$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa File: 79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa (raw, json) Hash identifier: +KxffY1QZuh06z3Sr/nxLceQ/UC6h0AHyIuKlXwPjzQ= Subject key identifier: 46:39:CC:39:3C:AE:1F:21:48:6F:E7:6E:4A:76:77:E2:E7:B1:DB:5D Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584D59EA4D080CC1F6A63682A840 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 26658 IP address blocks: 172.87.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:4d:08:0c:c1:f6:a6:36:82:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=2890be04-092d-467b-916e-c562ea24c3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:77:55:ae:02:ad:0e:2f:cf:cf:52:bd:23:e3: 09:86:3a:61:35:5c:4c:ac:50:08:bc:22:45:5a:62: 89:68:b1:09:e9:19:99:f3:c6:19:3d:28:61:63:e0: 98:9f:14:26:6e:77:c7:5e:19:e0:6e:44:47:bd:2d: 8b:70:d1:0a:d1:3a:1b:42:f6:fa:71:84:35:bc:3e: 43:10:b7:74:cf:63:22:c6:8f:38:25:fb:1c:e5:32: f6:79:4a:6d:cf:bb:20:c9:a9:61:07:53:f4:1f:4f: 3c:0b:65:cd:d0:5d:db:c3:3f:46:07:fc:48:f1:9e: 2c:8d:b7:98:83:ae:6c:40:1d:23:9a:49:f6:27:65: cd:d9:77:8a:b0:46:63:8b:a6:a0:f4:fe:d0:57:05: b1:33:9b:1d:f9:1b:8f:dc:99:5d:66:10:47:72:7a: 42:af:4c:48:98:b6:df:0f:69:99:8b:fd:db:3b:70: 3b:6f:9f:ec:cc:3d:b8:98:77:23:1c:db:e6:93:85: cf:55:11:43:cc:87:21:6b:e2:ea:9f:4e:75:4e:d9: d7:7f:2f:a0:b5:a7:87:af:c9:f4:ac:e4:2c:d6:87: 45:62:8b:0f:a8:60:7f:6b:94:9f:d2:33:b6:84:63: e9:a4:6b:1d:dc:22:7e:d0:f1:61:6a:72:99:8f:ca: 10:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:39:CC:39:3C:AE:1F:21:48:6F:E7:6E:4A:76:77:E2:E7:B1:DB:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:73:94:f4:a5:b5:6a:02:73:af:82:32:f1:13:ef:f3:d4:62: 7a:41:98:02:1d:5b:b7:be:ce:24:4c:6b:1d:d2:3f:59:36:34: 31:48:4a:29:0f:9a:6c:3c:69:05:e0:f9:65:df:9a:c2:d4:94: c2:f9:7a:9b:b7:a5:e1:b6:59:49:26:ed:7c:92:ae:fb:29:ec: 58:ba:92:e3:36:2b:4c:95:93:1b:f5:04:58:bf:8d:ef:70:ed: e3:65:8e:fc:98:89:78:cc:19:1f:ad:19:3e:2e:36:26:36:f2: 3b:a4:88:9a:76:7e:dd:a4:c7:c8:10:0e:af:80:55:3d:86:7d: 09:b4:84:11:22:a5:df:3f:95:b1:7c:5c:3c:36:e4:c2:45:d3: 76:b9:07:6c:e2:d8:aa:05:ac:ab:36:29:dd:43:7f:05:90:ef: 45:9e:00:28:86:98:75:b4:3e:de:0f:20:d8:52:8a:76:a0:3a: dd:b4:ac:9d:0e:a7:7f:57:8c:5e:ef:44:f7:e1:08:5b:a5:cf: 5e:a2:93:8a:30:14:9f:8c:54:a9:b7:c4:47:d4:07:c7:2e:a9: e4:5c:95:bd:8b:4f:f9:81:5c:a8:48:b9:c3:cd:cc:e6:cf:77: f9:a3:d6:d1:0e:74:7b:b3:4a:43:8f:07:a8:8c:9c:43:4b:11: b2:51:dc:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6k0IDMH2pjaCqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk Mjg5MGJlMDQtMDkyZC00NjdiLTkxNmUtYzU2MmVhMjRjM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXdVrgKtDi/Pz1K9I+MJhjphNVxMrFAIvCJF WmKJaLEJ6RmZ88YZPShhY+CYnxQmbnfHXhngbkRHvS2LcNEK0TobQvb6cYQ1vD5D ELd0z2Mixo84Jfsc5TL2eUptz7sgyalhB1P0H088C2XN0F3bwz9GB/xI8Z4sjbeY g65sQB0jmkn2J2XN2XeKsEZji6ag9P7QVwWxM5sd+RuP3JldZhBHcnpCr0xImLbf D2mZi/3bO3A7b5/szD24mHcjHNvmk4XPVRFDzIcha+Lqn051TtnXfy+gtaeHr8n0 rOQs1odFYosPqGB/a5Sf0jO2hGPppGsd3CJ+0PFhanKZj8oQ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY5zDk8rh8hSG/nbkp2d+LnsdtdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNzlhYjQxZDItODY3Yi0z YTVmLWE2MWMtNzI2YzJiMWNjZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFfBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJzlPSltWoCc6+CMvET7/PUYnpBmAIdW7e+ziRMax3SP1k2NDFISikP mmw8aQXg+WXfmsLUlML5epu3peG2WUkm7XySrvsp7Fi6kuM2K0yVkxv1BFi/je9w 7eNljvyYiXjMGR+tGT4uNiY28jukiJp2ft2kx8gQDq+AVT2GfQm0hBEipd8/lbF8 XDw25MJF03a5B2zi2KoFrKs2Kd1DfwWQ70WeACiGmHW0Pt4PINhSinagOt20rJ0O p39XjF7vRPfhCFulz16ik4owFJ+MVKm3xEfUB8cuqeRclb2LT/mBXKhIucPNzObP d/mj1tEOdHuzSkOPB6iMnENLEbJR3DU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:35:26 2026 by rpki-client