$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/210e7f2e-1d27-3808-9799-9128f2f742cc.roa File: 210e7f2e-1d27-3808-9799-9128f2f742cc.roa (raw, json) Hash identifier: 3EcKGkmrxTqHfoev1gaDb5LmaO0EfY9boN1xo+GRsBU= Subject key identifier: 61:A4:78:DA:F5:57:43:89:71:0A:1E:9B:3B:BE:B2:70:6B:E7:28:9F Certificate issuer: /CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Certificate serial: 010D0C9F4328584D422F83AFF03D85F30B55E900 Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/210e7f2e-1d27-3808-9799-9128f2f742cc.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 11032 IP address blocks: 198.168.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:83:af:f0:3d:85:f3:0b:55:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=702db921-b5a0-4902-bc59-99b55e67dcee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:c7:58:73:79:40:29:24:76:f9:1f:78:ad: a5:6f:ed:33:be:14:eb:ed:9e:b4:39:e0:2a:8c:49: 75:de:5b:e1:9c:8f:04:58:eb:1b:b0:9b:bc:bf:d2: 8f:ef:40:b6:1d:37:45:bd:e9:28:d4:96:7c:02:48: 52:77:74:67:a7:0b:45:56:c3:54:67:ad:f4:2b:fe: 95:53:54:b5:af:f4:be:79:eb:cd:f5:3d:8e:5a:c2: 89:1a:a4:4d:12:c7:a1:1a:d9:12:75:34:02:1c:59: fe:37:ed:fe:d2:a6:f1:49:34:dc:a5:b3:84:9f:8a: c4:0a:b8:3d:e2:b1:e6:d2:0c:56:fb:72:74:78:de: 0e:8f:01:54:60:1f:eb:0c:4a:bc:dd:e3:2e:54:91: 1a:b3:26:62:d7:93:a5:27:88:00:ee:9a:5d:ee:1c: 90:59:a1:a8:4f:11:d6:e1:3e:35:1b:79:5f:7b:29: a9:ea:e6:c1:a7:bc:cf:37:9b:c8:58:24:62:2f:03: f8:0d:87:20:97:21:35:a3:8e:2d:21:5e:ba:56:fe: b2:8b:c4:9a:3f:27:97:1e:35:35:08:7c:2d:39:af: a6:c2:29:de:d6:04:90:b0:4d:68:85:9e:09:08:79: a0:5c:14:52:94:e8:9b:f8:ac:74:47:fe:76:1d:49: 97:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A4:78:DA:F5:57:43:89:71:0A:1E:9B:3B:BE:B2:70:6B:E7:28:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/210e7f2e-1d27-3808-9799-9128f2f742cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl X509v3 Authority Key Identifier: keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer sbgp-ipAddrBlock: critical IPv4: 198.168.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c2:20:fb:7f:e3:77:35:8d:2e:3f:fc:61:95:3c:ac:61:cd: aa:1c:fc:44:06:71:c6:54:dc:25:fe:2c:0d:56:f4:0c:d8:22: 34:7f:93:47:a0:91:f4:a6:64:c3:86:8c:7c:a9:3b:3e:e8:f0: 9a:03:4a:e4:d2:86:b6:af:58:89:df:5d:a7:a4:5e:4d:4e:a4: b6:91:59:80:c8:8c:3e:b3:6e:1c:7f:dd:20:fa:56:4c:31:26: 76:01:16:1c:28:54:c0:3f:75:82:e1:c3:c1:5f:d6:ba:9e:d5: ac:2d:dd:23:58:b6:24:4a:a3:7d:b1:d3:dd:3f:0f:8f:19:b1: a0:cd:c9:95:ae:1f:b0:e3:df:54:7b:a6:11:a4:bd:3b:a1:93: 97:6b:dc:cf:40:03:80:ae:98:f1:16:76:98:c7:cd:12:33:60: 60:f1:25:fb:0e:d7:56:95:39:68:90:cd:d1:8d:c7:b5:7f:38: 8f:58:06:a1:0d:1e:68:d9:1e:a4:39:38:fa:21:13:2e:2b:fa: 15:42:27:67:3d:35:8f:76:00:5c:33:95:b8:4f:4a:e9:1a:a7: 11:30:2c:f3:47:0e:af:60:76:fa:f9:70:ab:d4:d8:5a:f6:ce: e2:ae:ab:c9:78:ad:b9:93:1b:56:9f:02:30:3d:c6:b9:eb:ba: 1e:84:70:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4Ov8D2F8wtV6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUxNTk4MjAtY2Y1Ni00MmViLWI5ZjAtMDE4N2IxMGJi NzIxMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk NzAyZGI5MjEtYjVhMC00OTAyLWJjNTktOTliNTVlNjdkY2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws7HWHN5QCkkdvkfeK2lb+0zvhTr7Z60OeAq jEl13lvhnI8EWOsbsJu8v9KP70C2HTdFveko1JZ8AkhSd3RnpwtFVsNUZ630K/6V U1S1r/S+eevN9T2OWsKJGqRNEsehGtkSdTQCHFn+N+3+0qbxSTTcpbOEn4rECrg9 4rHm0gxW+3J0eN4OjwFUYB/rDEq83eMuVJEasyZi15OlJ4gA7ppd7hyQWaGoTxHW 4T41G3lfeymp6ubBp7zPN5vIWCRiLwP4DYcglyE1o44tIV66Vv6yi8SaPyeXHjU1 CHwtOa+mwine1gSQsE1ohZ4JCHmgXBRSlOib+Kx0R/52HUmXGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGkeNr1V0OJcQoemzu+snBr5yifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1 OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3YjEwYmI3MjEvMjEwZTdmMmUtMWQyNy0z ODA4LTk3OTktOTEyOGYyZjc0MmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGUxNTk4MjAtY2Y1Ni00MmViLWI5 ZjAtMDE4N2IxMGJiNzIxLzhlMTU5ODIwLWNmNTYtNDJlYi1iOWYwLTAxODdiMTBi YjcyMS5jcmwwHwYDVR0jBBgwFoAUP6asP+ah5UuMrQtDbx2HECUnhEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3 YjEwYmI3MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqgtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDCIPt/43c1jS4//GGVPKxhzaoc/EQGccZU3CX+LA1W9AzYIjR/k0eg kfSmZMOGjHypOz7o8JoDSuTShravWInfXaekXk1OpLaRWYDIjD6zbhx/3SD6Vkwx JnYBFhwoVMA/dYLhw8Ff1rqe1awt3SNYtiRKo32x090/D48ZsaDNyZWuH7Dj31R7 phGkvTuhk5dr3M9AA4CumPEWdpjHzRIzYGDxJfsO11aVOWiQzdGNx7V/OI9YBqEN HmjZHqQ5OPohEy4r+hVCJ2c9NY92AFwzlbhPSukapxEwLPNHDq9gdvr5cKvU2Fr2 zuKuq8l4rbmTG1afAjA9xrnruh6EcKI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:36 2026 by rpki-client