$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/a2212d2b-8250-3896-b964-9c6440e53224.roa File: a2212d2b-8250-3896-b964-9c6440e53224.roa (raw, json) Hash identifier: LyyX/0n2irk/S8cVhWM0u1d5H580BhJ0L0LkkdESuFI= Subject key identifier: 8A:0B:39:13:9D:68:F1:B2:DB:79:43:64:29:93:DA:D0:82:9F:FA:C4 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584D59EA5DF9F8438E113F76AE80 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/a2212d2b-8250-3896-b964-9c6440e53224.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 26658 IP address blocks: 172.87.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5d:f9:f8:43:8e:11:3f:76:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=c69ff1f0-426a-4ddf-befd-749aee25d049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cc:f3:85:e1:ec:24:4c:e0:9a:a1:1d:ac:36: ec:c6:7d:3c:dc:ce:cb:f9:e9:5a:14:e2:0b:8d:28: cd:0a:b8:3d:4c:f5:6b:a8:f2:bd:f7:2a:af:4a:e4: 18:03:1d:51:83:fa:c8:64:71:c6:7d:61:01:03:8e: 4d:06:2f:8a:ac:a1:22:d2:7f:cd:90:f6:45:bf:37: d2:4c:95:3c:df:ae:35:77:84:94:48:59:cd:08:f4: 28:d6:b6:e5:0d:ae:6a:58:9c:07:d9:dd:e5:5c:22: c1:1c:54:03:19:2b:25:72:fb:7e:6a:ca:2c:33:94: 9a:f5:0d:00:6a:be:40:9c:e6:b2:a9:90:87:f0:70: 3f:c0:12:e3:6b:b6:1f:55:10:86:55:e8:64:ac:68: da:f3:b6:dd:4f:6d:49:aa:93:fe:f8:5a:e0:65:c0: bd:0a:65:4d:34:c8:94:11:74:97:ba:08:85:b7:f7: 34:ad:58:53:d0:fa:25:84:95:ea:91:97:aa:b6:f5: cb:81:44:f1:24:fc:57:7c:a6:38:d2:23:c8:ba:2e: 7b:af:ee:ce:69:a6:07:75:2b:7f:52:27:a2:15:f5: 95:76:02:9a:79:09:7a:2d:7a:61:2a:10:90:87:2f: 0b:10:7e:bf:0b:ba:17:f4:51:06:6c:84:f4:c6:e2: 89:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0B:39:13:9D:68:F1:B2:DB:79:43:64:29:93:DA:D0:82:9F:FA:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/a2212d2b-8250-3896-b964-9c6440e53224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:26:54:f2:8c:f3:86:e4:a2:e9:4c:e0:b1:22:08:4b:86:e6: b5:07:ff:c0:14:63:8e:3a:9c:47:73:a7:1e:40:02:e1:1a:4a: 0b:9d:fb:da:05:a8:f3:dd:82:56:42:4f:e4:3b:07:0b:2c:13: 7e:ef:0f:00:37:cd:40:5a:4e:27:00:e0:15:a2:8d:04:c8:74: e9:74:2d:ee:8d:50:4a:77:11:6a:e9:0e:b3:d9:f5:dd:4a:f1: 09:b3:85:94:5d:ac:73:b6:84:00:6b:ad:d8:f4:b4:24:88:7f: c0:2a:49:1d:ee:91:86:69:f5:bf:ee:90:98:fd:00:c9:62:3f: 93:60:f3:94:62:24:9c:f2:60:c8:29:cd:68:c6:1f:d4:7e:53: 8a:ac:10:d7:53:20:ee:9a:72:74:45:99:33:25:cc:78:02:5a: 79:cf:91:d6:30:50:60:a8:5f:d3:d8:ea:bb:2b:20:03:78:64: 82:25:b2:5b:50:ea:4c:2e:2d:df:92:f2:37:74:9c:f3:0b:81: 1b:b1:06:b0:32:29:55:90:64:0b:84:4c:54:f7:77:5b:18:4e: ad:05:e4:ea:f0:38:10:4d:d4:2c:75:79:e5:d0:e9:3f:b5:dd: 9d:1a:5f:83:48:c6:6b:cd:9d:78:97:7b:c5:f0:3e:a3:dd:c1: f0:1e:c2:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6l35+EOOET92roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YzY5ZmYxZjAtNDI2YS00ZGRmLWJlZmQtNzQ5YWVlMjVkMDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8zzheHsJEzgmqEdrDbsxn083M7L+elaFOIL jSjNCrg9TPVrqPK99yqvSuQYAx1Rg/rIZHHGfWEBA45NBi+KrKEi0n/NkPZFvzfS TJU83641d4SUSFnNCPQo1rblDa5qWJwH2d3lXCLBHFQDGSslcvt+asosM5Sa9Q0A ar5AnOayqZCH8HA/wBLja7YfVRCGVehkrGja87bdT21JqpP++FrgZcC9CmVNNMiU EXSXugiFt/c0rVhT0PolhJXqkZeqtvXLgUTxJPxXfKY40iPIui57r+7OaaYHdSt/ UieiFfWVdgKaeQl6LXphKhCQhy8LEH6/C7oX9FEGbIT0xuKJswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoLOROdaPGy23lDZCmT2tCCn/rEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvYTIyMTJkMmItODI1MC0z ODk2LWI5NjQtOWM2NDQwZTUzMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErFfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHomVPKM84bkoulM4LEiCEuG5rUH/8AUY446nEdzpx5AAuEaSgud+9oF qPPdglZCT+Q7BwssE37vDwA3zUBaTicA4BWijQTIdOl0Le6NUEp3EWrpDrPZ9d1K 8QmzhZRdrHO2hABrrdj0tCSIf8AqSR3ukYZp9b/ukJj9AMliP5Ng85RiJJzyYMgp zWjGH9R+U4qsENdTIO6acnRFmTMlzHgCWnnPkdYwUGCoX9PY6rsrIAN4ZIIlsltQ 6kwuLd+S8jd0nPMLgRuxBrAyKVWQZAuETFT3d1sYTq0F5OrwOBBN1Cx1eeXQ6T+1 3Z0aX4NIxmvNnXiXe8XwPqPdwfAewsg= -----END CERTIFICATE-----Generated at Fri Apr 17 15:57:36 2026 by rpki-client