$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa File: 2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa (raw, json) Hash identifier: LDOGi+AUWXUcHW/vn9oSmKZbBi8MtiUTBSMFXWbGn9Y= Subject key identifier: 10:F9:39:23:10:22:E6:C4:50:98:09:19:F4:92:91:EE:C8:9A:ED:15 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584D8EF54F0F226B99D3437A5140 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 36352 IP address blocks: 104.143.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:4f:0f:22:6b:99:d3:43:7a:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=e166a854-80e4-43cd-b32e-1afafc3331ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:45:18:07:d7:e1:01:b4:91:98:3d:fc:96: 57:4a:f9:ef:13:5c:fe:59:d9:9f:03:7c:ad:09:6a: d3:37:e8:54:7a:48:b5:92:87:0b:32:fb:d5:4e:6d: 9b:f1:f9:df:d8:ee:36:a3:72:e9:d8:aa:eb:2a:aa: cc:ca:fe:ac:86:db:35:f8:84:28:cd:21:53:4e:52: a9:1f:9b:66:f9:77:7e:af:37:76:de:6a:a5:b3:b4: 55:ac:99:64:03:15:a5:a7:bd:ca:b4:bf:31:16:00: e8:47:43:1c:91:2a:c7:cb:2b:03:9b:79:6f:ab:3c: 32:36:cc:67:95:35:c7:5f:5c:7d:09:a5:1e:7d:70: 9f:74:11:54:35:29:84:e3:cb:29:2e:0d:6d:72:6f: d9:5c:33:4d:76:b4:cb:f9:1c:80:12:0f:df:72:c3: 60:8c:30:8f:f5:96:75:30:0a:8c:6d:c4:e7:35:a5: c9:06:f5:9d:f5:76:24:89:d4:96:c1:e4:bb:3f:4c: 45:76:08:7b:1f:74:59:48:08:ca:e9:45:7f:ab:22: 32:51:fc:1f:39:93:d3:b9:38:8e:76:51:f6:b3:79: 72:4c:67:e6:b0:88:47:53:5b:7b:7a:bb:f8:df:d0: 06:f3:2c:d6:36:66:0a:40:26:fd:3a:b1:96:94:4d: de:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F9:39:23:10:22:E6:C4:50:98:09:19:F4:92:91:EE:C8:9A:ED:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:46:08:69:a9:34:04:a8:04:b4:e1:1a:f6:8d:d5:23:98:29: 0e:e9:f2:27:a5:3d:c0:1e:f9:98:1e:a6:3d:a1:63:cb:ec:5c: 67:b8:03:fe:b1:70:b4:cb:61:b8:f1:2d:fa:7a:b2:8c:a3:78: 12:70:6d:e3:cd:82:af:cd:b0:40:64:a7:77:be:34:dd:50:08: c0:3d:4f:b8:00:ed:82:37:6f:60:03:b2:83:2f:13:13:a2:c0: ac:85:03:51:c3:19:16:8f:cf:c5:11:16:9c:76:4f:c1:6a:a2: ca:1b:bd:c4:36:ab:f4:b1:66:2f:e1:df:e4:84:32:30:8a:e4: 93:49:15:92:7c:33:0f:0f:07:57:29:08:10:d1:f7:cd:52:85: d3:12:20:c1:a5:88:84:c9:13:ec:fa:eb:80:92:f3:0f:72:83: 85:3b:12:6e:31:8e:ac:c7:8e:42:ec:43:24:32:ed:28:df:e9: 4f:a5:cb:67:35:9b:75:07:3c:bd:07:01:67:92:16:61:4a:a7: 0a:8b:d8:29:3a:b5:4a:53:38:85:59:79:74:cd:32:f7:32:84: e7:83:29:11:58:65:49:87:c3:ae:b3:a5:57:7d:85:74:12:c4: e2:b6:6e:c8:c5:f4:99:4b:42:8c:d3:1b:cf:31:ff:d0:8f:32: 44:5d:3d:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9U8PImuZ00N6UUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZTE2NmE4NTQtODBlNC00M2NkLWIzMmUtMWFmYWZjMzMzMWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0dFGAfX4QG0kZg9/JZXSvnvE1z+WdmfA3yt CWrTN+hUeki1kocLMvvVTm2b8fnf2O42o3Lp2KrrKqrMyv6shts1+IQozSFTTlKp H5tm+Xd+rzd23mqls7RVrJlkAxWlp73KtL8xFgDoR0MckSrHyysDm3lvqzwyNsxn lTXHX1x9CaUefXCfdBFUNSmE48spLg1tcm/ZXDNNdrTL+RyAEg/fcsNgjDCP9ZZ1 MAqMbcTnNaXJBvWd9XYkidSWweS7P0xFdgh7H3RZSAjK6UV/qyIyUfwfOZPTuTiO dlH2s3lyTGfmsIhHU1t7erv439AG8yzWNmYKQCb9OrGWlE3e0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBD5OSMQIubEUJgJGfSSke7Imu0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMmIxZGQ2NjUtMTk2OC0z YTE0LWIxMWUtNzlhOTFhMzRmY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9GCGmpNASoBLThGvaN1SOYKQ7p8ielPcAe+Zgepj2hY8vsXGe4A/6x cLTLYbjxLfp6soyjeBJwbePNgq/NsEBkp3e+NN1QCMA9T7gA7YI3b2ADsoMvExOi wKyFA1HDGRaPz8URFpx2T8FqosobvcQ2q/SxZi/h3+SEMjCK5JNJFZJ8Mw8PB1cp CBDR981ShdMSIMGliITJE+z664CS8w9yg4U7Em4xjqzHjkLsQyQy7Sjf6U+ly2c1 m3UHPL0HAWeSFmFKpwqL2Ck6tUpTOIVZeXTNMvcyhOeDKRFYZUmHw66zpVd9hXQS xOK2bsjF9JlLQozTG88x/9CPMkRdPXE= -----END CERTIFICATE-----Generated at Tue May 5 19:08:43 2026 by rpki-client