$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/7477397b-452e-365f-afbf-5ce03b976b23.roa File: 7477397b-452e-365f-afbf-5ce03b976b23.roa (raw, json) Hash identifier: pKZJJnjq16Y0Gof7fB/7/HirjddAS4o/Q6N0pLg9mIM= Subject key identifier: 42:95:BB:91:C5:AF:A1:A1:9C:F5:8B:8D:9B:03:72:0A:A4:4E:6A:CD Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584D5F6F314C02018CF219AF2400 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/7477397b-452e-365f-afbf-5ce03b976b23.roa Signing time: Thu 02 Apr 2026 12:27:24 +0000 ROA not before: Thu 02 Apr 2026 12:27:24 +0000 ROA not after: Wed 01 Jul 2026 12:27:24 +0000 asID: 834 IP address blocks: 209.145.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:6f:31:4c:02:01:8c:f2:19:af:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Apr 2 12:27:24 2026 GMT Not After : Jul 1 12:27:24 2026 GMT Subject: CN=8fd7f634-cb9d-42d7-8ee4-8a6e07bd8908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d6:6b:64:79:10:2c:76:8b:fa:54:24:17:cc: d5:0f:ae:e3:fb:92:28:80:8c:e8:6b:d4:e9:ee:3b: 6a:ec:b5:c7:9d:59:38:07:47:8e:43:54:73:4c:59: 27:e2:50:b6:35:af:5b:09:98:0d:a0:b7:78:5b:4a: a5:88:e0:48:fb:d2:6c:85:ab:53:c3:d2:ad:44:4c: 2e:3b:e1:fd:b8:48:51:39:10:de:8b:10:84:cc:05: 3d:47:33:6a:1b:87:23:8e:0a:a1:43:ba:2d:6f:88: da:bf:0c:a1:6a:ef:e2:a0:a7:7c:cc:40:22:9b:dd: 06:d0:29:66:e2:40:b7:c4:ff:b3:b8:79:2c:f7:ee: 7d:ae:57:28:4d:04:3d:79:49:c7:70:50:d9:5f:ef: 48:95:3e:95:c7:03:0c:2a:a2:a0:62:8d:ff:24:27: a4:29:62:16:56:6b:a3:3a:34:ba:e4:76:9b:d7:c6: 86:0b:76:db:22:74:8d:e1:46:58:0b:73:fc:a8:1e: 14:e1:0f:62:1b:b8:b8:2b:5e:1a:54:58:15:c8:e1: 69:6f:e8:b3:2b:f5:44:76:c8:03:4c:3e:35:2a:0f: 20:34:23:ed:64:76:36:4c:0c:11:7b:15:5c:9f:3e: a8:c0:45:0f:a0:68:02:4d:86:6d:83:27:30:c1:6b: 37:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:95:BB:91:C5:AF:A1:A1:9C:F5:8B:8D:9B:03:72:0A:A4:4E:6A:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/7477397b-452e-365f-afbf-5ce03b976b23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.145.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:84:53:0e:d4:9c:2a:00:8d:39:58:60:ca:69:27:10:4a:45: 4d:f5:60:36:70:d6:bb:9f:79:47:3d:b3:be:d9:9c:a9:0b:6e: bf:d3:15:0a:9b:b6:a0:6f:7e:35:c9:75:4b:ad:dc:5b:38:37: f4:42:0b:a4:46:3d:01:de:eb:94:a7:86:79:cd:48:52:dc:cd: 88:5d:68:eb:55:76:c2:88:7c:9e:b1:78:c7:31:c3:69:57:9f: a2:6a:08:9f:c5:d7:1e:c6:a2:4d:ea:0e:68:4f:6f:69:f7:0e: 40:69:80:5d:83:dc:ef:51:62:4f:8d:ac:76:5a:12:3d:62:d6: 83:80:30:34:31:56:57:0b:a7:da:76:72:25:72:5a:72:5c:49: 02:a6:06:3d:5f:9a:35:d9:c3:9c:f5:fe:70:9b:e0:59:97:c5: ec:43:2e:fd:40:4d:e5:26:4f:32:4d:a1:d9:30:9c:54:c5:0c: 22:46:f1:68:df:e2:7f:67:e4:6f:de:67:8c:35:96:3c:4b:27: 75:c4:29:d2:98:7b:e5:b7:aa:0f:b5:5b:0b:ca:cc:b3:92:d4: 52:2b:a1:8d:d4:ce:ec:d0:0c:17:24:d5:46:8b:a3:78:71:1e: 9d:77:d7:5e:38:b0:bb:ab:f2:5e:00:88:a3:ce:0a:9a:1c:1f: b3:21:ff:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1fbzFMAgGM8hmvJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI2MDQwMjEyMjcyNFoXDTI2MDcwMTEyMjcyNFowLzEtMCsGA1UEAxMk OGZkN2Y2MzQtY2I5ZC00MmQ3LThlZTQtOGE2ZTA3YmQ4OTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtZrZHkQLHaL+lQkF8zVD67j+5IogIzoa9Tp 7jtq7LXHnVk4B0eOQ1RzTFkn4lC2Na9bCZgNoLd4W0qliOBI+9JshatTw9KtREwu O+H9uEhRORDeixCEzAU9RzNqG4cjjgqhQ7otb4javwyhau/ioKd8zEAim90G0Clm 4kC3xP+zuHks9+59rlcoTQQ9eUnHcFDZX+9IlT6VxwMMKqKgYo3/JCekKWIWVmuj OjS65Hab18aGC3bbInSN4UZYC3P8qB4U4Q9iG7i4K14aVFgVyOFpb+izK/VEdsgD TD41Kg8gNCPtZHY2TAwRexVcnz6owEUPoGgCTYZtgycwwWs3owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKVu5HFr6GhnPWLjZsDcgqkTmrNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNzQ3NzM5N2ItNDUyZS0z NjVmLWFmYmYtNWNlMDNiOTc2YjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZEvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKEUw7UnCoAjTlYYMppJxBKRU31YDZw1rufeUc9s77ZnKkLbr/TFQqb tqBvfjXJdUut3Fs4N/RCC6RGPQHe65SnhnnNSFLczYhdaOtVdsKIfJ6xeMcxw2lX n6JqCJ/F1x7Gok3qDmhPb2n3DkBpgF2D3O9RYk+NrHZaEj1i1oOAMDQxVlcLp9p2 ciVyWnJcSQKmBj1fmjXZw5z1/nCb4FmXxexDLv1ATeUmTzJNodkwnFTFDCJG8Wjf 4n9n5G/eZ4w1ljxLJ3XEKdKYe+W3qg+1WwvKzLOS1FIroY3UzuzQDBck1UaLo3hx Hp131144sLur8l4AiKPOCpocH7Mh/+0= -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:34 2026 by rpki-client