$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/387234de-b4e4-3e39-8944-a0d0a2cc9d75.roa File: 387234de-b4e4-3e39-8944-a0d0a2cc9d75.roa (raw, json) Hash identifier: IvGpsGmlbRZYfFHLE1CzkleR3PdmVVv7VUU9MrAS6Yw= Subject key identifier: 57:C4:6D:9E:FB:3A:37:2F:13:A3:22:93:57:32:1E:50:B5:80:3A:55 Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658 Certificate serial: 010D0C9F4328584D9B855BAE444F2068B92A9E00 Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/387234de-b4e4-3e39-8944-a0d0a2cc9d75.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 0 IP address blocks: 45.43.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:5b:ae:44:4f:20:68:b9:2a:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658 Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=c9c5d26f-f3ad-443b-90c5-992ca322988f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c3:62:b4:1b:f7:7a:16:17:ed:9f:dd:8c:a4: d8:e6:b5:8f:2a:c5:37:20:0c:bb:0d:28:d0:eb:3c: a2:d4:77:d8:a5:b6:a4:97:c6:95:4b:7d:31:75:f4: 9e:79:38:26:44:87:90:b2:2c:74:ff:8b:e4:64:56: 8f:66:ff:9a:e3:c9:ae:b9:81:de:63:a1:9f:24:ca: 6d:dc:75:0d:f1:d9:33:8b:53:83:5f:71:41:44:8f: 08:8d:18:3b:9e:6e:14:c7:63:7e:9c:ed:cc:d2:45: d4:63:64:11:68:da:7f:e3:a5:9d:d6:86:ca:94:74: aa:c9:13:d7:13:f8:a5:44:22:9a:1f:ac:9f:40:7c: c2:d7:d4:a4:8a:12:56:a2:a6:14:80:4e:80:80:77: 70:2b:c4:76:2b:c2:54:67:01:92:9e:c9:27:92:b8: 78:61:43:80:21:c2:a7:19:64:57:b6:c6:d5:75:31: 34:4e:c7:81:60:f0:ee:17:eb:e7:b6:53:0f:c0:22: cb:7e:f1:3b:4c:cf:94:06:bb:31:e2:e2:f7:a8:aa: 50:d0:08:6b:73:77:3a:6e:d8:ac:82:73:a3:dc:15: e3:1c:9e:f1:98:09:e3:05:46:be:d4:db:f0:b3:49: 1b:89:ce:a9:ae:d5:5e:fd:1e:cb:af:51:cf:f6:4c: b0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C4:6D:9E:FB:3A:37:2F:13:A3:22:93:57:32:1E:50:B5:80:3A:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/387234de-b4e4-3e39-8944-a0d0a2cc9d75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl X509v3 Authority Key Identifier: keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer sbgp-ipAddrBlock: critical IPv4: 45.43.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d0:f2:ab:ab:f6:2c:00:7b:3b:44:6b:08:57:7e:88:1e:72: 34:d3:28:8f:b8:8c:1d:16:9e:f0:f4:4f:08:07:53:15:a2:b2: 11:89:99:a8:61:5c:3d:55:0c:25:17:68:0e:d7:f2:d2:52:b0: 31:f2:5e:b7:94:f2:8b:60:41:27:8f:5c:6a:f3:0a:fa:d4:75: 3f:a7:81:98:79:c4:1e:f3:72:89:57:eb:1f:77:7d:68:0a:1b: 3d:df:40:0d:a7:db:97:42:05:68:f4:4a:ab:d7:d4:46:8b:04: 06:4a:cc:fb:69:e7:26:d8:2b:04:f2:8a:3b:47:d7:a8:90:7f: db:3d:e9:49:0f:6e:d5:12:f3:b5:7b:28:7f:5d:ad:57:cc:06: f1:d0:9c:01:b4:b3:31:1a:8c:cc:50:8b:f7:54:8a:4a:96:bf: 7a:32:f0:bb:72:8d:d8:4d:4d:af:90:35:2d:64:9f:53:0d:2b: 9d:ba:59:47:16:ef:b6:0a:2f:0c:6f:96:86:cb:50:71:de:83: b7:08:a1:ed:e4:31:73:af:c8:72:70:36:08:94:d3:c4:7f:17: 9c:26:51:80:d4:23:1f:f7:91:dd:c8:e7:2d:d6:21:16:b8:2b: 44:8d:b8:89:1a:2c:33:f4:d4:eb:6a:f3:51:5f:2c:6f:fd:cf: 06:b1:28:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVuuRE8gaLkqngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0 NjU4MB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk YzljNWQyNmYtZjNhZC00NDNiLTkwYzUtOTkyY2EzMjI5ODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMNitBv3ehYX7Z/djKTY5rWPKsU3IAy7DSjQ 6zyi1HfYpbakl8aVS30xdfSeeTgmRIeQsix0/4vkZFaPZv+a48muuYHeY6GfJMpt 3HUN8dkzi1ODX3FBRI8IjRg7nm4Ux2N+nO3M0kXUY2QRaNp/46Wd1obKlHSqyRPX E/ilRCKaH6yfQHzC19SkihJWoqYUgE6AgHdwK8R2K8JUZwGSnsknkrh4YUOAIcKn GWRXtsbVdTE0TseBYPDuF+vntlMPwCLLfvE7TM+UBrsx4uL3qKpQ0Ahrc3c6btis gnOj3BXjHJ7xmAnjBUa+1Nvws0kbic6prtVe/R7Lr1HP9kywFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfEbZ77OjcvE6Mik1cyHlC1gDpVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvMzg3MjM0ZGUtYjRlNC0z ZTM5LTg5NDQtYTBkMGEyY2M5ZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz NzY1MzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTQ8qur9iwAeztEawhXfogecjTTKI+4jB0WnvD0TwgHUxWishGJmahh XD1VDCUXaA7X8tJSsDHyXreU8otgQSePXGrzCvrUdT+ngZh5xB7zcolX6x93fWgK Gz3fQA2n25dCBWj0SqvX1EaLBAZKzPtp5ybYKwTyijtH16iQf9s96UkPbtUS87V7 KH9drVfMBvHQnAG0szEajMxQi/dUikqWv3oy8LtyjdhNTa+QNS1kn1MNK526WUcW 77YKLwxvlobLUHHeg7cIoe3kMXOvyHJwNgiU08R/F5wmUYDUIx/3kd3I5y3WIRa4 K0SNuIkaLDP01Otq81FfLG/9zwaxKMA= -----END CERTIFICATE-----Generated at Wed May 13 06:53:48 2026 by rpki-client