$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa File: 19c7d435-0191-3d18-9f33-8c7a4026904c.roa (raw, json) Hash identifier: iu+oRO1Hn5CPIT4VMLz4w2qmQQxv/eUdxgZaYf8Vfmo= Subject key identifier: 48:6A:FC:DB:59:F6:CF:F8:C5:29:58:A8:09:3B:08:26:2B:EB:F7:E8 Certificate issuer: /CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Certificate serial: 010D0C9F4328584D359FA879996F9C647D919720 Authority key identifier: D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 161.199.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:a8:79:99:6f:9c:64:7d:91:97:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=6dfad72f-c281-4914-9c80-4cacd49b0b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:82:61:2d:1e:2f:2c:e0:28:32:94:56:10: 17:e8:ff:36:63:20:4f:f3:99:19:4c:c2:c1:4f:85: 79:32:89:c0:67:41:58:fd:18:a1:ee:30:f9:5b:23: 04:fa:ed:ea:6d:b7:9e:70:34:11:13:9c:99:ae:20: 71:18:01:2a:25:47:f4:8b:ce:a7:10:75:39:7b:09: 60:71:a5:a5:f9:bf:9b:2a:78:59:bd:3d:f4:00:ba: 51:d9:a0:4e:54:07:96:8f:b1:09:08:8b:b2:36:a9: 7c:72:d1:d3:3b:6a:de:d3:44:13:5f:0a:e0:9d:2e: a6:f4:81:6d:61:ff:d5:97:86:f2:8a:be:e7:83:55: 31:78:ae:e4:be:70:78:ff:37:2c:df:90:08:6e:51: 20:b9:0c:61:83:55:e1:18:2e:35:57:72:42:bc:67: be:6d:47:60:ce:f1:4f:11:5b:30:91:6f:34:5a:15: 8e:28:e1:43:e2:fa:4b:03:b9:ca:f1:62:dc:31:3c: 7c:89:74:f5:e6:76:a0:d4:3c:fc:25:ba:25:5f:59: 71:a0:7e:9a:d8:95:01:2c:ad:38:89:f4:54:1c:17: 30:45:e9:19:ac:80:fe:eb:ca:b2:4a:d6:55:e2:0f: cd:cc:54:0c:53:28:b2:a3:c4:52:14:95:bc:3a:10: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6A:FC:DB:59:F6:CF:F8:C5:29:58:A8:09:3B:08:26:2B:EB:F7:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl X509v3 Authority Key Identifier: keyid:D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer sbgp-ipAddrBlock: critical IPv4: 161.199.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:0b:45:75:df:5e:69:1f:cd:9d:ce:0b:b2:86:3c:5d:73:4e: 7b:3c:c9:52:93:6f:2b:6b:8a:14:6f:3f:64:06:a4:92:f6:1c: 59:0d:5c:52:69:fc:a7:45:0e:ff:41:d8:4d:e4:cc:7c:73:9a: 88:8d:19:47:4d:e1:f5:1a:67:bd:38:82:d9:00:ee:98:f1:93: 2a:95:ea:58:d3:7d:6d:23:4b:2e:ac:75:58:42:37:65:61:62: bd:d9:75:88:af:23:12:37:57:ec:1f:c2:6e:81:31:78:84:f1: 63:9e:5f:1b:f4:17:a4:ce:0c:ce:5c:ab:0f:18:7b:98:c1:47: 31:e5:b6:a1:13:e8:a4:bf:9c:2e:e8:29:4d:44:6c:39:e0:4b: 4f:74:78:e2:f6:15:c3:66:8c:33:37:3b:3d:7c:90:2c:64:e5: 6c:84:12:3b:ba:e8:b8:2b:13:f0:bf:01:7d:78:e8:07:4d:3e: 78:80:6d:3c:ef:be:9b:fb:3e:4d:05:35:29:b9:dc:10:5f:53: b7:6c:d3:9f:f7:eb:76:86:29:2e:2e:72:11:51:9c:37:31:c3: bd:24:1b:35:6b:34:24:59:ac:d9:e3:6e:d3:5b:f1:c2:da:83: fd:30:6a:47:8d:8a:7d:7a:24:e2:01:65:da:f1:fe:08:21:7d: e7:35:63:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n6h5mW+cZH2RlyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ1YTFmYzctYzg1NC00YmYxLTgyZGQtODg1YmZjY2Qy MDAyMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NmRmYWQ3MmYtYzI4MS00OTE0LTljODAtNGNhY2Q0OWIwYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzmCYS0eLyzgKDKUVhAX6P82YyBP85kZTMLB T4V5MonAZ0FY/Rih7jD5WyME+u3qbbeecDQRE5yZriBxGAEqJUf0i86nEHU5ewlg caWl+b+bKnhZvT30ALpR2aBOVAeWj7EJCIuyNql8ctHTO2re00QTXwrgnS6m9IFt Yf/Vl4byir7ng1UxeK7kvnB4/zcs35AIblEguQxhg1XhGC41V3JCvGe+bUdgzvFP EVswkW80WhWOKOFD4vpLA7nK8WLcMTx8iXT15nag1Dz8JbolX1lxoH6a2JUBLK04 ifRUHBcwRekZrID+68qyStZV4g/NzFQMUyiyo8RSFJW8OhAQVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhq/NtZ9s/4xSlYqAk7CCYr6/foMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVh MWZjNy1jODU0LTRiZjEtODJkZC04ODViZmNjZDIwMDIvMTljN2Q0MzUtMDE5MS0z ZDE4LTlmMzMtOGM3YTQwMjY5MDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQ1YTFmYzctYzg1NC00YmYxLTgy ZGQtODg1YmZjY2QyMDAyL2M0NWExZmM3LWM4NTQtNGJmMS04MmRkLTg4NWJmY2Nk MjAwMi5jcmwwHwYDVR0jBBgwFoAU0wvQYxi8h42RKjqIclQ23U+MRZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVhMWZjNy1jODU0LTRiZjEtODJkZC04ODVi ZmNjZDIwMDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocdDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsLRXXfXmkfzZ3OC7KGPF1zTns8yVKTbytrihRvP2QGpJL2HFkNXFJp /KdFDv9B2E3kzHxzmoiNGUdN4fUaZ704gtkA7pjxkyqV6ljTfW0jSy6sdVhCN2Vh Yr3ZdYivIxI3V+wfwm6BMXiE8WOeXxv0F6TODM5cqw8Ye5jBRzHltqET6KS/nC7o KU1EbDngS090eOL2FcNmjDM3Oz18kCxk5WyEEju66LgrE/C/AX146AdNPniAbTzv vpv7Pk0FNSm53BBfU7ds05/363aGKS4uchFRnDcxw70kGzVrNCRZrNnjbtNb8cLa g/0wakeNin16JOIBZdrx/gghfec1Y08= -----END CERTIFICATE-----Generated at Thu Mar 26 03:47:42 2026 by rpki-client