$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa File: 4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa (raw, json) Hash identifier: Ld+YffKetueXICgmJ1gBcP4d4DkAWp0dNdhEXIckgu4= Subject key identifier: 32:70:79:3B:49:DE:23:0F:FA:DD:33:C5:9A:EE:CE:77:3B:CE:7F:CD Certificate issuer: /CN=b45f6374-6cde-4681-a96a-9233e2715465 Certificate serial: 010D0C9F4328584D300A626C2553BED02E800540 Authority key identifier: 12:39:E2:63:A9:4F:E4:5A:B7:C9:13:A2:AC:35:02:79:4A:5E:B5:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 33044 IP address blocks: 192.40.240.0/22 maxlen: 24 192.122.206.0/24 maxlen: 24 199.7.136.0/22 maxlen: 24 199.91.112.0/22 maxlen: 24 199.91.252.0/22 maxlen: 24 205.211.166.0/23 maxlen: 24 2606:8900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/b45f6374-6cde-4681-a96a-9233e2715465.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/b45f6374-6cde-4681-a96a-9233e2715465.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:62:6c:25:53:be:d0:2e:80:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45f6374-6cde-4681-a96a-9233e2715465 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=eac88df7-5966-4586-8422-5b9a393fea89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:1b:98:73:10:f9:05:32:bc:d1:3d:45:01: a0:5f:a2:67:7d:ba:c0:be:9c:13:a7:fb:b2:5f:53: cb:8d:a9:6a:0b:48:70:f1:34:c8:32:1a:6d:fc:4d: 20:c6:59:2d:85:5e:97:31:92:3f:b9:0f:5d:e2:0a: ad:26:0e:30:4f:82:bf:a0:72:77:5e:b9:3f:2b:d8: a7:46:b0:d5:4b:95:19:45:3e:42:92:6d:b0:44:be: d6:14:14:46:1a:04:e4:9d:0a:ae:da:ae:42:8e:ac: 90:a8:a0:a1:f6:8f:6e:48:d1:a9:4e:50:51:f9:8f: 7c:64:a3:52:84:6a:48:b9:d4:d7:3e:a5:0b:d8:08: 9c:5c:a8:41:3e:a2:e3:ea:ef:ff:8a:5c:6a:ee:9e: 4b:14:c4:26:65:2b:30:4b:1f:d7:b6:98:39:aa:71: 75:fd:39:d5:2e:1c:b7:4b:ec:49:4e:b7:75:3c:32: 52:e2:0a:e5:72:6e:23:3e:4e:47:d8:ce:3f:17:6b: af:a5:9c:7c:85:0a:7f:ec:48:92:f7:19:03:51:f1: d4:d3:45:32:fb:b3:a7:5e:39:ee:6f:1c:c6:8c:b2: fe:13:82:14:bf:ae:66:28:a9:04:9f:b6:4a:a2:d3: ff:c6:44:1e:f9:03:f4:cb:94:47:fd:a1:d9:2a:48: 9c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:70:79:3B:49:DE:23:0F:FA:DD:33:C5:9A:EE:CE:77:3B:CE:7F:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/b45f6374-6cde-4681-a96a-9233e2715465.crl X509v3 Authority Key Identifier: keyid:12:39:E2:63:A9:4F:E4:5A:B7:C9:13:A2:AC:35:02:79:4A:5E:B5:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465.cer sbgp-ipAddrBlock: critical IPv4: 192.40.240.0/22 192.122.206.0/24 199.7.136.0/22 199.91.112.0/22 199.91.252.0/22 205.211.166.0/23 IPv6: 2606:8900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7f:30:45:aa:cf:5e:97:06:5e:d1:74:b7:9c:0a:fa:2d:d6: de:6f:32:8f:8f:2c:d2:13:72:55:ef:3a:17:d1:5d:74:65:de: 22:ef:c4:38:f6:8f:09:1b:6f:ce:39:a0:90:29:45:31:10:81: 1b:13:68:79:cc:65:ae:b1:1e:e4:f7:52:0d:5d:58:22:d3:5a: 99:b3:2e:c3:c2:fc:8d:a7:6a:27:1e:00:3d:18:2f:9e:78:3e: c5:8e:56:26:5f:3d:6b:38:d1:c6:2e:09:7b:bc:cb:63:84:75: a8:df:db:e7:df:62:7b:07:0e:1d:bc:27:46:02:6d:6d:3a:3e: bf:7b:80:dd:c8:d5:0a:ea:87:03:5f:a7:a5:96:ef:07:44:e4: 5f:d3:0d:d5:7a:8c:c0:5f:4a:d3:d6:63:14:7a:92:ed:9c:25: 80:97:9a:02:a8:1c:14:db:4e:92:92:9c:28:d8:1b:15:c5:0e: fb:6c:9f:a2:c1:8d:b8:41:7b:d4:ad:c4:b6:4c:b3:7f:50:a3: dc:2d:2a:ea:68:09:29:1c:ef:0e:97:57:89:91:15:68:a5:ca: 9d:89:93:28:45:b7:f2:51:2b:2a:69:55:5d:c8:ff:65:39:e1: 6d:61:9f:db:8f:05:da:68:0a:9b:1a:db:17:94:df:09:ea:56: f6:27:b5:4b -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWE0wCmJsJVO+0C6ABUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ1ZjYzNzQtNmNkZS00NjgxLWE5NmEtOTIzM2UyNzE1 NDY1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZWFjODhkZjctNTk2Ni00NTg2LTg0MjItNWI5YTM5M2ZlYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhIbmHMQ+QUyvNE9RQGgX6JnfbrAvpwTp/uy X1PLjalqC0hw8TTIMhpt/E0gxlkthV6XMZI/uQ9d4gqtJg4wT4K/oHJ3Xrk/K9in RrDVS5UZRT5Ckm2wRL7WFBRGGgTknQqu2q5CjqyQqKCh9o9uSNGpTlBR+Y98ZKNS hGpIudTXPqUL2AicXKhBPqLj6u//ilxq7p5LFMQmZSswSx/Xtpg5qnF1/TnVLhy3 S+xJTrd1PDJS4grlcm4jPk5H2M4/F2uvpZx8hQp/7EiS9xkDUfHU00Uy+7OnXjnu bxzGjLL+E4IUv65mKKkEn7ZKotP/xkQe+QP0y5RH/aHZKkicfQIDAQABo4IDgjCC A34wHQYDVR0OBBYEFDJweTtJ3iMP+t0zxZruznc7zn/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDVm NjM3NC02Y2RlLTQ2ODEtYTk2YS05MjMzZTI3MTU0NjUvNGE4M2VhODYtY2RlNy0z OGQxLThlYTQtNzhkNmI4YWUxNjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQ1ZjYzNzQtNmNkZS00NjgxLWE5 NmEtOTIzM2UyNzE1NDY1L2I0NWY2Mzc0LTZjZGUtNDY4MS1hOTZhLTkyMzNlMjcx NTQ2NS5jcmwwHwYDVR0jBBgwFoAUEjniY6lP5Fq3yROirDUCeUpetZ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNDVmNjM3NC02Y2RlLTQ2ODEtYTk2YS05MjMz ZTI3MTU0NjUuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCwCjwAwQA wHrOAwQCxweIAwQCx1twAwQCx1v8AwQBzdOmMA0EAgACMAcDBQAmBokAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBABp/MEWqz16XBl7RdLecCvot1t5vMo+PLNITclXvOhfRXXRl3iLvxDj2jwkb b845oJApRTEQgRsTaHnMZa6xHuT3Ug1dWCLTWpmzLsPC/I2naiceAD0YL554PsWO ViZfPWs40cYuCXu8y2OEdajf2+ffYnsHDh28J0YCbW06Pr97gN3I1QrqhwNfp6WW 7wdE5F/TDdV6jMBfStPWYxR6ku2cJYCXmgKoHBTbTpKSnCjYGxXFDvtsn6LBjbhB e9StxLZMs39Qo9wtKupoCSkc7w6XV4mRFWilyp2JkyhFt/JRKyppVV3I/2U54W1h n9uPBdpoCpsa2xeU3wnqVvYntUs= -----END CERTIFICATE-----Generated at Thu Mar 26 05:18:24 2026 by rpki-client