$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa File: 2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa (raw, json) Hash identifier: RZuf27Ah55ilFHrdfBJFS5GrTK11pI3b3KjOIJcXctQ= Subject key identifier: 70:12:C2:2E:A5:42:13:2A:E6:4D:B2:21:99:74:04:0E:F0:78:B9:F8 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584E6F3A1666953EB54025DA1FE0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 36352 IP address blocks: 104.143.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:16:66:95:3e:b5:40:25:da:1f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=69a0c976-ce45-429e-90ea-6f5c749feec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a2:6e:62:60:5f:8a:b4:c7:e1:0e:28:81:df: b9:18:35:e5:e2:e6:c9:23:6b:5e:86:7f:fa:d5:0d: 45:63:61:f7:b9:1b:34:79:c0:e0:51:55:35:13:b9: 87:3a:dc:7b:8f:82:6d:c8:05:35:7c:76:2c:45:26: fc:0c:85:a7:d4:67:c6:a7:e7:22:4c:16:33:1e:15: 2a:ef:d8:9d:28:75:06:e3:63:d3:0a:c7:9e:d7:9e: c1:52:93:c0:91:92:c2:bb:95:b5:df:04:74:32:2a: 7a:bf:58:1c:c5:05:9a:39:86:ee:6b:0b:33:0d:f5: 28:7b:b8:64:6d:e6:20:b7:f0:ae:40:d3:89:f4:38: 05:37:19:0c:da:8b:3b:2c:4e:7d:80:e6:9d:4f:e5: b1:dc:00:2a:b4:af:cf:b6:21:13:13:41:ae:e9:03: 96:ab:c2:70:8b:ce:88:18:e3:c3:dd:80:87:52:0b: 22:7b:28:28:87:bf:a1:01:d2:35:51:0d:c8:f2:01: 05:2f:d2:6e:a1:4c:c5:7e:94:b8:42:36:ca:1b:b0: 93:cc:bf:2a:9d:43:8f:8c:91:66:11:51:30:c7:73: bf:dc:75:d1:3d:96:b2:05:fb:bd:17:90:c6:e8:d3: b6:62:ba:ef:e0:95:d5:92:fe:8d:fc:93:c3:5d:c3: 07:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:12:C2:2E:A5:42:13:2A:E6:4D:B2:21:99:74:04:0E:F0:78:B9:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:4e:c9:49:97:a7:d1:ea:1f:4f:55:18:3e:de:60:f0:8d:e9: fb:09:8e:73:08:46:3b:46:36:fc:29:0f:5e:9b:3c:a7:c5:a4: 93:bb:cf:ea:ec:54:17:3d:52:b4:79:bd:ed:b2:56:7a:bd:95: 4c:1b:4f:37:9a:62:f5:16:8a:74:7a:90:c7:93:65:87:a7:e5: 45:8b:cc:8f:0d:ad:ea:01:80:2d:d5:bc:39:61:62:2f:c3:38: bb:4b:29:17:44:b8:8a:67:a2:1a:66:28:d0:7e:25:fb:4e:90: c1:31:8f:48:45:15:4a:8e:70:cb:0d:29:c3:14:a7:fd:ec:06: 40:2c:b3:99:4a:db:b7:65:74:de:76:1a:c2:c7:c6:95:36:c9: 49:c6:ec:2d:fd:33:55:e9:59:15:ba:b3:04:5c:7b:c8:6c:09: 79:3e:e8:3c:4c:16:f6:89:d4:7a:8c:c5:8a:f3:a1:46:6e:55: 95:ec:9f:c2:a8:08:33:eb:0c:c5:ee:68:68:ad:29:0d:65:5c: 6a:a6:ed:ca:24:b2:ec:31:b4:4e:1c:bb:e0:6b:f7:bf:22:27: ce:41:7a:dc:e0:4a:a2:2f:c2:50:51:57:24:1e:a2:0e:5b:37: ad:01:ac:24:94:b0:6e:c3:63:c2:c5:4c:32:73:50:41:91:79: fc:31:6a:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOhZmlT61QCXaH+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NjlhMGM5NzYtY2U0NS00MjllLTkwZWEtNmY1Yzc0OWZlZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKJuYmBfirTH4Q4ogd+5GDXl4ubJI2tehn/6 1Q1FY2H3uRs0ecDgUVU1E7mHOtx7j4JtyAU1fHYsRSb8DIWn1GfGp+ciTBYzHhUq 79idKHUG42PTCsee157BUpPAkZLCu5W13wR0Mip6v1gcxQWaOYbuawszDfUoe7hk beYgt/CuQNOJ9DgFNxkM2os7LE59gOadT+Wx3AAqtK/PtiETE0Gu6QOWq8Jwi86I GOPD3YCHUgsieygoh7+hAdI1UQ3I8gEFL9JuoUzFfpS4QjbKG7CTzL8qnUOPjJFm EVEwx3O/3HXRPZayBfu9F5DG6NO2Yrrv4JXVkv6N/JPDXcMHjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHASwi6lQhMq5k2yIZl0BA7weLn4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMmIxZGQ2NjUtMTk2OC0z YTE0LWIxMWUtNzlhOTFhMzRmY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZOyUmXp9HqH09VGD7eYPCN6fsJjnMIRjtGNvwpD16bPKfFpJO7z+rs VBc9UrR5ve2yVnq9lUwbTzeaYvUWinR6kMeTZYen5UWLzI8NreoBgC3VvDlhYi/D OLtLKRdEuIpnohpmKNB+JftOkMExj0hFFUqOcMsNKcMUp/3sBkAss5lK27dldN52 GsLHxpU2yUnG7C39M1XpWRW6swRce8hsCXk+6DxMFvaJ1HqMxYrzoUZuVZXsn8Ko CDPrDMXuaGitKQ1lXGqm7coksuwxtE4cu+Br978iJ85BetzgSqIvwlBRVyQeog5b N60BrCSUsG7DY8LFTDJzUEGRefwxaqs= -----END CERTIFICATE-----Generated at Fri Jul 24 11:31:09 2026 by rpki-client