$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa File: 524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa (raw, json) Hash identifier: GlJFT7EFQDNWVFa2oMlKQMsidReiPmj5D4F78rBO5tg= Subject key identifier: AB:B1:7B:58:2A:E2:F7:40:4B:ED:A8:79:B6:45:E6:4A:B0:94:74:FD Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584EA0153CD1A66A7E577391EE80 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 26658 IP address blocks: 104.128.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:3c:d1:a6:6a:7e:57:73:91:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=6da07b62-2eee-4624-9bf9-2f9847e5fcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:23:8b:21:76:c9:68:e1:1b:b0:79:79:03:d9: 79:3b:68:29:c0:be:d3:df:f5:c2:5e:d5:a6:2d:62: 2a:ea:35:81:09:d3:53:cd:3e:ae:ad:29:76:ee:1d: 4a:b0:6a:b5:8d:37:f5:b1:ad:ef:c0:a2:26:bb:9c: 73:fa:d1:33:04:c4:c7:dd:79:5c:6c:7a:42:d3:8d: cf:bf:da:97:f0:e4:fe:58:44:6b:ab:31:23:c8:9f: 66:de:f6:bd:e6:7b:f4:41:c4:26:e4:ec:99:fb:80: 73:fb:73:44:d9:25:56:ae:19:1e:c8:d5:4d:c8:5d: d1:2a:f0:41:a7:6d:80:41:32:32:1e:ae:e1:ba:80: b5:7a:61:23:0a:a0:0b:c5:da:5f:5f:15:34:15:6f: 78:ba:7c:67:6b:a8:86:8b:0b:48:2f:82:3f:ef:a6: ff:70:20:8e:cb:99:58:65:f5:98:41:bf:d5:a1:d1: 5f:b3:9a:4f:07:f3:fb:b9:81:4f:60:40:69:d6:dd: 5a:e5:3d:c2:f4:0e:04:a2:48:07:38:71:3d:28:a1: c5:55:2b:32:bb:71:d6:37:54:b3:45:b1:9f:ec:15: 14:a1:6c:cb:94:0e:23:28:c7:be:ef:36:47:b7:88: bd:aa:f9:bc:f9:a5:b1:db:59:f4:6b:b5:67:3b:e9: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B1:7B:58:2A:E2:F7:40:4B:ED:A8:79:B6:45:E6:4A:B0:94:74:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.128.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c0:75:4d:79:63:85:22:9f:02:5e:6f:6f:4c:ea:4e:5a:53: 30:92:77:cb:18:2a:d1:69:2b:f8:2b:0c:22:db:dc:98:5b:24: c7:e9:03:b6:12:3b:7e:59:b4:19:13:2d:87:01:a5:2a:42:0d: 69:d1:9b:74:e2:80:34:e6:ab:0e:8b:c5:fd:52:cd:8a:f3:89: 01:83:42:da:ff:91:54:a1:fe:1a:11:ca:26:3e:d0:a7:8d:85: 69:af:14:28:c1:4d:87:ac:1f:37:21:dd:1c:9f:44:23:ad:eb: 45:b1:d8:17:88:4f:b7:a3:e8:ce:f3:c2:60:ab:97:66:9b:a1: 2d:9b:56:76:49:bb:b5:ce:29:df:3e:1f:63:b2:6f:78:6a:8f: 82:88:84:2c:30:97:a9:5b:b2:80:77:26:78:03:24:61:7e:3f: de:0e:8f:d1:9d:85:70:ba:96:61:4c:88:82:9a:31:81:c4:11: da:9e:b1:06:4d:d0:1f:58:17:8f:04:7d:69:71:3a:23:07:01: 9e:8f:ea:fa:d5:c7:86:bc:b0:43:92:d8:58:c8:1f:16:78:c9: d4:0a:6f:d4:57:10:aa:4f:28:f5:52:2e:5e:57:a8:78:af:86: 2c:9b:21:b9:6a:d2:36:09:74:5e:04:58:c4:5c:40:fe:44:af: 5a:ee:26:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFTzRpmp+V3OR7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk NmRhMDdiNjItMmVlZS00NjI0LTliZjktMmY5ODQ3ZTVmY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iOLIXbJaOEbsHl5A9l5O2gpwL7T3/XCXtWm LWIq6jWBCdNTzT6urSl27h1KsGq1jTf1sa3vwKImu5xz+tEzBMTH3XlcbHpC043P v9qX8OT+WERrqzEjyJ9m3va95nv0QcQm5OyZ+4Bz+3NE2SVWrhkeyNVNyF3RKvBB p22AQTIyHq7huoC1emEjCqALxdpfXxU0FW94unxna6iGiwtIL4I/76b/cCCOy5lY ZfWYQb/VodFfs5pPB/P7uYFPYEBp1t1a5T3C9A4EokgHOHE9KKHFVSsyu3HWN1Sz RbGf7BUUoWzLlA4jKMe+7zZHt4i9qvm8+aWx21n0a7VnO+lv7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuxe1gq4vdAS+2oebZF5kqwlHT9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNTI0YjU5Y2YtMWZiNC0z MmE4LTg2Y2ItZDdiY2Q3ZmFkNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDAdU15Y4UinwJeb29M6k5aUzCSd8sYKtFpK/grDCLb3JhbJMfpA7YS O35ZtBkTLYcBpSpCDWnRm3TigDTmqw6Lxf1SzYrziQGDQtr/kVSh/hoRyiY+0KeN hWmvFCjBTYesHzch3RyfRCOt60Wx2BeIT7ej6M7zwmCrl2aboS2bVnZJu7XOKd8+ H2Oyb3hqj4KIhCwwl6lbsoB3JngDJGF+P94Oj9GdhXC6lmFMiIKaMYHEEdqesQZN 0B9YF48EfWlxOiMHAZ6P6vrVx4a8sEOS2FjIHxZ4ydQKb9RXEKpPKPVSLl5XqHiv hiybIblq0jYJdF4EWMRcQP5Er1ruJsI= -----END CERTIFICATE-----Generated at Wed Jul 29 02:23:19 2026 by rpki-client