$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/699655ff-aa2d-39e7-955c-544e3645c5e8.roa File: 699655ff-aa2d-39e7-955c-544e3645c5e8.roa (raw, json) Hash identifier: jTf1BslOku2ybyVNDM29GefTwdE6DG1tf4Nle63OvGk= Subject key identifier: EF:F5:51:1E:68:E7:88:24:89:96:82:75:1C:22:1B:CE:4A:A5:FB:81 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584D8EF984FB068C72EEFF236E80 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/699655ff-aa2d-39e7-955c-544e3645c5e8.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 36352 IP address blocks: 104.143.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:84:fb:06:8c:72:ee:ff:23:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=d28077e2-d0d3-4147-9f9c-19789c137bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:59:ce:32:6e:25:70:af:e0:68:8f:18:70:f0: 5e:ed:b0:b2:54:79:2a:ff:a4:61:23:15:e0:c7:21: d5:ac:29:3d:2a:0b:f8:24:dd:a4:62:53:c4:60:f2: 9a:cf:25:81:72:9c:ed:e3:da:05:f1:94:3b:3b:82: 3a:8f:0a:9f:56:2b:b8:cd:35:84:06:43:f9:70:9d: 8e:34:ac:3e:a4:7e:f9:e4:c9:96:67:77:dc:84:fb: 0a:20:2a:6d:a3:f8:37:9c:14:a0:23:10:f5:e9:9a: 87:1a:bc:3c:be:49:6f:8d:16:96:ca:d0:8b:88:b4: 4d:ce:f4:58:65:4c:bf:cc:b7:9b:6d:a3:96:a8:70: d8:10:b7:4d:f2:fa:68:18:b5:f7:d5:e9:bd:ca:23: 58:c1:67:b9:63:26:cb:0a:c8:20:fd:4e:49:e1:8e: 5f:1d:d8:6b:12:ce:91:b8:57:25:15:b4:91:c4:77: 43:41:92:42:a1:70:82:0d:b6:12:7f:a3:fb:90:20: b2:56:12:06:af:02:f9:38:d7:a9:e1:c9:dc:4e:d2: 18:0c:ae:07:66:0c:75:ef:4a:d6:c6:a7:95:26:fb: e4:31:54:47:d7:c0:a0:f2:a9:be:ee:65:a6:be:0d: 0d:63:74:2a:e9:31:2d:ac:bf:93:49:fb:09:1e:bd: 2d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F5:51:1E:68:E7:88:24:89:96:82:75:1C:22:1B:CE:4A:A5:FB:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/699655ff-aa2d-39e7-955c-544e3645c5e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7f:27:92:5c:ad:49:6e:2a:f8:6f:b6:dc:c7:08:98:56:8a: c8:bd:8d:d8:88:55:79:68:fa:f1:4d:d4:c6:1e:68:a6:ab:3c: 2a:20:5b:5a:11:fe:da:b3:53:2c:14:f2:c1:b3:ec:3b:fd:d4: 24:b5:02:03:2a:eb:25:bc:21:86:7f:e9:56:a7:33:50:27:68: 43:7a:c7:14:4a:41:f4:7f:84:99:7a:21:29:bb:c0:c6:71:c6: 09:ed:2c:b0:08:8b:4b:1f:cc:7b:3b:bc:00:07:06:09:65:b4: f1:b0:87:d7:97:3b:d7:e3:0a:4c:f4:e5:d5:9b:3a:5b:c8:75: 2c:94:48:9a:48:35:ae:d0:61:a2:1b:0b:77:7a:6e:29:fb:67: 93:4b:cb:41:5c:fe:2b:5e:ea:02:79:09:ab:38:dd:cd:0e:d4: e7:4f:af:eb:c8:cc:22:d3:fe:65:8d:f9:ef:ea:25:8b:e6:a9: 64:32:e5:29:53:94:e7:b7:d3:da:47:08:42:ab:0f:48:78:91: 5f:d0:ca:74:1e:c7:32:8b:e3:ec:3f:e2:10:26:fa:f0:d7:00: 82:69:7f:51:f4:8e:b5:4e:e4:60:12:a3:19:90:e7:0c:1e:1a: 52:67:d1:22:ef:9e:c3:b6:55:3a:1e:49:f2:5e:7e:b4:6f:4e: 29:64:56:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+YT7Boxy7v8jboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZDI4MDc3ZTItZDBkMy00MTQ3LTlmOWMtMTk3ODljMTM3YmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklnOMm4lcK/gaI8YcPBe7bCyVHkq/6RhIxXg xyHVrCk9Kgv4JN2kYlPEYPKazyWBcpzt49oF8ZQ7O4I6jwqfViu4zTWEBkP5cJ2O NKw+pH755MmWZ3fchPsKICpto/g3nBSgIxD16ZqHGrw8vklvjRaWytCLiLRNzvRY ZUy/zLebbaOWqHDYELdN8vpoGLX31em9yiNYwWe5YybLCsgg/U5J4Y5fHdhrEs6R uFclFbSRxHdDQZJCoXCCDbYSf6P7kCCyVhIGrwL5ONep4cncTtIYDK4HZgx170rW xqeVJvvkMVRH18Cg8qm+7mWmvg0NY3Qq6TEtrL+TSfsJHr0tYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/1UR5o54gkiZaCdRwiG85KpfuBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNjk5NjU1ZmYtYWEyZC0z OWU3LTk1NWMtNTQ0ZTM2NDVjNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaI+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx/J5JcrUluKvhvttzHCJhWisi9jdiIVXlo+vFN1MYeaKarPCogW1oR /tqzUywU8sGz7Dv91CS1AgMq6yW8IYZ/6VanM1AnaEN6xxRKQfR/hJl6ISm7wMZx xgntLLAIi0sfzHs7vAAHBglltPGwh9eXO9fjCkz05dWbOlvIdSyUSJpINa7QYaIb C3d6bin7Z5NLy0Fc/ite6gJ5Cas43c0O1OdPr+vIzCLT/mWN+e/qJYvmqWQy5SlT lOe309pHCEKrD0h4kV/QynQexzKL4+w/4hAm+vDXAIJpf1H0jrVO5GASoxmQ5wwe GlJn0SLvnsO2VToeSfJefrRvTilkVn4= -----END CERTIFICATE-----Generated at Tue May 5 19:08:35 2026 by rpki-client