$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/d86a3712-c3b9-3045-ada8-f4f640a943be.roa File: d86a3712-c3b9-3045-ada8-f4f640a943be.roa (raw, json) Hash identifier: D7y1cbc7Sd3kg1VdHWaPCY9+aGuk5gXW68cby+HPS3A= Subject key identifier: A1:7E:1D:BD:F2:DE:40:B3:06:B8:F7:DB:AB:5D:C0:B9:76:D8:65:70 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584D87FA90F917F337B078F7EF60 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/d86a3712-c3b9-3045-ada8-f4f640a943be.roa Signing time: Fri 17 Apr 2026 01:00:27 +0000 ROA not before: Fri 17 Apr 2026 01:00:27 +0000 ROA not after: Thu 16 Jul 2026 01:00:27 +0000 asID: 18779 IP address blocks: 104.143.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:90:f9:17:f3:37:b0:78:f7:ef:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Apr 17 01:00:27 2026 GMT Not After : Jul 16 01:00:27 2026 GMT Subject: CN=d9b667fc-0efe-4f51-97c3-dd3771d67098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:83:e0:ba:fd:10:de:3e:a2:94:c9:48:fa:0c: 2d:01:37:f9:e5:dc:67:2d:10:98:72:3e:06:ac:50: cb:61:8e:9f:fd:f6:ca:09:d6:41:29:75:11:b1:9c: 45:02:44:d3:2d:d3:55:a8:c7:ef:67:b0:4c:f1:b7: 2a:c7:f6:05:db:a9:64:9f:fd:26:a9:0a:37:ad:9f: 40:cb:31:1e:3a:91:6d:30:64:5d:3f:b2:c7:b9:3f: 19:e5:41:0a:5c:08:c3:7c:46:8a:7a:1a:e0:6e:83: 8f:03:50:94:24:14:28:e1:c3:1b:88:b3:12:4a:a6: 6a:84:cd:cb:5b:bd:a2:8a:fb:49:22:f4:02:e5:b4: d8:d3:0b:6d:a7:e0:e6:62:07:cb:4a:21:3f:07:ab: 26:89:98:2e:98:22:e4:aa:28:16:c3:b6:50:de:96: dd:c6:86:24:7d:28:ab:7d:3c:21:d1:92:01:18:64: 8c:f3:45:e4:89:eb:c2:a3:e1:8b:44:7b:11:70:96: 27:eb:cc:ae:1f:45:7e:2c:e0:ba:67:ca:15:a9:fa: 20:04:9c:75:34:01:47:13:23:17:c7:8e:ea:e4:49: 45:32:ef:dc:33:87:47:b1:7b:cc:5f:cf:d0:5e:21: 4c:44:a3:ea:68:15:43:00:16:0c:a0:49:8e:3d:2b: 20:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7E:1D:BD:F2:DE:40:B3:06:B8:F7:DB:AB:5D:C0:B9:76:D8:65:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/d86a3712-c3b9-3045-ada8-f4f640a943be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ca:32:4b:8e:42:f1:99:10:6a:44:1d:90:80:da:94:1b:71: 50:e4:c1:93:a6:38:43:01:63:3f:ed:f9:da:75:f2:29:85:3d: d4:d7:c0:58:c2:7c:cc:51:00:1c:aa:8b:b9:41:93:89:97:08: 4b:d4:34:fa:f9:15:e6:05:29:e5:a8:c8:71:2e:b1:ba:01:c0: 58:5a:04:8d:eb:de:84:3f:e2:88:1a:9d:9f:ca:00:f3:8d:b9: 20:23:79:38:67:60:70:23:cc:ae:d3:7a:fb:b0:4d:a7:85:90: fc:80:4a:22:7e:b2:95:6a:1e:a6:75:a4:b0:cb:82:a7:fe:9d: c8:65:4c:62:d7:0b:f3:04:6b:1a:02:f0:67:78:14:25:02:54: c4:8f:2c:19:d0:95:ec:bb:c1:67:31:02:8c:7e:5a:9d:7f:87: 68:4d:28:e4:e0:cf:2d:1a:33:18:17:90:c5:1b:6e:38:a4:00: 55:4f:ec:d9:ed:ab:22:f8:6e:22:16:5a:8a:3b:c8:76:85:2a: 3a:43:e4:8c:b4:ba:89:a9:27:c5:7c:cb:dd:1f:f5:d0:a2:87: 3c:58:29:62:76:c8:b9:3d:06:ab:59:7b:bf:ba:3c:4a:ae:ed: 07:6d:42:72:67:67:d4:02:0a:4c:eb:d9:ab:6e:f9:17:22:fd: 1e:5f:13:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2H+pD5F/M3sHj372AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk ZDliNjY3ZmMtMGVmZS00ZjUxLTk3YzMtZGQzNzcxZDY3MDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYPguv0Q3j6ilMlI+gwtATf55dxnLRCYcj4G rFDLYY6f/fbKCdZBKXURsZxFAkTTLdNVqMfvZ7BM8bcqx/YF26lkn/0mqQo3rZ9A yzEeOpFtMGRdP7LHuT8Z5UEKXAjDfEaKehrgboOPA1CUJBQo4cMbiLMSSqZqhM3L W72iivtJIvQC5bTY0wttp+DmYgfLSiE/B6smiZgumCLkqigWw7ZQ3pbdxoYkfSir fTwh0ZIBGGSM80XkievCo+GLRHsRcJYn68yuH0V+LOC6Z8oVqfogBJx1NAFHEyMX x47q5ElFMu/cM4dHsXvMX8/QXiFMRKPqaBVDABYMoEmOPSsgswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF+Hb3y3kCzBrj326tdwLl22GVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvZDg2YTM3MTItYzNiOS0z MDQ1LWFkYTgtZjRmNjQwYTk0M2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPKMkuOQvGZEGpEHZCA2pQbcVDkwZOmOEMBYz/t+dp18imFPdTXwFjC fMxRAByqi7lBk4mXCEvUNPr5FeYFKeWoyHEusboBwFhaBI3r3oQ/4oganZ/KAPON uSAjeThnYHAjzK7TevuwTaeFkPyASiJ+spVqHqZ1pLDLgqf+nchlTGLXC/MEaxoC 8Gd4FCUCVMSPLBnQley7wWcxAox+Wp1/h2hNKOTgzy0aMxgXkMUbbjikAFVP7Nnt qyL4biIWWoo7yHaFKjpD5Iy0uompJ8V8y90f9dCihzxYKWJ2yLk9BqtZe7+6PEqu 7QdtQnJnZ9QCCkzr2atu+Rci/R5fE98= -----END CERTIFICATE-----Generated at Fri Apr 17 18:11:52 2026 by rpki-client