$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/241f1b53-63a6-328e-a841-25d97fa28860.roa File: 241f1b53-63a6-328e-a841-25d97fa28860.roa (raw, json) Hash identifier: 5VNR2mNMWQv4PizQuH/2U6XG12lxqvWjReKBpSZJKPs= Subject key identifier: E1:2E:C8:6E:A3:FE:C4:A7:1A:32:51:F5:AA:69:56:BC:ED:36:1F:AF Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F4328584D4A8F9AB76C29D292775A2400 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/241f1b53-63a6-328e-a841-25d97fa28860.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 3807 IP address blocks: 207.196.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:9a:b7:6c:29:d2:92:77:5a:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=6badca22-08a7-4d7f-b979-9f5025426dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bf:f0:b6:d9:37:57:f7:1b:4d:0b:92:6b:48: 44:82:bb:4d:2a:60:13:92:ea:ea:2b:d2:51:36:11: da:2b:55:46:df:9b:86:1f:3f:03:1c:e4:d1:34:2c: f2:91:14:9c:93:00:77:c2:e1:a7:92:05:06:3e:17: e2:9b:34:f0:4a:ba:59:11:c4:8d:0c:92:15:d7:d7: 69:82:20:b5:15:a6:13:47:e4:2b:00:f9:5a:61:48: b2:75:59:79:60:f3:58:29:69:d9:38:4d:02:eb:65: eb:63:f0:ac:7b:23:b3:ee:03:84:a4:c0:be:55:e1: 02:4b:dd:a0:a8:fe:1d:43:8d:e7:d9:66:31:0c:b8: 84:e7:e2:1b:9f:e4:81:8d:94:a4:08:6a:dd:80:58: d8:a2:97:00:bf:64:80:ae:60:14:cf:38:8e:1c:43: 0d:5d:52:6d:fd:56:92:08:e6:a3:9c:09:df:9d:e9: 85:6f:06:0b:54:cd:b4:58:b0:f2:28:46:ac:fa:36: d2:98:75:f5:33:63:8d:1c:fa:b0:c4:78:4e:58:e4: d9:b5:d9:f6:72:d9:42:ad:11:4a:8e:99:6a:9e:94: c5:44:33:30:50:3d:92:af:4f:5c:fd:f2:23:dc:cb: 0b:9e:a8:3d:50:e1:b2:bf:23:ce:18:b9:ad:92:5f: 81:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2E:C8:6E:A3:FE:C4:A7:1A:32:51:F5:AA:69:56:BC:ED:36:1F:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/241f1b53-63a6-328e-a841-25d97fa28860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b5:21:4f:ec:c2:d0:e8:2a:f3:19:70:08:1b:41:0d:7a:be: 3e:ec:03:64:c8:68:9c:6a:b6:33:4f:85:40:7d:a9:d3:d5:ff: f3:15:ea:e0:63:e3:a0:20:be:96:fd:a9:19:30:eb:f7:e6:7f: c4:d9:da:78:92:30:6e:41:b0:54:4c:af:57:61:f8:4a:21:5f: 72:d2:12:96:be:c1:1f:09:61:3c:6c:33:09:66:69:d5:9c:21: d3:f9:48:3e:28:c4:2a:36:f6:8a:33:3c:5a:70:2c:48:5e:19: 96:45:32:7d:81:4e:e4:8b:e6:1b:79:0c:07:f1:c2:2a:13:5f: ae:a4:c7:20:db:ef:c5:e3:fe:92:70:87:8b:65:24:5c:c3:f2: 41:a2:06:e5:7c:e8:8c:f0:6c:9e:51:cc:c4:95:4c:00:73:90: 97:0b:c7:27:35:77:d2:73:e8:f2:54:11:48:66:ca:05:f3:4a: 8f:f2:5d:ce:c9:03:4b:1d:15:c2:72:f5:25:df:30:a3:d6:ca: 59:30:c6:37:f7:63:86:8b:c6:aa:c7:de:90:c9:ee:9e:62:f6: ff:35:36:86:7b:e4:00:1f:df:19:97:ea:92:81:2c:f8:30:23: e2:12:21:83:5b:5a:c1:18:b6:bb:0c:96:35:e3:c9:34:b7:77: 47:be:a4:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5q3bCnSkndaJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NmJhZGNhMjItMDhhNy00ZDdmLWI5NzktOWY1MDI1NDI2ZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7/wttk3V/cbTQuSa0hEgrtNKmATkurqK9JR NhHaK1VG35uGHz8DHOTRNCzykRSckwB3wuGnkgUGPhfimzTwSrpZEcSNDJIV19dp giC1FaYTR+QrAPlaYUiydVl5YPNYKWnZOE0C62XrY/CseyOz7gOEpMC+VeECS92g qP4dQ43n2WYxDLiE5+Ibn+SBjZSkCGrdgFjYopcAv2SArmAUzziOHEMNXVJt/VaS COajnAnfnemFbwYLVM20WLDyKEas+jbSmHX1M2ONHPqwxHhOWOTZtdn2ctlCrRFK jplqnpTFRDMwUD2Sr09c/fIj3MsLnqg9UOGyvyPOGLmtkl+BLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEuyG6j/sSnGjJR9appVrztNh+vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvMjQxZjFiNTMtNjNhNi0z MjhlLWE4NDEtMjVkOTdmYTI4ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8SIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIO1IU/swtDoKvMZcAgbQQ16vj7sA2TIaJxqtjNPhUB9qdPV//MV6uBj 46Agvpb9qRkw6/fmf8TZ2niSMG5BsFRMr1dh+EohX3LSEpa+wR8JYTxsMwlmadWc IdP5SD4oxCo29oozPFpwLEheGZZFMn2BTuSL5ht5DAfxwioTX66kxyDb78Xj/pJw h4tlJFzD8kGiBuV86IzwbJ5RzMSVTABzkJcLxyc1d9Jz6PJUEUhmygXzSo/yXc7J A0sdFcJy9SXfMKPWylkwxjf3Y4aLxqrH3pDJ7p5i9v81NoZ75AAf3xmX6pKBLPgw I+ISIYNbWsEYtrsMljXjyTS3d0e+pK4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:58 2026 by rpki-client