$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa File: 6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa (raw, json) Hash identifier: Q/Z4CKf4/HZ8bBLnQ7Vl+9csSTp7B2a7o77lnp0Tna8= Subject key identifier: B9:2D:F0:82:4F:EC:48:46:1C:68:26:EA:FA:20:A9:0E:45:AC:6A:D5 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584D0647AC27F8BD887E472F4A20 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 3800 IP address blocks: 45.59.64.0/21 maxlen: 24 199.180.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:ac:27:f8:bd:88:7e:47:2f:4a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=f03e3ca9-dc83-45a8-afc6-c68f0a9aa19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:78:07:03:d7:e9:92:3d:56:32:c3:d9:8e:81: 3a:52:a7:b8:75:53:d0:22:e5:13:2e:12:c8:df:54: 7a:8a:5a:53:d5:a9:7c:a9:b1:2b:72:bb:d7:1e:25: d4:2b:20:d5:a6:ef:04:8f:72:62:99:ea:af:e2:34: 27:84:d0:69:ef:83:42:53:3f:0f:df:72:fc:50:30: 54:0d:ca:72:2d:06:77:0d:b7:68:f4:f0:65:bd:20: 0f:29:1a:2f:c7:1a:e4:b8:2b:4e:51:c2:ed:9a:ed: 6f:92:87:0d:f7:21:9e:46:5a:2e:eb:4d:5a:4a:9c: ec:d7:bd:3c:c0:0f:53:4d:a9:9f:d1:49:4f:29:88: 79:04:db:26:72:07:70:3c:5e:2d:df:7d:a6:a4:f3: bb:a6:f5:f6:45:db:d0:16:60:f9:0a:e1:b0:22:1d: 7d:b7:41:02:2f:e7:b7:3d:e8:c1:79:2a:3a:3b:6d: e3:07:77:a4:6b:22:da:6d:3d:79:85:1b:6d:bf:9a: 58:21:59:e3:d8:96:88:17:e9:61:7f:f3:26:09:24: 11:97:4d:80:e9:ea:bd:1e:df:a4:3a:ce:af:cd:7d: 82:b4:32:23:95:22:1e:a8:46:ba:33:b2:9f:58:83: c3:ad:4a:99:69:34:3e:df:f7:66:a6:50:6f:7d:58: fc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2D:F0:82:4F:EC:48:46:1C:68:26:EA:FA:20:A9:0E:45:AC:6A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.64.0/21 199.180.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c1:15:d3:f8:fb:24:da:8f:dd:7f:ed:32:76:95:17:11:b0: 19:3e:69:1b:4d:8c:c0:87:3c:0d:50:a2:ac:40:e3:ac:2b:ac: 80:f0:0c:ac:93:af:8a:3d:32:47:b7:ce:1e:2d:65:d7:46:b3: 91:fb:10:54:12:90:51:82:21:a0:5a:d7:65:93:72:00:ea:f0: f2:4f:2d:77:1b:6f:5c:92:ee:59:87:42:ff:9b:73:ed:60:e2: d5:38:32:d3:dc:b5:57:6d:f1:71:c3:82:c5:09:a6:6f:5a:57: be:03:9d:03:c7:3d:f4:29:3c:a5:d3:08:5c:61:ee:9d:4b:36: db:9c:d5:81:06:6a:09:83:1e:4c:75:22:a0:ed:fd:6b:28:0f: 35:64:d9:27:14:15:6b:06:19:50:33:29:2d:18:3d:a4:ed:19: bd:ca:7c:01:d0:cf:b1:e8:95:45:61:a4:61:58:2d:72:7c:af: 00:3f:e5:1a:b6:87:f9:14:b1:c8:b7:c0:14:3f:f2:5b:95:b5: 3c:65:ce:c5:ca:f9:d3:8f:29:ea:f2:ef:76:88:3a:93:a7:c9: c8:f0:a2:42:c9:4f:fd:be:87:9e:29:8d:e9:45:df:a1:dc:a2: b5:86:e1:c7:41:e0:f8:05:4f:dc:50:51:b1:82:6f:93:1c:cc: af:ee:75:0a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0GR6wn+L2IfkcvSiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZjAzZTNjYTktZGM4My00NWE4LWFmYzYtYzY4ZjBhOWFhMTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgngHA9fpkj1WMsPZjoE6Uqe4dVPQIuUTLhLI 31R6ilpT1al8qbErcrvXHiXUKyDVpu8Ej3Jimeqv4jQnhNBp74NCUz8P33L8UDBU DcpyLQZ3Dbdo9PBlvSAPKRovxxrkuCtOUcLtmu1vkocN9yGeRlou601aSpzs1708 wA9TTamf0UlPKYh5BNsmcgdwPF4t332mpPO7pvX2RdvQFmD5CuGwIh19t0ECL+e3 PejBeSo6O23jB3ekayLabT15hRttv5pYIVnj2JaIF+lhf/MmCSQRl02A6eq9Ht+k Os6vzX2CtDIjlSIeqEa6M7KfWIPDrUqZaTQ+3/dmplBvfVj8DwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLkt8IJP7EhGHGgm6vogqQ5FrGrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvNjkyMDAxNWItYmIwMS0z OTJhLTljNGEtOWMxZDZjMTgzM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLTtAAwQD x7T4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHLBFdP4+yTaj91/7TJ2lRcRsBk+aRtNjMCHPA1QoqxA46wr rIDwDKyTr4o9Mke3zh4tZddGs5H7EFQSkFGCIaBa12WTcgDq8PJPLXcbb1yS7lmH Qv+bc+1g4tU4MtPctVdt8XHDgsUJpm9aV74DnQPHPfQpPKXTCFxh7p1LNtuc1YEG agmDHkx1IqDt/WsoDzVk2ScUFWsGGVAzKS0YPaTtGb3KfAHQz7HolUVhpGFYLXJ8 rwA/5Rq2h/kUsci3wBQ/8luVtTxlzsXK+dOPKery73aIOpOnycjwokLJT/2+h54p jelF36HcorWG4cdB4PgFT9xQUbGCb5MczK/udQo= -----END CERTIFICATE-----Generated at Mon Mar 2 18:30:35 2026 by rpki-client