$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/0c4ff13f-3242-3568-97dc-9a027e3d5659.roa File: 0c4ff13f-3242-3568-97dc-9a027e3d5659.roa (raw, json) Hash identifier: l0D2Q/GMIgGf9UEwHwxkFGobSBuiJBpkG1rGAi/xisE= Subject key identifier: 34:28:EC:51:48:EF:20:D5:AF:F1:07:D7:E9:61:A6:32:17:C1:4C:BD Certificate issuer: /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Certificate serial: 010D0C9F4328584D07AD21A831A4954A837146F6 Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/0c4ff13f-3242-3568-97dc-9a027e3d5659.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 395201 IP address blocks: 45.139.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:21:a8:31:a4:95:4a:83:71:46:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=c71639be-211a-4352-bd39-6c98277b8e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:e9:c6:ac:3f:ec:a4:02:e9:c4:26:dd:d1: a2:6c:23:0e:83:01:bf:a4:67:a6:b1:84:0a:4e:72: 5a:0c:82:d0:42:ac:9c:b0:82:4e:58:42:4a:60:1c: bc:2d:ef:01:21:82:00:6b:32:72:d0:ba:fd:67:e1: 60:8a:95:41:76:02:08:6f:4d:1a:5f:de:74:9a:e5: cb:a5:7d:eb:2f:e0:bc:6e:d6:86:07:17:af:14:b2: 2d:54:e8:40:e8:30:18:fe:d1:ae:26:c5:2d:33:51: 76:a8:20:03:a6:86:e0:0d:9b:b5:23:34:40:74:2a: 20:ad:dd:da:3d:a3:ec:14:6c:81:f8:26:13:57:cf: f4:34:56:08:27:c3:85:bb:2c:05:42:e9:4a:22:86: 91:3a:4b:89:29:70:c7:1c:b9:48:c4:72:b0:8c:af: 61:11:3d:11:5a:d5:c0:3a:39:87:5c:ce:4a:34:6f: 34:39:c8:48:41:95:97:de:a1:14:9c:15:16:a4:48: cf:7a:16:e2:18:9d:16:ea:79:fb:16:7f:d9:2e:fe: 42:d4:36:de:ee:45:c2:d5:7c:27:95:2c:47:b4:fc: 0a:6f:f8:ff:4c:34:8a:4d:9c:22:70:e4:df:31:29: 20:23:ab:17:b2:80:6f:2d:5f:a1:e3:82:7b:e4:f5: e1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:28:EC:51:48:EF:20:D5:AF:F1:07:D7:E9:61:A6:32:17:C1:4C:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/0c4ff13f-3242-3568-97dc-9a027e3d5659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl X509v3 Authority Key Identifier: keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer sbgp-ipAddrBlock: critical IPv4: 45.139.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:7b:ec:7b:21:5f:6b:e9:6e:00:d7:b4:55:72:7a:56:d1:50: 1f:d7:b8:bf:49:9b:05:54:4f:34:2e:d3:67:8c:a3:0c:b1:c0: 07:93:d4:67:0a:49:e5:1f:46:44:69:15:8e:f0:d6:54:c4:ef: 45:d8:36:f9:c8:b8:89:a5:9c:fa:0f:10:7c:65:40:b8:bd:4f: 28:ea:da:79:e7:d9:9f:17:8c:1e:35:f8:c4:54:2c:d5:d3:88: 6c:fe:4e:7c:07:52:ec:55:f3:95:69:e3:ab:9e:89:26:db:24: 96:97:89:6c:b9:e6:7d:44:34:fe:76:41:8b:b4:10:9e:20:a4: 3e:55:b1:3c:77:82:d2:cb:52:8d:e5:f6:dd:65:39:d5:f3:1e: e2:42:a6:55:f5:4b:77:27:6d:4f:8d:e3:72:dd:72:82:1a:06: 76:4c:a0:07:38:df:9c:dd:cc:3b:9f:a1:94:64:d4:7d:81:92: b9:bd:8c:56:6d:c3:47:66:87:c0:40:5d:6a:92:28:a9:8a:72: 63:8e:16:10:f5:ca:a4:73:12:37:9a:46:6b:6d:fd:c3:c8:c3: 14:b1:1a:61:82:b1:2b:34:38:0a:7d:22:e5:20:ab:8a:67:63: 18:16:ca:b1:9e:d3:fc:da:81:64:4f:a9:f7:a0:59:18:ea:ad: a8:e2:d8:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrSGoMaSVSoNxRvYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkwY2ViMWUtMzhmMC00NjkwLThlMTItZmRlZjBkYzBl ZGRiMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YzcxNjM5YmUtMjExYS00MzUyLWJkMzktNmM5ODI3N2I4ZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjXpxqw/7KQC6cQm3dGibCMOgwG/pGemsYQK TnJaDILQQqycsIJOWEJKYBy8Le8BIYIAazJy0Lr9Z+FgipVBdgIIb00aX950muXL pX3rL+C8btaGBxevFLItVOhA6DAY/tGuJsUtM1F2qCADpobgDZu1IzRAdCogrd3a PaPsFGyB+CYTV8/0NFYIJ8OFuywFQulKIoaROkuJKXDHHLlIxHKwjK9hET0RWtXA OjmHXM5KNG80OchIQZWX3qEUnBUWpEjPehbiGJ0W6nn7Fn/ZLv5C1Dbe7kXC1Xwn lSxHtPwKb/j/TDSKTZwicOTfMSkgI6sXsoBvLV+h44J75PXhEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQo7FFI7yDVr/EH1+lhpjIXwUy9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBj ZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVmMGRjMGVkZGIvMGM0ZmYxM2YtMzI0Mi0z NTY4LTk3ZGMtOWEwMjdlM2Q1NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwY2ViMWUtMzhmMC00NjkwLThl MTItZmRlZjBkYzBlZGRiLzM5MGNlYjFlLTM4ZjAtNDY5MC04ZTEyLWZkZWYwZGMw ZWRkYi5jcmwwHwYDVR0jBBgwFoAU7IhVYel9//xGKMwSEvEQkth0VUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBjZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVm MGRjMGVkZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANZ77HshX2vpbgDXtFVyelbRUB/XuL9JmwVUTzQu02eMowyxwAeT1GcK SeUfRkRpFY7w1lTE70XYNvnIuImlnPoPEHxlQLi9Tyjq2nnn2Z8XjB41+MRULNXT iGz+TnwHUuxV85Vp46ueiSbbJJaXiWy55n1ENP52QYu0EJ4gpD5VsTx3gtLLUo3l 9t1lOdXzHuJCplX1S3cnbU+N43LdcoIaBnZMoAc435zdzDufoZRk1H2Bkrm9jFZt w0dmh8BAXWqSKKmKcmOOFhD1yqRzEjeaRmtt/cPIwxSxGmGCsSs0OAp9IuUgq4pn YxgWyrGe0/zagWRPqfegWRjqraji2Kk= -----END CERTIFICATE-----Generated at Mon Mar 2 17:16:12 2026 by rpki-client