$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd74b2d5-ac04-3fa6-b26b-b0addd7636db.roa File: cd74b2d5-ac04-3fa6-b26b-b0addd7636db.roa (raw, json) Hash identifier: QIdpdvKT1clWymr8+DsKixMgAS/9sYuMJeLvb+BS00c= Subject key identifier: 30:E0:B6:73:0E:3A:73:FB:6D:3B:86:0A:74:1A:0D:98:0D:0A:20:12 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584D8EF54DB65E33B32CBE7011C0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd74b2d5-ac04-3fa6-b26b-b0addd7636db.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 36352 IP address blocks: 104.143.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:4d:b6:5e:33:b3:2c:be:70:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9125ea4e-92f9-417b-8686-f9c049dd2f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:c6:07:5c:d5:5e:66:50:77:17:dc:fb:94: 50:c5:b5:5e:af:04:a5:cf:61:92:2d:22:00:ba:fe: 2f:4c:76:9c:74:8d:e5:a2:37:9c:ac:2d:ba:df:73: c3:74:54:91:41:ab:3d:96:3f:d3:cf:9b:63:61:14: a1:68:d6:e0:17:05:ba:7a:7d:06:59:ad:6b:d4:12: 6b:7e:80:98:67:f5:e4:65:35:b1:cb:5a:65:17:44: 51:d4:36:8a:86:fe:fc:5b:57:3c:78:c6:a6:53:bc: e7:32:f2:4e:16:35:be:e2:2f:fd:b0:8d:37:1d:6e: 05:4e:8d:53:e8:56:0d:02:46:9e:02:6d:32:2c:08: 05:9f:a1:30:01:01:af:ac:44:6f:be:d4:74:2b:da: 48:9a:99:22:95:0f:68:b7:9b:1a:21:5e:25:8d:df: e8:0e:bf:45:0b:e7:8f:74:e4:be:c1:ac:26:a0:41: 29:50:42:4a:74:ea:0d:31:69:62:da:b0:00:ce:35: 19:b3:68:d8:dd:4d:69:f7:66:67:a5:6a:c0:88:6d: 50:1b:67:e9:f3:18:f3:eb:03:1c:89:6a:ee:bc:86: fb:44:d0:9a:3d:db:f6:1f:ac:1b:6f:ae:69:aa:0c: e5:d2:58:a6:0e:31:29:9c:a3:3b:50:0f:d2:bd:d8: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E0:B6:73:0E:3A:73:FB:6D:3B:86:0A:74:1A:0D:98:0D:0A:20:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd74b2d5-ac04-3fa6-b26b-b0addd7636db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a2:de:a1:02:f0:39:5e:b2:a9:a3:c1:dc:cf:15:1a:e8:fb: 9f:84:d7:05:1b:c6:7f:c5:e3:2f:a5:37:b8:f8:d5:98:97:55: 41:52:58:34:bb:54:78:20:12:8e:c9:70:f8:83:92:a4:45:22: 8d:d7:18:13:1b:84:82:bb:a5:77:a3:48:74:7b:1b:34:0c:33: 4b:20:c4:7b:82:24:9f:95:ff:40:4a:8c:ba:20:a7:9c:db:e2: a9:83:f8:40:46:c0:33:75:c8:41:27:14:90:90:fc:ea:fb:db: 7b:6e:e9:c6:6d:68:b0:bb:9b:50:18:b4:e0:c2:92:64:a8:e5: c7:79:a2:b7:65:31:55:3b:d0:9f:86:de:b7:8e:b2:85:b5:0e: 77:93:f3:c7:9f:ac:5c:64:03:97:49:0e:de:21:fe:9a:f6:16: f4:b4:a4:ba:22:4b:d0:a6:dc:e9:f1:e0:09:9c:c0:fe:96:21: fb:c3:cf:cb:47:eb:61:a3:e4:93:c9:86:e4:e7:f7:5a:06:55: a9:4b:67:22:b2:a0:9f:b1:4b:82:e1:8a:1f:d5:eb:55:a4:b8: 44:30:a7:7f:52:e6:2b:7b:3d:fc:a7:43:50:db:a5:eb:8c:05: 4a:17:6e:cc:34:e5:9d:5e:b0:5c:37:08:e3:3d:c3:4a:38:d2: 52:c0:b5:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9U22XjOzLL5wEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OTEyNWVhNGUtOTJmOS00MTdiLTg2ODYtZjljMDQ5ZGQyZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkvGB1zVXmZQdxfc+5RQxbVerwSlz2GSLSIA uv4vTHacdI3lojecrC2633PDdFSRQas9lj/Tz5tjYRShaNbgFwW6en0GWa1r1BJr foCYZ/XkZTWxy1plF0RR1DaKhv78W1c8eMamU7znMvJOFjW+4i/9sI03HW4FTo1T 6FYNAkaeAm0yLAgFn6EwAQGvrERvvtR0K9pImpkilQ9ot5saIV4ljd/oDr9FC+eP dOS+wawmoEEpUEJKdOoNMWli2rAAzjUZs2jY3U1p92ZnpWrAiG1QG2fp8xjz6wMc iWruvIb7RNCaPdv2H6wbb65pqgzl0limDjEpnKM7UA/SvdheBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDgtnMOOnP7bTuGCnQaDZgNCiASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvY2Q3NGIyZDUtYWMwNC0z ZmE2LWIyNmItYjBhZGRkNzYzNmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOi3qEC8DlesqmjwdzPFRro+5+E1wUbxn/F4y+lN7j41ZiXVUFSWDS7 VHggEo7JcPiDkqRFIo3XGBMbhIK7pXejSHR7GzQMM0sgxHuCJJ+V/0BKjLogp5zb 4qmD+EBGwDN1yEEnFJCQ/Or723tu6cZtaLC7m1AYtODCkmSo5cd5ordlMVU70J+G 3reOsoW1DneT88efrFxkA5dJDt4h/pr2FvS0pLoiS9Cm3Onx4AmcwP6WIfvDz8tH 62Gj5JPJhuTn91oGValLZyKyoJ+xS4Lhih/V61WkuEQwp39S5it7PfynQ1DbpeuM BUoXbsw05Z1esFw3COM9w0o40lLAtYY= -----END CERTIFICATE-----Generated at Tue May 5 19:08:12 2026 by rpki-client