$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa File: 31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa (raw, json) Hash identifier: sZtnUNs62PogIlCXfZNbRZO6amjWivuocEEapOSecZg= Subject key identifier: 9C:6E:9F:07:90:F7:91:D5:35:23:0F:D2:98:9C:1A:7E:76:E7:14:6A Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584D59EA5E4A34B647BE6A07D500 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 26658 IP address blocks: 172.87.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5e:4a:34:b6:47:be:6a:07:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=22c8eb74-4494-4037-a732-5e20df88a094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:eb:fd:5c:80:6e:20:36:25:84:08:ad:87: 58:11:5e:ee:27:3c:6b:f3:d3:f1:b5:a4:3c:cf:e1: 53:7e:37:9a:6c:77:ba:4b:a7:7d:43:af:fc:be:37: 4a:06:37:b4:ef:35:b2:34:af:6a:ab:94:43:a3:66: 28:44:52:4f:ea:20:a9:b4:f4:11:87:ce:31:89:3d: d0:16:a2:6c:b9:9f:ec:e4:fa:ad:2b:4b:5e:cb:c7: 93:d0:64:45:9f:ba:4c:19:00:33:9e:ad:57:c4:a1: 21:c3:c2:e0:3a:5e:c6:c1:f0:9f:1d:e9:c1:ae:42: d3:d1:3a:a0:99:23:10:bf:da:4c:c7:d4:a0:fb:f6: d6:9f:9f:e3:80:29:d7:8b:10:32:9d:91:31:88:b3: 9b:e8:8a:8e:88:6e:c0:4b:4f:e3:49:6b:65:0d:ad: 69:0e:b4:04:3a:cb:b1:ed:03:65:b3:2e:4c:ec:b3: b3:5d:b2:08:82:c4:7e:35:b0:0d:0f:ee:a5:7a:8f: e5:46:26:41:ef:27:2e:a2:3f:be:51:cb:2a:82:81: 3e:13:6b:df:c2:27:7b:d9:d4:db:83:5d:1c:ef:72: 89:2d:60:3c:5f:4c:b7:50:06:ad:d7:67:a9:a6:2f: bc:e6:f2:49:26:32:c1:cd:a3:70:9d:b2:b2:91:99: e2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6E:9F:07:90:F7:91:D5:35:23:0F:D2:98:9C:1A:7E:76:E7:14:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:87:71:c7:bb:f2:1f:72:60:6d:c1:2a:56:13:2f:9f:28:b1: 47:f1:b8:d7:16:c6:f1:28:f4:b1:ca:cb:78:09:70:71:62:b0: c4:17:bb:72:79:7a:ea:ca:a1:a7:5c:00:85:85:dc:63:8d:96: f4:26:a4:45:8f:4b:8f:8d:19:ca:a6:8f:ac:34:a0:0d:24:79: a0:0d:97:3c:16:10:d7:ae:fa:6f:c0:a1:bf:fb:3d:28:8f:7a: 08:9e:f9:a2:81:18:32:be:1d:04:a0:02:25:20:6a:33:b8:63: f0:fd:a9:81:7f:c2:be:56:7e:0d:36:61:e6:47:32:37:68:d5: 7c:aa:56:66:56:d1:dc:bd:1f:28:b2:e0:94:0c:26:4d:f6:50: 0e:e5:0f:89:06:08:6f:42:64:02:02:94:54:51:e6:7d:04:7e: 8a:67:20:de:87:f8:a7:8f:f2:40:11:0b:5d:83:ba:83:dc:d2: 2f:7e:6d:d3:01:47:74:0a:3b:db:53:f4:cf:cc:74:cb:83:ce: b6:e8:24:16:c1:ba:b6:5b:1a:63:d9:c1:c6:50:68:f8:6e:9a: 4c:9a:49:f0:62:5e:2d:40:07:aa:78:2b:5f:35:b3:34:c0:46: 8c:61:b2:08:a4:64:6c:79:92:7d:c8:da:84:c6:d4:68:c3:c2: 82:ec:a4:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6l5KNLZHvmoH1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MjJjOGViNzQtNDQ5NC00MDM3LWE3MzItNWUyMGRmODhhMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvjr/VyAbiA2JYQIrYdYEV7uJzxr89PxtaQ8 z+FTfjeabHe6S6d9Q6/8vjdKBje07zWyNK9qq5RDo2YoRFJP6iCptPQRh84xiT3Q FqJsuZ/s5PqtK0tey8eT0GRFn7pMGQAznq1XxKEhw8LgOl7GwfCfHenBrkLT0Tqg mSMQv9pMx9Sg+/bWn5/jgCnXixAynZExiLOb6IqOiG7AS0/jSWtlDa1pDrQEOsux 7QNlsy5M7LOzXbIIgsR+NbAND+6leo/lRiZB7ycuoj++UcsqgoE+E2vfwid72dTb g10c73KJLWA8X0y3UAat12eppi+85vJJJjLBzaNwnbKykZni5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxunweQ95HVNSMP0picGn525xRqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMzFmNDdlZTgtZGQ4Zi0z NjEzLWI0ZDAtYTA5ZGYyYTdjYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFfIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiHcce78h9yYG3BKlYTL58osUfxuNcWxvEo9LHKy3gJcHFisMQXu3J5 eurKoadcAIWF3GONlvQmpEWPS4+NGcqmj6w0oA0keaANlzwWENeu+m/Aob/7PSiP egie+aKBGDK+HQSgAiUgajO4Y/D9qYF/wr5Wfg02YeZHMjdo1XyqVmZW0dy9Hyiy 4JQMJk32UA7lD4kGCG9CZAIClFRR5n0EfopnIN6H+KeP8kARC12DuoPc0i9+bdMB R3QKO9tT9M/MdMuDzrboJBbBurZbGmPZwcZQaPhumkyaSfBiXi1AB6p4K181szTA RoxhsgikZGx5kn3I2oTG1GjDwoLspGk= -----END CERTIFICATE-----Generated at Fri Apr 17 12:48:49 2026 by rpki-client