$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/70500725-1d16-3314-af46-dc1cac6e83b3.roa File: 70500725-1d16-3314-af46-dc1cac6e83b3.roa (raw, json) Hash identifier: hJZFcwcL3+9srXhLgeAsGmA5h3tlkTBqRMxAVdY5Z5g= Subject key identifier: F4:E6:74:6A:07:CF:A7:1A:56:70:6D:77:80:AD:EB:AD:9B:8A:1E:23 Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec Certificate serial: 010D0C9F4328584D6C0FDBD9EE97150C9DF65B00 Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/70500725-1d16-3314-af46-dc1cac6e83b3.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 400967 IP address blocks: 45.42.172.0/23 maxlen: 24 45.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:db:d9:ee:97:15:0c:9d:f6:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=8c650fe4-5626-40d0-85e4-5fdfb42df239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:94:68:e1:95:13:4b:ea:74:09:27:b9:4b: 3b:0b:41:32:8f:ac:2f:ef:13:01:8e:ee:4c:ec:a8: 6a:e4:dc:3e:7d:b4:5e:0b:c7:04:f7:f6:5e:c2:3c: c5:7f:5c:22:8a:2c:88:b4:8f:bd:a9:8c:30:eb:e1: 8e:fe:74:3f:4d:36:09:3e:74:ab:4c:3d:9a:4d:27: 4b:07:33:9d:c3:64:eb:3d:cf:b6:d6:c9:a1:d9:dc: 25:23:dc:0b:74:a2:05:3b:d2:28:64:2f:68:2f:cd: 8c:38:c6:00:53:ce:e1:b2:86:53:f7:a7:74:3a:e0: 95:d7:56:66:71:ec:2b:d8:94:db:7f:90:c0:e0:9f: 68:36:ca:cd:a8:9e:60:07:4c:4e:e0:62:12:d5:25: 8a:4e:d5:ea:d6:6d:66:82:ac:25:bd:ad:ba:a1:8a: db:c1:a9:d5:9c:f5:70:73:9a:e3:c7:c3:0b:ad:40: 25:47:7f:92:a7:50:0a:37:88:b0:bb:b3:ce:51:87: b6:41:60:b1:f8:ab:79:7b:35:1e:4f:48:4e:0c:c3: b1:a0:9b:19:49:c3:03:d0:ec:ef:5d:56:95:97:37: 08:81:6b:a5:e4:51:85:68:8d:f2:a5:e0:cd:25:fe: 1e:6c:3b:34:7b:43:c2:a2:d8:f2:4f:94:e6:c8:93: 93:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E6:74:6A:07:CF:A7:1A:56:70:6D:77:80:AD:EB:AD:9B:8A:1E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/70500725-1d16-3314-af46-dc1cac6e83b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl X509v3 Authority Key Identifier: keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer sbgp-ipAddrBlock: critical IPv4: 45.42.172.0-45.42.174.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:0e:77:63:14:05:f5:43:36:e7:0a:97:ca:31:ce:aa:8c:d2: a0:2e:73:82:b6:12:f1:7e:b1:53:62:d1:6e:e8:7a:1e:31:5a: c2:f6:9d:ba:21:90:37:2c:0b:e8:96:23:5a:fb:5f:97:ec:32: 6c:54:58:bc:57:91:42:e5:16:55:d5:e8:62:c2:da:11:d6:3a: 6d:c9:d0:4d:27:e3:02:8c:07:4f:ff:af:20:54:5b:bf:1d:0d: 17:99:88:6a:79:ba:67:9e:73:6b:36:4b:69:5d:c1:bf:58:fd: 79:92:6f:f6:4f:14:3e:a5:c7:69:3a:cc:3c:11:6d:c4:4c:18: 82:fd:58:d9:f8:5a:7e:36:5b:78:df:7d:5e:ba:73:04:dc:02: ad:c1:c9:09:9d:9f:b7:f9:03:5a:f7:4f:be:67:1a:e2:35:e2: cb:03:89:d3:40:84:5a:13:c8:00:42:94:97:f6:67:cf:2e:89: e3:a1:a6:be:0e:64:2f:04:74:ba:87:78:ec:ae:6c:cb:9d:3a: e5:de:f9:71:91:84:f6:58:b2:33:6a:b5:0c:ef:53:f5:b6:19: ec:09:09:17:ef:62:35:43:a7:ec:3a:27:60:c3:ff:38:30:f1: 30:2d:23:73:88:25:d2:3b:a4:2f:2e:8e:45:b0:4c:8b:49:e7: 21:94:e0:25 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1sD9vZ7pcVDJ32WwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZmNzMzNDUtYjc3MS00NWZkLWJlODEtMWY0MWE3Zjc3 N2VjMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk OGM2NTBmZTQtNTYyNi00MGQwLTg1ZTQtNWZkZmI0MmRmMjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup+UaOGVE0vqdAknuUs7C0Eyj6wv7xMBju5M 7Khq5Nw+fbReC8cE9/ZewjzFf1wiiiyItI+9qYww6+GO/nQ/TTYJPnSrTD2aTSdL BzOdw2TrPc+21smh2dwlI9wLdKIFO9IoZC9oL82MOMYAU87hsoZT96d0OuCV11Zm cewr2JTbf5DA4J9oNsrNqJ5gB0xO4GIS1SWKTtXq1m1mgqwlva26oYrbwanVnPVw c5rjx8MLrUAlR3+Sp1AKN4iwu7POUYe2QWCx+Kt5ezUeT0hODMOxoJsZScMD0Ozv XVaVlzcIgWul5FGFaI3ypeDNJf4ebDs0e0PCotjyT5TmyJOTPQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFPTmdGoHz6caVnBtd4Ct662bih4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3 MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdmNzc3ZWMvNzA1MDA3MjUtMWQxNi0z MzE0LWFmNDYtZGMxY2FjNmU4M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWZmNzMzNDUtYjc3MS00NWZkLWJl ODEtMWY0MWE3Zjc3N2VjL2VmZjczMzQ1LWI3NzEtNDVmZC1iZTgxLTFmNDFhN2Y3 NzdlYy5jcmwwHwYDVR0jBBgwFoAUmmU/aXxyav0itCAZwUUwlk0VckYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQx YTdmNzc3ZWMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItKqwD BAAtKq4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAcw53YxQF9UM25wqXyjHOqozSoC5zgrYS8X6xU2LRbuh6 HjFawvaduiGQNywL6JYjWvtfl+wybFRYvFeRQuUWVdXoYsLaEdY6bcnQTSfjAowH T/+vIFRbvx0NF5mIanm6Z55zazZLaV3Bv1j9eZJv9k8UPqXHaTrMPBFtxEwYgv1Y 2fhafjZbeN99XrpzBNwCrcHJCZ2ft/kDWvdPvmca4jXiywOJ00CEWhPIAEKUl/Zn zy6J46Gmvg5kLwR0uod47K5sy5065d75cZGE9liyM2q1DO9T9bYZ7AkJF+9iNUOn 7DonYMP/ODDxMC0jc4gl0jukLy6ORbBMi0nnIZTgJQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:03:07 2026 by rpki-client