$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c46c93a2-fe57-309a-bee8-5628aca49d6b.roa File: c46c93a2-fe57-309a-bee8-5628aca49d6b.roa (raw, json) Hash identifier: 46TdyneFMh7VrQypC6qTjidu6LdC7bADgbuID8pG7ps= Subject key identifier: A0:9B:D9:14:BE:3E:A0:7E:F0:81:5A:CE:4E:A6:74:DA:8F:3B:DA:35 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584D492A7C142C08968E1E0A5E80 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c46c93a2-fe57-309a-bee8-5628aca49d6b.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 54535 IP address blocks: 156.53.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:7c:14:2c:08:96:8e:1e:0a:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=d55a3b8e-fcfe-4222-b3f9-bf37857ef0a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:85:c3:db:70:1e:d8:c4:5e:f0:d3:c0:53:c6: 46:da:2c:79:6a:17:34:b1:6e:f0:4f:68:95:ff:88: 0f:c0:a0:75:cb:31:e9:94:62:71:55:ac:5c:6c:37: 25:95:5b:9e:32:ba:8c:7f:73:86:9e:1f:f1:36:1c: d2:4e:65:77:15:50:2a:8e:fa:05:60:47:d3:9c:f5: 78:03:a9:f2:c5:a0:03:62:73:a4:f8:99:d0:f7:cb: 67:e6:a4:9b:b5:54:90:01:2d:40:ee:a2:17:5c:6f: 90:36:14:95:12:61:c4:2e:4b:36:7e:a5:62:ce:52: be:12:64:06:ca:6e:47:32:6f:0c:90:de:df:0a:5a: b5:16:4b:3b:61:7e:36:10:b6:09:36:d3:47:25:81: 66:d6:d3:b8:af:a4:f5:42:4e:93:1c:ca:f2:7e:ad: 21:e2:35:a7:df:e3:87:c0:ac:e8:96:06:54:cd:d5: 79:0d:c2:7a:70:0a:17:6a:44:81:7b:fb:c7:86:17: e9:f7:48:bf:dc:4f:c9:b9:4a:19:28:8f:b9:29:3d: 73:f9:33:cd:1f:d6:c7:12:6a:74:a3:0d:d5:2a:c0: 22:23:de:ed:64:2d:e1:45:e7:b3:d7:e6:29:82:a4: b3:37:f4:29:88:8b:63:6b:17:99:c7:9b:a2:19:9a: 7a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9B:D9:14:BE:3E:A0:7E:F0:81:5A:CE:4E:A6:74:DA:8F:3B:DA:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c46c93a2-fe57-309a-bee8-5628aca49d6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.53.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c9:ac:8c:da:dd:12:10:19:ca:46:27:c5:27:9e:d4:c8:4e: 5e:80:07:31:21:fc:04:d8:b3:11:4d:e1:d9:07:ed:2e:72:32: d1:51:7d:79:d4:17:c8:35:1c:13:a4:d7:17:93:6a:d9:e5:53: 43:b9:85:1d:b8:d8:f1:0b:ac:79:e8:d6:35:15:b9:29:ab:c2: 95:9e:5a:ca:0a:58:97:31:70:85:7a:fa:a2:3f:68:3e:68:64: ca:ca:47:de:05:d1:dd:e9:2b:47:14:83:7f:42:43:ea:26:21: b1:c1:7b:c6:ef:bc:01:65:e3:cf:e9:41:f7:20:4c:69:9c:2a: 1b:1c:ac:42:22:8f:00:1a:10:78:18:7b:26:4d:55:fe:6a:fa: 86:39:6d:3c:13:60:39:dc:88:ab:49:2b:18:31:15:07:20:de: 37:ad:2a:bd:9e:aa:bd:12:88:2b:2c:94:3e:6a:a1:8a:41:41: 9c:e1:5b:3d:83:58:9a:f7:7b:49:55:36:6f:12:34:c8:3f:7a: a7:6b:7d:ee:14:44:b5:cf:2f:82:b6:e3:5c:5c:d8:06:12:6c: 6f:d4:45:05:80:e6:e2:ad:99:42:e3:bd:ce:72:fa:85:7f:ea: 21:32:67:aa:23:1c:c1:aa:b0:71:a8:d6:72:9d:93:0a:38:64: a9:57:b6:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnwULAiWjh4KXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZDU1YTNiOGUtZmNmZS00MjIyLWIzZjktYmYzNzg1N2VmMGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYXD23Ae2MRe8NPAU8ZG2ix5ahc0sW7wT2iV /4gPwKB1yzHplGJxVaxcbDcllVueMrqMf3OGnh/xNhzSTmV3FVAqjvoFYEfTnPV4 A6nyxaADYnOk+JnQ98tn5qSbtVSQAS1A7qIXXG+QNhSVEmHELks2fqVizlK+EmQG ym5HMm8MkN7fClq1Fks7YX42ELYJNtNHJYFm1tO4r6T1Qk6THMryfq0h4jWn3+OH wKzolgZUzdV5DcJ6cAoXakSBe/vHhhfp90i/3E/JuUoZKI+5KT1z+TPNH9bHEmp0 ow3VKsAiI97tZC3hReez1+YpgqSzN/QpiItjaxeZx5uiGZp6jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCb2RS+PqB+8IFazk6mdNqPO9o1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvYzQ2YzkzYTItZmU1Ny0z MDlhLWJlZTgtNTYyOGFjYTQ5ZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnDXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvJrIza3RIQGcpGJ8UnntTITl6ABzEh/ATYsxFN4dkH7S5yMtFRfXnU F8g1HBOk1xeTatnlU0O5hR242PELrHno1jUVuSmrwpWeWsoKWJcxcIV6+qI/aD5o ZMrKR94F0d3pK0cUg39CQ+omIbHBe8bvvAFl48/pQfcgTGmcKhscrEIijwAaEHgY eyZNVf5q+oY5bTwTYDnciKtJKxgxFQcg3jetKr2eqr0SiCsslD5qoYpBQZzhWz2D WJr3e0lVNm8SNMg/eqdrfe4URLXPL4K241xc2AYSbG/URQWA5uKtmULjvc5y+oV/ 6iEyZ6ojHMGqsHGo1nKdkwo4ZKlXtmA= -----END CERTIFICATE-----Generated at Thu Mar 26 05:40:13 2026 by rpki-client