$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45727758-d36f-3a6f-9fa5-7d673c087a7a.roa File: 45727758-d36f-3a6f-9fa5-7d673c087a7a.roa (raw, json) Hash identifier: KlEUWY1SNkPgzcvA7KktEOPyJ0PpnhFp7vpW9xH2mlg= Subject key identifier: 39:24:73:11:10:F2:FC:9B:DF:67:43:3E:AF:D8:EC:06:F3:83:DC:FA Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584DA81585E65C72F4A8B08D1FD0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45727758-d36f-3a6f-9fa5-7d673c087a7a.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 45102 IP address blocks: 206.54.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:85:e6:5c:72:f4:a8:b0:8d:1f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=d47a6876-326e-450a-ada8-c70a8ad4801e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8e:a1:e2:f4:a7:73:0c:9d:f4:3b:a0:6b:2d: f9:0d:33:41:97:75:49:61:b6:28:d9:bd:e3:73:49: e5:d6:91:fe:7c:e6:f6:21:df:e0:5d:81:15:ec:35: 54:03:e2:c5:c8:76:cc:a1:ea:77:f9:57:db:7e:a9: 81:0b:94:58:c6:d8:12:b4:f5:0c:a8:7c:59:a7:a2: 6b:29:97:23:59:2e:a0:22:1d:0b:c2:eb:8f:8f:64: 58:d6:05:15:24:90:5d:cf:cb:00:17:67:1b:6d:09: a7:95:0e:cc:b6:a1:2f:60:74:e1:35:56:1d:57:14: 2e:e7:78:81:3c:26:d3:33:6d:f8:33:d4:fd:69:69: 0a:cd:1b:c8:03:df:7e:62:34:08:71:dd:c4:ee:7c: 4b:47:e1:64:45:02:8b:8a:8b:1a:93:61:07:0c:c2: b0:55:be:db:99:4a:66:74:06:bb:10:8d:0c:58:8e: 32:cc:ff:9a:03:7d:04:05:47:29:22:e9:8b:20:f5: 29:6a:05:af:00:62:da:6d:b8:2d:2f:ea:f9:d1:60: 3b:d4:5f:91:6d:ba:b1:0a:6d:e8:41:e9:9f:77:8b: ef:65:25:cd:23:f2:21:19:7f:08:1f:c5:4f:45:7c: 4c:6e:fb:bf:e2:e1:1a:ee:f7:e0:d2:0c:8d:09:17: bb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:24:73:11:10:F2:FC:9B:DF:67:43:3E:AF:D8:EC:06:F3:83:DC:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45727758-d36f-3a6f-9fa5-7d673c087a7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.54.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:42:23:ce:27:40:50:1d:16:52:fe:c9:e6:e8:c6:78:10:bb: ec:17:a4:70:61:81:6e:ed:2f:fa:a8:cf:50:2e:e3:85:16:f9: 0a:68:09:37:df:f7:dd:6d:f4:68:e5:4f:da:c0:fe:25:41:0d: 5d:8d:ea:00:2a:26:dc:18:28:d8:d3:a0:08:9b:fc:25:ac:ca: d2:7c:d1:00:6d:11:0d:0f:d1:09:c8:90:09:b4:1f:8a:79:64: 34:b2:82:95:4c:40:c4:be:82:8b:89:64:ac:50:8f:63:ae:97: b5:6d:5b:38:f0:99:a9:e8:a6:9e:6f:80:11:fa:c3:b4:26:93: 29:0e:32:61:b4:b8:8b:1b:40:f8:97:ea:79:97:99:7a:d4:00: 83:fc:c8:22:25:f4:fa:b0:b8:f2:26:b4:2e:99:63:b1:68:2a: 72:a7:63:f5:b8:21:10:2a:85:f3:cc:94:1a:bf:13:1c:8f:aa: 7a:5d:ed:73:e0:e4:21:ee:d9:f5:a1:23:7b:69:85:25:af:72: ce:95:8f:f3:39:4a:39:16:93:31:f7:d1:d3:73:db:e2:07:c9: d1:9f:74:fd:07:3d:68:14:e6:28:ea:f7:33:9e:c3:08:a7:d8: c5:32:18:dd:3f:8b:0f:5e:59:12:ed:a1:30:5c:89:74:27:cc: 23:05:99:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYXmXHL0qLCNH9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk ZDQ3YTY4NzYtMzI2ZS00NTBhLWFkYTgtYzcwYThhZDQ4MDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh46h4vSncwyd9Dugay35DTNBl3VJYbYo2b3j c0nl1pH+fOb2Id/gXYEV7DVUA+LFyHbMoep3+VfbfqmBC5RYxtgStPUMqHxZp6Jr KZcjWS6gIh0LwuuPj2RY1gUVJJBdz8sAF2cbbQmnlQ7MtqEvYHThNVYdVxQu53iB PCbTM234M9T9aWkKzRvIA99+YjQIcd3E7nxLR+FkRQKLiosak2EHDMKwVb7bmUpm dAa7EI0MWI4yzP+aA30EBUcpIumLIPUpagWvAGLabbgtL+r50WA71F+RbbqxCm3o Qemfd4vvZSXNI/IhGX8IH8VPRXxMbvu/4uEa7vfg0gyNCRe7uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkkcxEQ8vyb32dDPq/Y7Abzg9z6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDU3Mjc3NTgtZDM2Zi0z YTZmLTlmYTUtN2Q2NzNjMDg3YTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzjYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlCI84nQFAdFlL+yeboxngQu+wXpHBhgW7tL/qoz1Au44UW+QpoCTff 991t9GjlT9rA/iVBDV2N6gAqJtwYKNjToAib/CWsytJ80QBtEQ0P0QnIkAm0H4p5 ZDSygpVMQMS+gouJZKxQj2Oul7VtWzjwmanopp5vgBH6w7QmkykOMmG0uIsbQPiX 6nmXmXrUAIP8yCIl9PqwuPImtC6ZY7FoKnKnY/W4IRAqhfPMlBq/ExyPqnpd7XPg 5CHu2fWhI3tphSWvcs6Vj/M5SjkWkzH30dNz2+IHydGfdP0HPWgU5ijq9zOewwin 2MUyGN0/iw9eWRLtoTBciXQnzCMFmfM= -----END CERTIFICATE-----Generated at Wed May 13 12:19:53 2026 by rpki-client