$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/d0af02a9-0d8a-3be9-89c3-b3f9051c6a65.roa File: d0af02a9-0d8a-3be9-89c3-b3f9051c6a65.roa (raw, json) Hash identifier: bnleg34ZadpZz73Nn6E+tGN8fVT3TMIbEwGVxALI15E= Subject key identifier: 7B:71:4A:DD:D3:81:E2:0A:93:21:39:87:2F:3C:B7:51:3C:7E:FC:C7 Certificate issuer: /CN=1019a62c-c6e6-45a6-a0e7-472a84b5ba68 Certificate serial: 010D0C9F4328584D773A66F128D97806DB17FD16 Authority key identifier: CE:02:0E:11:62:45:2E:57:D6:13:BA:B6:EE:85:52:C2:30:31:BE:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/d0af02a9-0d8a-3be9-89c3-b3f9051c6a65.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 399979 IP address blocks: 45.139.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:66:f1:28:d9:78:06:db:17:fd:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1019a62c-c6e6-45a6-a0e7-472a84b5ba68 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=d412574d-542e-4634-917a-bb436a3901c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:63:8d:fd:1c:7a:8f:81:0e:d7:38:f0:c4: ba:b5:61:f8:2a:e4:d0:70:97:80:bf:37:0a:9c:ec: 21:d9:4e:ff:28:4b:09:57:06:68:35:92:af:8e:fa: c5:c4:71:3b:bd:7f:82:a2:b5:05:ce:db:27:02:5a: 76:fe:e1:87:51:72:0c:b6:33:40:13:bc:e7:8e:50: 4e:76:13:98:1f:a8:96:06:7d:89:21:07:c1:fd:3a: 4f:58:19:2f:ee:6f:fd:15:68:c3:1a:45:f5:84:3d: 73:c4:8c:bd:f2:8b:5b:1a:0a:36:74:ea:92:42:d4: 0c:9e:de:c0:b8:ab:66:6e:20:cc:2a:0f:07:00:26: a2:03:7e:9d:9a:e9:1b:f1:5a:60:4d:74:9b:3a:64: 20:a9:4a:59:6e:1b:b3:b5:e2:4a:0f:14:34:b0:5f: 15:c5:6a:37:8c:b6:ad:3f:27:8b:69:79:04:51:1c: 6e:c8:79:2f:f2:c3:85:a1:ac:02:c5:72:50:48:56: 88:55:22:98:da:16:ee:24:10:82:67:9b:09:75:55: 2b:72:15:9b:21:6d:de:35:86:44:33:c8:81:cf:2a: d1:06:ae:d9:da:6d:75:94:6a:ae:fa:5b:5a:31:83: 72:6b:21:33:03:8b:ff:4e:2b:f4:e4:fc:9f:aa:cb: fd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:71:4A:DD:D3:81:E2:0A:93:21:39:87:2F:3C:B7:51:3C:7E:FC:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/d0af02a9-0d8a-3be9-89c3-b3f9051c6a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.crl X509v3 Authority Key Identifier: keyid:CE:02:0E:11:62:45:2E:57:D6:13:BA:B6:EE:85:52:C2:30:31:BE:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.cer sbgp-ipAddrBlock: critical IPv4: 45.139.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:05:ec:24:94:69:b1:1b:b1:ad:d2:50:43:f2:8a:fa:35:1f: 8a:95:ec:50:d0:c4:c0:26:fa:15:af:fd:0e:62:fe:42:31:66: 75:a7:85:d8:fb:e8:02:83:ef:55:10:2e:60:b6:6c:59:4f:64: 9f:93:84:0e:54:21:39:03:20:d1:b2:88:59:0f:72:ec:b1:74: 6b:d0:87:9f:a4:24:d0:79:94:47:93:8f:d9:cc:d9:71:3a:75: 07:ee:0a:fe:74:e6:30:65:32:fb:6f:4f:42:c2:6b:34:c6:c9: fb:7c:a0:d8:6e:37:1c:52:e8:14:57:cf:ea:58:06:71:74:22: 88:1a:96:dd:c6:95:da:51:48:37:73:77:9c:cf:ac:95:41:4d: 1b:1a:0d:46:88:64:42:9c:3e:a6:21:54:6e:4b:7b:33:03:8c: ab:ac:be:1c:b1:ba:ff:cf:18:82:59:c2:4c:74:01:f3:91:36: 1d:30:6c:3f:ed:86:2a:13:5d:41:cb:6b:aa:97:48:c7:da:6d: dc:f5:ff:b1:bf:53:84:b4:7e:ab:5e:59:4b:3c:4e:b9:ea:6a: d4:1d:78:4b:76:52:b0:c4:b6:dd:f0:07:bc:e6:9e:b7:c1:ec: 8b:ae:97:9c:5f:b4:13:0b:3d:d7:18:20:84:fc:fa:6d:30:ad: 9d:ba:64:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OmbxKNl4BtsX/RYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTAxOWE2MmMtYzZlNi00NWE2LWEwZTctNDcyYTg0YjVi YTY4MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk ZDQxMjU3NGQtNTQyZS00NjM0LTkxN2EtYmI0MzZhMzkwMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8djjf0ceo+BDtc48MS6tWH4KuTQcJeAvzcK nOwh2U7/KEsJVwZoNZKvjvrFxHE7vX+CorUFztsnAlp2/uGHUXIMtjNAE7znjlBO dhOYH6iWBn2JIQfB/TpPWBkv7m/9FWjDGkX1hD1zxIy98otbGgo2dOqSQtQMnt7A uKtmbiDMKg8HACaiA36dmukb8VpgTXSbOmQgqUpZbhuzteJKDxQ0sF8VxWo3jLat PyeLaXkEURxuyHkv8sOFoawCxXJQSFaIVSKY2hbuJBCCZ5sJdVUrchWbIW3eNYZE M8iBzyrRBq7Z2m11lGqu+ltaMYNyayEzA4v/Tiv05Pyfqsv9vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtxSt3TgeIKkyE5hy88t1E8fvzHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDE5 YTYyYy1jNmU2LTQ1YTYtYTBlNy00NzJhODRiNWJhNjgvZDBhZjAyYTktMGQ4YS0z YmU5LTg5YzMtYjNmOTA1MWM2YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTAxOWE2MmMtYzZlNi00NWE2LWEw ZTctNDcyYTg0YjViYTY4LzEwMTlhNjJjLWM2ZTYtNDVhNi1hMGU3LTQ3MmE4NGI1 YmE2OC5jcmwwHwYDVR0jBBgwFoAUzgIOEWJFLlfWE7q27oVSwjAxvoEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDE5YTYyYy1jNmU2LTQ1YTYtYTBlNy00NzJh ODRiNWJhNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUF7CSUabEbsa3SUEPyivo1H4qV7FDQxMAm+hWv/Q5i/kIxZnWnhdj7 6AKD71UQLmC2bFlPZJ+ThA5UITkDINGyiFkPcuyxdGvQh5+kJNB5lEeTj9nM2XE6 dQfuCv505jBlMvtvT0LCazTGyft8oNhuNxxS6BRXz+pYBnF0Iogalt3GldpRSDdz d5zPrJVBTRsaDUaIZEKcPqYhVG5LezMDjKusvhyxuv/PGIJZwkx0AfORNh0wbD/t hioTXUHLa6qXSMfabdz1/7G/U4S0fqteWUs8TrnqatQdeEt2UrDEtt3wB7zmnrfB 7Iuul5xftBMLPdcYIIT8+m0wrZ26ZCA= -----END CERTIFICATE-----Generated at Sat Apr 18 03:03:56 2026 by rpki-client