$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/6c716255-bac3-3d6c-b84f-2b19383054e3.roa File: 6c716255-bac3-3d6c-b84f-2b19383054e3.roa (raw, json) Hash identifier: kGQ0snSzGnvJru/wjQ042HMkkck8sm0Ws4WaxGvX6y0= Subject key identifier: 5F:62:10:8E:50:42:65:BA:D1:58:28:3A:16:C5:01:F6:11:05:78:E0 Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec Certificate serial: 010D0C9F4328584D6C0FDBE5DE841BEC9B50E580 Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/6c716255-bac3-3d6c-b84f-2b19383054e3.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 36168 IP address blocks: 45.42.172.0/23 maxlen: 24 45.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:db:e5:de:84:1b:ec:9b:50:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=3a29783b-3c44-4d39-af6f-11d55af4077a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6d:ec:d8:40:1c:a5:d2:13:2e:57:6d:6b:9d: 82:df:eb:99:aa:50:c3:e2:d2:28:02:81:18:ca:e9: 6d:09:c5:99:31:9a:45:12:58:15:8e:31:97:e2:a5: 1c:77:8e:d2:df:9b:5a:70:92:48:a2:01:40:c1:5e: 7f:76:4b:23:cd:fc:8e:3e:62:81:a1:80:10:4e:d6: 66:8d:9a:2e:95:8f:5e:5b:a2:1d:74:03:c5:ee:fd: 25:12:b7:1b:0f:f3:cb:58:4f:bc:6f:70:f7:77:2a: c6:7f:8a:67:75:56:8a:3b:5a:10:a0:dd:08:4b:a4: bc:a9:58:27:0b:20:95:6d:ab:11:44:92:3d:59:d6: e0:d7:59:2e:b0:d5:a3:2e:fc:99:d7:96:25:93:8c: c5:55:27:a2:91:55:62:8c:4e:e4:8a:5b:f5:4d:62: 7e:20:3b:6a:cd:ac:16:54:ec:8a:ed:72:59:fa:03: 09:5b:d1:0d:10:fb:21:da:34:49:f9:85:8a:ae:a8: 52:1e:a8:6b:87:d5:fe:88:75:d1:10:fa:e8:03:8c: c9:be:bb:53:21:25:f0:df:27:f0:c6:96:b6:e0:81: d9:24:04:6e:99:37:ad:75:69:66:7d:3a:cb:79:28: 0c:47:7f:fd:d2:ef:28:e6:a8:ff:76:22:c2:72:27: 47:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:62:10:8E:50:42:65:BA:D1:58:28:3A:16:C5:01:F6:11:05:78:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/6c716255-bac3-3d6c-b84f-2b19383054e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl X509v3 Authority Key Identifier: keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer sbgp-ipAddrBlock: critical IPv4: 45.42.172.0-45.42.174.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:74:10:78:e3:49:f9:ed:1a:1d:ed:b2:08:89:87:80:09:9d: c0:e2:12:20:27:f5:5a:7a:c9:ce:41:95:0b:53:6b:6c:3c:1f: ee:b0:35:a1:c7:7f:ea:b2:cb:b9:6d:6d:bf:93:99:32:01:b0: d7:55:66:80:61:9c:6a:26:94:ed:98:82:31:06:19:91:7b:94: e7:30:e4:9c:9a:05:73:9b:7b:63:98:f7:42:fe:4d:6e:bf:59: a5:f6:ae:c9:c2:8d:85:2a:07:06:e6:d0:ab:66:ee:83:1d:cf: 28:55:88:28:b8:33:54:1c:3b:bb:dc:ac:99:fc:b5:a6:99:e9: 8a:ff:1f:67:c7:3a:cc:34:6f:8b:4e:4b:cb:bd:66:6e:f1:58: 0e:89:2e:8a:22:27:43:1d:2e:c6:9f:87:ec:ae:2d:e0:61:e4: c3:f3:64:16:6c:d9:d6:a0:04:92:86:b1:99:56:48:79:06:11: 8e:35:14:7e:ce:fc:01:fa:cd:41:29:4b:57:32:c1:0b:bf:6c: 38:0b:6b:ac:03:2e:4a:6e:aa:12:a0:c0:0d:ff:96:26:a0:e1: b4:ad:71:0d:c5:01:66:0c:a9:7b:70:ff:cf:7e:cf:c0:36:57: c6:49:84:da:db:53:3e:22:eb:1f:4c:b7:1c:39:5a:35:26:0c: f8:ce:58:37 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1sD9vl3oQb7JtQ5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZmNzMzNDUtYjc3MS00NWZkLWJlODEtMWY0MWE3Zjc3 N2VjMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk M2EyOTc4M2ItM2M0NC00ZDM5LWFmNmYtMTFkNTVhZjQwNzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW3s2EAcpdITLldta52C3+uZqlDD4tIoAoEY yultCcWZMZpFElgVjjGX4qUcd47S35tacJJIogFAwV5/dksjzfyOPmKBoYAQTtZm jZoulY9eW6IddAPF7v0lErcbD/PLWE+8b3D3dyrGf4pndVaKO1oQoN0IS6S8qVgn CyCVbasRRJI9Wdbg11kusNWjLvyZ15Ylk4zFVSeikVVijE7kilv1TWJ+IDtqzawW VOyK7XJZ+gMJW9ENEPsh2jRJ+YWKrqhSHqhrh9X+iHXREProA4zJvrtTISXw3yfw xpa24IHZJARumTetdWlmfTrLeSgMR3/90u8o5qj/diLCcidHpwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFF9iEI5QQmW60VgoOhbFAfYRBXjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3 MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdmNzc3ZWMvNmM3MTYyNTUtYmFjMy0z ZDZjLWI4NGYtMmIxOTM4MzA1NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWZmNzMzNDUtYjc3MS00NWZkLWJl ODEtMWY0MWE3Zjc3N2VjL2VmZjczMzQ1LWI3NzEtNDVmZC1iZTgxLTFmNDFhN2Y3 NzdlYy5jcmwwHwYDVR0jBBgwFoAUmmU/aXxyav0itCAZwUUwlk0VckYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQx YTdmNzc3ZWMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItKqwD BAAtKq4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEALXQQeONJ+e0aHe2yCImHgAmdwOISICf1WnrJzkGVC1Nr bDwf7rA1ocd/6rLLuW1tv5OZMgGw11VmgGGcaiaU7ZiCMQYZkXuU5zDknJoFc5t7 Y5j3Qv5Nbr9ZpfauycKNhSoHBubQq2bugx3PKFWIKLgzVBw7u9ysmfy1ppnpiv8f Z8c6zDRvi05Ly71mbvFYDokuiiInQx0uxp+H7K4t4GHkw/NkFmzZ1qAEkoaxmVZI eQYRjjUUfs78AfrNQSlLVzLBC79sOAtrrAMuSm6qEqDADf+WJqDhtK1xDcUBZgyp e3D/z37PwDZXxkmE2ttTPiLrH0y3HDlaNSYM+M5YNw== -----END CERTIFICATE-----Generated at Fri Apr 17 22:47:33 2026 by rpki-client