$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa File: 4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa (raw, json) Hash identifier: Lu3bG9kP956ILGsYvo8/vhUHaCs3lY8VQYQPvnHgzUU= Subject key identifier: 92:C3:F9:82:49:BE:32:2E:56:40:D2:60:3C:F6:67:F6:39:BB:F7:43 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584E3A2F16E1E39B72719B145AE0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 26658 IP address blocks: 172.87.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:16:e1:e3:9b:72:71:9b:14:5a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=410a207b-eaaa-417f-aad0-e5d2d48eda68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:20:7b:01:01:04:f5:29:f1:7b:19:84:d1:68: a1:76:ae:9e:85:5a:be:b8:66:7d:e3:80:b1:93:2d: 5a:82:6b:74:f8:3e:35:86:9a:a5:a7:98:3c:bb:c9: b2:95:e8:49:fc:9b:bc:a3:6f:5f:9b:65:9d:16:ac: 97:48:31:27:1e:6c:fe:e9:3b:0b:55:0f:bb:91:08: 85:e5:28:61:cd:31:11:47:0f:37:33:cf:d0:51:b1: 72:bc:a1:89:70:f0:c5:1d:d7:3f:f1:9a:b4:7c:99: 12:f0:9e:f4:18:3f:bd:5e:3a:f8:a0:da:f3:85:24: 32:bd:13:e1:5e:e5:41:c6:a2:3d:59:86:3f:7d:0d: 64:ed:d2:73:88:78:9b:11:db:ed:c5:ce:c9:70:62: 3d:a8:f8:df:66:37:3b:b6:b3:06:55:4e:ef:d9:7c: d6:0b:f9:41:dc:29:4c:62:f4:b1:39:0c:af:fd:66: 26:f4:f7:28:01:cd:9d:07:a6:4c:c4:99:d5:bb:1e: d2:9d:11:f5:e1:26:37:01:d0:bb:b7:fc:b6:07:59: 36:0f:d6:4b:c5:80:cb:36:9d:65:0e:88:b4:54:e2: a9:67:11:bc:66:de:4a:30:ad:56:90:a0:92:cd:3f: 97:29:5b:69:c6:08:95:cd:7b:8f:b4:f9:60:cf:85: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C3:F9:82:49:BE:32:2E:56:40:D2:60:3C:F6:67:F6:39:BB:F7:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:68:7f:31:3b:7d:fc:0c:00:36:90:50:71:0b:a2:16:85:e4: 4e:21:43:1e:73:82:4b:1b:98:99:24:62:21:89:3f:bb:be:5f: c3:c1:20:99:22:2f:cf:d8:e3:ef:4d:5a:40:f1:bd:de:6d:8e: 17:5b:a8:cd:0f:0a:f1:67:63:75:32:1b:46:bc:78:ec:b0:69: 1b:87:0a:aa:bf:77:01:f2:b6:88:e4:86:99:47:90:00:f8:94: 97:60:96:27:52:1d:b3:d9:d4:c7:e6:ec:a9:e2:35:c9:3c:4c: 73:02:6b:42:78:e7:1b:15:25:ac:3c:b9:19:3b:88:1e:4c:f6: 5b:87:39:3e:21:f4:ad:54:c9:76:22:6e:b3:1c:75:1b:08:30: b1:c0:8b:b4:bc:0b:ee:74:4f:6d:a4:6d:ac:2a:8d:1e:ea:51: 50:b8:03:35:dc:fc:c7:78:c8:8f:6e:bd:5c:fb:fc:88:d4:d5: e7:90:3f:c6:9c:6e:4a:2d:62:2e:f1:d2:48:f0:a1:fb:55:3e: 3d:9a:8b:c5:36:62:bb:bb:0d:e2:a4:5a:72:9c:f1:15:29:7c: c6:05:81:d3:81:71:22:75:19:e0:be:02:4c:9d:67:92:d2:8d: 09:2a:c9:70:60:59:8d:14:cc:cb:c6:af:69:ae:63:64:33:91: 2a:5e:e3:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46Lxbh45tycZsUWuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk NDEwYTIwN2ItZWFhYS00MTdmLWFhZDAtZTVkMmQ0OGVkYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSB7AQEE9SnxexmE0Wihdq6ehVq+uGZ944Cx ky1agmt0+D41hpqlp5g8u8mylehJ/Ju8o29fm2WdFqyXSDEnHmz+6TsLVQ+7kQiF 5ShhzTERRw83M8/QUbFyvKGJcPDFHdc/8Zq0fJkS8J70GD+9Xjr4oNrzhSQyvRPh XuVBxqI9WYY/fQ1k7dJziHibEdvtxc7JcGI9qPjfZjc7trMGVU7v2XzWC/lB3ClM YvSxOQyv/WYm9PcoAc2dB6ZMxJnVux7SnRH14SY3AdC7t/y2B1k2D9ZLxYDLNp1l Doi0VOKpZxG8Zt5KMK1WkKCSzT+XKVtpxgiVzXuPtPlgz4V2BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLD+YJJvjIuVkDSYDz2Z/Y5u/dDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNGRiZWEwZTUtYzJiZi0z ZmNjLWJjNGUtMTg3MGFmN2YyOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFofzE7ffwMADaQUHELohaF5E4hQx5zgksbmJkkYiGJP7u+X8PBIJki L8/Y4+9NWkDxvd5tjhdbqM0PCvFnY3UyG0a8eOywaRuHCqq/dwHytojkhplHkAD4 lJdglidSHbPZ1Mfm7KniNck8THMCa0J45xsVJaw8uRk7iB5M9luHOT4h9K1UyXYi brMcdRsIMLHAi7S8C+50T22kbawqjR7qUVC4AzXc/Md4yI9uvVz7/IjU1eeQP8ac bkotYi7x0kjwoftVPj2ai8U2Yru7DeKkWnKc8RUpfMYFgdOBcSJ1GeC+AkydZ5LS jQkqyXBgWY0UzMvGr2muY2QzkSpe4/0= -----END CERTIFICATE-----Generated at Sat Jun 20 05:10:59 2026 by rpki-client