$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/4a6cb4c0-bb33-36f0-b3a5-4e7bcab32cd0.roa File: 4a6cb4c0-bb33-36f0-b3a5-4e7bcab32cd0.roa (raw, json) Hash identifier: Hi3tVC03mBpc3rgI0Hc5UphCWwGMesL9lqYSbLoTw08= Subject key identifier: 84:22:82:F1:68:C5:95:F5:80:2A:5C:17:00:0E:62:21:A6:EC:0D:59 Certificate issuer: /CN=45e986ce-813b-4783-89cf-d434e6e641a5 Certificate serial: 010D0C9F4328584D608530C51AE4D275C52BCB60 Authority key identifier: 51:5A:A1:6E:09:6E:3A:E4:38:1C:9C:67:31:3F:8C:E1:C5:C6:39:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/4a6cb4c0-bb33-36f0-b3a5-4e7bcab32cd0.roa Signing time: Thu 02 Apr 2026 21:47:32 +0000 ROA not before: Thu 02 Apr 2026 21:47:32 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 54566 IP address blocks: 23.138.140.0/24 maxlen: 24 155.103.4.0/22 maxlen: 24 2602:f664::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/45e986ce-813b-4783-89cf-d434e6e641a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/45e986ce-813b-4783-89cf-d434e6e641a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:85:30:c5:1a:e4:d2:75:c5:2b:cb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e986ce-813b-4783-89cf-d434e6e641a5 Validity Not Before: Apr 2 21:47:32 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=bb7a7ea9-728f-41b8-ace6-bc721251d4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:79:d1:36:d4:6b:bd:bf:2d:58:c6:95:52:90: 51:b5:66:d4:8f:c5:5e:19:b9:21:87:dc:bb:00:8b: 44:f4:e0:a9:83:6a:7a:04:0a:5c:b5:ce:4d:12:5e: fd:17:76:c3:f6:3b:65:0e:42:6e:95:04:e4:3d:99: 9e:ed:18:80:1d:f5:36:cc:7a:2c:67:09:6e:61:15: c7:04:13:06:fc:55:a2:86:58:51:8a:d5:dc:8b:88: 5c:52:93:2c:c8:aa:18:34:38:02:9e:9b:dd:56:c4: df:ab:6c:79:8c:62:b7:8c:19:cd:ab:c4:12:e3:f6: 04:e6:d5:3d:f9:73:c2:27:8c:ba:9f:e7:9c:55:f1: 1e:38:87:dc:2a:c9:1b:4b:a1:c1:11:fa:34:34:94: 68:90:3d:e8:c4:e2:7a:4a:34:2a:45:a0:7d:a0:a4: d2:5e:ce:66:c4:a6:5f:87:e7:40:35:09:1e:18:6c: 02:2f:5d:e1:09:2d:1b:98:cc:92:89:6e:d0:d1:b9: 17:7c:74:e6:33:03:d8:d7:3b:7c:26:7b:a7:2a:97: 40:4a:7d:b5:62:95:c5:50:43:95:0e:56:89:fb:f9: 9e:01:63:06:70:e3:a8:75:7e:ab:ff:5e:ac:6a:5a: c3:f2:fd:3c:79:cc:4d:d5:9c:7e:0f:92:e1:8c:0d: 49:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:22:82:F1:68:C5:95:F5:80:2A:5C:17:00:0E:62:21:A6:EC:0D:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/4a6cb4c0-bb33-36f0-b3a5-4e7bcab32cd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/45e986ce-813b-4783-89cf-d434e6e641a5.crl X509v3 Authority Key Identifier: keyid:51:5A:A1:6E:09:6E:3A:E4:38:1C:9C:67:31:3F:8C:E1:C5:C6:39:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5.cer sbgp-ipAddrBlock: critical IPv4: 23.138.140.0/24 155.103.4.0/22 IPv6: 2602:f664::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:fd:1b:b4:b6:dd:3b:f1:f3:ea:a1:8f:68:ab:05:54:0b:b3: c8:68:94:17:2c:71:cf:7f:8a:c0:f9:90:9e:a0:08:9a:c8:29: 15:32:48:59:f3:7c:1a:73:43:c4:20:af:b2:37:26:37:6e:24: 6b:60:aa:f8:6e:0d:c0:19:d2:ef:92:cc:e0:d7:03:19:35:2d: 88:31:27:51:28:b9:2a:8b:85:63:9a:72:f1:10:98:bd:df:74: 90:2b:99:c2:3d:92:b4:e8:73:5c:a2:d4:3a:d9:a8:1a:18:4c: 2c:58:fa:a6:c4:3c:11:22:a8:a7:d3:96:26:91:47:51:25:4e: 03:0b:e5:a7:54:d1:e6:91:e2:01:de:0e:82:09:48:1e:49:fb: ee:7f:13:17:8d:6a:28:eb:0c:89:3d:02:bc:92:a0:73:ee:82: 62:5a:99:62:ca:17:8c:91:c9:ba:82:d0:55:26:c2:c3:9c:80: a2:6b:d7:f9:a3:be:8c:45:f6:36:09:33:75:ed:ac:da:e5:51: ab:ff:75:4c:b3:70:93:12:95:5e:85:74:7f:d2:d9:a9:6e:c3: d8:19:86:29:67:ec:7e:a5:41:fc:dc:ce:95:bc:67:c9:38:1d: 8b:8e:a6:eb:92:0c:2d:cf:a9:3b:1d:d6:94:36:f6:f4:8b:e0: 59:9d:75:41 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE1ghTDFGuTSdcUry2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVlOTg2Y2UtODEzYi00NzgzLTg5Y2YtZDQzNGU2ZTY0 MWE1MB4XDTI2MDQwMjIxNDczMloXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YmI3YTdlYTktNzI4Zi00MWI4LWFjZTYtYmM3MjEyNTFkNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonnRNtRrvb8tWMaVUpBRtWbUj8VeGbkhh9y7 AItE9OCpg2p6BApctc5NEl79F3bD9jtlDkJulQTkPZme7RiAHfU2zHosZwluYRXH BBMG/FWihlhRitXci4hcUpMsyKoYNDgCnpvdVsTfq2x5jGK3jBnNq8QS4/YE5tU9 +XPCJ4y6n+ecVfEeOIfcKskbS6HBEfo0NJRokD3oxOJ6SjQqRaB9oKTSXs5mxKZf h+dANQkeGGwCL13hCS0bmMySiW7Q0bkXfHTmMwPY1zt8JnunKpdASn21YpXFUEOV DlaJ+/meAWMGcOOodX6r/16salrD8v08ecxN1Zx+D5LhjA1JgQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFIQigvFoxZX1gCpcFwAOYiGm7A1ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80NWU5 ODZjZS04MTNiLTQ3ODMtODljZi1kNDM0ZTZlNjQxYTUvNGE2Y2I0YzAtYmIzMy0z NmYwLWIzYTUtNGU3YmNhYjMyY2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDVlOTg2Y2UtODEzYi00NzgzLTg5 Y2YtZDQzNGU2ZTY0MWE1LzQ1ZTk4NmNlLTgxM2ItNDc4My04OWNmLWQ0MzRlNmU2 NDFhNS5jcmwwHwYDVR0jBBgwFoAUUVqhbgluOuQ4HJxnMT+M4cXGOXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80NWU5ODZjZS04MTNiLTQ3ODMtODljZi1kNDM0 ZTZlNjQxYTUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4qMAwQC m2cEMA4EAgACMAgDBgAmAvZkADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBv/Ru0tt078fPqoY9oqwVUC7PI aJQXLHHPf4rA+ZCeoAiayCkVMkhZ83wac0PEIK+yNyY3biRrYKr4bg3AGdLvkszg 1wMZNS2IMSdRKLkqi4VjmnLxEJi933SQK5nCPZK06HNcotQ62agaGEwsWPqmxDwR Iqin05YmkUdRJU4DC+WnVNHmkeIB3g6CCUgeSfvufxMXjWoo6wyJPQK8kqBz7oJi WpliyheMkcm6gtBVJsLDnICia9f5o76MRfY2CTN17aza5VGr/3VMs3CTEpVehXR/ 0tmpbsPYGYYpZ+x+pUH83M6VvGfJOB2Ljqbrkgwtz6k7HdaUNvb0i+BZnXVB -----END CERTIFICATE-----Generated at Tue Apr 7 16:55:23 2026 by rpki-client