$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a12882fe-d453-381a-9a7a-cbe2ae96018a.roa File: a12882fe-d453-381a-9a7a-cbe2ae96018a.roa (raw, json) Hash identifier: ogROEq/IFSsxqULLPuP42oY8pLbxxkL+h3NrKN50mk4= Subject key identifier: BA:02:49:34:AA:E0:B2:D7:35:B8:90:E7:A9:0B:90:F9:64:74:76:F5 Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F4328584D4A8F8FDFE0DBC78C18714B80 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a12882fe-d453-381a-9a7a-cbe2ae96018a.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 3807 IP address blocks: 207.196.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:8f:df:e0:db:c7:8c:18:71:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=7f9a72b5-86e6-4da3-993b-986d2fef6f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:32:b2:91:ee:d8:1e:ce:d3:6d:b7:30:72:71: c6:a0:5d:9d:7e:ee:4b:91:3b:96:a3:c6:a1:e2:87: ee:36:52:51:cd:43:aa:f5:67:40:1f:34:24:34:68: 40:ae:e3:aa:ce:59:bb:8b:88:d7:f7:05:03:9b:c4: fd:7a:df:88:ec:eb:06:4f:ba:f3:c0:e3:65:40:c6: df:47:b8:6f:aa:17:b9:b4:b4:d4:58:fa:0b:a5:c9: 1d:fb:de:60:33:8c:8b:4d:76:59:ec:15:51:a8:d8: e2:b6:41:ee:a6:01:3f:ac:96:ae:cd:6e:14:4a:e9: 4e:2d:d8:76:14:42:5c:9a:40:50:ca:24:ca:5c:ef: dc:ef:22:3c:df:e4:93:49:a5:89:f0:80:ed:d8:1f: bc:b5:10:b2:bf:95:7b:d9:8b:a8:ef:20:8f:7b:a5: bd:4a:eb:ef:ec:bc:b5:b6:07:5c:e1:36:fa:a9:a6: 22:ab:ee:3e:67:34:02:46:e5:54:3f:cf:7b:70:0e: b9:1b:9d:99:37:7a:32:f4:ed:da:a3:88:7f:43:e2: c9:c8:ba:9a:67:3f:d7:4e:5b:cf:fb:83:ca:7e:a4: 3a:06:93:a6:a8:ba:9a:29:e2:3f:73:ea:fe:0c:b3: 4f:cd:2c:2f:10:38:db:b4:a7:d5:e4:a3:98:b8:30: 34:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:02:49:34:AA:E0:B2:D7:35:B8:90:E7:A9:0B:90:F9:64:74:76:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a12882fe-d453-381a-9a7a-cbe2ae96018a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d3:bf:56:13:1a:74:fa:a0:56:02:a8:5e:ca:f3:b6:5d:e0: bc:a3:bf:b5:50:40:82:39:e2:d7:76:70:e1:b5:aa:38:78:5d: 28:50:6d:b3:40:27:35:de:1a:45:39:4c:4a:4b:1b:14:3e:b8: 84:4a:bd:47:cb:16:cb:db:72:21:ab:91:ce:39:76:7e:18:b0: eb:5a:4c:db:92:77:d9:7e:80:65:52:ce:69:49:1d:9c:88:0e: 0c:1c:4a:94:72:c6:35:72:b6:ef:8a:3d:cc:8c:28:e4:ab:73: 12:ff:29:c0:33:6f:fa:34:1e:4b:09:97:25:a4:00:09:b4:e4: 64:96:51:bf:68:23:29:45:b2:2f:41:96:7a:99:64:cd:12:80: 2a:c1:8a:05:e9:a6:91:d6:52:69:9d:ae:0a:bb:76:08:5c:a9: f5:60:9b:c2:1e:4d:26:b3:ca:de:98:4c:9a:b0:a1:15:dd:f0: 08:4e:94:fd:ba:92:09:bf:36:26:84:3a:27:ad:3d:2c:50:91: 4e:14:75:06:b5:e1:7c:83:41:03:aa:04:bc:2c:73:4d:72:54: 71:93:9d:89:85:3b:97:91:d2:99:ed:56:45:d5:b4:a5:5c:d7: 1f:89:a3:7e:0a:e1:88:21:c5:80:76:a0:50:05:8c:a7:23:ed: b5:41:a7:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj4/f4NvHjBhxS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk N2Y5YTcyYjUtODZlNi00ZGEzLTk5M2ItOTg2ZDJmZWY2ZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDKyke7YHs7TbbcwcnHGoF2dfu5LkTuWo8ah 4ofuNlJRzUOq9WdAHzQkNGhAruOqzlm7i4jX9wUDm8T9et+I7OsGT7rzwONlQMbf R7hvqhe5tLTUWPoLpckd+95gM4yLTXZZ7BVRqNjitkHupgE/rJauzW4USulOLdh2 FEJcmkBQyiTKXO/c7yI83+STSaWJ8IDt2B+8tRCyv5V72Yuo7yCPe6W9Suvv7Ly1 tgdc4Tb6qaYiq+4+ZzQCRuVUP897cA65G52ZN3oy9O3ao4h/Q+LJyLqaZz/XTlvP +4PKfqQ6BpOmqLqaKeI/c+r+DLNPzSwvEDjbtKfV5KOYuDA0QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoCSTSq4LLXNbiQ56kLkPlkdHb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvYTEyODgyZmUtZDQ1My0z ODFhLTlhN2EtY2JlMmFlOTYwMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz8TwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/Tv1YTGnT6oFYCqF7K87Zd4Lyjv7VQQII54td2cOG1qjh4XShQbbNA JzXeGkU5TEpLGxQ+uIRKvUfLFsvbciGrkc45dn4YsOtaTNuSd9l+gGVSzmlJHZyI DgwcSpRyxjVytu+KPcyMKOSrcxL/KcAzb/o0HksJlyWkAAm05GSWUb9oIylFsi9B lnqZZM0SgCrBigXpppHWUmmdrgq7dghcqfVgm8IeTSazyt6YTJqwoRXd8AhOlP26 kgm/NiaEOietPSxQkU4UdQa14XyDQQOqBLwsc01yVHGTnYmFO5eR0pntVkXVtKVc 1x+Jo34K4YghxYB2oFAFjKcj7bVBp/w= -----END CERTIFICATE-----Generated at Thu Mar 26 16:39:20 2026 by rpki-client