$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/a81bfb8e-c1ad-311b-a40b-66e55e47cdf0.roa File: a81bfb8e-c1ad-311b-a40b-66e55e47cdf0.roa (raw, json) Hash identifier: gaMa6v8yeIH4rRf1BVeLssE51twi2gJ2PJ+StL6yVAU= Subject key identifier: 7C:CA:F4:75:95:DA:4F:85:F6:18:42:47:A7:9E:36:AB:F6:41:70:BA Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D4D5A781AB4A5E75A4F622500 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/a81bfb8e-c1ad-311b-a40b-66e55e47cdf0.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 16696 IP address blocks: 45.248.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:78:1a:b4:a5:e7:5a:4f:62:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=839c3393-a5a6-4c73-bd7e-f9cc5f178a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7b:1a:ab:4c:78:81:c3:31:b5:7c:0d:07:ca: 1e:03:eb:30:57:44:c4:d2:cb:c0:d5:c3:fc:8f:a2: 8a:46:7b:de:4f:6e:d1:79:9f:c3:13:2e:f5:ca:59: c1:ce:75:e9:e4:ba:50:01:12:37:3e:24:a5:7e:5e: 6a:97:44:7c:97:61:fd:45:9c:6c:52:18:2d:fe:96: 5c:0c:66:3b:b5:c8:d9:8e:b7:ff:09:41:7f:6e:60: 72:78:b2:48:64:21:c7:86:8b:b5:e3:5d:a2:dd:4d: 79:6c:67:ad:57:c0:e4:ca:bb:8d:51:f7:f1:cf:c3: c8:ac:5f:b7:59:2f:9a:e4:60:a8:70:e9:be:32:b2: 90:61:03:d1:71:ee:1d:6a:fb:09:c2:42:c1:9b:69: 48:f8:d4:b2:1e:b7:f6:64:d9:a4:a6:bd:b1:a8:2f: 65:8f:41:5d:f0:3e:1f:35:2f:84:9e:a1:ac:1c:34: 4a:80:e3:74:15:78:71:e7:3f:f9:b2:49:96:96:ef: e9:80:49:61:f2:94:24:58:9b:17:76:62:7a:8c:88: 36:b8:b3:71:ad:48:ad:51:75:12:3c:92:61:5e:bc: 52:6b:6e:8a:2e:dd:89:a5:5a:b6:7f:14:f4:88:d6: c6:69:63:0f:19:ff:0d:38:44:7f:2c:6d:6d:08:72: ad:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CA:F4:75:95:DA:4F:85:F6:18:42:47:A7:9E:36:AB:F6:41:70:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/a81bfb8e-c1ad-311b-a40b-66e55e47cdf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 45.248.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:05:d5:1a:86:bf:4c:ad:eb:0f:10:21:b2:3e:6a:89:e6:d4: 16:cd:a6:8e:1f:e7:6b:19:33:81:2d:80:5d:ec:98:25:37:85: 79:0f:1f:16:d6:ab:03:1e:e9:3e:54:8f:e0:be:5f:47:d0:d8: 93:1d:3a:9e:f0:a1:3c:97:a4:fd:84:c0:66:17:9f:2e:1c:ec: 8d:ec:ee:36:b0:b3:e2:78:78:97:90:d4:1e:df:b2:f1:b0:88: 56:12:7f:70:33:df:9b:18:7b:66:c4:6e:4a:dc:90:ba:1b:0a: 65:8d:85:97:18:00:fd:49:5e:0b:e4:12:77:0f:ad:3b:4c:20: ac:f1:6f:96:30:e4:1f:01:ae:5b:31:4f:4a:48:9c:df:b4:52: 66:85:51:88:b7:08:7c:5b:c1:cf:6c:c2:97:4e:f8:de:4d:8d: 49:06:2e:a6:93:42:44:23:de:92:22:89:89:c6:f2:d7:96:46: a2:ea:ec:32:10:66:ac:f5:61:59:67:9e:e5:ff:cb:67:ca:d0: 8b:1f:be:4c:2c:f2:e9:6f:f9:c2:dd:69:13:cf:e6:5d:d5:25: ea:92:a4:10:98:df:8f:5c:d5:e7:da:dd:00:8d:0f:2a:32:b8: 07:ac:43:30:f7:c5:bc:67:18:2c:0b:68:89:52:d5:06:df:89: af:ec:c9:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWngatKXnWk9iJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ODM5YzMzOTMtYTVhNi00YzczLWJkN2UtZjljYzVmMTc4YTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHsaq0x4gcMxtXwNB8oeA+swV0TE0svA1cP8 j6KKRnveT27ReZ/DEy71ylnBznXp5LpQARI3PiSlfl5ql0R8l2H9RZxsUhgt/pZc DGY7tcjZjrf/CUF/bmByeLJIZCHHhou1412i3U15bGetV8DkyruNUffxz8PIrF+3 WS+a5GCocOm+MrKQYQPRce4davsJwkLBm2lI+NSyHrf2ZNmkpr2xqC9lj0Fd8D4f NS+EnqGsHDRKgON0FXhx5z/5skmWlu/pgElh8pQkWJsXdmJ6jIg2uLNxrUitUXUS PJJhXrxSa26KLt2JpVq2fxT0iNbGaWMPGf8NOER/LG1tCHKt+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzK9HWV2k+F9hhCR6eeNqv2QXC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYTgxYmZiOGUtYzFhZC0z MTFiLWE0MGItNjZlNTVlNDdjZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALfh9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIF1RqGv0yt6w8QIbI+aonm1BbNpo4f52sZM4EtgF3smCU3hXkPHxbW qwMe6T5Uj+C+X0fQ2JMdOp7woTyXpP2EwGYXny4c7I3s7jaws+J4eJeQ1B7fsvGw iFYSf3Az35sYe2bEbkrckLobCmWNhZcYAP1JXgvkEncPrTtMIKzxb5Yw5B8Brlsx T0pInN+0UmaFUYi3CHxbwc9swpdO+N5NjUkGLqaTQkQj3pIiiYnG8teWRqLq7DIQ Zqz1YVlnnuX/y2fK0Isfvkws8ulv+cLdaRPP5l3VJeqSpBCY349c1efa3QCNDyoy uAesQzD3xbxnGCwLaIlS1Qbfia/syW0= -----END CERTIFICATE-----Generated at Thu Apr 2 22:37:42 2026 by rpki-client