$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2e5e5f22-1769-3091-9940-b1c8c063a660.roa File: 2e5e5f22-1769-3091-9940-b1c8c063a660.roa (raw, json) Hash identifier: FuFLctd5p/4KfETqxORhCB7eyIsxDUs6BLp14ZuXk3s= Subject key identifier: 0C:DF:C6:91:F9:E4:97:3E:56:7A:E7:82:9F:4F:97:F4:EE:9D:C6:59 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584E6F3EB411A9287CE1F3FC5B00 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2e5e5f22-1769-3091-9940-b1c8c063a660.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 36352 IP address blocks: 104.143.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:b4:11:a9:28:7c:e1:f3:fc:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=8e92a062-54a9-47fd-95ed-e781934a082c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ea:ef:e6:a5:30:b8:c2:03:5d:4e:ae:50:80: f2:98:06:51:f5:6c:32:2a:ba:af:16:0b:53:ea:89: 72:e9:13:27:b1:4f:8c:e2:c6:1b:7d:6b:c2:ba:79: b1:29:50:c6:6c:f7:d7:6f:4b:2d:82:91:65:f3:8d: de:47:d3:45:8f:7e:3f:62:e4:f9:e0:93:95:88:f1: 2b:91:31:9a:9c:44:d0:ae:59:f8:da:93:3a:b0:80: 10:dc:a6:9f:b3:73:8a:2e:1a:f3:0b:44:0a:55:1a: b7:1e:34:d2:3a:da:ac:73:ac:3b:8c:40:0a:47:3b: 27:08:10:b0:7a:bd:73:4e:5e:85:ae:29:08:9b:bd: 72:64:85:77:8b:4e:38:cd:58:7e:1e:5e:0b:f2:59: 27:7d:91:7f:32:da:30:d2:3e:53:dd:cd:6c:94:13: 26:00:6c:be:d7:82:cc:c3:9d:93:43:75:7b:f1:7c: fc:98:40:f5:b9:fd:14:f0:5d:6a:9d:73:e2:69:07: 0e:65:a2:0f:36:d8:dd:5f:8f:58:29:d5:2a:2c:31: a2:d5:fe:1e:e4:1a:bc:9b:cc:6a:2d:60:8a:62:0c: b1:2c:f2:2b:e1:df:68:3c:96:86:cd:63:59:76:11: 55:e2:44:1c:68:81:a9:4f:99:8e:63:ca:5e:ba:f0: db:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DF:C6:91:F9:E4:97:3E:56:7A:E7:82:9F:4F:97:F4:EE:9D:C6:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2e5e5f22-1769-3091-9940-b1c8c063a660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:2b:9c:59:ae:69:21:2c:d2:d0:db:28:e5:c9:24:db:84:81: 71:e7:7f:8a:6a:98:dc:b4:6f:aa:52:1d:d1:e5:35:89:46:08: 0f:75:78:ac:7a:bb:eb:72:81:ab:a5:1d:ec:23:02:31:d6:5b: 30:ff:39:a6:52:2b:ef:3c:20:e0:f6:5c:33:cb:0c:2a:bd:2d: 24:6f:af:30:1c:26:9a:11:ee:1f:48:1f:02:34:c6:6a:c7:80: 2e:4c:85:66:0f:ae:05:a0:f2:31:c9:ab:76:e4:1f:0f:7a:86: 09:f8:3b:5b:9e:89:28:5e:34:88:6c:5f:38:83:7b:ae:ec:c6: 16:b3:98:2d:c1:14:3f:b3:e4:a8:99:7d:31:0d:4f:6d:1a:67: c0:1e:e9:c8:90:64:8f:97:5a:ec:ad:1d:f0:f1:13:24:40:54: 09:b7:fa:db:3c:ae:d3:97:d7:2e:d4:12:88:1f:73:be:65:91: 97:bf:63:68:ab:d8:40:d2:41:aa:95:d1:44:63:09:da:14:27: e3:70:59:77:bc:ba:22:5d:bf:a4:fc:cc:ff:a2:f8:89:8b:08: 56:5a:64:c6:34:8e:e3:e0:0c:d8:3a:76:19:d5:4e:d5:ce:a4: eb:e8:ec:1a:14:37:7d:ea:38:4d:9d:a5:c1:91:09:39:34:4a: 87:49:a9:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPrQRqSh84fP8WwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk OGU5MmEwNjItNTRhOS00N2ZkLTk1ZWQtZTc4MTkzNGEwODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Orv5qUwuMIDXU6uUIDymAZR9WwyKrqvFgtT 6oly6RMnsU+M4sYbfWvCunmxKVDGbPfXb0stgpFl843eR9NFj34/YuT54JOViPEr kTGanETQrln42pM6sIAQ3Kafs3OKLhrzC0QKVRq3HjTSOtqsc6w7jEAKRzsnCBCw er1zTl6FrikIm71yZIV3i044zVh+Hl4L8lknfZF/Mtow0j5T3c1slBMmAGy+14LM w52TQ3V78Xz8mED1uf0U8F1qnXPiaQcOZaIPNtjdX49YKdUqLDGi1f4e5Bq8m8xq LWCKYgyxLPIr4d9oPJaGzWNZdhFV4kQcaIGpT5mOY8peuvDbBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzfxpH55Jc+Vnrngp9Pl/TuncZZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMmU1ZTVmMjItMTc2OS0z MDkxLTk5NDAtYjFjOGMwNjNhNjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0rnFmuaSEs0tDbKOXJJNuEgXHnf4pqmNy0b6pSHdHlNYlGCA91eKx6 u+tygaulHewjAjHWWzD/OaZSK+88IOD2XDPLDCq9LSRvrzAcJpoR7h9IHwI0xmrH gC5MhWYPrgWg8jHJq3bkHw96hgn4O1ueiSheNIhsXziDe67sxhazmC3BFD+z5KiZ fTENT20aZ8Ae6ciQZI+XWuytHfDxEyRAVAm3+ts8rtOX1y7UEogfc75lkZe/Y2ir 2EDSQaqV0URjCdoUJ+NwWXe8uiJdv6T8zP+i+ImLCFZaZMY0juPgDNg6dhnVTtXO pOvo7BoUN33qOE2dpcGRCTk0SodJqTE= -----END CERTIFICATE-----Generated at Fri Jul 24 09:12:42 2026 by rpki-client