7-dc26-412d-b92a-7af35af2cc24 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=2eceae0e-0dba-446c-b8da-f6826e41d14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:91:07:da:43:b1:1d:78:fb:c4:81:68:c3:7d: f8:7d:6e:07:5a:6a:f6:14:8d:21:a9:43:bd:d4:68: f6:4d:12:65:65:65:3f:f4:3a:8a:e1:56:f2:77:87: 13:64:cf:57:8f:f8:c3:81:9c:e8:02:17:98:79:8e: bc:d6:06:d1:b1:b6:5f:56:cf:63:53:cf:9e:56:f6: 2e:8c:86:4a:05:16:45:12:d0:fd:2c:2b:d3:34:72: 89:9f:03:0a:3c:85:4a:79:d1:20:0f:d3:47:08:47: 24:d8:4d:94:27:5f:96:cc:64:a2:0b:77:b0:9f:a0: eb:be:b3:51:d1:fd:0e:73:91:ec:dc:37:1b:96:1b: 3a:94:21:b5:7f:2c:37:af:07:69:d6:a6:1b:c6:aa: de:e4:5e:8b:4d:47:01:52:e9:43:9b:e3:e6:42:44: 7b:72:00:e8:cc:fc:9c:97:12:86:e3:76:7a:01:43: dc:04:67:21:12:dd:2f:25:97:3e:22:34:1d:09:d4: a4:08:b5:0a:83:a3:f3:dc:bc:45:2a:64:a6:fb:0d: 77:16:be:0b:fa:85:93:d3:04:de:33:bf:3a:21:ca: a2:b2:26:1f:75:1d:1f:68:a0:fb:97:da:57:0b:e9: 4c:06:00:07:3d:a9:28:bd:74:51:a8:36:92:b2:34: 9c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:84:A0:85:27:CB:5C:C7:7F:26:90:B6:1F:49:70:26:7E:53:5E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl X509v3 Authority Key Identifier: keyid:D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer sbgp-ipAddrBlock: critical IPv4: 104.219.228.0/22 IPv6: 2620:11d:1000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:92:1d:47:72:66:eb:f4:cc:e0:39:25:07:84:a5:8e:e1:10: ad:cf:bd:4f:00:d2:53:e9:37:e1:19:30:a7:37:e6:c8:4c:9d: 1e:2f:a0:c2:98:29:ec:3b:e5:b2:40:fa:f9:37:52:85:fb:f9: 45:75:cf:46:37:59:ba:11:a8:7f:f5:a9:5f:42:f9:38:06:e2: 70:f1:12:15:c7:72:8a:ff:ea:b4:7d:ca:7f:e6:53:da:6e:ef: 9b:32:0c:32:66:bc:9f:30:04:d2:f5:04:df:3f:e5:5d:31:ac: 44:7d:9a:c9:b5:eb:53:6a:7f:87:74:0e:0f:fc:72:31:62:e9: 76:2c:ae:dd:29:c7:1c:e3:cb:cb:a3:26:c4:c5:6d:08:8c:13: d0:c4:44:9e:c9:42:67:9f:b0:c8:2e:ba:7e:17:8a:af:d9:37: 0a:f3:4f:19:68:5c:1c:1c:52:86:7b:27:68:02:de:97:26:77: 71:6e:14:95:47:f1:87:f3:11:3f:ef:68:6c:44:55:25:85:ea: 06:18:f3:5f:2a:56:4b:ce:9c:df:34:f1:e2:e7:a5:34:82:8b: 6b:d4:5f:a3:f7:8b:62:89:01:14:cb:0b:6d:8f:00:ed:46:94: 9d:ed:5f:08:82:e1:34:bb:e9:77:6c:da:a5:cc:73:7b:ab:14: 3c:26:b9:6d -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9iktcgYZdSfiX8woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwOTIwZDctZGMyNi00MTJkLWI5MmEtN2FmMzVhZjJj YzI0MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MmVjZWFlMGUtMGRiYS00NDZjLWI4ZGEtZjY4MjZlNDFkMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJEH2kOxHXj7xIFow334fW4HWmr2FI0hqUO9 1Gj2TRJlZWU/9DqK4Vbyd4cTZM9Xj/jDgZzoAheYeY681gbRsbZfVs9jU8+eVvYu jIZKBRZFEtD9LCvTNHKJnwMKPIVKedEgD9NHCEck2E2UJ1+WzGSiC3ewn6DrvrNR 0f0Oc5Hs3Dcblhs6lCG1fyw3rwdp1qYbxqre5F6LTUcBUulDm+PmQkR7cgDozPyc lxKG43Z6AUPcBGchEt0vJZc+IjQdCdSkCLUKg6Pz3LxFKmSm+w13Fr4L+oWT0wTe M786IcqisiYfdR0faKD7l9pXC+lMBgAHPakovXRRqDaSsjScOQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHGEoIUny1zHfyaQth9JcCZ+U161MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5 MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYzNWFmMmNjMjQvYTg2ZGVhNGYtNWY2Zi0z MmFlLThhMjUtZWFkNGE0ZGJhMmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTAwOTIwZDctZGMyNi00MTJkLWI5 MmEtN2FmMzVhZjJjYzI0LzkwMDkyMGQ3LWRjMjYtNDEyZC1iOTJhLTdhZjM1YWYy Y2MyNC5jcmwwHwYDVR0jBBgwFoAU13KmmlqaXjEFGyFRuDvHSIlI0+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYz NWFmMmNjMjQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCaNvkMA8E AgACMAkDBwQmIAEdEAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAm5IdR3Jm6/TM4DklB4SljuEQrc+9TwDS U+k34RkwpzfmyEydHi+gwpgp7DvlskD6+TdShfv5RXXPRjdZuhGof/WpX0L5OAbi cPESFcdyiv/qtH3Kf+ZT2m7vmzIMMma8nzAE0vUE3z/lXTGsRH2aybXrU2p/h3QO D/xyMWLpdiyu3SnHHOPLy6MmxMVtCIwT0MREnslCZ5+wyC66fheKr9k3CvNPGWhc HBxShnsnaALelyZ3cW4UlUfxh/MRP+9obERVJYXqBhjzXypWS86c3zTx4uelNIKL a9Rfo/eLYokBFMsLbY8A7UaUne1fCILhNLvpd2zapcxze6sUPCa5bQ== -----END CERTIFICATE-----Generated at Wed Oct 14 15:09:16 2026 by rpki-client