$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/c97cfd85-f6c2-37b6-832a-66719ff09d85.roa File: c97cfd85-f6c2-37b6-832a-66719ff09d85.roa (raw, json) Hash identifier: QBri3kjDhmjAmDoulHkMKTxxHdwF34dcVnVTwG+G1WA= Subject key identifier: 2B:AE:D7:44:6E:A8:D1:CF:19:E0:F5:95:E9:0E:CF:A7:2A:DF:D8:14 Certificate issuer: /CN=5742dde3-84a3-4488-a01c-525734c4d81b Certificate serial: 010D0C9F4328584DAC457632C864D16F7A6D8B00 Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/c97cfd85-f6c2-37b6-832a-66719ff09d85.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 399924 IP address blocks: 45.41.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:76:32:c8:64:d1:6f:7a:6d:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=9f971be8-9ff9-41f0-9866-77880480d6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f6:e4:0d:99:c7:ae:1b:36:55:04:e7:d8:81: bf:1c:d7:0e:e8:34:df:d7:23:66:cc:7c:dd:36:3d: d7:b0:08:f3:15:f2:97:b5:a6:22:f5:4c:05:9d:f5: 6d:f1:d3:1d:65:00:4a:ce:ec:71:40:a7:b8:cf:73: 5b:ac:1a:17:67:75:0f:e5:77:1b:be:e2:2f:92:a7: a2:ca:28:b3:40:25:8a:0b:b8:bc:6d:e6:5a:77:c1: ad:5a:28:0d:1a:ab:cd:ca:fc:82:b2:8e:cc:67:de: e8:9a:81:06:db:51:54:62:bd:f7:36:0b:b3:55:0d: f9:b3:47:5a:2e:26:00:0f:62:9c:cc:3d:f6:e3:0d: 25:21:bd:d0:ca:3b:78:bd:c2:1c:48:7c:ac:33:ba: 36:a8:d3:7a:52:f8:a3:a3:ee:2c:ea:a8:a3:79:a6: 6a:a5:7e:3d:43:a3:47:07:8f:12:a2:8d:c0:ad:6f: a4:d2:1c:ec:29:40:98:a2:68:99:f3:87:b1:30:04: a0:9d:a0:a6:e9:f8:cd:66:32:41:5f:07:20:c7:b6: 3e:48:1b:7e:84:d6:a7:f2:13:f5:a0:b8:9e:60:1e: fe:89:d3:0e:18:0e:12:99:28:63:ad:ed:7b:be:88: 85:c5:83:94:1d:c9:92:cb:22:67:db:92:b8:42:ed: bf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AE:D7:44:6E:A8:D1:CF:19:E0:F5:95:E9:0E:CF:A7:2A:DF:D8:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/c97cfd85-f6c2-37b6-832a-66719ff09d85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl X509v3 Authority Key Identifier: keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer sbgp-ipAddrBlock: critical IPv4: 45.41.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ac:5f:f0:9f:f0:39:d0:3d:c7:95:bf:52:a6:81:44:b1:c9: 52:d5:13:7b:98:d3:a7:9f:99:41:69:a1:56:60:db:c0:10:da: 69:dd:dd:69:0d:c1:38:3c:b8:4a:54:8d:9d:bc:24:db:37:c4: af:db:f0:56:81:6f:22:e4:9a:2e:52:d5:ea:21:33:4b:52:18: cd:d4:39:63:2a:90:c7:a7:ba:74:27:cf:bc:c8:79:76:57:88: 21:90:36:19:78:c5:a5:be:9d:f0:99:1e:4e:c4:53:a2:39:64: ad:26:a2:bc:18:e9:68:f7:63:28:4f:a9:21:f5:8a:2e:af:72: 9b:f6:03:21:9d:3c:39:c2:09:12:a4:bc:b5:67:86:a2:7a:de: 04:55:3d:66:43:d7:03:d4:52:a9:a0:df:c7:22:4e:23:75:26: e5:03:76:5d:cf:49:ee:32:c2:89:38:ab:65:e0:17:9c:f5:b2: 23:46:36:8d:e5:15:4d:09:3e:4b:a6:cc:ff:12:ca:53:95:34: ce:63:3f:7f:94:98:a4:be:b6:97:30:38:b0:8f:8c:c7:6e:1c: d1:e1:79:08:f3:63:ef:ca:a5:49:c3:b5:65:36:24:7f:d8:b4: ee:db:cf:33:55:a4:33:99:49:22:75:03:f1:0d:85:45:f5:c6: 68:46:ad:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXYyyGTRb3ptiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc0MmRkZTMtODRhMy00NDg4LWEwMWMtNTI1NzM0YzRk ODFiMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk OWY5NzFiZTgtOWZmOS00MWYwLTk4NjYtNzc4ODA0ODBkNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/bkDZnHrhs2VQTn2IG/HNcO6DTf1yNmzHzd Nj3XsAjzFfKXtaYi9UwFnfVt8dMdZQBKzuxxQKe4z3NbrBoXZ3UP5XcbvuIvkqei yiizQCWKC7i8beZad8GtWigNGqvNyvyCso7MZ97omoEG21FUYr33NguzVQ35s0da LiYAD2KczD324w0lIb3Qyjt4vcIcSHysM7o2qNN6Uvijo+4s6qijeaZqpX49Q6NH B48Soo3ArW+k0hzsKUCYomiZ84exMASgnaCm6fjNZjJBXwcgx7Y+SBt+hNan8hP1 oLieYB7+idMOGA4SmShjre17voiFxYOUHcmSyyJn25K4Qu2/jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuu10RuqNHPGeD1lekOz6cq39gUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NzQy ZGRlMy04NGEzLTQ0ODgtYTAxYy01MjU3MzRjNGQ4MWIvYzk3Y2ZkODUtZjZjMi0z N2I2LTgzMmEtNjY3MTlmZjA5ZDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTc0MmRkZTMtODRhMy00NDg4LWEw MWMtNTI1NzM0YzRkODFiLzU3NDJkZGUzLTg0YTMtNDQ4OC1hMDFjLTUyNTczNGM0 ZDgxYi5jcmwwHwYDVR0jBBgwFoAUgPSvREXaX/pZzpyoT5aC/zlDxi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NzQyZGRlMy04NGEzLTQ0ODgtYTAxYy01MjU3 MzRjNGQ4MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSkhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2sX/Cf8DnQPceVv1KmgUSxyVLVE3uY06efmUFpoVZg28AQ2mnd3WkN wTg8uEpUjZ28JNs3xK/b8FaBbyLkmi5S1eohM0tSGM3UOWMqkMenunQnz7zIeXZX iCGQNhl4xaW+nfCZHk7EU6I5ZK0morwY6Wj3YyhPqSH1ii6vcpv2AyGdPDnCCRKk vLVnhqJ63gRVPWZD1wPUUqmg38ciTiN1JuUDdl3PSe4ywok4q2XgF5z1siNGNo3l FU0JPkumzP8SylOVNM5jP3+UmKS+tpcwOLCPjMduHNHheQjzY+/KpUnDtWU2JH/Y tO7bzzNVpDOZSSJ1A/ENhUX1xmhGrYw= -----END CERTIFICATE-----Generated at Wed May 13 18:37:40 2026 by rpki-client