$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/91d10d04-d56b-3251-ab6a-17d723896f38.roa File: 91d10d04-d56b-3251-ab6a-17d723896f38.roa (raw, json) Hash identifier: QfCi36BfeC5y5iWfFRYfRYSyySQ8PRDw3R1YGO/MQoM= Subject key identifier: AB:D4:6C:C6:1A:6B:7A:BB:38:C5:58:15:68:04:6E:96:65:D5:22:90 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584D87FA8B9464970ABD4A9F0E00 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/91d10d04-d56b-3251-ab6a-17d723896f38.roa Signing time: Fri 17 Apr 2026 01:00:27 +0000 ROA not before: Fri 17 Apr 2026 01:00:27 +0000 ROA not after: Thu 16 Jul 2026 01:00:27 +0000 asID: 18779 IP address blocks: 104.143.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:8b:94:64:97:0a:bd:4a:9f:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Apr 17 01:00:27 2026 GMT Not After : Jul 16 01:00:27 2026 GMT Subject: CN=9e6ba546-f322-47e4-a0ae-f719e210f012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4c:53:58:a4:88:d1:80:4f:e5:fe:bf:3e:56: d6:36:e0:3f:de:ae:84:a8:a4:eb:58:50:73:d5:b3: 56:91:3f:9d:e3:a6:7a:de:a2:85:58:ff:21:e5:f1: 66:8f:a4:38:e3:88:8c:f4:12:7b:57:2c:48:03:5e: a8:5d:3d:b2:94:c7:05:ff:58:63:c7:b7:a4:b6:f8: a6:29:4c:04:9b:5f:2f:f3:34:19:a2:2f:7c:82:36: 97:11:f6:0f:3c:bf:66:f0:a4:b9:d0:72:53:fd:fb: 59:c4:70:21:98:45:16:6a:21:63:ff:be:d2:d8:06: d0:16:06:62:20:7f:8e:d1:54:86:6b:f7:1b:91:b2: 25:78:c6:32:c9:56:9b:04:87:f8:a9:88:df:86:fb: 01:59:cc:9d:71:03:1f:70:52:45:e4:7e:3d:65:aa: 1b:82:31:74:87:48:2f:ef:7d:b0:46:e9:19:e9:9f: 8a:ea:87:a2:4d:ed:dc:a2:54:ef:03:54:9f:2f:1b: ae:9d:34:84:6c:07:c8:62:d4:8e:a7:f9:72:86:fd: 15:ce:6c:69:af:08:51:d7:45:7f:8d:72:65:53:16: 82:32:fa:b9:0f:2d:6f:88:5f:ef:d8:35:8a:23:94: c8:79:3f:d3:e0:35:00:3d:01:2c:ca:e4:1c:e3:0f: 71:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D4:6C:C6:1A:6B:7A:BB:38:C5:58:15:68:04:6E:96:65:D5:22:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/91d10d04-d56b-3251-ab6a-17d723896f38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:e4:5d:92:b6:a6:85:76:80:76:7d:9b:d1:28:9b:df:25:44: 71:ab:9f:36:f0:cb:c1:6e:1d:3b:83:c2:93:a1:f4:1f:73:bb: 89:55:52:06:a5:ae:9c:c0:c1:7f:3c:c4:16:fb:98:80:b3:e5: c2:40:54:a9:2d:ac:f9:ec:22:b6:6c:98:ca:47:70:91:b7:23: 1d:34:d2:a2:03:e1:8d:df:80:79:c7:bb:6b:d3:b7:e6:e8:b3: 0d:38:8d:3a:69:7f:a0:a5:c4:02:fb:60:d9:5a:a5:83:7a:de: c4:59:21:2a:ea:61:86:48:db:f5:73:7b:84:68:bf:71:bb:82: 2d:b8:dd:24:59:90:a9:42:02:cd:a0:8c:9a:98:16:f6:57:ca: 25:1b:cd:6e:33:94:3f:dc:8b:3c:0b:cd:48:bb:a8:81:c8:9f: 8d:42:78:61:05:2c:96:36:8b:2f:cc:c7:6a:86:32:42:d1:1c: 78:04:08:7f:d7:0c:68:d8:30:2e:d8:88:2e:d9:18:db:e6:d2: a1:2e:88:ec:10:d1:90:ac:1e:40:e3:27:7b:e6:e7:48:7a:0a: 0e:8f:6d:88:3e:ec:ea:28:05:85:d7:9f:95:b0:8f:e6:0b:a9: 22:09:9d:d3:1c:93:4b:28:c8:a9:2e:00:20:cc:58:93:88:9b: 13:cf:dd:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2H+ouUZJcKvUqfDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk OWU2YmE1NDYtZjMyMi00N2U0LWEwYWUtZjcxOWUyMTBmMDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0xTWKSI0YBP5f6/PlbWNuA/3q6EqKTrWFBz 1bNWkT+d46Z63qKFWP8h5fFmj6Q444iM9BJ7VyxIA16oXT2ylMcF/1hjx7ektvim KUwEm18v8zQZoi98gjaXEfYPPL9m8KS50HJT/ftZxHAhmEUWaiFj/77S2AbQFgZi IH+O0VSGa/cbkbIleMYyyVabBIf4qYjfhvsBWcydcQMfcFJF5H49ZaobgjF0h0gv 732wRukZ6Z+K6oeiTe3colTvA1SfLxuunTSEbAfIYtSOp/lyhv0VzmxprwhR10V/ jXJlUxaCMvq5Dy1viF/v2DWKI5TIeT/T4DUAPQEsyuQc4w9xpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvUbMYaa3q7OMVYFWgEbpZl1SKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvOTFkMTBkMDQtZDU2Yi0z MjUxLWFiNmEtMTdkNzIzODk2ZjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTkXZK2poV2gHZ9m9Eom98lRHGrnzbwy8FuHTuDwpOh9B9zu4lVUgal rpzAwX88xBb7mICz5cJAVKktrPnsIrZsmMpHcJG3Ix000qID4Y3fgHnHu2vTt+bo sw04jTppf6ClxAL7YNlapYN63sRZISrqYYZI2/Vze4Rov3G7gi243SRZkKlCAs2g jJqYFvZXyiUbzW4zlD/cizwLzUi7qIHIn41CeGEFLJY2iy/Mx2qGMkLRHHgECH/X DGjYMC7YiC7ZGNvm0qEuiOwQ0ZCsHkDjJ3vm50h6Cg6PbYg+7OooBYXXn5Wwj+YL qSIJndMck0soyKkuACDMWJOImxPP3fY= -----END CERTIFICATE-----Generated at Fri Apr 17 16:52:25 2026 by rpki-client