$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa File: b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa (raw, json) Hash identifier: MMhCUyUK6JEgocKxFoEk5JP37WwjZwg1KNfV6WwXY1E= Subject key identifier: 06:38:61:6A:A5:9E:2F:9B:CB:19:F8:F1:BD:2C:9A:83:6C:66:1D:2D Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584F119CE8A733F65C6487990980 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 36352 IP address blocks: 104.143.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e8:a7:33:f6:5c:64:87:99:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=d56511bf-6fc3-41fc-af0c-5cd4aff32752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:48:4b:7a:5d:5a:34:57:78:8f:86:97:6b: 82:7c:a6:0c:10:50:9a:d1:fd:57:df:0e:3b:b2:41: bf:18:ba:cb:b1:bd:0e:ad:67:02:8b:9d:9c:66:15: 23:c7:a7:51:8e:47:c6:bc:c8:98:14:a8:99:9a:da: 47:f2:12:94:28:fc:e0:81:17:0e:5d:3d:28:37:f2: c7:33:b9:89:41:da:c3:5d:c1:69:33:0d:34:ed:4e: bf:83:ac:4a:01:d0:71:53:07:b0:a6:40:9e:8b:34: 6b:41:97:28:1d:54:f7:14:19:95:1c:08:b3:03:a3: 1f:ea:ab:f2:c9:2b:07:68:0a:42:3a:2f:33:bf:a2: c6:74:f9:50:c7:71:d5:60:46:f2:77:7a:56:17:11: ad:22:2d:5e:bf:25:a1:81:04:e5:e7:55:b7:7e:a8: 42:93:cb:bf:da:bf:0d:76:38:cc:1d:ac:f1:69:f7: 2e:0c:1a:5f:93:6f:5d:96:e3:54:01:04:42:b2:e3: ff:a1:7b:9b:bc:68:a4:b0:cc:c3:1b:6b:71:d7:a1: 27:cf:b7:42:6e:1a:3d:0c:15:d8:39:f0:60:90:08: d8:51:fe:66:03:47:72:6b:dd:b7:4f:e6:cf:86:3b: 27:eb:12:bd:6c:7d:e8:a5:56:73:f4:8c:b9:75:a2: f1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:38:61:6A:A5:9E:2F:9B:CB:19:F8:F1:BD:2C:9A:83:6C:66:1D:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fd:f9:2a:e6:aa:0a:11:da:5d:c9:da:d8:3a:6d:36:f3:36: b0:b7:70:20:9d:42:23:cc:7e:b3:c0:36:d6:ad:06:ed:47:f4: 3a:51:81:3e:2f:22:5d:c9:49:93:91:9a:86:1b:d8:ba:4b:9b: e4:7f:c7:64:66:e5:2b:ab:26:26:94:9a:96:cb:42:e0:0b:e4: a4:ed:cb:34:10:b7:45:63:18:d9:76:47:a5:53:e4:df:63:48: 05:41:12:5e:74:99:d1:90:61:1f:a6:d4:e4:fa:94:61:d7:18: b2:7e:8f:d9:c3:25:e9:de:36:c1:94:cf:96:6c:f1:70:28:bc: 5e:18:e6:45:dc:c5:9d:4f:39:db:f6:a4:33:b9:62:68:d4:22: 16:fc:ee:2c:b1:2e:53:ba:da:b7:a8:eb:98:d8:61:d9:2f:89: 32:e6:2a:af:be:eb:f4:11:52:fc:a6:27:ac:fb:23:ef:6f:cf: 61:9e:72:07:62:de:e3:42:b3:86:cd:4f:32:7f:a7:8a:50:b5: b2:5e:73:95:b7:be:44:96:bf:ca:8f:35:50:d1:f0:0f:43:87: 89:bf:96:91:00:92:78:82:7d:7e:83:30:6c:cb:8f:2f:83:44: e3:88:31:fa:87:f2:62:35:ec:c2:10:95:61:e4:60:cd:ea:69: d9:79:3a:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOinM/ZcZIeZCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDU2NTExYmYtNmZjMy00MWZjLWFmMGMtNWNkNGFmZjMyNzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvVIS3pdWjRXeI+Gl2uCfKYMEFCa0f1X3w47 skG/GLrLsb0OrWcCi52cZhUjx6dRjkfGvMiYFKiZmtpH8hKUKPzggRcOXT0oN/LH M7mJQdrDXcFpMw007U6/g6xKAdBxUwewpkCeizRrQZcoHVT3FBmVHAizA6Mf6qvy ySsHaApCOi8zv6LGdPlQx3HVYEbyd3pWFxGtIi1evyWhgQTl51W3fqhCk8u/2r8N djjMHazxafcuDBpfk29dluNUAQRCsuP/oXubvGiksMzDG2tx16Enz7dCbho9DBXY OfBgkAjYUf5mA0dya923T+bPhjsn6xK9bH3opVZz9Iy5daLxkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY4YWqlni+byxn48b0smoNsZh0tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvYjAyOGUwZjktNDc4ZS0z ZTM4LWE4YzUtNTc4OWVlNGY3ZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX9+SrmqgoR2l3J2tg6bTbzNrC3cCCdQiPMfrPANtatBu1H9DpRgT4v Il3JSZORmoYb2LpLm+R/x2Rm5SurJiaUmpbLQuAL5KTtyzQQt0VjGNl2R6VT5N9j SAVBEl50mdGQYR+m1OT6lGHXGLJ+j9nDJeneNsGUz5Zs8XAovF4Y5kXcxZ1POdv2 pDO5YmjUIhb87iyxLlO62reo65jYYdkviTLmKq++6/QRUvymJ6z7I+9vz2Gecgdi 3uNCs4bNTzJ/p4pQtbJec5W3vkSWv8qPNVDR8A9Dh4m/lpEAkniCfX6DMGzLjy+D ROOIMfqH8mI17MIQlWHkYM3qadl5Ouk= -----END CERTIFICATE-----Generated at Tue Sep 22 14:06:10 2026 by rpki-client