$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa File: b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa (raw, json) Hash identifier: ppBT99ATRckcsO3E4qCJuYSsQ+S+cIBH4BTsQmzKujM= Subject key identifier: DB:EB:82:C5:66:58:A6:92:47:56:AD:92:79:EF:D0:0F:6F:56:B9:4D Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584D8EF55315AC4C05D34A92EA40 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 36352 IP address blocks: 104.143.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:53:15:ac:4c:05:d3:4a:92:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=accbe028-aa22-4264-b824-b82923494ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:aa:97:5a:44:64:b6:a1:f2:11:e8:7a:9d:69: 94:4f:5e:5b:34:de:7c:f8:c9:08:35:b9:d2:df:78: 19:ec:9b:00:e0:b7:5f:c9:55:de:f7:24:94:f0:83: b7:4f:e8:ea:3b:ef:df:c8:43:21:29:64:c1:2e:78: 30:c6:7d:8b:f3:73:24:cb:00:bc:f1:df:85:a8:7e: 68:4a:83:b2:3d:ca:fb:7f:15:4c:98:cc:89:0c:7b: a4:e5:85:2c:7a:5a:96:93:16:88:42:58:f2:fd:be: 80:e2:4b:84:64:a8:fa:41:a1:95:2e:13:19:9e:07: f4:52:69:12:aa:44:5b:5d:29:49:da:29:38:23:a0: f3:74:43:27:c8:26:91:59:ff:ee:66:fd:25:37:3c: b1:79:0f:f4:72:28:9a:a7:2f:67:46:9d:20:73:92: 78:ff:47:24:31:1a:74:22:a3:34:1a:b3:16:fa:2c: de:91:10:cd:3a:23:24:88:ef:fd:46:40:9f:5f:fe: 50:6e:dd:c3:a6:36:6f:f7:41:cf:10:b8:a6:97:21: 0c:f0:ec:9a:a5:cd:cf:93:6f:06:3f:e3:ec:14:b3: 62:d1:80:3b:14:80:30:86:46:9a:02:50:08:53:d7: 51:b5:9b:e6:3f:2c:8c:61:eb:58:56:4d:09:ee:5b: 7a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EB:82:C5:66:58:A6:92:47:56:AD:92:79:EF:D0:0F:6F:56:B9:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:54:93:99:31:3d:c2:b3:48:1d:ee:54:80:5e:f1:ef:0a:06: db:b9:61:af:6f:5b:7c:34:a1:55:49:2e:96:77:c2:05:19:a7: 5d:7b:97:dd:5c:5b:e3:67:20:6b:03:3f:48:ff:d5:eb:94:c5: 77:31:2c:4c:91:4c:45:cf:15:b1:e1:f6:86:d9:4d:e6:8a:4a: 22:51:fb:e9:e3:f0:d5:01:de:68:fd:6c:64:7e:73:2d:13:7e: c8:31:bc:9c:34:13:b9:3e:e1:94:3a:ee:20:78:a6:59:ed:94: 0e:f3:eb:77:7e:6d:16:ae:61:c3:b2:a2:3d:2b:6d:db:ec:57: 54:4b:5a:e0:c0:b8:d7:9f:34:5a:6e:35:d1:b9:d5:a0:37:e5: 7e:b3:03:48:74:6b:d1:4a:fd:32:fd:a3:41:1e:8e:a9:79:c4: f2:ba:1c:73:1a:15:9c:1e:86:dd:69:95:e3:21:03:37:2f:ac: 08:80:fb:de:d6:ce:de:45:b0:e6:54:47:d6:1d:a7:dc:e2:fd: 77:d6:19:9a:d1:71:9e:70:f9:4a:88:a6:87:c5:c6:be:b0:90: bc:33:79:d3:08:12:50:1a:4b:5e:60:d6:90:b1:f8:ca:34:4a: 64:7c:ae:80:3c:73:f3:aa:10:2e:29:ad:db:9c:a1:c1:b5:7b: 3a:d9:66:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9VMVrEwF00qS6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YWNjYmUwMjgtYWEyMi00MjY0LWI4MjQtYjgyOTIzNDk0Y2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26qXWkRktqHyEeh6nWmUT15bNN58+MkINbnS 33gZ7JsA4LdfyVXe9ySU8IO3T+jqO+/fyEMhKWTBLngwxn2L83MkywC88d+FqH5o SoOyPcr7fxVMmMyJDHuk5YUselqWkxaIQljy/b6A4kuEZKj6QaGVLhMZngf0UmkS qkRbXSlJ2ik4I6DzdEMnyCaRWf/uZv0lNzyxeQ/0ciiapy9nRp0gc5J4/0ckMRp0 IqM0GrMW+izekRDNOiMkiO/9RkCfX/5Qbt3DpjZv90HPELimlyEM8Oyapc3Pk28G P+PsFLNi0YA7FIAwhkaaAlAIU9dRtZvmPyyMYetYVk0J7lt6jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvrgsVmWKaSR1atknnv0A9vVrlNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvYjAyOGUwZjktNDc4ZS0z ZTM4LWE4YzUtNTc4OWVlNGY3ZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9Uk5kxPcKzSB3uVIBe8e8KBtu5Ya9vW3w0oVVJLpZ3wgUZp117l91c W+NnIGsDP0j/1euUxXcxLEyRTEXPFbHh9obZTeaKSiJR++nj8NUB3mj9bGR+cy0T fsgxvJw0E7k+4ZQ67iB4plntlA7z63d+bRauYcOyoj0rbdvsV1RLWuDAuNefNFpu NdG51aA35X6zA0h0a9FK/TL9o0Eejql5xPK6HHMaFZweht1pleMhAzcvrAiA+97W zt5FsOZUR9Ydp9zi/XfWGZrRcZ5w+UqIpofFxr6wkLwzedMIElAaS15g1pCx+Mo0 SmR8roA8c/OqEC4prducocG1ezrZZrg= -----END CERTIFICATE-----Generated at Tue May 5 19:08:36 2026 by rpki-client