$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa File: f45bc517-864a-32c1-b059-db26a9dffa20.roa (raw, json) Hash identifier: 5Zrq+d6jKRQZvWBfqnwklg9gxqxVcAvwajOTESHbSAg= Subject key identifier: DB:40:EB:D7:6F:05:7C:77:3B:E3:0E:AD:C0:BB:D7:6B:0D:CB:7D:CD Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D571FB379DB32005486F92B98 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 3938 IP address blocks: 204.141.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b3:79:db:32:00:54:86:f9:2b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=7b1fe70c-59a3-4455-af59-97f528179f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:28:80:67:06:5c:9b:fe:57:4e:8c:df:35:f9: 8e:db:6a:2f:ef:4a:86:21:7d:cb:ce:1f:43:77:6d: b4:11:20:b3:02:12:41:7a:d7:0b:30:7a:c5:f0:a1: 5c:6f:c7:10:f8:a2:dc:4f:b8:78:70:47:23:d6:21: 41:c4:2f:07:0c:1f:00:cd:2f:67:1b:89:4f:b1:12: 09:02:51:02:f5:a6:48:e6:c5:d1:c5:85:0e:1c:6c: 68:0a:ed:6d:05:bf:c0:08:40:d4:1d:cd:19:32:aa: 84:80:99:55:97:7b:fd:13:e9:a3:3b:e3:6e:84:82: 15:66:6d:41:97:e5:a6:2d:32:76:fd:33:ff:b2:b0: 4c:4c:92:05:bc:6d:36:5b:d3:ed:17:2f:e5:b7:ed: 22:be:a5:9e:59:6a:29:d8:c4:01:d8:91:c6:74:33: 47:8b:4c:46:c6:7a:6c:ef:1b:d4:ae:c0:e0:72:50: 40:b6:5d:88:ac:f8:cd:a9:74:56:4c:f4:00:f4:13: a7:09:90:19:09:17:10:11:f5:96:33:56:b5:37:34: fd:6b:e4:85:ff:fe:b6:46:90:91:ec:c3:01:6b:4b: a4:1b:bc:26:a6:51:3d:31:ca:6f:94:f2:1f:92:37: 93:87:b7:88:e7:06:a4:bd:42:28:e8:f2:9c:84:85: a3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:40:EB:D7:6F:05:7C:77:3B:E3:0E:AD:C0:BB:D7:6B:0D:CB:7D:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:72:e6:6f:e2:09:61:b6:dd:e6:4c:95:7e:2c:ca:99:39:c6: 37:2e:cf:b5:ff:66:a8:53:9f:c4:60:70:4c:d0:8d:bc:a8:9a: eb:b5:cf:90:3b:f6:e1:1f:26:b4:3e:60:3e:56:71:71:9c:bf: 74:9c:7a:41:da:46:22:80:ae:82:10:7f:40:27:21:d2:c8:db: 08:b8:90:57:f8:48:a7:f6:2a:11:66:dd:bb:9d:66:5a:ec:07: ba:a7:2e:69:fa:c2:4c:e8:6c:a9:8d:f5:e8:60:f5:3b:ee:5d: ff:bd:cd:d2:ab:f2:3b:0a:af:ab:79:75:56:09:ba:e8:d4:5d: b2:be:95:93:b7:2a:13:8f:8a:2b:ee:71:ff:05:d9:cb:d6:8a: cf:f4:32:ef:d3:dc:8d:c0:ea:e1:e4:a1:72:6d:ae:0e:ca:89: 4a:56:23:6b:68:d7:6d:85:23:87:44:21:3b:29:47:2f:d9:d9: 0f:36:bb:20:41:3e:e4:e8:6a:59:1f:9d:fa:19:61:a5:f0:15: ff:1b:e6:d6:b0:69:e6:58:a5:2d:a6:37:f9:d9:11:96:65:60: 40:53:f0:76:56:50:7e:63:e1:b3:b7:b5:90:8e:62:cb:14:32: c6:f8:34:c2:06:68:ad:bb:08:00:8a:19:59:ca:3f:df:06:20: d2:86:f9:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7N52zIAVIb5K5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk N2IxZmU3MGMtNTlhMy00NDU1LWFmNTktOTdmNTI4MTc5ZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yiAZwZcm/5XTozfNfmO22ov70qGIX3Lzh9D d220ESCzAhJBetcLMHrF8KFcb8cQ+KLcT7h4cEcj1iFBxC8HDB8AzS9nG4lPsRIJ AlEC9aZI5sXRxYUOHGxoCu1tBb/ACEDUHc0ZMqqEgJlVl3v9E+mjO+NuhIIVZm1B l+WmLTJ2/TP/srBMTJIFvG02W9PtFy/lt+0ivqWeWWop2MQB2JHGdDNHi0xGxnps 7xvUrsDgclBAtl2IrPjNqXRWTPQA9BOnCZAZCRcQEfWWM1a1NzT9a+SF//62RpCR 7MMBa0ukG7wmplE9McpvlPIfkjeTh7eI5wakvUIo6PKchIWj5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtA69dvBXx3O+MOrcC712sNy33NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjQ1YmM1MTctODY0YS0z MmMxLWIwNTktZGIyNmE5ZGZmYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzI18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHly5m/iCWG23eZMlX4sypk5xjcuz7X/ZqhTn8RgcEzQjbyomuu1z5A7 9uEfJrQ+YD5WcXGcv3ScekHaRiKAroIQf0AnIdLI2wi4kFf4SKf2KhFm3budZlrs B7qnLmn6wkzobKmN9ehg9TvuXf+9zdKr8jsKr6t5dVYJuujUXbK+lZO3KhOPiivu cf8F2cvWis/0Mu/T3I3A6uHkoXJtrg7KiUpWI2to122FI4dEITspRy/Z2Q82uyBB PuToalkfnfoZYaXwFf8b5tawaeZYpS2mN/nZEZZlYEBT8HZWUH5j4bO3tZCOYssU Msb4NMIGaK27CACKGVnKP98GINKG+QY= -----END CERTIFICATE-----Generated at Fri Apr 17 11:44:39 2026 by rpki-client