$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa File: ed81676c-13be-3e90-97d5-df858a13c13b.roa (raw, json) Hash identifier: b9rdgfI35KewReDuQq7EGoFreS/Vb8fgMLks0Sihm0U= Subject key identifier: 2F:FA:E6:B2:14:75:A3:89:0C:9C:4C:31:91:48:30:51:7A:43:29:D7 Certificate issuer: /CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Certificate serial: 010D0C9F4328584D80FFE22D90105D6B39839DA0 Authority key identifier: 87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 32787 IP address blocks: 192.243.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:e2:2d:90:10:5d:6b:39:83:9d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=0595fc38-2e04-4ca3-9962-9321dddbde4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:af:ec:bb:f9:60:a6:ad:f5:6e:23:2d:e2:1a: 9e:7d:c4:3e:48:20:d5:8b:df:62:b1:be:89:e4:6d: 21:a5:d5:2f:a4:f1:b6:0f:9c:53:60:b5:7c:27:93: 3f:9f:3b:9a:2e:66:de:db:4d:d5:c7:9d:c7:6b:36: 55:c0:d6:63:bf:24:8c:91:d4:56:3c:f6:99:1b:c3: 21:b4:ab:cd:6b:fe:f3:9b:a8:2a:8e:a6:2b:63:aa: f8:d4:bd:83:18:42:00:b4:e9:0a:95:26:85:b0:15: 1c:56:1f:dc:0a:21:ac:00:bc:ac:2b:42:41:6f:ac: 04:61:7c:85:ad:96:fb:9d:22:d3:52:e5:68:9e:59: b3:27:1a:fc:ae:58:21:cd:ea:e1:a8:3a:f2:f7:22: c8:04:0e:54:1c:52:d4:bb:b2:d5:63:b6:0c:76:ee: d2:26:a9:ad:5e:6f:ed:b5:fa:89:7e:d0:74:5f:b4: fb:df:ca:9d:31:d5:77:32:b9:5e:34:65:b8:0a:98: f9:06:4f:a7:45:4f:38:62:29:b5:ae:31:8e:e8:9d: a9:ee:ab:98:38:ce:3d:50:02:8b:1f:86:c6:59:71: 50:f5:37:0d:dd:fb:4f:a6:84:d8:90:ae:92:f2:9c: 3f:ed:dd:98:f0:b4:b8:70:2e:9f:74:99:ec:e8:b3: 04:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FA:E6:B2:14:75:A3:89:0C:9C:4C:31:91:48:30:51:7A:43:29:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl X509v3 Authority Key Identifier: keyid:87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer sbgp-ipAddrBlock: critical IPv4: 192.243.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:7f:d0:69:89:c8:1b:d5:77:99:59:d7:d7:33:c5:bd:06:54: 12:61:de:bb:fb:8d:ef:fd:07:d3:e9:f6:be:1b:96:28:9b:e8: 7f:84:37:d0:9f:b6:b0:3c:fd:9d:b8:65:28:a4:1e:69:2b:33: c4:9f:00:05:bb:00:68:a7:57:8e:e4:0c:55:ec:c4:80:9a:30: 73:10:7c:75:a4:43:20:c3:54:8c:57:05:60:65:2a:e1:50:b0: d4:e4:2e:4e:1c:c4:65:33:81:34:6f:64:92:ab:be:17:48:3c: 66:97:5d:14:96:29:52:ce:36:88:7a:cf:e1:b5:4b:a1:04:54: ff:6e:48:59:61:5f:36:c4:f7:7b:a8:89:71:25:d1:40:1d:30: e8:b2:89:64:b5:b7:a1:cc:1c:b7:d9:94:9d:62:45:3c:29:a6: 0f:73:bc:bc:5a:5a:dd:a0:48:3c:31:09:96:8a:3d:3f:23:b5: 13:c6:27:b9:49:92:0c:18:61:17:8d:a1:0c:bd:90:d9:5f:bd: d5:54:45:72:e9:15:b7:7a:1c:07:58:e0:b6:2e:bc:ff:23:4e: 5b:ff:dd:eb:27:1e:16:ef:27:d3:bd:21:d4:81:3f:37:ba:52: 32:b1:bc:6b:76:20:96:fe:b6:54:62:83:43:82:4b:d9:f3:e9: 39:6a:83:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/+ItkBBdazmDnaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzYjVlYWItM2NkNS00NzlhLWI1YmEtYmE4ZTBiZGM5 Y2E5MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk MDU5NWZjMzgtMmUwNC00Y2EzLTk5NjItOTMyMWRkZGJkZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a/su/lgpq31biMt4hqefcQ+SCDVi99isb6J 5G0hpdUvpPG2D5xTYLV8J5M/nzuaLmbe203Vx53HazZVwNZjvySMkdRWPPaZG8Mh tKvNa/7zm6gqjqYrY6r41L2DGEIAtOkKlSaFsBUcVh/cCiGsALysK0JBb6wEYXyF rZb7nSLTUuVonlmzJxr8rlghzerhqDry9yLIBA5UHFLUu7LVY7YMdu7SJqmtXm/t tfqJftB0X7T738qdMdV3MrleNGW4Cpj5Bk+nRU84Yim1rjGO6J2p7quYOM49UAKL H4bGWXFQ9TcN3ftPpoTYkK6S8pw/7d2Y8LS4cC6fdJns6LMERwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/65rIUdaOJDJxMMZFIMFF6QynXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NTNi NWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThlMGJkYzljYTkvZWQ4MTY3NmMtMTNiZS0z ZTkwLTk3ZDUtZGY4NThhMTNjMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDUzYjVlYWItM2NkNS00NzlhLWI1 YmEtYmE4ZTBiZGM5Y2E5LzQ1M2I1ZWFiLTNjZDUtNDc5YS1iNWJhLWJhOGUwYmRj OWNhOS5jcmwwHwYDVR0jBBgwFoAUh4QPPiiN6/rAWHOqdzMqBhXT3AcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NTNiNWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThl MGJkYzljYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwPMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGV/0GmJyBvVd5lZ19czxb0GVBJh3rv7je/9B9Pp9r4bliib6H+EN9Cf trA8/Z24ZSikHmkrM8SfAAW7AGinV47kDFXsxICaMHMQfHWkQyDDVIxXBWBlKuFQ sNTkLk4cxGUzgTRvZJKrvhdIPGaXXRSWKVLONoh6z+G1S6EEVP9uSFlhXzbE93uo iXEl0UAdMOiyiWS1t6HMHLfZlJ1iRTwppg9zvLxaWt2gSDwxCZaKPT8jtRPGJ7lJ kgwYYReNoQy9kNlfvdVURXLpFbd6HAdY4LYuvP8jTlv/3esnHhbvJ9O9IdSBPze6 UjKxvGt2IJb+tlRig0OCS9nz6Tlqg6U= -----END CERTIFICATE-----Generated at Fri Apr 17 11:23:53 2026 by rpki-client