$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/221d322a-480c-3d6d-a072-437baab19169.roa File: 221d322a-480c-3d6d-a072-437baab19169.roa (raw, json) Hash identifier: MHCGLm6kuJXLkV2H/gmIe4yGIS5wqiC8Mv985Quh+KU= Subject key identifier: 7A:9A:17:1E:B5:48:B3:E5:A7:6F:56:01:5F:EE:F4:D4:BC:36:02:B4 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584D68035228DA07355AD104B1E0 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/221d322a-480c-3d6d-a072-437baab19169.roa Signing time: Sun 05 Apr 2026 14:12:20 +0000 ROA not before: Sun 05 Apr 2026 14:12:20 +0000 ROA not after: Sat 04 Jul 2026 14:12:20 +0000 asID: 27395 IP address blocks: 45.45.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:68:03:52:28:da:07:35:5a:d1:04:b1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Apr 5 14:12:20 2026 GMT Not After : Jul 4 14:12:20 2026 GMT Subject: CN=0bb89a49-a668-4667-bc19-806a09e261d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:1c:5d:4f:04:53:03:93:e4:56:5e:7b:01: 9e:67:09:34:9a:13:9c:ba:02:36:4d:35:66:90:79: f5:1d:5d:e4:b2:f6:b3:9c:ae:1a:78:30:3f:66:80: 4e:96:d8:b3:8d:1d:bc:12:ea:72:5e:0f:4d:2b:ae: 25:dd:c0:07:ca:33:16:84:f3:ba:f4:ca:47:ac:98: ed:f6:33:0d:a1:3e:33:65:fa:3e:3a:6f:d9:f7:3a: 7c:54:c2:36:72:95:83:c8:36:40:f2:d7:9f:fb:94: a1:b3:10:aa:d0:89:61:ab:af:8e:ec:b8:d4:b6:f0: 01:4b:b1:f6:87:18:2a:58:c3:56:9f:a3:aa:1b:f7: b5:f5:0a:ed:13:46:07:95:eb:aa:e8:3e:e2:6c:65: be:95:b2:ee:ab:31:1d:e2:bb:1a:8b:85:60:d1:c7: a6:f3:9f:cb:1d:46:7a:50:ba:e6:9c:e2:fe:ce:33: 2c:b2:af:ec:88:31:4f:2a:fc:88:9b:1c:48:fc:27: 4c:ed:bd:91:e8:3d:74:c8:cb:52:42:ee:8a:3c:96: 0b:6d:4e:36:26:70:f8:15:f2:73:d9:47:42:a4:71: b1:31:eb:d2:d1:b4:51:e0:47:6d:c5:74:d7:b0:cb: 1b:60:dd:2d:b4:87:8c:4c:83:53:82:9d:ba:6a:9f: 09:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9A:17:1E:B5:48:B3:E5:A7:6F:56:01:5F:EE:F4:D4:BC:36:02:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/221d322a-480c-3d6d-a072-437baab19169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 45.45.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:fe:27:6a:8e:ee:a0:3d:9d:2c:57:2d:d1:ae:3a:e1:d1:10: 3e:84:9b:ba:e3:d1:39:95:98:7e:c9:67:da:13:4d:b1:68:7f: 48:a4:69:05:9d:0a:ca:53:48:01:28:84:82:74:13:77:ab:72: b0:ab:40:53:0b:32:b1:fa:35:5f:22:1f:b0:c4:06:52:a1:ba: 57:d8:64:20:e4:8b:a1:ab:51:da:6f:c6:12:9b:fb:1f:74:8c: cd:85:47:9d:b6:3a:f1:32:b4:3d:33:7b:66:b3:95:1c:11:9c: 06:5f:22:20:1d:25:2a:31:b5:c9:60:d9:e1:71:ec:ee:e5:29: 43:e3:eb:ec:d3:ff:6a:ae:54:da:02:c3:bc:29:08:aa:e5:35: 8f:12:25:8b:8c:8e:ac:fe:a9:49:78:62:89:46:bd:54:f9:2a: a7:ef:fe:4f:31:92:db:18:0c:3f:24:ae:f3:79:0c:da:3d:f0: bf:46:0f:ea:91:55:f3:bd:3b:24:ac:73:b9:cb:7e:72:47:5e: 03:bc:93:cb:4d:a3:98:f8:2b:1f:c6:a7:6e:d2:b7:b2:ce:cf: c1:29:a1:d9:44:2e:7e:9a:27:8f:f6:aa:93:30:4a:29:79:46: 45:2d:44:a3:a9:8a:da:62:fa:fb:62:8e:45:6d:cf:d9:45:68: d3:91:a3:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1oA1Io2gc1WtEEseAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI2MDQwNTE0MTIyMFoXDTI2MDcwNDE0MTIyMFowLzEtMCsGA1UEAxMk MGJiODlhNDktYTY2OC00NjY3LWJjMTktODA2YTA5ZTI2MWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDkcXU8EUwOT5FZeewGeZwk0mhOcugI2TTVm kHn1HV3ksvaznK4aeDA/ZoBOltizjR28EupyXg9NK64l3cAHyjMWhPO69MpHrJjt 9jMNoT4zZfo+Om/Z9zp8VMI2cpWDyDZA8tef+5ShsxCq0Ilhq6+O7LjUtvABS7H2 hxgqWMNWn6OqG/e19QrtE0YHleuq6D7ibGW+lbLuqzEd4rsai4Vg0cem85/LHUZ6 ULrmnOL+zjMssq/siDFPKvyImxxI/CdM7b2R6D10yMtSQu6KPJYLbU42JnD4FfJz 2UdCpHGxMevS0bRR4EdtxXTXsMsbYN0ttIeMTINTgp26ap8JPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqaFx61SLPlp29WAV/u9NS8NgK0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvMjIxZDMyMmEtNDgwYy0z ZDZkLWEwNzItNDM3YmFhYjE5MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn+J2qO7qA9nSxXLdGuOuHRED6Em7rj0TmVmH7JZ9oTTbFof0ikaQWd CspTSAEohIJ0E3ercrCrQFMLMrH6NV8iH7DEBlKhulfYZCDki6GrUdpvxhKb+x90 jM2FR522OvEytD0ze2azlRwRnAZfIiAdJSoxtclg2eFx7O7lKUPj6+zT/2quVNoC w7wpCKrlNY8SJYuMjqz+qUl4YolGvVT5Kqfv/k8xktsYDD8krvN5DNo98L9GD+qR VfO9OySsc7nLfnJHXgO8k8tNo5j4Kx/Gp27St7LOz8EpodlELn6aJ4/2qpMwSil5 RkUtRKOpitpi+vtijkVtz9lFaNORoxo= -----END CERTIFICATE-----Generated at Fri Apr 17 12:25:42 2026 by rpki-client