$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa File: 9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa (raw, json) Hash identifier: gwYm2xE/8pcjGNAXjrlFutc15Mk8oIz09ujqovyf5ro= Subject key identifier: C4:E2:83:D4:3E:D3:20:9E:4C:2B:90:71:42:55:74:0E:9F:03:9F:91 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584D8EF560292429998A6AF3E7C0 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 38001 IP address blocks: 45.42.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:60:29:24:29:99:8a:6a:f3:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=377479e7-6c29-4230-a397-a1f6ea8eab69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:83:59:04:5b:84:8b:13:60:8a:dd:df:dd: 47:ef:d3:db:22:68:d7:73:4d:a8:79:81:ec:06:ca: 14:ff:39:b0:6f:fd:f7:5e:05:ae:1d:88:9d:78:14: 79:01:2c:ac:f2:41:34:07:3a:1c:e1:5e:9d:f4:a0: f6:9a:d6:88:a1:5a:9f:8c:04:1a:58:a9:9e:72:08: 77:61:5c:33:75:8b:71:c1:77:f0:ec:1a:ac:ff:11: f8:80:ae:01:16:71:52:95:fe:9b:b2:7c:54:83:54: 9e:00:df:66:ad:f7:1f:0a:00:cb:ff:1c:ac:f8:a6: a2:56:32:5a:79:a9:81:49:ff:f6:3a:ec:88:ab:29: cf:1a:f8:d2:d9:f6:58:03:6e:e5:76:b4:e2:8f:b7: b3:71:c1:65:a6:78:ff:97:6b:54:6e:b4:18:aa:2a: 4d:45:b4:fd:ab:19:70:2a:bc:fd:8e:0d:d6:17:0a: 59:6e:c7:8c:15:ce:d9:a2:b1:7a:91:9d:21:e2:cb: a0:f6:4d:0d:e4:17:ff:31:b1:de:94:07:c3:f8:3e: fc:f3:20:64:03:2f:78:5b:d5:7c:cd:72:3e:0c:1d: 42:27:92:53:64:b5:99:f3:3b:86:8c:7a:50:48:48: d3:df:c8:db:15:1e:dc:bc:26:3f:ab:2a:02:c0:81: 61:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E2:83:D4:3E:D3:20:9E:4C:2B:90:71:42:55:74:0E:9F:03:9F:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 45.42.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:89:54:2c:4c:48:7b:d9:40:fc:64:f9:f7:a4:a1:70:6f:7a: 76:0b:22:d7:87:8a:34:7f:83:1a:32:26:c8:01:d7:d7:1e:57: 98:3b:5e:f3:96:e7:4c:d8:94:14:56:96:87:2b:f4:20:d5:34: 5c:c6:81:c5:89:e4:f6:27:70:75:ed:1c:53:bd:02:1f:ea:38: 14:2e:56:ae:09:65:66:8f:ba:c8:91:91:bd:2f:44:fe:a4:7d: 12:9a:44:94:42:e9:02:4c:1a:9f:a9:1e:ee:af:3c:07:53:d0: 73:e5:d7:df:c5:a7:26:19:a5:a2:24:09:2b:55:01:84:a5:10: 6d:aa:fd:03:ca:0a:43:b1:fb:7b:1e:ca:c5:63:51:f6:ae:3d: 09:47:2d:a6:df:ea:6c:45:0a:0b:54:0f:46:23:40:96:ff:4e: 78:57:d4:a9:5a:5a:4c:d1:b6:65:d6:4f:9f:41:a1:3b:00:01: 3e:3f:14:7a:91:0d:96:35:c7:b2:72:1f:50:5e:04:33:6f:4a: c8:2a:0d:a7:60:74:06:ee:8f:17:c0:4c:4a:8d:c6:bc:62:bf: bf:bf:c8:5f:a5:ae:6a:0c:3d:2f:e8:af:67:13:66:a4:c7:3c: 2c:76:9b:01:0c:3a:a0:12:42:f8:bf:62:02:b2:99:5d:23:5f: 60:a1:c7:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WApJCmZimrz58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk Mzc3NDc5ZTctNmMyOS00MjMwLWEzOTctYTFmNmVhOGVhYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgSDWQRbhIsTYIrd391H79PbImjXc02oeYHs BsoU/zmwb/33XgWuHYideBR5ASys8kE0Bzoc4V6d9KD2mtaIoVqfjAQaWKmecgh3 YVwzdYtxwXfw7Bqs/xH4gK4BFnFSlf6bsnxUg1SeAN9mrfcfCgDL/xys+KaiVjJa eamBSf/2OuyIqynPGvjS2fZYA27ldrTij7ezccFlpnj/l2tUbrQYqipNRbT9qxlw Krz9jg3WFwpZbseMFc7ZorF6kZ0h4sug9k0N5Bf/MbHelAfD+D788yBkAy94W9V8 zXI+DB1CJ5JTZLWZ8zuGjHpQSEjT38jbFR7cvCY/qyoCwIFhVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTig9Q+0yCeTCuQcUJVdA6fA5+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvOWRhNzU5MTYtZTQwYi0z ZGJlLWJkYmUtNzdkOTkxYzZmYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSqPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSJVCxMSHvZQPxk+fekoXBvenYLIteHijR/gxoyJsgB19ceV5g7XvOW 50zYlBRWlocr9CDVNFzGgcWJ5PYncHXtHFO9Ah/qOBQuVq4JZWaPusiRkb0vRP6k fRKaRJRC6QJMGp+pHu6vPAdT0HPl19/FpyYZpaIkCStVAYSlEG2q/QPKCkOx+3se ysVjUfauPQlHLabf6mxFCgtUD0YjQJb/TnhX1KlaWkzRtmXWT59BoTsAAT4/FHqR DZY1x7JyH1BeBDNvSsgqDadgdAbujxfATEqNxrxiv7+/yF+lrmoMPS/or2cTZqTH PCx2mwEMOqASQvi/YgKymV0jX2ChxzA= -----END CERTIFICATE-----Generated at Sat May 2 19:45:59 2026 by rpki-client