$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa File: 2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa (raw, json) Hash identifier: as//lg2D8LDgHqrGkJCJjAW1K8IXTDneecmH1H11s5U= Subject key identifier: C2:BF:F2:01:83:9C:38:BF:CB:C4:9D:9C:BE:AE:56:29:D0:57:5B:6E Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584F119CE52942A33E96F16D25C0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 36352 IP address blocks: 104.143.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e5:29:42:a3:3e:96:f1:6d:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=98d4879b-a3ba-4312-a700-e1ea67306af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:17:56:6a:19:9e:e6:48:9b:dc:46:a8:5a: fc:3d:a0:7b:54:23:37:ef:76:55:da:6d:ac:af:a9: 2b:88:6f:da:e2:01:2b:61:6c:28:59:92:b8:b4:56: 3c:7a:66:a3:3c:93:e8:3f:8c:6c:90:05:62:c4:9e: 4d:81:bb:59:69:2b:ef:be:41:0b:00:b8:b2:e0:ae: f5:63:65:84:7c:c2:c4:2c:61:6e:6b:e5:73:b6:05: b2:7a:93:78:b5:64:cc:83:80:ce:92:54:2c:03:68: 9f:b6:9e:eb:ba:a5:e5:95:4a:20:79:d8:4d:e8:bb: 0b:91:e8:fe:e7:73:b9:40:41:15:18:bc:95:bd:a8: b3:95:74:60:e5:15:b0:a8:d4:75:1a:97:0b:44:0c: 62:ce:a8:4b:3f:9c:e1:1a:4d:60:bd:a7:70:e2:aa: e6:55:11:55:52:10:b8:05:2a:f2:56:5c:2b:d4:5f: 04:41:94:2a:91:79:b4:c7:80:c4:10:e8:94:5a:d1: 0b:f5:ff:97:e8:d4:dc:ad:b9:b1:fc:f2:a1:65:62: e6:8e:02:4c:36:10:70:a4:e4:73:a4:a8:41:92:7e: c0:d0:02:f0:79:52:e0:90:36:69:7d:ba:02:56:c5: b3:5b:7d:8a:39:70:0b:4c:32:dd:a3:0d:0e:3e:32: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BF:F2:01:83:9C:38:BF:CB:C4:9D:9C:BE:AE:56:29:D0:57:5B:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b5:22:a9:e5:72:ae:02:ed:61:c8:7d:dd:e7:30:52:25:e1: 38:bc:ea:e1:56:6e:8e:00:50:ce:9d:eb:b7:a6:2a:11:e8:e7: 51:97:66:40:ab:ad:7b:d3:c0:ae:dd:d2:fd:c6:0d:51:77:6e: e5:99:78:72:0a:94:69:dc:41:a3:cb:2d:b7:59:57:26:d6:6f: b0:1a:21:9d:9f:48:9c:71:ef:f7:9d:d6:8e:70:13:ef:29:0b: ec:67:ab:2c:71:cd:11:61:29:57:da:0c:cf:42:40:1d:29:c1: 48:1e:9e:5f:c9:94:64:f4:a5:99:95:d3:45:b7:19:41:b4:1d: 13:81:22:9a:3f:e4:23:cc:3d:c2:07:91:df:c4:7d:7e:91:f7: 99:f6:19:de:34:19:05:fd:61:c1:de:3d:41:7c:d3:46:38:4e: 9e:48:7e:a0:34:e9:3e:c9:b2:21:36:71:1b:2c:29:6a:2b:d2: f0:89:c6:15:79:e4:b4:6b:a5:70:93:ce:51:56:89:ea:c0:2d: 05:74:6d:f4:8d:64:a0:9f:88:cb:e9:b9:c4:ae:93:0c:48:1d: d8:80:fe:af:b7:4b:da:d6:0d:5d:54:76:8b:52:55:f1:1f:cb: af:38:9f:ae:39:ec:2a:34:7f:ec:85:88:74:97:38:83:9d:ef: fd:07:8f:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOUpQqM+lvFtJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OThkNDg3OWItYTNiYS00MzEyLWE3MDAtZTFlYTY3MzA2YWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfYXVmoZnuZIm9xGqFr8PaB7VCM373ZV2m2s r6kriG/a4gErYWwoWZK4tFY8emajPJPoP4xskAVixJ5NgbtZaSvvvkELALiy4K71 Y2WEfMLELGFua+VztgWyepN4tWTMg4DOklQsA2iftp7ruqXllUogedhN6LsLkej+ 53O5QEEVGLyVvaizlXRg5RWwqNR1GpcLRAxizqhLP5zhGk1gvadw4qrmVRFVUhC4 BSryVlwr1F8EQZQqkXm0x4DEEOiUWtEL9f+X6NTcrbmx/PKhZWLmjgJMNhBwpORz pKhBkn7A0ALweVLgkDZpfboCVsWzW32KOXALTDLdow0OPjJcVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMK/8gGDnDi/y8SdnL6uVinQV1tuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMmIxZGQ2NjUtMTk2OC0z YTE0LWIxMWUtNzlhOTFhMzRmY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi1Iqnlcq4C7WHIfd3nMFIl4Ti86uFWbo4AUM6d67emKhHo51GXZkCr rXvTwK7d0v3GDVF3buWZeHIKlGncQaPLLbdZVybWb7AaIZ2fSJxx7/ed1o5wE+8p C+xnqyxxzRFhKVfaDM9CQB0pwUgenl/JlGT0pZmV00W3GUG0HROBIpo/5CPMPcIH kd/EfX6R95n2Gd40GQX9YcHePUF800Y4Tp5IfqA06T7JsiE2cRssKWor0vCJxhV5 5LRrpXCTzlFWierALQV0bfSNZKCfiMvpucSukwxIHdiA/q+3S9rWDV1UdotSVfEf y684n6457Co0f+yFiHSXOIOd7/0Hj9g= -----END CERTIFICATE-----Generated at Sat Sep 26 10:34:55 2026 by rpki-client