$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/d86a3712-c3b9-3045-ada8-f4f640a943be.roa File: d86a3712-c3b9-3045-ada8-f4f640a943be.roa (raw, json) Hash identifier: DEeM2VV7auOOvC9n3ujyF5xu9tSK631TpRdrkOyjblM= Subject key identifier: 66:E2:48:1A:6E:E9:55:9B:FE:EA:B0:06:5F:4E:81:40:C0:1E:B2:19 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584E683F644BC66A1358C73B3D40 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/d86a3712-c3b9-3045-ada8-f4f640a943be.roa Signing time: Mon 06 Jul 2026 09:00:12 +0000 ROA not before: Mon 06 Jul 2026 09:00:12 +0000 ROA not after: Sun 04 Oct 2026 09:00:12 +0000 asID: 18779 IP address blocks: 104.143.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:68:3f:64:4b:c6:6a:13:58:c7:3b:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jul 6 09:00:12 2026 GMT Not After : Oct 4 09:00:12 2026 GMT Subject: CN=bb546377-1bb2-446f-91ba-79e428973ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:ec:76:e1:a1:8e:3f:e0:85:ef:52:de:c9: e0:03:e4:ba:45:7e:60:d9:d9:00:4d:7d:18:3a:c4: 91:bc:6e:22:04:10:3c:5a:53:b6:b6:5c:77:92:42: f5:3b:77:60:38:7b:ea:83:84:f2:dc:44:a0:d0:38: 85:a8:ff:46:3d:d4:7c:ac:41:21:ee:1d:9e:a6:f1: d3:3d:65:56:a9:de:0d:47:38:6a:30:42:c7:1a:63: ed:98:5d:d4:1b:99:68:a5:74:42:e9:9b:26:06:d5: 7e:fa:f0:6f:f7:96:f2:6c:b4:72:19:b2:48:d6:61: 5f:c9:b3:4a:7e:6e:4b:98:e2:94:19:1b:ea:a7:8c: 7f:f5:1e:01:43:ba:50:4d:91:15:60:07:81:7c:71: 77:3e:fe:39:e0:f9:60:bc:aa:4a:22:07:d3:ff:01: 30:05:e4:20:15:e6:e7:6d:24:07:17:a2:8f:d4:b6: ee:ce:ab:d7:13:57:d2:9d:23:af:1b:b9:a1:70:7b: bf:51:cd:eb:3d:08:0f:1b:e3:18:0a:2d:12:25:ab: 8e:14:20:b6:34:aa:3e:d2:24:73:d7:49:a7:6c:c8: e1:d2:2f:90:ba:d3:4f:97:8e:0e:03:40:57:46:86: 0a:d4:6a:80:5b:ad:f8:5e:cc:21:32:6d:aa:9d:88: f9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E2:48:1A:6E:E9:55:9B:FE:EA:B0:06:5F:4E:81:40:C0:1E:B2:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/d86a3712-c3b9-3045-ada8-f4f640a943be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:0b:d8:36:73:94:58:75:b7:05:1f:c1:d4:c5:3c:88:a1:cd: 5f:f1:ae:f8:eb:18:3f:70:0d:a6:1e:ab:1e:c5:d0:d3:ea:b4: 66:71:b1:ba:12:b7:60:ee:c2:61:0d:8c:34:79:09:b1:68:6e: b4:44:39:2e:75:c6:02:4c:04:23:92:f3:86:a4:d6:7e:11:e2: 96:40:8f:26:3d:66:90:02:74:38:5d:12:9f:52:35:fb:25:59: 26:39:33:3a:2d:a6:ab:13:52:70:07:d6:0a:0a:88:05:56:26: 06:f4:98:3f:ad:b6:45:62:67:75:c2:72:b5:96:aa:a9:9f:81: df:5d:2f:53:18:e3:59:ea:87:08:2e:e2:2f:1c:e1:60:13:77: 3b:34:a4:c1:cf:43:3e:53:77:19:80:05:2e:7f:af:ac:bf:01: e6:59:b0:c5:d7:26:e1:0f:e7:b3:f2:5b:e4:78:73:5c:33:ed: 81:f5:d8:2f:c6:8b:b1:0c:cb:8b:cb:67:cb:32:44:63:d1:49: d4:80:0f:c3:0d:be:73:15:ed:da:8d:df:0a:e9:5d:46:cc:93: 4c:3f:96:13:ba:9b:81:e3:62:fb:b4:3d:f2:b7:3c:e7:4b:38: 81:a6:45:e6:16:78:bc:26:8b:85:d7:d7:1f:ea:c1:be:a3:18: af:45:84:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5oP2RLxmoTWMc7PUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDcwNjA5MDAxMloXDTI2MTAwNDA5MDAxMlowLzEtMCsGA1UEAxMk YmI1NDYzNzctMWJiMi00NDZmLTkxYmEtNzllNDI4OTczY2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8PsduGhjj/ghe9S3sngA+S6RX5g2dkATX0Y OsSRvG4iBBA8WlO2tlx3kkL1O3dgOHvqg4Ty3ESg0DiFqP9GPdR8rEEh7h2epvHT PWVWqd4NRzhqMELHGmPtmF3UG5lopXRC6ZsmBtV++vBv95bybLRyGbJI1mFfybNK fm5LmOKUGRvqp4x/9R4BQ7pQTZEVYAeBfHF3Pv454PlgvKpKIgfT/wEwBeQgFebn bSQHF6KP1LbuzqvXE1fSnSOvG7mhcHu/Uc3rPQgPG+MYCi0SJauOFCC2NKo+0iRz 10mnbMjh0i+QutNPl44OA0BXRoYK1GqAW634XswhMm2qnYj5VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbiSBpu6VWb/uqwBl9OgUDAHrIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvZDg2YTM3MTItYzNiOS0z MDQ1LWFkYTgtZjRmNjQwYTk0M2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYL2DZzlFh1twUfwdTFPIihzV/xrvjrGD9wDaYeqx7F0NPqtGZxsboS t2DuwmENjDR5CbFobrREOS51xgJMBCOS84ak1n4R4pZAjyY9ZpACdDhdEp9SNfsl WSY5MzotpqsTUnAH1goKiAVWJgb0mD+ttkViZ3XCcrWWqqmfgd9dL1MY41nqhwgu 4i8c4WATdzs0pMHPQz5TdxmABS5/r6y/AeZZsMXXJuEP57PyW+R4c1wz7YH12C/G i7EMy4vLZ8syRGPRSdSAD8MNvnMV7dqN3wrpXUbMk0w/lhO6m4HjYvu0PfK3POdL OIGmReYWeLwmi4XX1x/qwb6jGK9FhKk= -----END CERTIFICATE-----Generated at Fri Jul 24 19:12:08 2026 by rpki-client