$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa File: d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa (raw, json) Hash identifier: S7cuJ7RvuSuDeIVDoqzAdPnENBvu16SrIKT1gDtteLk= Subject key identifier: A6:7C:36:C0:39:4B:EB:5C:26:14:C8:12:E7:F9:AA:5D:BC:AA:1C:2A Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F4328584D4A8F9ADA17833B6CCA7C2960 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 3807 IP address blocks: 207.196.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:9a:da:17:83:3b:6c:ca:7c:29:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=d948e7e8-578a-4d91-809e-d6000847e253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:be:c9:1a:4f:86:8b:84:48:b2:e2:85:28:25: e6:cc:29:29:86:5d:88:61:0e:9d:57:6f:56:1a:4d: 11:b6:a7:73:14:da:e5:3a:79:83:5e:14:74:fb:99: c8:13:3c:80:41:94:25:df:2c:78:07:d7:e7:79:6b: 52:9b:b1:53:6a:60:fb:7f:d8:5e:ff:44:ae:f2:9a: 02:95:3c:7c:39:d1:e4:00:3d:99:72:eb:ec:e8:ec: 6b:64:06:df:56:83:8e:c8:f1:f1:f6:65:78:08:09: 36:f9:f7:44:fb:5f:df:97:f9:6c:72:6b:5e:cf:56: 23:ed:5d:06:31:0b:3c:0d:d0:d1:5e:21:a6:9e:92: 18:1d:e3:ae:87:ac:94:d2:b9:57:b4:36:bc:99:e0: 7f:30:ee:93:50:2a:c5:fa:32:39:c0:a8:26:26:62: 93:6b:86:aa:0b:36:85:8a:41:95:9f:ee:67:f8:3d: f0:de:bc:35:80:55:6e:5e:0f:6c:db:ed:a2:7c:c5: d6:51:e1:96:1d:72:88:62:ab:30:94:61:a2:14:91: fa:3c:3b:87:58:3a:9d:26:25:21:d2:94:67:da:98: 3a:06:1a:5d:a9:9c:7a:8c:96:e6:1c:ed:0b:6b:2c: a1:bd:46:ac:94:c3:58:e0:a1:b0:7b:fd:76:bd:e9: d1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7C:36:C0:39:4B:EB:5C:26:14:C8:12:E7:F9:AA:5D:BC:AA:1C:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:3a:69:da:ba:93:f5:0c:e0:d4:83:41:4b:49:9c:e7:1d:29: a0:3c:8d:4a:dd:b8:af:ba:e8:23:8e:7f:a8:08:f7:d5:78:cc: 9e:0c:1c:02:42:2f:a3:7f:60:a1:7a:38:27:4f:ba:00:07:03: 9b:36:1d:07:64:31:48:9b:f7:61:ac:d3:4c:95:4a:cb:e0:9e: 3f:1e:a2:03:e5:93:59:f0:42:75:4e:67:2c:e5:74:ee:cb:18: 1b:b3:bc:51:e7:3d:aa:91:a5:e2:93:12:65:0c:9b:69:0c:31: 69:0d:6a:ce:40:62:4d:90:35:7e:7e:b4:38:6e:58:d9:16:5a: 7b:d3:35:c2:e1:bb:3e:8d:da:37:77:26:0f:a6:65:42:4a:10: e7:c9:49:9d:1d:80:04:4d:ef:35:3f:eb:6b:a9:e9:57:09:48: c7:a3:f3:ad:4f:9b:9c:13:f6:d0:65:17:e0:35:eb:38:32:02: eb:0c:a4:a7:59:72:ab:cb:25:a5:79:e7:ce:c8:0a:2c:88:7d: b9:58:2a:34:6f:7a:e3:de:37:c5:a8:b7:bb:a8:29:e8:9e:d5: 8b:4e:98:21:a5:54:b4:a0:c4:56:57:76:48:51:ca:ca:f3:a8: c3:82:d0:b4:ea:60:cf:d5:38:60:cd:7c:af:ff:cc:c6:bf:7a: 17:dd:51:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5raF4M7bMp8KWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ZDk0OGU3ZTgtNTc4YS00ZDkxLTgwOWUtZDYwMDA4NDdlMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b7JGk+Gi4RIsuKFKCXmzCkphl2IYQ6dV29W Gk0RtqdzFNrlOnmDXhR0+5nIEzyAQZQl3yx4B9fneWtSm7FTamD7f9he/0Su8poC lTx8OdHkAD2Zcuvs6OxrZAbfVoOOyPHx9mV4CAk2+fdE+1/fl/lscmtez1Yj7V0G MQs8DdDRXiGmnpIYHeOuh6yU0rlXtDa8meB/MO6TUCrF+jI5wKgmJmKTa4aqCzaF ikGVn+5n+D3w3rw1gFVuXg9s2+2ifMXWUeGWHXKIYqswlGGiFJH6PDuHWDqdJiUh 0pRn2pg6BhpdqZx6jJbmHO0LayyhvUaslMNY4KGwe/12venRYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZ8NsA5S+tcJhTIEuf5ql28qhwqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvZDhiMDg1NjgtY2FiYS0z ZTNmLTgxNDItMGUzY2MzZThiYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII6adq6k/UM4NSDQUtJnOcdKaA8jUrduK+66COOf6gI99V4zJ4MHAJC L6N/YKF6OCdPugAHA5s2HQdkMUib92Gs00yVSsvgnj8eogPlk1nwQnVOZyzldO7L GBuzvFHnPaqRpeKTEmUMm2kMMWkNas5AYk2QNX5+tDhuWNkWWnvTNcLhuz6N2jd3 Jg+mZUJKEOfJSZ0dgARN7zU/62up6VcJSMej861Pm5wT9tBlF+A16zgyAusMpKdZ cqvLJaV5587ICiyIfblYKjRveuPeN8Wot7uoKeie1YtOmCGlVLSgxFZXdkhRysrz qMOC0LTqYM/VOGDNfK//zMa/ehfdUSM= -----END CERTIFICATE-----Generated at Thu Mar 26 18:18:05 2026 by rpki-client