$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/48c8d872-3f18-36ae-b380-e8d1a3164315.roa File: 48c8d872-3f18-36ae-b380-e8d1a3164315.roa (raw, json) Hash identifier: PeSASNXmtkWX9wMopSPC5QDXs27olDzAthPiHX5i85A= Subject key identifier: 65:86:D3:2C:17:3F:15:C4:E9:97:07:70:33:6C:5C:04:AF:C6:4F:41 Certificate issuer: /CN=37d65fc0-6e4c-4477-9488-812657d0d39e Certificate serial: 010D0C9F4328584D9FB56F7B8982B0D7236136C0 Authority key identifier: 91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/48c8d872-3f18-36ae-b380-e8d1a3164315.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 8987 IP address blocks: 153.45.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:6f:7b:89:82:b0:d7:23:61:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37d65fc0-6e4c-4477-9488-812657d0d39e Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=cac9b324-6f3f-412e-8c4f-1cc370fb98e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7a:6a:fd:1a:4b:d2:43:33:6c:6d:11:d7:b8: f5:3e:4d:6f:70:df:5a:8b:d7:58:1a:73:d8:bc:21: 76:98:b7:35:f3:61:a7:f4:0a:8c:7d:14:00:ff:dc: 34:ff:4c:88:d0:a0:c3:df:7d:18:44:bb:ab:fa:0f: 42:f3:86:08:9b:54:7d:fc:5a:cc:af:33:89:b0:d5: 1e:62:14:15:91:59:71:d0:10:62:03:80:e0:38:97: 60:2b:a3:ba:37:5d:18:ac:96:34:82:88:07:e9:0c: 86:3f:1a:78:ec:88:13:99:68:8e:e2:78:d0:22:13: 58:9f:65:02:45:0d:42:80:49:b8:14:3f:e4:05:31: 24:c9:ad:02:a5:53:fd:0d:dd:d4:56:89:53:97:67: 84:2e:d5:2d:ee:c3:40:fe:9b:9f:09:99:cf:d8:fd: 63:27:45:cf:59:0a:63:8e:de:e2:9e:24:14:98:35: 55:3a:bc:a8:ac:bb:8e:1b:62:20:f3:97:d8:a2:5f: fc:4c:cb:de:21:fd:d7:ae:bc:32:f0:3b:79:ec:bb: fc:8d:cd:5b:b8:03:ef:b6:33:f7:77:4f:cd:17:ff: 7c:05:da:31:b9:94:98:5f:bf:5c:99:13:85:c3:0b: 89:c1:0a:79:ab:03:a5:68:e5:f2:f0:4f:62:55:1e: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:86:D3:2C:17:3F:15:C4:E9:97:07:70:33:6C:5C:04:AF:C6:4F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/48c8d872-3f18-36ae-b380-e8d1a3164315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl X509v3 Authority Key Identifier: keyid:91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer sbgp-ipAddrBlock: critical IPv4: 153.45.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:60:06:af:7b:68:08:28:30:f1:5b:45:34:12:aa:f9:f0:d7: 65:90:e4:3f:76:24:b0:df:7a:2c:18:aa:39:9f:8c:41:43:80: 1f:68:1a:1b:b2:4d:8b:46:89:cd:78:27:5b:86:bf:fc:aa:16: d8:0b:5c:94:64:d7:da:99:a1:a1:ad:bd:bb:83:a4:37:68:ae: e8:47:ed:d7:a8:62:95:a7:ec:ca:64:dc:76:b3:0c:cf:4e:93: 26:c5:4d:af:24:ac:40:0c:6b:52:bf:e2:25:90:af:fd:30:79: ff:92:47:af:ea:1f:79:02:cd:ca:86:54:94:a4:35:fc:e4:e9: 2b:94:c0:4c:49:72:b5:f4:a5:32:29:5d:ff:48:5b:fb:8c:de: 80:d6:1b:fc:d9:71:dc:ec:cb:f6:24:36:69:c2:72:ab:6e:98: a9:78:d3:5f:29:e1:c0:01:c3:64:09:97:ad:71:9a:f4:6c:df: aa:7c:23:04:d6:38:e3:34:94:8f:13:fd:2e:8a:f1:49:72:61: a4:c9:17:30:8e:97:ad:9a:cd:46:c8:fc:b0:54:a8:02:8f:e2: d5:c8:bf:7b:2f:2d:52:51:4d:d7:41:72:dc:69:46:26:34:ea: 09:b1:09:9f:db:83:61:00:3a:b7:c4:c8:0e:a3:0f:4f:4b:29: 7e:58:05:95 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2ftW97iYKw1yNhNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdkNjVmYzAtNmU0Yy00NDc3LTk0ODgtODEyNjU3ZDBk MzllMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk Y2FjOWIzMjQtNmYzZi00MTJlLThjNGYtMWNjMzcwZmI5OGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHpq/RpL0kMzbG0R17j1Pk1vcN9ai9dYGnPY vCF2mLc182Gn9AqMfRQA/9w0/0yI0KDD330YRLur+g9C84YIm1R9/FrMrzOJsNUe YhQVkVlx0BBiA4DgOJdgK6O6N10YrJY0gogH6QyGPxp47IgTmWiO4njQIhNYn2UC RQ1CgEm4FD/kBTEkya0CpVP9Dd3UVolTl2eELtUt7sNA/pufCZnP2P1jJ0XPWQpj jt7iniQUmDVVOryorLuOG2Ig85fYol/8TMveIf3Xrrwy8Dt57Lv8jc1buAPvtjP3 d0/NF/98BdoxuZSYX79cmROFwwuJwQp5qwOlaOXy8E9iVR5UjwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGWG0ywXPxXE6ZcHcDNsXASvxk9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zN2Q2 NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2NTdkMGQzOWUvNDhjOGQ4NzItM2YxOC0z NmFlLWIzODAtZThkMWEzMTY0MzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzdkNjVmYzAtNmU0Yy00NDc3LTk0 ODgtODEyNjU3ZDBkMzllLzM3ZDY1ZmMwLTZlNGMtNDQ3Ny05NDg4LTgxMjY1N2Qw ZDM5ZS5jcmwwHwYDVR0jBBgwFoAUkdjp9T5JxZ1idRxD5UGjuuSdPGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zN2Q2NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2 NTdkMGQzOWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmS0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAP2AGr3toCCgw8VtFNBKq+fDXZZDkP3YksN96LBiqOZ+MQUOAH2gaG7JN i0aJzXgnW4a//KoW2AtclGTX2pmhoa29u4OkN2iu6Eft16hilafsymTcdrMMz06T JsVNrySsQAxrUr/iJZCv/TB5/5JHr+ofeQLNyoZUlKQ1/OTpK5TATElytfSlMild /0hb+4zegNYb/Nlx3OzL9iQ2acJyq26YqXjTXynhwAHDZAmXrXGa9GzfqnwjBNY4 4zSUjxP9LorxSXJhpMkXMI6XrZrNRsj8sFSoAo/i1ci/ey8tUlFN10Fy3GlGJjTq CbEJn9uDYQA6t8TIDqMPT0spflgFlQ== -----END CERTIFICATE-----Generated at Wed May 13 09:21:23 2026 by rpki-client