$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/a5f96039-3bf6-3bd6-9754-bdebf9942236.roa File: a5f96039-3bf6-3bd6-9754-bdebf9942236.roa (raw, json) Hash identifier: SWnwMfwy61wKK2XTieFGY9pRqMWsoYpUYXrdx2HB1Do= Subject key identifier: B7:87:80:11:94:BD:F7:27:FF:0F:E5:F1:77:4D:67:08:4E:7C:25:FE Certificate issuer: /CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9 Certificate serial: 010D0C9F4328584CB551D83D53A17EE26B0DAC00 Authority key identifier: 07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/a5f96039-3bf6-3bd6-9754-bdebf9942236.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 399135 IP address blocks: 45.42.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:d8:3d:53:a1:7e:e2:6b:0d:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=3ef20fff-4499-43e8-94f1-e388d1262ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:0f:59:83:7d:cd:b8:ec:db:42:89:9c:8e: f8:24:77:ed:b3:df:20:ef:2e:2a:49:09:12:2e:61: c0:68:ce:d7:66:8f:66:3a:4e:9c:93:55:90:fe:d8: 38:7f:51:45:89:f5:d9:78:0c:ba:a1:d5:d9:fc:27: bd:d1:1c:a4:46:42:ae:4b:d9:2b:7d:6a:5b:15:71: 32:26:f1:0f:b7:83:67:66:f0:5a:21:92:d9:ee:c9: 15:22:20:c0:4b:57:30:3b:59:a1:30:fe:bf:6b:f1: 0a:33:48:6e:4c:4a:f6:26:9f:f2:79:39:d1:12:c0: 01:29:11:2d:a2:45:dc:2b:01:23:40:83:c7:5d:2d: 51:e1:b4:ac:ba:d1:aa:77:03:df:62:63:80:1e:d4: 26:10:c0:14:14:72:61:04:a1:c3:53:f4:c1:62:3b: 84:7c:0d:e6:4a:58:64:61:d7:71:40:f8:9d:c6:0f: b9:4a:37:22:5f:a0:9d:d0:49:d6:82:f0:14:0a:ee: 0d:fc:82:70:1e:9e:fc:0a:f0:97:25:24:a6:71:bd: 68:2e:2b:1f:d0:86:72:9e:10:43:2c:4b:20:94:c7: 3e:de:5f:11:09:1c:fd:50:3b:3a:f2:a3:4f:16:86: 8d:31:08:19:f3:06:09:4f:08:74:6c:5e:87:90:f6: 90:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:87:80:11:94:BD:F7:27:FF:0F:E5:F1:77:4D:67:08:4E:7C:25:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/a5f96039-3bf6-3bd6-9754-bdebf9942236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.crl X509v3 Authority Key Identifier: keyid:07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer sbgp-ipAddrBlock: critical IPv4: 45.42.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a0:75:ed:d0:0e:d7:20:a6:17:b6:ff:eb:0b:c0:73:8a:ac: 21:55:91:98:dc:03:2d:da:82:fe:9f:8f:da:f9:ba:7b:97:85: 00:49:ef:df:49:b7:ef:79:2d:1c:26:19:d5:16:6f:41:56:e8: db:20:51:1e:5d:1b:9e:a4:d2:91:92:45:47:77:4a:d2:1a:75: 74:90:72:d0:24:1b:d4:ba:d1:cb:13:2c:83:d8:42:52:1a:27: 62:d8:92:dd:aa:56:b5:b2:3c:81:e2:fc:9f:3f:ea:7d:7e:ea: c6:8e:10:02:12:0a:80:f4:1c:dd:80:61:b6:47:c9:d2:8f:6f: e5:e3:2e:7b:bb:f1:5b:1e:2a:59:b3:0f:99:48:d9:31:fe:7c: 6e:28:43:46:0d:0a:e4:3d:51:1d:16:40:6a:a0:05:2d:f9:df: 4d:72:eb:1a:2b:c7:78:06:c1:93:12:b6:82:79:08:52:d4:a7: a3:b2:1a:90:9e:87:cf:78:d9:5e:90:43:08:0c:9e:55:ea:33: 94:7e:77:13:89:fb:6c:fb:28:eb:22:83:57:37:19:40:79:5b: e6:97:2a:79:00:cc:2f:fa:35:46:8d:2f:80:b3:36:dc:58:16: b3:29:7e:f3:36:ee:79:0e:52:d0:37:0b:f7:67:88:d1:2d:32: 80:6b:65:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1Udg9U6F+4msNrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWY3ZTc4OWYtZWQ0Yi00Y2ExLWE5M2ItNmY1N2M3NzY0 YWE5MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk M2VmMjBmZmYtNDQ5OS00M2U4LTk0ZjEtZTM4OGQxMjYyYmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjUPWYN9zbjs20KJnI74JHfts98g7y4qSQkS LmHAaM7XZo9mOk6ck1WQ/tg4f1FFifXZeAy6odXZ/Ce90RykRkKuS9krfWpbFXEy JvEPt4NnZvBaIZLZ7skVIiDAS1cwO1mhMP6/a/EKM0huTEr2Jp/yeTnREsABKREt okXcKwEjQIPHXS1R4bSsutGqdwPfYmOAHtQmEMAUFHJhBKHDU/TBYjuEfA3mSlhk YddxQPidxg+5SjciX6Cd0EnWgvAUCu4N/IJwHp78CvCXJSSmcb1oLisf0IZynhBD LEsglMc+3l8RCRz9UDs68qNPFoaNMQgZ8wYJTwh0bF6HkPaQCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeHgBGUvfcn/w/l8XdNZwhOfCX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81Zjdl Nzg5Zi1lZDRiLTRjYTEtYTkzYi02ZjU3Yzc3NjRhYTkvYTVmOTYwMzktM2JmNi0z YmQ2LTk3NTQtYmRlYmY5OTQyMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWY3ZTc4OWYtZWQ0Yi00Y2ExLWE5 M2ItNmY1N2M3NzY0YWE5LzVmN2U3ODlmLWVkNGItNGNhMS1hOTNiLTZmNTdjNzc2 NGFhOS5jcmwwHwYDVR0jBBgwFoAUB8XJkGTph2XNXJHG0F1hNU9pI4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZjdlNzg5Zi1lZDRiLTRjYTEtYTkzYi02ZjU3 Yzc3NjRhYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSr0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmgde3QDtcgphe2/+sLwHOKrCFVkZjcAy3agv6fj9r5unuXhQBJ799J t+95LRwmGdUWb0FW6NsgUR5dG56k0pGSRUd3StIadXSQctAkG9S60csTLIPYQlIa J2LYkt2qVrWyPIHi/J8/6n1+6saOEAISCoD0HN2AYbZHydKPb+XjLnu78VseKlmz D5lI2TH+fG4oQ0YNCuQ9UR0WQGqgBS35301y6xorx3gGwZMStoJ5CFLUp6OyGpCe h8942V6QQwgMnlXqM5R+dxOJ+2z7KOsig1c3GUB5W+aXKnkAzC/6NUaNL4CzNtxY FrMpfvM27nkOUtA3C/dniNEtMoBrZb0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:22 2026 by rpki-client