$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa File: 524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa (raw, json) Hash identifier: 1T+296XQY525LfAEzJsyB7GW3k3xA/g2/rPH7ATSZ0Y= Subject key identifier: EB:9F:02:2E:87:96:4F:00:0A:BF:AD:0F:A2:D7:96:EC:41:44:D1:B9 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584DBFD067BE173EBD6FA0583F40 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 26658 IP address blocks: 104.128.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:67:be:17:3e:bd:6f:a0:58:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=4c968e89-39ff-4832-9dae-886bbce6413e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:48:66:28:ca:86:a5:84:df:a6:cb:02:c2:08: b1:b7:77:06:e5:6e:2f:99:82:e8:27:c2:7d:de:f4: 00:c8:73:fd:fb:8a:46:d4:d9:a7:0a:01:40:51:ec: aa:54:34:72:11:08:bc:2c:b6:f2:2c:56:dd:b2:3c: 58:30:09:a5:1d:0b:d3:d1:e2:97:94:9b:1d:9d:9a: 7a:60:80:43:fb:26:11:dc:41:3e:d6:8d:ca:6c:11: 18:b0:4d:fb:12:8d:2f:bd:f6:26:d9:0f:d6:f0:55: 5c:e4:94:cd:a7:bf:8f:0d:40:d0:6c:6a:35:94:2f: 5b:ca:68:b1:5e:c2:01:d1:5b:f3:9c:c0:c2:81:61: 75:1a:25:a6:13:87:a7:58:ad:d1:86:51:ca:fb:79: 9e:61:5c:ad:e1:d9:d2:3d:88:ac:e9:4c:b1:b9:65: 44:c6:e9:cb:b8:0a:f3:18:b3:ff:ad:2c:92:3c:b4: 85:dc:8f:fe:d4:6e:1e:cf:ec:7e:a1:bc:44:28:72: f0:78:06:ea:f7:42:a2:40:36:57:3a:c9:18:7c:fa: 6f:36:0d:81:d9:64:dc:ef:3a:2b:e9:db:92:66:0e: 59:92:49:89:10:5d:7f:c5:41:be:52:5d:ef:75:61: 11:1a:ff:0b:c4:d8:5b:6d:d6:a9:a5:4d:59:54:7d: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9F:02:2E:87:96:4F:00:0A:BF:AD:0F:A2:D7:96:EC:41:44:D1:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.128.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:50:f7:96:a6:74:85:d3:1f:2c:d7:e8:5e:25:77:49:85:94: bd:fc:3a:81:c2:a1:23:de:5c:d9:11:07:c2:da:e4:0d:d8:b5: 74:4d:94:ff:64:df:e1:8b:e6:02:3a:64:7a:50:da:b6:c4:39: 37:e4:86:c6:27:ee:b0:2d:74:92:ce:04:bd:5d:b3:67:66:6e: e8:31:4c:8e:b7:2f:09:2e:be:de:bf:e9:94:44:41:6c:78:c6: 00:b8:ef:f8:ae:73:f2:af:c5:f5:87:86:ae:37:f7:7b:c8:a1: 14:c7:49:dd:ac:8b:90:66:9a:be:95:ce:27:4b:39:73:c6:af: d1:bf:65:23:8b:65:69:5d:d1:d5:e6:cd:fa:07:7f:f2:f8:91: 23:89:d8:21:96:45:14:af:5d:44:34:c7:ca:6d:e4:65:b8:99: ac:5e:0a:fe:14:7b:58:90:b8:32:73:95:93:1e:15:33:bd:5d: 47:cd:7b:c3:d7:64:d7:6f:a7:f8:a9:11:df:07:92:8b:b9:31: 6c:f7:1e:2a:d9:75:ec:8f:2b:c9:55:5d:db:88:8f:07:3e:b5: 33:2d:5e:89:4d:ca:b7:37:f6:0b:5b:05:fd:0e:d2:e3:03:1c: 7d:c1:cd:e7:18:13:49:98:ac:6e:29:d5:14:76:6d:73:e7:26: 0d:8a:bc:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0Ge+Fz69b6BYP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk NGM5NjhlODktMzlmZi00ODMyLTlkYWUtODg2YmJjZTY0MTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUhmKMqGpYTfpssCwgixt3cG5W4vmYLoJ8J9 3vQAyHP9+4pG1NmnCgFAUeyqVDRyEQi8LLbyLFbdsjxYMAmlHQvT0eKXlJsdnZp6 YIBD+yYR3EE+1o3KbBEYsE37Eo0vvfYm2Q/W8FVc5JTNp7+PDUDQbGo1lC9bymix XsIB0VvznMDCgWF1GiWmE4enWK3RhlHK+3meYVyt4dnSPYis6UyxuWVExunLuArz GLP/rSySPLSF3I/+1G4ez+x+obxEKHLweAbq90KiQDZXOskYfPpvNg2B2WTc7zor 6duSZg5ZkkmJEF1/xUG+Ul3vdWERGv8LxNhbbdappU1ZVH0a1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOufAi6Hlk8ACr+tD6LXluxBRNG5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNTI0YjU5Y2YtMWZiNC0z MmE4LTg2Y2ItZDdiY2Q3ZmFkNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARQ95amdIXTHyzX6F4ld0mFlL38OoHCoSPeXNkRB8La5A3YtXRNlP9k 3+GL5gI6ZHpQ2rbEOTfkhsYn7rAtdJLOBL1ds2dmbugxTI63Lwkuvt6/6ZREQWx4 xgC47/iuc/KvxfWHhq4393vIoRTHSd2si5Bmmr6VzidLOXPGr9G/ZSOLZWld0dXm zfoHf/L4kSOJ2CGWRRSvXUQ0x8pt5GW4maxeCv4Ue1iQuDJzlZMeFTO9XUfNe8PX ZNdvp/ipEd8Hkou5MWz3HirZdeyPK8lVXduIjwc+tTMtXolNyrc39gtbBf0O0uMD HH3BzecYE0mYrG4p1RR2bXPnJg2KvDU= -----END CERTIFICATE-----Generated at Wed May 13 04:57:02 2026 by rpki-client