$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/708838d8-8559-3142-a30e-932c38e17aff.roa File: 708838d8-8559-3142-a30e-932c38e17aff.roa (raw, json) Hash identifier: N/InRn/2IHB4vPPG2VP5V9wSrEoENtE4eLWbOx0GPTA= Subject key identifier: 83:91:61:2F:41:72:94:FE:1F:85:1A:5A:0C:DA:1A:C8:82:77:58:D2 Certificate issuer: /CN=4d929512-7541-4207-be46-8af4cc4a4800 Certificate serial: 010D0C9F4328584D00B27DFC576FBCFB3F899240 Authority key identifier: 50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/708838d8-8559-3142-a30e-932c38e17aff.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 26658 IP address blocks: 45.33.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:7d:fc:57:6f:bc:fb:3f:89:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d929512-7541-4207-be46-8af4cc4a4800 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=5907458d-668f-4b31-9f2f-5eaa378e02a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6b:56:c1:3d:b1:cd:f4:92:d2:ab:2c:93:31: d0:e0:b8:40:2e:f9:61:6d:b4:d4:57:0b:4c:6d:1d: 49:1d:f9:9c:5e:32:75:e1:73:fe:e5:b5:27:25:f9: 20:16:02:97:f9:7b:aa:4b:e5:c1:4a:19:43:9a:c4: 18:01:cf:5c:a9:d2:f2:42:3f:98:03:57:a4:aa:70: 27:c7:79:6b:27:a3:51:b9:8b:14:69:8e:c9:41:21: 12:68:ad:b8:25:1b:48:dd:f0:50:ff:ef:d3:cd:58: 4c:fa:08:ca:d1:da:a3:b4:fb:d9:dc:f8:fd:98:37: 54:40:3c:da:b2:54:e8:41:35:6c:9d:f7:47:dc:54: c5:8b:e6:c9:c1:a8:d2:5b:83:04:46:0c:f9:71:13: 02:82:1b:ad:cb:6e:1d:f6:bd:f4:19:4b:1f:b0:86: 0c:d6:fe:31:61:fc:01:bc:b9:98:d4:97:73:12:ef: b0:31:53:d0:b8:0b:ba:2b:25:84:19:d1:6a:15:e0: bb:f0:a9:b1:02:c2:d2:a0:a1:de:96:ae:23:4b:d6: ac:0a:65:d7:df:0e:2a:cd:45:38:57:5d:81:e8:82: 20:ab:38:0d:a1:06:bc:6e:e0:69:65:35:ea:6d:bf: d4:22:75:43:32:b0:1e:83:4f:ea:7d:df:b6:b0:f8: aa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:91:61:2F:41:72:94:FE:1F:85:1A:5A:0C:DA:1A:C8:82:77:58:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/708838d8-8559-3142-a30e-932c38e17aff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl X509v3 Authority Key Identifier: keyid:50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer sbgp-ipAddrBlock: critical IPv4: 45.33.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:36:57:56:6f:46:c5:99:46:89:3c:02:2a:d9:fd:58:3d:f9: 0a:81:5c:2a:47:85:24:61:2b:fe:71:1e:6b:80:09:9a:76:82: 1a:d4:f5:44:7a:72:71:d3:3b:d6:3e:2d:c0:24:7c:08:a7:83: 40:e5:66:68:2c:fe:90:f4:fe:22:46:33:34:81:bd:69:3a:b7: 34:45:64:0c:a0:20:18:9e:d8:fa:05:aa:61:a2:48:9b:26:0f: 74:84:70:e3:09:a3:5f:4a:3b:30:e9:aa:d8:bc:03:d4:aa:a4: d8:cf:36:c6:44:e8:cb:15:e6:b0:10:9f:8b:3f:5b:2e:18:d2: 88:5b:8a:04:36:9f:03:47:7e:e4:0b:b1:18:f1:33:09:3b:bb: c5:d5:a0:11:fe:cb:74:ed:90:e1:b8:40:95:fd:1e:ba:3a:22: 67:a1:0d:f4:c7:57:4e:a0:5a:17:b4:5d:33:00:ce:e8:32:3c: e2:24:6c:78:f8:4c:d4:e8:54:a0:27:77:13:21:65:d1:cd:9a: 49:8a:4c:17:31:57:6b:ea:c8:51:97:f2:a0:09:01:21:d4:01: 61:5f:ee:e7:18:ae:3e:57:c4:e1:99:44:3b:73:0b:46:62:65: f2:4f:c7:a3:f7:a9:a3:4a:e5:ee:f7:d4:c0:c9:ec:2f:5c:4d: 30:a0:d2:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Asn38V2+8+z+JkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5Mjk1MTItNzU0MS00MjA3LWJlNDYtOGFmNGNjNGE0 ODAwMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk NTkwNzQ1OGQtNjY4Zi00YjMxLTlmMmYtNWVhYTM3OGUwMmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmtWwT2xzfSS0qsskzHQ4LhALvlhbbTUVwtM bR1JHfmcXjJ14XP+5bUnJfkgFgKX+XuqS+XBShlDmsQYAc9cqdLyQj+YA1ekqnAn x3lrJ6NRuYsUaY7JQSESaK24JRtI3fBQ/+/TzVhM+gjK0dqjtPvZ3Pj9mDdUQDza slToQTVsnfdH3FTFi+bJwajSW4MERgz5cRMCghuty24d9r30GUsfsIYM1v4xYfwB vLmY1JdzEu+wMVPQuAu6KyWEGdFqFeC78KmxAsLSoKHelq4jS9asCmXX3w4qzUU4 V12B6IIgqzgNoQa8buBpZTXqbb/UInVDMrAeg0/qfd+2sPiqQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIORYS9BcpT+H4UaWgzaGsiCd1jSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80ZDky OTUxMi03NTQxLTQyMDctYmU0Ni04YWY0Y2M0YTQ4MDAvNzA4ODM4ZDgtODU1OS0z MTQyLWEzMGUtOTMyYzM4ZTE3YWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGQ5Mjk1MTItNzU0MS00MjA3LWJl NDYtOGFmNGNjNGE0ODAwLzRkOTI5NTEyLTc1NDEtNDIwNy1iZTQ2LThhZjRjYzRh NDgwMC5jcmwwHwYDVR0jBBgwFoAUUHbGsA5Pv93rRfzEAudPVstdNTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80ZDkyOTUxMi03NTQxLTQyMDctYmU0Ni04YWY0 Y2M0YTQ4MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg2V1ZvRsWZRok8AirZ/Vg9+QqBXCpHhSRhK/5xHmuACZp2ghrU9UR6 cnHTO9Y+LcAkfAing0DlZmgs/pD0/iJGMzSBvWk6tzRFZAygIBie2PoFqmGiSJsm D3SEcOMJo19KOzDpqti8A9SqpNjPNsZE6MsV5rAQn4s/Wy4Y0ohbigQ2nwNHfuQL sRjxMwk7u8XVoBH+y3TtkOG4QJX9Hro6ImehDfTHV06gWhe0XTMAzugyPOIkbHj4 TNToVKAndxMhZdHNmkmKTBcxV2vqyFGX8qAJASHUAWFf7ucYrj5XxOGZRDtzC0Zi ZfJPx6P3qaNK5e731MDJ7C9cTTCg0mI= -----END CERTIFICATE-----Generated at Mon Mar 2 17:43:19 2026 by rpki-client