$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa File: 29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa (raw, json) Hash identifier: dyE5C7AZIrYqLShBLRx2sNUWKOQXIpu5EYF3DWhM8vY= Subject key identifier: 0F:F3:A2:81:19:60:2B:3B:D7:98:96:FC:6F:28:BC:74:83:EC:11:1E Certificate issuer: /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Certificate serial: 010D0C9F4328584E4559D9BAA46785F50B667B00 Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 32931 IP address blocks: 45.41.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:d9:ba:a4:67:85:f5:0b:66:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=302b9bb7-48c6-41d7-a3ea-997de19b32c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:30:77:4b:fb:89:f4:54:03:a0:d7:9a:78:7e: 77:ea:b0:d4:2b:5e:e8:f3:b3:2a:29:de:e9:7d:f8: ec:1e:bc:7c:c7:55:64:fe:46:14:d2:72:2b:a5:51: fb:2a:be:28:b7:0e:85:e8:69:c2:16:c2:f7:00:94: a9:09:94:35:d4:1a:9c:1d:d4:27:7b:ea:f5:1f:db: fe:f7:71:6d:a0:25:5e:ba:e7:1b:f4:11:c0:7a:05: 1b:b5:57:3c:ce:9e:a2:56:a7:af:f6:da:62:6a:23: 02:e1:42:21:53:26:7a:1c:bd:0f:69:75:c8:60:1a: 83:6b:6a:9a:fd:bc:81:2a:51:5f:ca:ee:17:21:90: 05:17:60:f5:6c:f3:ef:4d:4d:4e:fa:83:81:dc:33: c3:69:1b:76:3b:5c:94:20:c0:4a:eb:fb:a0:b7:1e: f4:6d:6c:2c:17:c8:a1:88:b3:d7:4e:28:4b:52:37: 57:80:f5:16:d1:67:45:67:30:63:42:3c:78:93:d6: 8c:0d:48:c0:63:28:a3:d0:3f:b8:1d:58:4f:b6:56: 95:46:10:88:d6:d4:08:8b:d6:5a:95:61:ba:d2:f4: 6b:df:ca:66:b3:00:01:b5:f3:36:46:15:34:d2:2f: 62:35:41:73:e9:1c:0b:44:ef:78:ed:2d:33:b7:53: 5a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F3:A2:81:19:60:2B:3B:D7:98:96:FC:6F:28:BC:74:83:EC:11:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl X509v3 Authority Key Identifier: keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer sbgp-ipAddrBlock: critical IPv4: 45.41.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:44:3b:57:31:86:a9:55:8f:de:b1:e5:e1:cb:35:27:48:e0: a5:80:48:6d:1f:5d:da:7d:c4:f2:da:d6:dc:b3:ab:71:9b:76: 5d:8e:ce:93:ab:5d:38:64:a8:a4:88:75:a8:df:49:51:5a:d3: b2:a2:01:ad:1f:7f:36:5c:72:61:77:84:8d:3b:12:cf:12:a7: 14:df:e1:78:d5:35:17:e4:ad:ba:01:c5:73:3d:14:53:be:73: f9:c9:85:82:a4:da:ef:74:dd:33:31:d8:79:d0:71:09:c8:eb: a8:de:ce:17:32:92:5a:54:7f:b8:de:ad:59:d5:e7:85:c3:59: 21:32:a9:11:0a:cb:d1:81:46:a9:62:79:92:04:a0:c2:b2:64: 66:6f:38:fe:1a:dd:26:02:d3:82:bd:b7:5e:2c:08:05:39:e2: ba:a5:22:8b:2b:12:6d:df:61:4c:66:61:35:97:f5:02:4a:69: 8d:b2:b3:af:78:4b:a3:77:66:80:7d:31:67:c3:32:64:91:49: 54:fe:be:de:16:72:2e:27:2a:b9:ca:b5:2b:a4:16:27:e5:ca: b3:77:02:9c:e3:5b:0e:40:ba:5e:95:02:eb:f6:9a:ff:11:6d: 27:3b:78:c0:4e:61:73:29:78:8c:f5:ae:c1:95:98:d0:d1:60: ff:43:18:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWdm6pGeF9QtmewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NiYjA4NWItOGM1OC00OGYxLWE3YjktZDQ0NmQzZjk2 MWJmMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk MzAyYjliYjctNDhjNi00MWQ3LWEzZWEtOTk3ZGUxOWIzMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjB3S/uJ9FQDoNeaeH536rDUK17o87MqKd7p ffjsHrx8x1Vk/kYU0nIrpVH7Kr4otw6F6GnCFsL3AJSpCZQ11BqcHdQne+r1H9v+ 93FtoCVeuucb9BHAegUbtVc8zp6iVqev9tpiaiMC4UIhUyZ6HL0PaXXIYBqDa2qa /byBKlFfyu4XIZAFF2D1bPPvTU1O+oOB3DPDaRt2O1yUIMBK6/ugtx70bWwsF8ih iLPXTihLUjdXgPUW0WdFZzBjQjx4k9aMDUjAYyij0D+4HVhPtlaVRhCI1tQIi9Za lWG60vRr38pmswABtfM2RhU00i9iNUFz6RwLRO947S0zt1NaMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/zooEZYCs715iW/G8ovHSD7BEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zY2Ji MDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2ZDNmOTYxYmYvMjlhODk0ZWUtMDA4MC0z YTQ5LThiOTEtYTAxZTFiYmJiZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2NiYjA4NWItOGM1OC00OGYxLWE3 YjktZDQ0NmQzZjk2MWJmLzNjYmIwODViLThjNTgtNDhmMS1hN2I5LWQ0NDZkM2Y5 NjFiZi5jcmwwHwYDVR0jBBgwFoAU4e3x8Ae8hTPlv1z+X4vszy8hl7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zY2JiMDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2 ZDNmOTYxYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpEO1cxhqlVj96x5eHLNSdI4KWASG0fXdp9xPLa1tyzq3Gbdl2OzpOr XThkqKSIdajfSVFa07KiAa0ffzZccmF3hI07Es8SpxTf4XjVNRfkrboBxXM9FFO+ c/nJhYKk2u903TMx2HnQcQnI66jezhcyklpUf7jerVnV54XDWSEyqREKy9GBRqli eZIEoMKyZGZvOP4a3SYC04K9t14sCAU54rqlIosrEm3fYUxmYTWX9QJKaY2ys694 S6N3ZoB9MWfDMmSRSVT+vt4Wci4nKrnKtSukFiflyrN3ApzjWw5Aul6VAuv2mv8R bSc7eMBOYXMpeIz1rsGVmNDRYP9DGBQ= -----END CERTIFICATE-----Generated at Sat Jul 4 17:01:02 2026 by rpki-client