$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2e5e5f22-1769-3091-9940-b1c8c063a660.roa File: 2e5e5f22-1769-3091-9940-b1c8c063a660.roa (raw, json) Hash identifier: 6+N3Uc6bZ1lpa4vUGTMY4XvGdeyW14OZe2W+GuNuS0s= Subject key identifier: 8F:3B:BC:94:19:5D:CF:CA:96:29:4C:E4:24:40:FA:A6:DB:A5:1C:BB Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584D8EF9862C3B0C44ADE3C93C80 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2e5e5f22-1769-3091-9940-b1c8c063a660.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 36352 IP address blocks: 104.143.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:86:2c:3b:0c:44:ad:e3:c9:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=f2573297-dfc4-47ef-87e5-25d0eda7ad47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ab:35:e2:e7:f1:dc:c5:48:c9:21:26:98:5d: 6f:86:8e:1a:5a:e5:b8:09:b4:4d:87:7d:bb:8e:5a: 12:8a:a9:c9:dd:05:50:55:9f:1a:58:f0:38:dd:8f: 07:6f:7f:71:5a:fb:d5:8b:76:25:18:58:93:a4:0e: 6e:02:b1:75:32:a9:ea:4b:bf:71:fb:d5:26:fb:82: f3:85:a1:d8:4a:19:b2:f9:18:07:7d:43:40:c4:69: 6c:21:50:e6:3f:ee:7a:11:34:28:6a:fc:99:d0:d9: 55:90:58:df:b5:86:2e:3e:1b:fd:70:37:d0:1e:d9: 71:85:b9:88:ee:99:79:63:e1:73:0c:99:4f:eb:8a: dd:6c:12:77:e5:59:9a:df:8f:55:44:48:16:c9:ae: 57:49:90:a4:7f:8c:61:ea:14:3e:d7:01:a4:23:1b: e3:79:6c:67:31:52:85:52:6a:34:61:eb:62:3e:00: 84:c7:c8:b0:d5:7b:9b:7d:7b:76:7b:9a:cf:72:1d: c9:c3:09:b2:87:7d:7a:6c:a2:fb:ad:b5:2a:c6:e1: 39:29:e5:34:bb:18:5b:f4:92:9a:24:c1:ce:82:2b: a6:8f:9e:d3:65:12:2b:fb:73:16:19:e1:6a:c5:d8: a8:eb:d1:e6:3f:1b:e0:a6:cf:81:b4:8e:81:1a:18: 43:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3B:BC:94:19:5D:CF:CA:96:29:4C:E4:24:40:FA:A6:DB:A5:1C:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2e5e5f22-1769-3091-9940-b1c8c063a660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:4e:d0:c6:41:5a:57:99:ac:fb:a5:13:e1:e8:04:f5:32:87: d8:b3:3c:1b:87:f3:e9:ee:b3:dc:89:e4:eb:8d:c0:78:d5:39: af:9e:94:46:e3:6c:8f:16:a8:91:d0:46:36:d4:81:9a:23:1b: 9b:5c:09:22:34:7e:ab:ab:49:3a:2a:01:d6:4c:f6:1d:b2:3c: ac:54:14:1d:19:b1:a6:59:ab:db:c4:b2:d0:62:dc:12:93:97: 45:1b:f6:85:aa:76:90:3c:68:00:cd:6c:8c:f5:2d:e8:3d:3a: fa:b3:4e:29:5a:e2:14:b4:41:89:98:2e:3c:5f:eb:f7:91:5f: 9b:ac:b5:73:de:83:58:82:1e:3f:f7:1b:49:65:44:3f:cb:ab: 44:77:92:c3:2b:29:97:0c:18:af:b0:e3:f9:35:3f:bb:29:63: 5c:af:f9:2d:13:fb:27:f7:0d:ab:b0:8d:53:0b:1f:0a:d5:af: 27:f8:ef:5c:90:a4:95:51:d0:8f:30:f4:2f:e0:47:71:23:99: 9d:f2:01:b9:12:00:ab:0d:da:ba:c4:29:89:f4:fa:03:cd:75: 42:e4:f9:8b:d4:18:c4:f3:fc:29:67:c6:05:89:11:4d:03:94: 56:92:49:e6:29:e7:e3:19:c3:52:2c:f0:be:c8:5f:f5:8c:f8: db:fa:67:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+YYsOwxErePJPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZjI1NzMyOTctZGZjNC00N2VmLTg3ZTUtMjVkMGVkYTdhZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqs14ufx3MVIySEmmF1vho4aWuW4CbRNh327 jloSiqnJ3QVQVZ8aWPA43Y8Hb39xWvvVi3YlGFiTpA5uArF1MqnqS79x+9Um+4Lz haHYShmy+RgHfUNAxGlsIVDmP+56ETQoavyZ0NlVkFjftYYuPhv9cDfQHtlxhbmI 7pl5Y+FzDJlP64rdbBJ35Vma349VREgWya5XSZCkf4xh6hQ+1wGkIxvjeWxnMVKF Umo0YetiPgCEx8iw1XubfXt2e5rPch3Jwwmyh316bKL7rbUqxuE5KeU0uxhb9JKa JMHOgiumj57TZRIr+3MWGeFqxdio69HmPxvgps+BtI6BGhhDewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI87vJQZXc/KlilM5CRA+qbbpRy7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMmU1ZTVmMjItMTc2OS0z MDkxLTk5NDAtYjFjOGMwNjNhNjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdO0MZBWleZrPulE+HoBPUyh9izPBuH8+nus9yJ5OuNwHjVOa+elEbj bI8WqJHQRjbUgZojG5tcCSI0fqurSToqAdZM9h2yPKxUFB0ZsaZZq9vEstBi3BKT l0Ub9oWqdpA8aADNbIz1Leg9OvqzTila4hS0QYmYLjxf6/eRX5ustXPeg1iCHj/3 G0llRD/Lq0R3ksMrKZcMGK+w4/k1P7spY1yv+S0T+yf3DauwjVMLHwrVryf471yQ pJVR0I8w9C/gR3EjmZ3yAbkSAKsN2rrEKYn0+gPNdULk+YvUGMTz/ClnxgWJEU0D lFaSSeYp5+MZw1Is8L7IX/WM+Nv6Z4w= -----END CERTIFICATE-----Generated at Tue May 5 19:09:03 2026 by rpki-client