$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/129d7373-3a90-398c-a761-a7b9f06d6d3d.roa File: 129d7373-3a90-398c-a761-a7b9f06d6d3d.roa (raw, json) Hash identifier: lVCkXdql2ZvJF49hTGFCp+osW42zyeRhdn6gRACA1CQ= Subject key identifier: FD:3F:AC:2B:B1:90:CE:91:FC:EF:40:65:55:3D:3D:63:5A:32:01:71 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584EA7920343822BD14370354420 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/129d7373-3a90-398c-a761-a7b9f06d6d3d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 26658 IP address blocks: 104.232.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:03:43:82:2b:d1:43:70:35:44:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=fa514b9f-4e5d-4b1c-86be-d3a5cf5ecc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:09:6c:da:6f:63:de:2f:7f:44:6c:a0:72:63: 59:06:46:28:fe:69:d2:24:e4:a7:67:82:ad:19:a2: fb:0d:92:21:f4:89:fd:0f:1a:cf:b5:76:23:a7:39: 3c:69:5d:c7:a5:e7:0d:e3:35:09:68:f4:f0:e5:3a: cc:60:a7:2a:c6:f5:bc:d8:27:05:f3:c4:5c:bd:38: a0:cc:cb:d0:d0:2b:5c:1d:6d:5a:60:01:32:f9:1a: 23:ea:f6:d1:31:7d:a1:7d:8a:58:83:9e:34:b7:34: db:1b:f3:9d:f7:78:6a:60:d0:17:95:29:1c:b2:48: c6:84:46:b1:3a:c1:66:14:ff:48:7a:fa:bf:78:30: 14:7b:dc:77:b3:35:46:eb:8a:c3:f6:48:86:5f:3b: 3b:0f:12:28:8d:1d:5f:ac:d1:df:6a:be:02:5f:49: 58:c6:55:0a:33:19:e5:ef:13:37:a8:d9:47:21:7e: 2c:5d:d8:2d:6d:dd:73:c3:a3:7a:c7:79:63:5b:fa: d9:3c:71:a6:f4:7d:17:a4:f5:85:18:5d:6d:fe:b5: 77:99:27:42:61:ca:66:a7:35:49:b2:73:26:3e:b4: 4e:b1:a6:b4:6f:fc:99:bf:33:47:50:91:4e:83:81: e9:7e:3a:e9:44:92:99:ac:f6:9d:ce:e4:52:c5:b4: 30:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3F:AC:2B:B1:90:CE:91:FC:EF:40:65:55:3D:3D:63:5A:32:01:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/129d7373-3a90-398c-a761-a7b9f06d6d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.232.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d0:d1:c2:da:a4:40:c3:fc:ce:7a:eb:31:66:04:9c:6f:a4: 3f:a4:0c:80:c3:83:b0:1b:74:9b:c2:d1:bc:e8:ae:80:e9:30: 53:2d:3f:e4:91:9b:9c:fa:31:5d:53:36:af:a0:b8:33:dd:36: 80:55:7d:aa:ae:56:c7:7f:00:9c:ab:64:97:6b:90:61:95:d7: 43:46:b9:0d:6c:15:9a:2d:14:9b:3e:ee:68:4b:cc:05:da:a1: b2:56:91:85:cf:fa:d5:6e:c9:a1:2b:39:1a:9f:d7:f1:59:2e: 7a:55:fa:9a:73:f1:71:8d:56:47:7b:84:4d:28:a0:48:48:b5: 34:b7:e9:cb:54:e7:42:08:cd:29:ee:84:6c:76:71:b7:8d:9a: 1e:8d:52:ba:ae:a8:c8:62:ad:45:b4:3b:cc:f7:ba:4b:c3:ac: ca:62:c9:14:f0:9a:5c:81:0b:14:5e:23:c4:77:b6:cf:ad:65: b1:2b:d0:6b:72:e5:54:37:13:eb:3b:11:5b:c4:ee:be:9c:68: 77:d6:9a:8a:ef:2b:fb:33:7d:16:61:f0:65:c5:42:e6:80:39: 99:ae:11:a1:60:c7:b8:b4:49:e0:1e:5e:17:d3:d8:15:e7:e2: 6e:ec:ad:5c:85:09:50:b3:2f:fd:f7:33:3d:02:10:b3:c0:69: eb:cc:08:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkgNDgivRQ3A1RCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmE1MTRiOWYtNGU1ZC00YjFjLTg2YmUtZDNhNWNmNWVjYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwls2m9j3i9/RGygcmNZBkYo/mnSJOSnZ4Kt GaL7DZIh9In9DxrPtXYjpzk8aV3HpecN4zUJaPTw5TrMYKcqxvW82CcF88RcvTig zMvQ0CtcHW1aYAEy+Roj6vbRMX2hfYpYg540tzTbG/Od93hqYNAXlSkcskjGhEax OsFmFP9Ievq/eDAUe9x3szVG64rD9kiGXzs7DxIojR1frNHfar4CX0lYxlUKMxnl 7xM3qNlHIX4sXdgtbd1zw6N6x3ljW/rZPHGm9H0XpPWFGF1t/rV3mSdCYcpmpzVJ snMmPrROsaa0b/yZvzNHUJFOg4HpfjrpRJKZrPadzuRSxbQwRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0/rCuxkM6R/O9AZVU9PWNaMgFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMTI5ZDczNzMtM2E5MC0z OThjLWE3NjEtYTdiOWYwNmQ2ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaOhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrQ0cLapEDD/M566zFmBJxvpD+kDIDDg7AbdJvC0bzoroDpMFMtP+SR m5z6MV1TNq+guDPdNoBVfaquVsd/AJyrZJdrkGGV10NGuQ1sFZotFJs+7mhLzAXa obJWkYXP+tVuyaErORqf1/FZLnpV+ppz8XGNVkd7hE0ooEhItTS36ctU50IIzSnu hGx2cbeNmh6NUrquqMhirUW0O8z3ukvDrMpiyRTwmlyBCxReI8R3ts+tZbEr0Gty 5VQ3E+s7EVvE7r6caHfWmorvK/szfRZh8GXFQuaAOZmuEaFgx7i0SeAeXhfT2BXn 4m7srVyFCVCzL/33Mz0CELPAaevMCP8= -----END CERTIFICATE-----Generated at Wed Aug 19 14:29:58 2026 by rpki-client