$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45180ba6-c36f-3dcf-92e4-ff504978e611.roa File: 45180ba6-c36f-3dcf-92e4-ff504978e611.roa (raw, json) Hash identifier: j21Uqbit+DB6y98sdSIroqO3oo89K/q0oheqHz8Yt4w= Subject key identifier: 31:71:EA:58:2E:D6:63:B3:A7:2F:1F:98:BF:30:C1:A3:FE:87:C2:73 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7E95C566CB10C1AC279C0880 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45180ba6-c36f-3dcf-92e4-ff504978e611.roa Signing time: Mon 13 Apr 2026 16:15:12 +0000 ROA not before: Mon 13 Apr 2026 16:15:12 +0000 ROA not after: Sun 12 Jul 2026 16:15:12 +0000 asID: 207550 IP address blocks: 140.174.104.0/21 maxlen: 24 157.238.192.0/21 maxlen: 24 192.204.80.0/20 maxlen: 24 198.65.192.0/21 maxlen: 24 199.237.64.0/19 maxlen: 24 199.237.104.0/21 maxlen: 24 206.163.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:95:c5:66:cb:10:c1:ac:27:9c:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 13 16:15:12 2026 GMT Not After : Jul 12 16:15:12 2026 GMT Subject: CN=8e5eed98-47ad-41ee-bb4f-7ef8cbd4e780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:9f:d8:c8:f6:56:fd:8d:19:9e:25:96:19: 87:d8:8c:d8:c8:d2:78:ea:2f:f4:c3:f8:80:23:86: 23:42:51:03:a7:f3:59:01:bd:60:42:51:56:48:52: c0:45:9b:a1:1f:23:2d:b3:90:0d:ae:c8:52:7f:cf: ea:42:66:9b:f8:a3:9c:df:ce:dc:61:a4:74:72:f2: 92:68:fe:9a:27:31:72:5d:4a:f4:22:20:42:ba:30: f3:30:e9:77:e6:9e:87:2e:5a:ed:10:38:d2:47:63: 73:99:3e:76:bc:cf:5b:1b:47:db:dd:ef:31:73:6c: cb:e1:b1:29:d9:44:7b:35:98:a6:71:1c:43:79:1c: 36:2d:81:8d:21:28:21:4e:4f:87:7b:c2:20:77:96: 6c:3b:20:8c:1e:f0:58:2f:93:1a:ea:15:92:89:1e: 7c:63:84:b7:93:91:98:84:67:b5:f5:af:64:59:db: 9b:ec:d9:37:48:21:8d:28:73:a6:d2:64:84:5e:df: d4:57:1d:34:6e:4a:e1:76:da:22:64:16:ac:92:dc: cc:4f:a6:e1:f9:ab:7a:82:7b:6e:4e:5a:eb:b6:b6: dd:69:05:87:d9:5a:2e:65:7f:55:54:13:f5:84:59: 18:10:40:dc:e8:8b:b9:96:6e:2d:78:ba:fa:6d:f8: f0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:71:EA:58:2E:D6:63:B3:A7:2F:1F:98:BF:30:C1:A3:FE:87:C2:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45180ba6-c36f-3dcf-92e4-ff504978e611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.104.0/21 157.238.192.0/21 192.204.80.0/20 198.65.192.0/21 199.237.64.0/19 199.237.104.0/21 206.163.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:16:b2:7a:3f:c7:c1:9b:11:9a:a7:8b:1a:09:12:fc:17:e6: 25:34:f5:bd:1c:9d:b8:d3:66:06:88:33:81:f5:f6:f7:01:28: d7:48:4c:21:fa:9b:b8:51:a8:f6:43:a3:88:70:fb:d2:46:93: 12:47:ca:fb:23:b6:9a:98:fb:96:95:80:88:d2:1d:70:33:c5: a9:cf:27:31:f6:30:5a:82:92:96:50:19:01:b0:f6:7d:11:75: 05:01:4c:7e:cc:14:c5:5a:21:7a:b0:52:4e:0e:ee:98:93:1c: ce:e8:c5:de:d2:32:d4:61:80:32:c9:1d:eb:ef:33:b2:3c:b0: c4:0e:30:21:4f:7e:11:b4:04:87:67:e9:6b:a6:8a:61:d1:fb: 51:49:2b:a6:3a:ec:46:39:0f:5e:b6:b3:c3:39:f7:83:53:05: 4d:67:d7:b6:af:b5:c2:8f:70:9e:33:d3:87:ae:a6:3c:35:f5: b4:93:63:da:a2:f6:69:8a:c7:d6:39:4b:b8:fa:e2:74:1f:c0: 70:ab:a9:89:06:c7:92:df:59:4c:5f:5f:1b:64:d8:00:40:fd: 33:48:4d:96:1c:1a:42:58:b9:bc:9d:f6:57:fa:62:7c:62:6e: 87:49:9e:e0:f8:10:f3:3e:21:90:20:02:c1:65:b2:14:0a:5b: fd:5b:65:e4 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE1+lcVmyxDBrCecCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMzE2MTUxMloXDTI2MDcxMjE2MTUxMlowLzEtMCsGA1UEAxMk OGU1ZWVkOTgtNDdhZC00MWVlLWJiNGYtN2VmOGNiZDRlNzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4Kf2Mj2Vv2NGZ4llhmH2IzYyNJ46i/0w/iA I4YjQlEDp/NZAb1gQlFWSFLARZuhHyMts5ANrshSf8/qQmab+KOc387cYaR0cvKS aP6aJzFyXUr0IiBCujDzMOl35p6HLlrtEDjSR2NzmT52vM9bG0fb3e8xc2zL4bEp 2UR7NZimcRxDeRw2LYGNISghTk+He8Igd5ZsOyCMHvBYL5Ma6hWSiR58Y4S3k5GY hGe19a9kWdub7Nk3SCGNKHOm0mSEXt/UVx00bkrhdtoiZBasktzMT6bh+at6gntu TlrrtrbdaQWH2VouZX9VVBP1hFkYEEDc6Iu5lm4teLr6bfjwhQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFDFx6lgu1mOzpy8fmL8wwaP+h8JzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDUxODBiYTYtYzM2Zi0z ZGNmLTkyZTQtZmY1MDQ5NzhlNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDjK5oAwQD ne7AAwQEwMxQAwQDxkHAAwQFx+1AAwQDx+1oAwQEzqMQMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAMWsno/ x8GbEZqnixoJEvwX5iU09b0cnbjTZgaIM4H19vcBKNdITCH6m7hRqPZDo4hw+9JG kxJHyvsjtpqY+5aVgIjSHXAzxanPJzH2MFqCkpZQGQGw9n0RdQUBTH7MFMVaIXqw Uk4O7piTHM7oxd7SMtRhgDLJHevvM7I8sMQOMCFPfhG0BIdn6WumimHR+1FJK6Y6 7EY5D162s8M594NTBU1n17avtcKPcJ4z04eupjw19bSTY9qi9mmKx9Y5S7j64nQf wHCrqYkGx5LfWUxfXxtk2ABA/TNITZYcGkJYubyd9lf6YnxibodJnuD4EPM+IZAg AsFlshQKW/1bZeQ= -----END CERTIFICATE-----Generated at Fri Apr 17 11:32:18 2026 by rpki-client