$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/645d7b37-8474-3720-a5a3-bd3189eb639a.roa File: 645d7b37-8474-3720-a5a3-bd3189eb639a.roa (raw, json) Hash identifier: sWM6GERoumxfAdOLRZXic6pcwwvJf8vBiZRebPtPbZc= Subject key identifier: 5A:D2:57:C9:D8:79:31:86:D2:11:DF:25:9D:A9:F8:4F:D6:AD:A7:47 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D386A2DAB7EA0A13CBDCDE900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/645d7b37-8474-3720-a5a3-bd3189eb639a.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 142.173.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:2d:ab:7e:a0:a1:3c:bd:cd:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=44bbf8c0-a961-4deb-8b9e-5dc5a4bd5cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:46:c6:5f:ad:b0:d4:19:5e:42:6d:ae:05: a5:66:d1:4a:03:c8:78:59:e9:b7:b8:16:0b:52:5c: f8:ec:ba:31:a2:f0:9e:81:a3:f0:fb:a1:3f:a5:df: 06:f9:c5:1b:72:04:2c:e3:4b:98:ed:7d:89:a4:aa: cf:c8:f5:03:f7:60:c6:d7:57:36:e5:65:0b:01:d3: e8:e7:c2:4a:32:24:2a:1c:f6:d2:66:23:87:9e:aa: 02:df:e5:e8:1e:15:32:9b:60:a1:3e:e5:2d:fb:dc: 9a:0e:da:16:22:df:0c:67:41:c0:2e:f9:ee:17:e3: be:0d:fc:36:c7:e0:80:4a:f0:d6:bd:98:cb:a9:a8: 89:5f:06:cd:11:2e:32:fd:41:2b:94:19:7e:ae:29: c9:ed:52:2a:6f:c3:cd:9a:2b:ab:e2:22:fa:5f:c3: 2e:44:c5:25:7d:86:4d:5f:a6:5a:59:98:d4:1c:58: b5:af:a8:a8:03:a0:bf:64:42:68:e2:58:ea:92:4e: f8:3d:37:64:45:ef:79:69:ac:1b:5f:08:29:7b:c8: 4d:78:8f:e5:4e:36:26:28:9f:5f:e0:ae:dd:2f:1a: 6f:0c:6d:9d:7e:3e:f3:7b:10:4f:1b:49:dc:ae:a9: 47:a6:80:91:95:81:f2:b6:3f:49:65:dc:0a:a2:85: 28:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D2:57:C9:D8:79:31:86:D2:11:DF:25:9D:A9:F8:4F:D6:AD:A7:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/645d7b37-8474-3720-a5a3-bd3189eb639a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.173.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:8c:af:d5:32:02:cb:11:8e:0b:af:fa:cd:c8:ab:55:9a:3e: d8:cf:04:3a:2e:ff:51:e3:b9:68:60:02:e4:32:50:1b:63:ef: 8e:71:34:0c:db:0c:8d:f7:43:e6:38:2c:f1:f5:0f:c1:64:f6: 7c:a9:5e:6f:1e:dc:bd:0d:6a:ae:58:a6:05:27:ff:e4:ec:03: 61:8d:67:07:66:e1:d4:83:45:17:e1:be:61:11:36:f6:d7:60: d2:13:dc:0a:52:f6:b4:f5:6d:43:82:35:ad:b8:7c:3b:1f:1f: 2f:ab:b2:d0:d8:6a:32:0e:b1:f9:46:50:6c:58:41:8c:66:8d: f5:e6:43:5a:54:cf:d5:1e:cb:8d:2d:44:de:ed:4e:c0:22:92: 5d:fa:b9:f3:52:8a:80:ae:ef:8f:1a:16:5b:b5:fa:c2:65:a2: 35:55:71:6a:df:07:a5:da:aa:8b:1c:f6:44:38:8d:c5:d5:1d: 95:37:27:29:c5:47:87:90:72:72:a8:fb:10:c9:2f:4d:bb:1a: 57:ea:9a:92:16:8e:4b:c5:42:8e:bc:87:74:92:00:37:34:08: ab:9f:9f:0b:58:c3:d2:f5:ca:c0:e4:ae:60:fb:fe:30:2d:a9: 9e:15:ff:1e:25:db:a6:bc:2b:9a:20:c5:04:41:00:69:61:fd: 56:aa:87:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ai2rfqChPL3N6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NDRiYmY4YzAtYTk2MS00ZGViLThiOWUtNWRjNWE0YmQ1Y2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRNGxl+tsNQZXkJtrgWlZtFKA8h4Wem3uBYL Ulz47LoxovCegaPw+6E/pd8G+cUbcgQs40uY7X2JpKrPyPUD92DG11c25WULAdPo 58JKMiQqHPbSZiOHnqoC3+XoHhUym2ChPuUt+9yaDtoWIt8MZ0HALvnuF+O+Dfw2 x+CASvDWvZjLqaiJXwbNES4y/UErlBl+rinJ7VIqb8PNmiur4iL6X8MuRMUlfYZN X6ZaWZjUHFi1r6ioA6C/ZEJo4ljqkk74PTdkRe95aawbXwgpe8hNeI/lTjYmKJ9f 4K7dLxpvDG2dfj7zexBPG0ncrqlHpoCRlYHytj9JZdwKooUoiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrSV8nYeTGG0hHfJZ2p+E/WradHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjQ1ZDdiMzctODQ3NC0z NzIwLWE1YTMtYmQzMTg5ZWI2MzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjq2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmMr9UyAssRjguv+s3Iq1WaPtjPBDou/1HjuWhgAuQyUBtj745xNAzb DI33Q+Y4LPH1D8Fk9nypXm8e3L0Naq5YpgUn/+TsA2GNZwdm4dSDRRfhvmERNvbX YNIT3ApS9rT1bUOCNa24fDsfHy+rstDYajIOsflGUGxYQYxmjfXmQ1pUz9Uey40t RN7tTsAikl36ufNSioCu748aFlu1+sJlojVVcWrfB6Xaqosc9kQ4jcXVHZU3JynF R4eQcnKo+xDJL027GlfqmpIWjkvFQo68h3SSADc0CKufnwtYw9L1ysDkrmD7/jAt qZ4V/x4l26a8K5ogxQRBAGlh/Vaqh/M= -----END CERTIFICATE-----Generated at Thu Mar 26 18:58:14 2026 by rpki-client