$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa File: a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa (raw, json) Hash identifier: JHOU5Ie1DpDfW0L/K+WxMCZWiWwh0McADeH4WVwJxz4= Subject key identifier: 57:B4:6A:7C:A8:CA:7F:55:7A:1D:DD:AF:C8:3E:E6:CE:36:63:66:30 Certificate issuer: /CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Certificate serial: 010D0C9F4328584D40CA53DAD076FF146AC09A00 Authority key identifier: 0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 46844 IP address blocks: 45.58.128.0/18 maxlen: 24 64.32.0.0/19 maxlen: 24 67.21.64.0/19 maxlen: 24 70.39.64.0/18 maxlen: 24 104.37.244.0/22 maxlen: 24 104.160.160.0/19 maxlen: 24 107.167.0.0/19 maxlen: 24 170.178.160.0/19 maxlen: 24 174.128.224.0/19 maxlen: 24 198.148.80.0/20 maxlen: 24 199.115.100.0/22 maxlen: 24 204.188.192.0/18 maxlen: 24 208.98.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:53:da:d0:76:ff:14:6a:c0:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=7188f0ea-9ca7-41b0-a8e3-a78121c2aab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d0:c2:12:aa:6d:fb:c7:34:a1:76:ef:a7:8f: 11:18:ba:c5:95:51:93:a1:6e:0d:39:94:89:ff:33: e1:a4:65:77:47:8a:8a:97:d5:84:c5:83:64:ef:77: cb:6d:be:d8:63:32:e1:f5:79:6f:6a:6a:8e:94:3b: d3:cc:7c:f3:ae:93:d0:6d:a1:13:f5:5a:df:29:60: 5d:60:0d:7d:84:d6:ab:8d:63:c4:0a:11:e7:32:c4: 8f:84:29:dd:21:1f:11:5d:22:e0:84:38:5b:a5:57: 89:f6:a7:7e:6d:1e:0b:11:bc:fa:a6:02:34:f4:84: e9:66:a3:25:d5:1f:74:62:7b:bf:ba:6c:7e:38:8e: a3:47:ec:4a:ff:96:82:35:3c:97:fb:a8:57:29:47: 94:ea:13:5b:88:71:14:5c:4e:6c:1a:cc:23:20:88: 2e:d3:8a:3a:90:25:2b:46:0f:5b:6a:15:ce:7f:4e: b7:59:2f:e0:3e:01:78:af:71:1c:2f:4f:2a:9b:5d: fd:b7:e7:dd:39:1c:cb:49:52:c1:94:11:f5:95:00: e1:44:b4:5a:8d:c4:2e:ab:69:17:03:8d:0e:6a:5a: aa:ac:de:a4:34:6a:3a:0d:1b:40:02:0f:10:13:c0: 50:c2:23:58:99:99:8f:f5:75:15:1c:35:c2:45:1e: 33:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B4:6A:7C:A8:CA:7F:55:7A:1D:DD:AF:C8:3E:E6:CE:36:63:66:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl X509v3 Authority Key Identifier: keyid:0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer sbgp-ipAddrBlock: critical IPv4: 45.58.128.0/18 64.32.0.0/19 67.21.64.0/19 70.39.64.0/18 104.37.244.0/22 104.160.160.0/19 107.167.0.0/19 170.178.160.0/19 174.128.224.0/19 198.148.80.0/20 199.115.100.0/22 204.188.192.0/18 208.98.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:99:6e:b8:c8:35:a4:62:0b:c8:e7:79:71:89:c1:53:8a:53: 20:b6:d8:14:d1:39:17:5d:c9:de:f0:b4:a7:b2:95:1e:57:42: d7:b0:fb:10:1b:a7:0a:16:d9:4d:b6:41:0a:ec:85:0a:2d:61: 92:0a:06:60:d3:45:40:bf:83:ec:3a:44:72:1b:13:ff:d6:e4: 7c:54:ea:e9:57:97:74:6b:03:7b:3e:56:88:43:56:06:79:84: 72:84:a3:95:fd:87:67:4c:00:48:1c:1f:4e:a1:0b:2f:4d:85: ea:ae:8a:95:20:f0:7d:db:f3:03:82:b0:78:fe:82:64:f1:b5: cc:8d:2f:2e:e8:c3:3f:11:41:5d:75:a6:1e:13:ac:1d:f1:42: 6b:7d:bd:69:88:9d:73:6f:a8:d4:2b:3c:21:6f:23:71:5d:67: b3:a5:7c:79:f9:3b:2b:77:02:10:60:2a:15:22:7f:f5:16:a1: c0:5f:73:1a:04:52:e2:42:29:ff:3e:d6:64:7a:d5:c8:be:56: d4:d3:bf:a4:12:0f:f2:74:e9:8e:2f:69:d1:46:a7:20:39:40: 3d:e1:4f:39:f3:00:28:2f:42:31:d0:46:9a:2d:df:49:13:47: 88:36:fb:30:d9:77:47:23:f8:d4:5d:3f:63:f7:f6:3d:ff:fd: 4f:b9:c3:b2 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWE1AylPa0Hb/FGrAmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRmODNmMmUtZTRiNC00OTUzLThhY2MtNzgxNmIzMzNk MzMyMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NzE4OGYwZWEtOWNhNy00MWIwLWE4ZTMtYTc4MTIxYzJhYWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdDCEqpt+8c0oXbvp48RGLrFlVGToW4NOZSJ /zPhpGV3R4qKl9WExYNk73fLbb7YYzLh9XlvamqOlDvTzHzzrpPQbaET9VrfKWBd YA19hNarjWPEChHnMsSPhCndIR8RXSLghDhbpVeJ9qd+bR4LEbz6pgI09ITpZqMl 1R90Ynu/umx+OI6jR+xK/5aCNTyX+6hXKUeU6hNbiHEUXE5sGswjIIgu04o6kCUr Rg9bahXOf063WS/gPgF4r3EcL08qm139t+fdORzLSVLBlBH1lQDhRLRajcQuq2kX A40OalqqrN6kNGo6DRtAAg8QE8BQwiNYmZmP9XUVHDXCRR4zbwIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFFe0anyoyn9Veh3dr8g+5s42Y2YwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZGY4 M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2YjMzM2QzMzIvYTVjYjRlOGItNTJiNy0z ZjNhLTgyNTktZjQ3YzU4NTVhMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGRmODNmMmUtZTRiNC00OTUzLThh Y2MtNzgxNmIzMzNkMzMyLzhkZjgzZjJlLWU0YjQtNDk1My04YWNjLTc4MTZiMzMz ZDMzMi5jcmwwHwYDVR0jBBgwFoAUDaYqxupoTrLFfVvi9T8jMGOP5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZGY4M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2 YjMzM2QzMzIuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQGLTqAAwQF QCAAAwQFQxVAAwQGRidAAwQCaCX0AwQFaKCgAwQFa6cAAwQFqrKgAwQFroDgAwQE xpRQAwQCx3NkAwQGzLzAAwQG0GIAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE+ZbrjINaRiC8jneXGJwVOK UyC22BTRORddyd7wtKeylR5XQtew+xAbpwoW2U22QQrshQotYZIKBmDTRUC/g+w6 RHIbE//W5HxU6ulXl3RrA3s+VohDVgZ5hHKEo5X9h2dMAEgcH06hCy9NhequipUg 8H3b8wOCsHj+gmTxtcyNLy7owz8RQV11ph4TrB3xQmt9vWmInXNvqNQrPCFvI3Fd Z7OlfHn5Oyt3AhBgKhUif/UWocBfcxoEUuJCKf8+1mR61ci+VtTTv6QSD/J06Y4v adFGpyA5QD3hTznzACgvQjHQRpot30kTR4g2+zDZd0cj+NRdP2P39j3//U+5w7I= -----END CERTIFICATE-----Generated at Thu Mar 26 07:24:39 2026 by rpki-client