$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/d1ce1a33-08c7-3209-8312-de68c758aa76.roa File: d1ce1a33-08c7-3209-8312-de68c758aa76.roa (raw, json) Hash identifier: 1G4GpR7jVctQVhFYkmQWeOEtcuPmMJccNNEE5JdfIW4= Subject key identifier: 18:6F:98:00:6A:73:91:F4:02:5D:87:BB:85:C1:BB:43:BD:EB:EE:34 Certificate issuer: /CN=4a7f2143-6131-414b-81ad-be960f2a78c1 Certificate serial: 010D0C9F4328584DA11ABF9421B8E7072BFA8F00 Authority key identifier: 6A:C8:C5:11:64:5E:EC:E9:6E:D6:6C:DC:9C:EA:8F:DF:1E:04:F4:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/d1ce1a33-08c7-3209-8312-de68c758aa76.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 398335 IP address blocks: 45.42.156.0/22 maxlen: 22 64.32.52.0/22 maxlen: 22 209.172.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:bf:94:21:b8:e7:07:2b:fa:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7f2143-6131-414b-81ad-be960f2a78c1 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=ae4cb8c4-9a61-4153-9897-a631a19861c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:92:44:28:6c:6f:b4:65:03:6e:a7:99:22:b4: 33:18:ba:d6:03:f7:1e:3d:a3:c7:74:25:e5:d1:1d: 95:9d:b6:8c:49:d0:be:1f:ca:48:b1:4a:33:3e:10: 59:97:ca:03:49:62:cb:17:39:97:fe:75:b1:e7:42: 80:6c:a9:9a:3e:56:d0:8b:7e:84:33:27:ec:84:e2: 61:4e:76:d8:7e:9f:61:a0:65:21:58:8e:15:ab:f1: d1:bd:81:20:4a:2e:2f:de:9a:27:98:ad:97:fb:97: 6b:cc:d4:20:b3:82:0c:6c:7a:ee:64:37:03:97:71: 0d:b1:08:23:8b:5c:1b:1e:39:37:18:5a:7c:6c:da: a1:d9:94:75:2f:6e:0f:05:03:2d:ae:c8:a6:b3:26: bf:95:04:b5:e1:55:47:9c:bf:7b:35:69:e6:7d:dc: d0:0b:8e:1e:bb:5d:50:20:b5:bd:c0:fc:9f:d7:62: 03:6f:89:63:23:43:23:d8:50:53:4f:b1:88:0c:b5: 30:9b:29:d8:ff:6d:76:6c:96:25:f9:77:26:5a:32: ff:3c:c0:07:5d:1b:83:ad:c5:ba:23:4f:cf:ab:64: 43:f8:03:da:6c:fa:b0:d3:07:2b:77:da:e9:99:2c: 5c:71:a1:cc:3b:65:87:d3:b6:02:e2:c2:a4:19:47: a2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6F:98:00:6A:73:91:F4:02:5D:87:BB:85:C1:BB:43:BD:EB:EE:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/d1ce1a33-08c7-3209-8312-de68c758aa76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.crl X509v3 Authority Key Identifier: keyid:6A:C8:C5:11:64:5E:EC:E9:6E:D6:6C:DC:9C:EA:8F:DF:1E:04:F4:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer sbgp-ipAddrBlock: critical IPv4: 45.42.156.0/22 64.32.52.0/22 209.172.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:09:d9:42:85:a8:4b:4a:dc:b4:30:14:53:02:a0:a2:5b:4c: 29:7f:4d:d2:86:16:51:fc:b7:8c:1c:c7:0f:c3:92:85:e6:49: 0a:a3:8f:39:58:4f:97:f6:33:a0:05:4f:56:da:a8:e2:d8:bc: 0c:66:6f:c8:e5:53:16:c9:63:35:5a:ce:73:8f:d0:53:1a:44: 7e:66:ca:d1:a0:f7:00:b7:5e:58:f9:74:95:ba:9f:72:16:68: 40:49:f9:7d:6a:3c:eb:6b:32:e9:79:32:b1:57:dd:18:62:04: 26:e9:a3:1d:46:70:21:33:7c:11:58:81:20:1b:7f:ab:77:07: b2:00:14:5f:d7:f0:be:9f:93:cd:cf:b3:54:46:cd:58:01:34: 64:f8:73:bb:1c:02:89:3c:52:04:00:4c:f9:3d:46:e1:7c:24: 77:9e:f2:e2:70:1a:05:33:ef:91:a1:42:f2:3a:28:2b:2f:f5: 6d:35:7e:8f:7f:09:77:26:35:ef:ff:79:20:5b:f6:2b:ca:c3: 47:e9:18:19:21:4d:62:fd:4d:da:7b:f4:f9:ce:df:06:a0:cc: 2a:a0:ab:64:e9:26:9d:35:92:ad:4f:3a:35:1f:70:7e:cf:83: c2:97:f6:65:5b:5a:c9:54:4e:9f:51:3b:ee:19:ad:23:76:2e: d5:ee:f3:db -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE2hGr+UIbjnByv6jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE3ZjIxNDMtNjEzMS00MTRiLTgxYWQtYmU5NjBmMmE3 OGMxMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk YWU0Y2I4YzQtOWE2MS00MTUzLTk4OTctYTYzMWExOTg2MWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pJEKGxvtGUDbqeZIrQzGLrWA/cePaPHdCXl 0R2VnbaMSdC+H8pIsUozPhBZl8oDSWLLFzmX/nWx50KAbKmaPlbQi36EMyfshOJh TnbYfp9hoGUhWI4Vq/HRvYEgSi4v3ponmK2X+5drzNQgs4IMbHruZDcDl3ENsQgj i1wbHjk3GFp8bNqh2ZR1L24PBQMtrsimsya/lQS14VVHnL97NWnmfdzQC44eu11Q ILW9wPyf12IDb4ljI0Mj2FBTT7GIDLUwmynY/212bJYl+XcmWjL/PMAHXRuDrcW6 I0/Pq2RD+APabPqw0wcrd9rpmSxccaHMO2WH07YC4sKkGUeinQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBhvmABqc5H0Al2Hu4XBu0O96+40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YTdm MjE0My02MTMxLTQxNGItODFhZC1iZTk2MGYyYTc4YzEvZDFjZTFhMzMtMDhjNy0z MjA5LTgzMTItZGU2OGM3NThhYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGE3ZjIxNDMtNjEzMS00MTRiLTgx YWQtYmU5NjBmMmE3OGMxLzRhN2YyMTQzLTYxMzEtNDE0Yi04MWFkLWJlOTYwZjJh NzhjMS5jcmwwHwYDVR0jBBgwFoAUasjFEWRe7Olu1mzcnOqP3x4E9OYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YTdmMjE0My02MTMxLTQxNGItODFhZC1iZTk2 MGYyYTc4YzEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLSqcAwQC QCA0AwQD0awYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADgJ2UKFqEtK3LQwFFMCoKJbTCl/TdKGFlH8t4wc xw/DkoXmSQqjjzlYT5f2M6AFT1baqOLYvAxmb8jlUxbJYzVaznOP0FMaRH5mytGg 9wC3Xlj5dJW6n3IWaEBJ+X1qPOtrMul5MrFX3RhiBCbpox1GcCEzfBFYgSAbf6t3 B7IAFF/X8L6fk83Ps1RGzVgBNGT4c7scAok8UgQATPk9RuF8JHee8uJwGgUz75Gh QvI6KCsv9W01fo9/CXcmNe//eSBb9ivKw0fpGBkhTWL9Tdp79PnO3wagzCqgq2Tp Jp01kq1POjUfcH7Pg8KX9mVbWslUTp9RO+4ZrSN2LtXu89s= -----END CERTIFICATE-----Generated at Wed May 13 09:44:43 2026 by rpki-client