$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa File: c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa (raw, json) Hash identifier: LmVKU6F2slZat6sPZmcxHN/5AAEHBWcfYcGgjVkyveU= Subject key identifier: 45:3B:02:08:4F:FD:73:DF:17:5B:AF:2E:A5:A0:0A:D5:08:47:E1:DC Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584E7634C82F982D0CFD5A925D80 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 10747 IP address blocks: 45.42.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:c8:2f:98:2d:0c:fd:5a:92:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=30028b17-5766-48fa-97cf-e5408fb74cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:c5:c4:7d:84:33:31:89:78:11:c9:30:cc: d3:0f:a7:ec:6d:a8:b1:9e:74:97:6c:bb:66:ee:74: 76:0e:9a:82:59:d3:05:9b:31:86:49:ad:54:87:d8: c5:ca:10:21:1f:9e:7a:30:2e:aa:c6:1b:f1:bc:71: 62:99:8a:63:31:3f:5b:5a:1e:99:eb:7a:8e:54:61: e3:55:71:ac:ab:a7:16:20:eb:15:8e:51:52:30:c2: d5:bb:e6:c4:f3:3e:42:6c:bf:7e:0e:ea:73:35:d3: a1:31:86:21:fa:6d:a1:ee:7e:97:46:54:98:d9:26: 09:bd:ad:e5:55:86:a3:e0:29:89:f8:ce:58:f5:3f: 90:e5:c6:fa:ae:4a:6f:78:18:b4:fa:8a:00:27:a3: ad:a7:02:b2:3b:f1:4f:0b:f3:42:35:bd:05:37:cd: d9:fb:c0:b6:df:cb:7f:2b:bd:df:32:a7:bb:ec:66: df:e7:39:41:d8:de:f6:1e:8d:04:32:13:e8:49:9b: e6:95:4f:94:f2:22:26:5d:34:b7:b6:b4:e4:76:3d: 58:0d:ab:2e:76:14:86:e3:22:cd:20:79:6d:81:77: 64:2c:23:af:f8:03:c0:35:fc:ef:84:43:42:e6:1f: d3:64:f0:d8:8c:2b:9d:b8:4e:79:48:05:b0:50:ab: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3B:02:08:4F:FD:73:DF:17:5B:AF:2E:A5:A0:0A:D5:08:47:E1:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 45.42.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:fd:1d:0e:42:f6:ad:b5:14:b0:d2:48:9c:5e:9d:28:eb:08: 55:cc:20:ad:4a:4c:34:3d:28:59:bb:54:83:f3:c9:15:63:8c: 0d:50:1b:ca:2d:e7:04:02:1a:7a:a7:19:ec:3a:1e:ac:a9:ad: 81:dc:31:00:b6:98:cd:d3:8b:a0:19:5a:d6:47:22:18:ea:cf: 70:26:0f:6c:4d:4e:ff:ce:c5:bb:40:4f:15:94:0e:80:26:65: 1d:34:c2:72:04:c8:b9:e3:93:68:a1:02:64:26:63:af:1f:c9: 7d:f6:28:27:f6:1d:ac:e7:57:79:2c:82:c4:2b:15:33:ac:4b: 99:2a:fc:cf:0d:dc:6c:ea:d1:66:9e:ee:dc:70:71:2e:f4:a7: b4:e2:14:99:2e:ca:e5:f7:40:28:74:f1:6f:c6:cd:65:83:7d: 90:ee:12:36:20:7c:fe:47:f8:7c:54:b1:7c:89:0a:a0:5d:7a: bc:20:f9:bf:4b:ce:c6:ad:94:a7:d4:9b:31:17:35:ff:c6:8f: 3b:b1:e8:25:f2:2c:03:de:3a:3d:24:28:73:bc:ec:6e:6f:60: 65:9b:e4:3c:77:18:dd:e7:b3:17:24:f7:2d:91:c3:c8:10:77: 1f:d8:5b:76:64:b2:11:b0:93:66:ca:2b:9f:85:0a:fc:f9:27: 4b:0a:dc:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NMgvmC0M/VqSXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk MzAwMjhiMTctNTc2Ni00OGZhLTk3Y2YtZTU0MDhmYjc0Y2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLzFxH2EMzGJeBHJMMzTD6fsbaixnnSXbLtm 7nR2DpqCWdMFmzGGSa1Uh9jFyhAhH556MC6qxhvxvHFimYpjMT9bWh6Z63qOVGHj VXGsq6cWIOsVjlFSMMLVu+bE8z5CbL9+DupzNdOhMYYh+m2h7n6XRlSY2SYJva3l VYaj4CmJ+M5Y9T+Q5cb6rkpveBi0+ooAJ6OtpwKyO/FPC/NCNb0FN83Z+8C238t/ K73fMqe77Gbf5zlB2N72Ho0EMhPoSZvmlU+U8iImXTS3trTkdj1YDasudhSG4yLN IHltgXdkLCOv+APANfzvhENC5h/TZPDYjCuduE55SAWwUKuz+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEU7AghP/XPfF1uvLqWgCtUIR+HcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvYzdkZWFiN2UtZDNiNy0z M2ZiLWEyYTYtZmI4ZjZmOTFkMzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv9HQ5C9q21FLDSSJxenSjrCFXMIK1KTDQ9KFm7VIPzyRVjjA1QG8ot 5wQCGnqnGew6HqyprYHcMQC2mM3Ti6AZWtZHIhjqz3AmD2xNTv/OxbtATxWUDoAm ZR00wnIEyLnjk2ihAmQmY68fyX32KCf2HaznV3ksgsQrFTOsS5kq/M8N3Gzq0Wae 7txwcS70p7TiFJkuyuX3QCh08W/GzWWDfZDuEjYgfP5H+HxUsXyJCqBderwg+b9L zsatlKfUmzEXNf/Gjzux6CXyLAPeOj0kKHO87G5vYGWb5Dx3GN3nsxck9y2Rw8gQ dx/YW3ZkshGwk2bKK5+FCvz5J0sK3BQ= -----END CERTIFICATE-----Generated at Tue Jul 21 16:34:11 2026 by rpki-client