$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/45d31243-ea0f-30e5-a7cc-6131d2859a12.roa File: 45d31243-ea0f-30e5-a7cc-6131d2859a12.roa (raw, json) Hash identifier: CF24wd3xpbBN3YiCZyHZF7r6nr2FcowU+sRpCJvVgeQ= Subject key identifier: E4:D3:34:D1:39:14:0D:21:21:D5:36:A6:7E:EE:36:72:D7:35:76:6E Certificate issuer: /CN=4eac16a1-7e9c-4f8e-9e2c-913f3a675d18 Certificate serial: 010D0C9F4328584D1F4A12429BEEECAD3FF8CF00 Authority key identifier: 56:83:24:37:A6:0D:F4:93:34:1D:6F:6D:30:C2:9D:0B:08:CE:72:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/45d31243-ea0f-30e5-a7cc-6131d2859a12.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 11666 IP address blocks: 192.249.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:12:42:9b:ee:ec:ad:3f:f8:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eac16a1-7e9c-4f8e-9e2c-913f3a675d18 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=861c9750-5e2e-42fa-86ac-35d9fadf0d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ae:3f:aa:39:82:41:c7:04:09:4e:03:24:93: d5:3f:1d:34:fb:18:eb:88:87:78:1e:0e:9c:67:9f: b1:42:66:4b:85:39:88:fd:82:d8:a0:3c:8d:18:f4: fc:e4:b8:33:ad:c3:b6:38:b6:06:f2:2b:aa:0d:71: 40:9a:79:b6:02:bb:64:9d:8f:cc:31:6e:81:2c:41: 59:85:ba:12:2b:8e:ec:66:c7:53:12:2d:73:5f:c3: 17:ac:ed:07:4a:72:8a:03:31:98:a9:d5:c8:27:59: cc:0f:68:ae:5a:0f:26:ae:83:4c:de:32:12:60:aa: 4a:6b:62:f0:29:4d:a9:ba:b7:01:5d:19:46:ce:18: 0d:e2:a9:6d:30:00:fa:1b:60:5c:48:29:78:19:b7: 11:53:5d:41:70:0c:61:36:c7:d7:25:2c:4b:5b:e4: 61:c2:93:e1:cd:e6:c3:ea:78:b4:6c:fa:71:f2:18: 43:06:ae:80:ff:ea:39:61:35:76:ca:47:54:3c:50: 80:73:85:4d:76:83:42:3f:51:04:6c:e8:5a:0a:30: e7:73:90:60:29:27:be:a1:bd:fb:1c:c3:70:6a:ed: d8:0d:ba:c9:87:26:28:8d:0d:94:8f:37:3a:37:6f: 03:f5:64:58:cf:a1:5d:cf:a1:fe:55:17:a3:0f:ec: 48:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D3:34:D1:39:14:0D:21:21:D5:36:A6:7E:EE:36:72:D7:35:76:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/45d31243-ea0f-30e5-a7cc-6131d2859a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.crl X509v3 Authority Key Identifier: keyid:56:83:24:37:A6:0D:F4:93:34:1D:6F:6D:30:C2:9D:0B:08:CE:72:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer sbgp-ipAddrBlock: critical IPv4: 192.249.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c4:c2:60:6e:e6:7c:69:71:70:4b:4f:4f:9d:17:7a:e8:0c: 76:60:2d:4c:3c:d2:35:36:d3:e6:bb:06:aa:5a:da:a7:77:76: 25:0a:90:4e:e0:90:56:9f:9d:1f:2c:34:a2:e6:67:d4:ac:83: 45:1a:2a:39:0d:fe:93:1a:c0:65:9d:6f:5f:96:5a:4c:81:0c: 6a:12:2f:b6:05:2b:00:66:75:64:0e:94:ab:d1:7c:83:93:29: 75:3a:8b:8b:d6:7d:42:cb:25:94:83:86:da:15:e7:b7:35:82: 04:cc:e1:10:99:7f:55:8f:7f:f0:7e:1e:be:98:d6:94:a8:79: e6:d6:43:ef:3b:c9:65:17:af:ae:e5:88:68:f9:e9:15:89:78: 92:c2:f7:62:61:0e:a7:69:75:c5:db:1f:54:e9:ce:87:7c:12: f0:24:de:aa:ae:dd:7b:7c:c7:ab:a7:3f:19:d7:96:a0:da:56: 28:cf:2d:06:82:5a:2e:4d:15:ad:cc:95:59:05:bc:b6:ea:57: ae:03:79:44:34:ff:4d:35:b3:11:f2:39:0a:15:7d:00:d0:3b: 49:a4:16:be:51:a8:07:c8:48:62:bd:88:e3:ab:f6:7d:50:ce: 04:a3:8d:ff:2a:f6:a7:73:04:f3:04:55:3b:6a:bf:a1:a4:19: 04:83:98:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fShJCm+7srT/4zwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYzE2YTEtN2U5Yy00ZjhlLTllMmMtOTEzZjNhNjc1 ZDE4MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ODYxYzk3NTAtNWUyZS00MmZhLTg2YWMtMzVkOWZhZGYwZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA264/qjmCQccECU4DJJPVPx00+xjriId4Hg6c Z5+xQmZLhTmI/YLYoDyNGPT85LgzrcO2OLYG8iuqDXFAmnm2ArtknY/MMW6BLEFZ hboSK47sZsdTEi1zX8MXrO0HSnKKAzGYqdXIJ1nMD2iuWg8mroNM3jISYKpKa2Lw KU2purcBXRlGzhgN4qltMAD6G2BcSCl4GbcRU11BcAxhNsfXJSxLW+RhwpPhzebD 6ni0bPpx8hhDBq6A/+o5YTV2ykdUPFCAc4VNdoNCP1EEbOhaCjDnc5BgKSe+ob37 HMNwau3YDbrJhyYojQ2Ujzc6N28D9WRYz6Fdz6H+VRejD+xIPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTTNNE5FA0hIdU2pn7uNnLXNXZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZWFj MTZhMS03ZTljLTRmOGUtOWUyYy05MTNmM2E2NzVkMTgvNDVkMzEyNDMtZWEwZi0z MGU1LWE3Y2MtNjEzMWQyODU5YTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGVhYzE2YTEtN2U5Yy00ZjhlLTll MmMtOTEzZjNhNjc1ZDE4LzRlYWMxNmExLTdlOWMtNGY4ZS05ZTJjLTkxM2YzYTY3 NWQxOC5jcmwwHwYDVR0jBBgwFoAUVoMkN6YN9JM0HW9tMMKdCwjOcskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZWFjMTZhMS03ZTljLTRmOGUtOWUyYy05MTNm M2E2NzVkMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHwPmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbEwmBu5nxpcXBLT0+dF3roDHZgLUw80jU20+a7Bqpa2qd3diUKkE7g kFafnR8sNKLmZ9Ssg0UaKjkN/pMawGWdb1+WWkyBDGoSL7YFKwBmdWQOlKvRfIOT KXU6i4vWfULLJZSDhtoV57c1ggTM4RCZf1WPf/B+Hr6Y1pSoeebWQ+87yWUXr67l iGj56RWJeJLC92JhDqdpdcXbH1Tpzod8EvAk3qqu3Xt8x6unPxnXlqDaVijPLQaC Wi5NFa3MlVkFvLbqV64DeUQ0/001sxHyOQoVfQDQO0mkFr5RqAfISGK9iOOr9n1Q zgSjjf8q9qdzBPMEVTtqv6GkGQSDmDY= -----END CERTIFICATE-----Generated at Thu Mar 26 17:22:40 2026 by rpki-client