$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2e5e5f22-1769-3091-9940-b1c8c063a660.roa File: 2e5e5f22-1769-3091-9940-b1c8c063a660.roa (raw, json) Hash identifier: rbv/QKcy9FrUyRzwhbXbz0VXsCJk+XRDPyQ6zx45yto= Subject key identifier: CC:12:02:E6:D1:B5:1F:7C:39:A2:BE:AE:CA:93:49:61:12:82:28:55 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584F11A14A22AAF130FBF96C5080 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2e5e5f22-1769-3091-9940-b1c8c063a660.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 36352 IP address blocks: 104.143.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:4a:22:aa:f1:30:fb:f9:6c:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=da1e9528-c9fa-4b69-bcfb-0e4ef9382a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cd:5f:bd:82:90:93:84:b1:e7:17:ab:48:a8: 62:54:ec:97:d7:06:3c:21:dc:b4:00:6f:94:a7:8d: ba:d9:b7:8d:af:aa:7f:57:cc:8d:84:0d:f0:4d:2c: e6:48:77:0a:3b:5d:dc:c0:67:83:b2:2a:80:5d:04: 4d:85:24:b5:06:d7:59:24:a4:a4:54:a6:9b:1e:83: 04:f7:b0:1f:64:b0:7d:24:dc:01:b8:6f:ad:fa:c0: 22:89:c9:9e:36:0f:98:92:ee:63:eb:69:ba:5a:d2: ff:e0:65:df:8f:60:92:b8:74:7b:b1:3a:b0:c1:da: e0:c6:5c:8c:82:73:51:5d:e0:bf:96:88:7a:89:17: d0:cb:6c:74:92:9d:59:7d:95:73:44:e8:a6:3c:e2: 3d:de:fe:d9:5d:e6:e5:df:88:22:81:c2:0b:b1:3a: 7a:1a:54:2a:87:56:89:10:78:e6:1c:71:81:6d:b9: c3:91:77:38:b6:03:ab:a6:61:56:db:8e:33:b1:ee: db:a5:18:42:24:b8:d8:a0:ed:7c:74:db:20:7c:27: 4c:7f:a6:a2:b1:33:1d:17:1d:48:0d:c8:3b:0b:68: d4:13:ae:f5:69:e7:42:e7:59:a8:51:5c:76:57:0c: 79:fa:65:37:6d:6e:f5:fd:41:99:4a:d2:33:49:89: 85:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:12:02:E6:D1:B5:1F:7C:39:A2:BE:AE:CA:93:49:61:12:82:28:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2e5e5f22-1769-3091-9940-b1c8c063a660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:10:df:c1:e5:85:c3:01:d9:86:b9:ca:32:29:eb:3e:0d:5f: 4c:0d:40:63:0e:e4:75:48:25:f3:69:64:4b:77:cd:98:64:7c: ec:f4:41:f5:cf:d0:5e:4d:c0:b2:4c:27:03:e6:75:44:ce:61: 67:e7:42:7c:21:f5:e7:79:8c:6b:c9:95:b4:90:08:e9:0e:32: 71:1f:61:98:49:cd:6a:66:aa:0a:97:bd:67:54:a7:44:17:e8: b4:35:f9:fb:dd:80:f3:fc:3a:29:fa:50:f4:52:67:56:96:b3: b6:e6:f8:56:75:c7:c6:6b:80:d1:46:35:0b:88:5b:5b:35:3b: d7:b8:77:c1:2e:2f:44:a7:12:f8:c6:6b:95:a2:24:15:ca:64: e9:59:d8:7b:95:86:42:71:d9:d6:b8:6f:9c:e6:22:51:80:12: 9a:50:a8:41:1e:be:76:d1:88:55:59:f4:7b:be:7c:c2:24:78: 5f:77:10:12:3b:5a:51:a2:d8:be:79:63:3f:0f:e7:ce:3f:0c: ae:64:f1:92:96:1d:53:7b:e9:4e:d8:18:fe:dd:7e:63:23:5d: e4:c5:8f:f0:97:f0:c7:79:40:50:c9:3b:3e:80:9b:8f:28:f1: 02:0e:84:44:8f:c5:37:dc:41:a0:45:03:a2:a7:80:a3:d0:52: 7c:a7:00:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoUoiqvEw+/lsUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGExZTk1MjgtYzlmYS00YjY5LWJjZmItMGU0ZWY5MzgyYTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg81fvYKQk4Sx5xerSKhiVOyX1wY8Idy0AG+U p4262beNr6p/V8yNhA3wTSzmSHcKO13cwGeDsiqAXQRNhSS1BtdZJKSkVKabHoME 97AfZLB9JNwBuG+t+sAiicmeNg+Yku5j62m6WtL/4GXfj2CSuHR7sTqwwdrgxlyM gnNRXeC/loh6iRfQy2x0kp1ZfZVzROimPOI93v7ZXebl34gigcILsTp6GlQqh1aJ EHjmHHGBbbnDkXc4tgOrpmFW244zse7bpRhCJLjYoO18dNsgfCdMf6aisTMdFx1I Dcg7C2jUE671aedC51moUVx2Vwx5+mU3bW71/UGZStIzSYmFQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwSAubRtR98OaK+rsqTSWESgihVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMmU1ZTVmMjItMTc2OS0z MDkxLTk5NDAtYjFjOGMwNjNhNjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwQ38HlhcMB2Ya5yjIp6z4NX0wNQGMO5HVIJfNpZEt3zZhkfOz0QfXP 0F5NwLJMJwPmdUTOYWfnQnwh9ed5jGvJlbSQCOkOMnEfYZhJzWpmqgqXvWdUp0QX 6LQ1+fvdgPP8Oin6UPRSZ1aWs7bm+FZ1x8ZrgNFGNQuIW1s1O9e4d8EuL0SnEvjG a5WiJBXKZOlZ2HuVhkJx2da4b5zmIlGAEppQqEEevnbRiFVZ9Hu+fMIkeF93EBI7 WlGi2L55Yz8P584/DK5k8ZKWHVN76U7YGP7dfmMjXeTFj/CX8Md5QFDJOz6Am48o 8QIOhESPxTfcQaBFA6KngKPQUnynAPw= -----END CERTIFICATE-----Generated at Tue Sep 22 17:46:45 2026 by rpki-client