$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/9858d804-8d14-3a47-ab8b-a149272638b7.roa File: 9858d804-8d14-3a47-ab8b-a149272638b7.roa (raw, json) Hash identifier: e9eUSV2v/0ybWxdfkn38yJ/1GG1G36V+ypcRFoYP93M= Subject key identifier: 25:DB:4E:32:99:7E:D9:2D:D5:EA:76:1D:EF:02:B3:33:AE:A1:29:B1 Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F4328584D4A8F8FAC609ADF4105B75380 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/9858d804-8d14-3a47-ab8b-a149272638b7.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 3807 IP address blocks: 207.196.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:8f:ac:60:9a:df:41:05:b7:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=e2105f7d-5e1f-4432-b13b-67e1ea469c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:20:d7:cb:f7:3c:5f:6b:75:b6:f2:23:50:60: 9c:97:9a:e2:e8:87:0a:d3:a3:6a:54:35:23:ef:2f: 78:ed:39:d8:25:a9:49:20:13:a3:73:03:eb:ea:b5: f3:09:1c:e4:e1:57:c3:e9:65:66:53:65:41:f2:ca: 76:81:c7:ab:50:37:4a:a9:5b:c7:e4:eb:48:99:d8: 88:70:e4:2b:85:c2:56:14:88:7e:9b:0a:1e:3d:4c: 25:9a:4b:20:84:8a:34:34:1c:3c:26:8b:9a:4c:db: fe:47:93:06:c0:0a:ba:b3:0f:25:07:ef:f9:d2:31: bc:54:28:56:65:f8:d5:e9:db:00:70:7b:88:69:55: be:ac:19:d1:9c:59:1d:40:a1:1b:eb:c4:3f:3d:08: 4d:aa:29:e6:ef:42:bf:7e:85:45:67:61:3b:0c:b0: 01:cd:7b:23:f4:bc:e2:30:99:41:e4:aa:d4:f3:dc: 22:75:51:29:17:ae:ce:66:b5:64:e5:33:d2:31:cc: a2:ee:5a:85:d4:5a:9b:22:45:25:54:d3:98:b1:0b: c9:1a:b7:90:27:ef:90:8b:dd:8d:e7:13:ad:46:92: bf:e3:97:42:0f:47:ea:c8:25:5f:e2:7b:02:86:ee: d4:06:9d:c1:20:47:b2:3c:6c:a0:59:02:dd:da:05: 5e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DB:4E:32:99:7E:D9:2D:D5:EA:76:1D:EF:02:B3:33:AE:A1:29:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/9858d804-8d14-3a47-ab8b-a149272638b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f9:52:76:3d:87:47:3d:ae:fa:f8:31:56:d1:40:42:ee:f7: d1:e5:18:60:e9:e7:81:0f:03:7a:08:af:60:81:51:7a:f7:59: f4:7a:64:71:e4:af:ea:e7:99:cb:40:98:81:cb:77:f4:82:1b: 3b:03:5f:8d:fa:33:37:8f:aa:37:b9:7e:4e:7a:f2:85:4f:a7: 50:b4:20:3c:70:be:02:ae:c2:24:49:75:2c:31:86:4a:90:d4: 45:08:a3:e7:44:08:f2:6c:36:d4:4b:08:a8:51:93:4e:53:6c: e7:33:b2:31:dd:a1:44:ad:c2:f0:08:2a:17:61:8c:fc:f7:e9: f7:06:a4:93:c5:e8:02:1a:ae:86:78:ec:29:92:39:13:f1:f3: a9:66:c0:fe:78:37:ae:38:ef:6a:99:77:b8:93:36:06:65:99: 8e:a8:95:6b:e4:17:b8:4b:0a:45:27:87:bc:16:a6:4f:01:ad: ab:9b:bb:10:36:c8:f9:94:e6:03:50:1d:52:56:45:1c:de:ee: d9:47:49:52:a4:37:e1:61:d6:a4:6a:82:71:e4:ba:ef:2a:49: 7a:d0:b0:99:7c:2c:41:92:ca:91:56:ce:b9:52:e0:7b:9d:5b: 97:78:7e:62:e0:14:44:54:28:1c:0d:00:48:fa:cb:5b:cf:af: 23:09:2c:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj4+sYJrfQQW3U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ZTIxMDVmN2QtNWUxZi00NDMyLWIxM2ItNjdlMWVhNDY5YzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCDXy/c8X2t1tvIjUGCcl5ri6IcK06NqVDUj 7y947TnYJalJIBOjcwPr6rXzCRzk4VfD6WVmU2VB8sp2gcerUDdKqVvH5OtImdiI cOQrhcJWFIh+mwoePUwlmksghIo0NBw8JouaTNv+R5MGwAq6sw8lB+/50jG8VChW ZfjV6dsAcHuIaVW+rBnRnFkdQKEb68Q/PQhNqinm70K/foVFZ2E7DLABzXsj9Lzi MJlB5KrU89widVEpF67OZrVk5TPSMcyi7lqF1FqbIkUlVNOYsQvJGreQJ++Qi92N 5xOtRpK/45dCD0fqyCVf4nsChu7UBp3BIEeyPGygWQLd2gVe3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXbTjKZftkt1ep2He8CszOuoSmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvOTg1OGQ4MDQtOGQxNC0z YTQ3LWFiOGItYTE0OTI3MjYzOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8S0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz5UnY9h0c9rvr4MVbRQELu99HlGGDp54EPA3oIr2CBUXr3WfR6ZHHk r+rnmctAmIHLd/SCGzsDX436MzePqje5fk568oVPp1C0IDxwvgKuwiRJdSwxhkqQ 1EUIo+dECPJsNtRLCKhRk05TbOczsjHdoUStwvAIKhdhjPz36fcGpJPF6AIaroZ4 7CmSORPx86lmwP54N64472qZd7iTNgZlmY6olWvkF7hLCkUnh7wWpk8BraubuxA2 yPmU5gNQHVJWRRze7tlHSVKkN+Fh1qRqgnHkuu8qSXrQsJl8LEGSypFWzrlS4Hud W5d4fmLgFERUKBwNAEj6y1vPryMJLL0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:53 2026 by rpki-client