$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa File: 524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa (raw, json) Hash identifier: Hb7HspRsNsAOWHjDDhRjpVJsUXkR0h3cNt2GQP3kUKc= Subject key identifier: DE:3C:D6:1F:07:1A:02:F1:AC:44:4E:E8:9D:88:28:93:F4:E0:63:2B Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584F427808A5823E629364BB0900 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 26658 IP address blocks: 104.128.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:08:a5:82:3e:62:93:64:bb:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=ceaf3190-3c02-43c3-b946-c3ee705af424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4e:3c:57:65:1b:ae:c4:81:1b:0b:26:2c:5a: c5:6e:1a:de:3e:a6:e1:cf:89:af:dd:f2:21:d3:ce: 94:9e:3c:3e:17:d4:96:f4:24:c4:56:01:a4:fe:ba: 58:c3:5b:7c:b9:4a:44:5b:75:14:8a:83:9e:56:4d: 92:29:4c:1b:53:82:70:d0:bb:3b:94:76:cb:73:66: 31:6b:a3:6d:34:88:bb:85:06:a5:32:e3:27:d3:c0: 9a:5f:34:7f:a4:aa:a8:e8:93:47:4e:f6:fc:2b:cf: 25:ba:32:4d:73:ff:15:ac:49:8b:2c:c6:6d:7e:6f: 21:a1:da:e0:c1:63:60:1c:ed:c7:4a:fb:2e:5a:36: 6c:50:95:1d:f6:ad:68:12:4b:5f:33:7e:96:33:0e: 18:26:78:9b:24:96:a8:09:8d:07:4f:00:3d:3d:7f: c1:e8:f3:92:7a:05:81:7b:e0:c5:bd:09:64:9a:0e: 1c:ea:f6:90:6f:69:bf:99:f2:20:5a:f8:6f:83:e6: 91:09:69:aa:67:cf:93:fd:85:b6:fd:b5:28:1d:54: 29:24:38:d8:de:47:40:23:2f:68:dc:b5:48:0e:53: 35:e3:1c:89:e5:7e:e6:6f:24:c4:25:7d:6a:54:77: a6:d9:5a:98:20:f2:b2:59:5c:2f:3a:ce:bc:bf:ff: 00:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3C:D6:1F:07:1A:02:F1:AC:44:4E:E8:9D:88:28:93:F4:E0:63:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.128.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:35:db:32:67:5f:e9:41:67:78:6f:f5:49:89:08:27:88:3b: a1:a9:82:f1:0a:f4:c6:90:df:9c:dc:cf:14:ea:b8:99:c9:7c: 46:ac:fb:77:29:9f:39:8c:ae:8e:16:ad:77:3e:38:dd:f0:84: 49:89:54:8d:e1:c6:03:82:07:d8:18:3e:e2:6b:8a:2a:f2:dd: 1b:ef:10:19:90:9e:43:15:57:b5:e6:05:87:ec:37:1d:22:0a: 2d:9e:87:46:c8:e2:c5:f0:37:f5:7d:1d:51:63:58:1e:af:7c: 13:5b:d5:2b:94:7a:6f:59:30:06:ca:a9:8a:43:07:d9:a3:7f: 74:71:ba:eb:6a:23:2f:94:e8:07:5e:4d:8c:8b:3a:cd:e9:a4: 08:47:af:82:e9:bb:8e:3e:23:f1:75:98:0c:79:a7:e8:b2:1e: ac:34:dd:26:a5:ab:42:bf:bc:14:e6:9f:f9:48:d3:84:9a:d8: 6b:f5:21:36:45:cb:09:70:56:73:e9:72:7c:b9:57:8b:28:56: 39:8d:3f:9c:59:d5:70:0f:6c:f2:21:a6:e5:4f:b0:85:d9:be: 9f:8d:67:8a:ba:9e:01:cc:ac:37:bc:c5:c5:f8:3b:45:23:2c: 79:02:b2:85:b8:b7:98:8a:ea:66:c1:6e:01:cb:9b:44:54:7f: 0c:36:35:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeAilgj5ik2S7CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk Y2VhZjMxOTAtM2MwMi00M2MzLWI5NDYtYzNlZTcwNWFmNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE48V2UbrsSBGwsmLFrFbhrePqbhz4mv3fIh 086Unjw+F9SW9CTEVgGk/rpYw1t8uUpEW3UUioOeVk2SKUwbU4Jw0Ls7lHbLc2Yx a6NtNIi7hQalMuMn08CaXzR/pKqo6JNHTvb8K88lujJNc/8VrEmLLMZtfm8hodrg wWNgHO3HSvsuWjZsUJUd9q1oEktfM36WMw4YJnibJJaoCY0HTwA9PX/B6POSegWB e+DFvQlkmg4c6vaQb2m/mfIgWvhvg+aRCWmqZ8+T/YW2/bUoHVQpJDjY3kdAIy9o 3LVIDlM14xyJ5X7mbyTEJX1qVHem2VqYIPKyWVwvOs68v/8ADQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN481h8HGgLxrERO6J2IKJP04GMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNTI0YjU5Y2YtMWZiNC0z MmE4LTg2Y2ItZDdiY2Q3ZmFkNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACE12zJnX+lBZ3hv9UmJCCeIO6GpgvEK9MaQ35zczxTquJnJfEas+3cp nzmMro4WrXc+ON3whEmJVI3hxgOCB9gYPuJriiry3RvvEBmQnkMVV7XmBYfsNx0i Ci2eh0bI4sXwN/V9HVFjWB6vfBNb1SuUem9ZMAbKqYpDB9mjf3RxuutqIy+U6Ade TYyLOs3ppAhHr4Lpu44+I/F1mAx5p+iyHqw03Salq0K/vBTmn/lI04Sa2Gv1ITZF ywlwVnPpcny5V4soVjmNP5xZ1XAPbPIhpuVPsIXZvp+NZ4q6ngHMrDe8xcX4O0Uj LHkCsoW4t5iK6mbBbgHLm0RUfww2Ncw= -----END CERTIFICATE-----Generated at Thu Sep 24 08:14:49 2026 by rpki-client