$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/45298c63-477f-3ee9-9992-4da507471776.roa File: 45298c63-477f-3ee9-9992-4da507471776.roa (raw, json) Hash identifier: HTOus+o/2g/psz3jqg3DcFL224Ld8qu0eSxPpSNnISs= Subject key identifier: 6A:BF:2E:1E:EA:D9:60:BA:D7:78:8F:D2:A5:6C:5C:D7:EC:4E:A7:17 Certificate issuer: /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8 Certificate serial: 010D0C9F4328584D57F64ADE919FA3B61DC57700 Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/45298c63-477f-3ee9-9992-4da507471776.roa Signing time: Mon 30 Mar 2026 20:13:09 +0000 ROA not before: Mon 30 Mar 2026 20:13:09 +0000 ROA not after: Sun 28 Jun 2026 20:13:09 +0000 asID: 397373 IP address blocks: 209.191.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:f6:4a:de:91:9f:a3:b6:1d:c5:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8 Validity Not Before: Mar 30 20:13:09 2026 GMT Not After : Jun 28 20:13:09 2026 GMT Subject: CN=3d099e51-8bb7-47db-a4cf-b2116f385088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:be:64:56:34:38:ed:03:83:d5:97:f0:d3:9a: c9:4d:44:6e:71:d2:57:3c:2b:7b:22:8e:8c:aa:97: 33:61:a0:f4:32:16:56:fc:cc:3d:fd:72:e2:33:8c: ad:b2:8a:c0:5e:ea:5b:5a:41:fb:98:c7:ec:53:d9: b7:31:24:30:52:3f:df:fa:8c:98:02:9f:0a:b1:ab: eb:f5:3a:22:50:49:7c:5e:0a:cd:dc:92:8c:f5:9f: ea:4e:9a:ab:7e:0f:db:a4:f1:c3:7a:54:d4:d2:e4: 9b:34:41:be:12:c5:7e:9a:9d:1e:69:80:f7:6a:c6: 81:ae:a2:a4:73:5b:2a:46:77:7f:27:cb:ff:d1:d2: 73:0b:f4:29:ef:6d:43:6f:8b:4e:6c:d9:dc:99:e3: d0:e4:22:2b:49:19:0d:4f:63:2c:04:67:bf:ab:bf: cc:f8:a9:7a:aa:7c:20:0b:51:3b:04:52:ad:c1:f2: 44:ef:48:0b:0e:d5:24:ce:4f:49:15:d4:7f:5a:60: 76:84:67:92:2c:bb:7c:1b:8e:35:97:18:33:dc:6a: 07:ef:02:c4:a3:9e:41:e0:d8:96:24:b9:f6:13:dc: 17:e4:41:5c:54:f7:fc:d1:4b:7e:7a:0b:64:eb:ce: 91:21:64:78:e9:ef:17:b3:bb:75:7c:00:e9:cc:39: 67:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BF:2E:1E:EA:D9:60:BA:D7:78:8F:D2:A5:6C:5C:D7:EC:4E:A7:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/45298c63-477f-3ee9-9992-4da507471776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl X509v3 Authority Key Identifier: keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer sbgp-ipAddrBlock: critical IPv4: 209.191.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:22:55:f8:76:f9:ea:66:31:b9:b7:85:58:65:3b:36:a1:eb: 29:22:fa:c0:74:12:e1:58:a6:2a:3b:92:89:75:c9:b9:36:c8: 76:8e:2f:bc:04:5e:e7:b2:ab:95:e8:0b:72:b7:11:de:68:ec: 28:b7:9e:7d:8c:b9:13:55:e1:a6:4b:fd:3c:1a:ae:c0:92:84: 88:43:db:9c:d0:a6:56:a0:75:39:fc:5e:d0:7d:a1:13:e0:dc: aa:33:19:46:3d:54:e3:2d:4f:5e:e5:af:3f:30:fc:f4:32:7a: 7a:8a:a5:6c:df:45:23:21:2e:07:55:da:ae:42:a4:87:17:53: 0d:ae:89:6e:bb:1e:68:4d:03:8f:97:30:0a:39:37:63:9d:be: ce:2c:0b:b4:e5:9c:2d:09:dd:51:1c:2f:ed:13:30:fe:89:a6: ce:dd:d0:79:4f:36:bd:d2:14:6f:f6:14:a6:f4:ee:e9:f8:36: ec:f1:8e:d2:94:53:64:08:00:1e:b4:a3:75:9e:96:7a:07:f6: b5:ab:a5:b9:33:ce:70:6e:da:db:29:1d:3b:6f:1d:37:00:cb: 64:f8:21:a1:3f:28:6e:92:b0:76:31:55:5d:78:1b:ed:0e:3f: f7:a0:c4:76:3d:6f:ed:3f:29:cd:b9:ba:30:59:ca:6f:b1:ee: b6:b8:96:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1X9krekZ+jth3FdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NWMzOWEtNzE1Yy00ZGMwLTg5MWEtYjM4ZjlkN2Ni M2U4MB4XDTI2MDMzMDIwMTMwOVoXDTI2MDYyODIwMTMwOVowLzEtMCsGA1UEAxMk M2QwOTllNTEtOGJiNy00N2RiLWE0Y2YtYjIxMTZmMzg1MDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL5kVjQ47QOD1Zfw05rJTURucdJXPCt7Io6M qpczYaD0MhZW/Mw9/XLiM4ytsorAXupbWkH7mMfsU9m3MSQwUj/f+oyYAp8Ksavr 9ToiUEl8XgrN3JKM9Z/qTpqrfg/bpPHDelTU0uSbNEG+EsV+mp0eaYD3asaBrqKk c1sqRnd/J8v/0dJzC/Qp721Db4tObNncmePQ5CIrSRkNT2MsBGe/q7/M+Kl6qnwg C1E7BFKtwfJE70gLDtUkzk9JFdR/WmB2hGeSLLt8G441lxgz3GoH7wLEo55B4NiW JLn2E9wX5EFcVPf80Ut+egtk686RIWR46e8Xs7t1fADpzDlnDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGq/Lh7q2WC613iP0qVsXNfsTqcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTc1 YzM5YS03MTVjLTRkYzAtODkxYS1iMzhmOWQ3Y2IzZTgvNDUyOThjNjMtNDc3Zi0z ZWU5LTk5OTItNGRhNTA3NDcxNzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk3NWMzOWEtNzE1Yy00ZGMwLTg5 MWEtYjM4ZjlkN2NiM2U4LzM5NzVjMzlhLTcxNWMtNGRjMC04OTFhLWIzOGY5ZDdj YjNlOC5jcmwwHwYDVR0jBBgwFoAU6hj3sN+eSGqwsG9FbQ9XzJUOingwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTc1YzM5YS03MTVjLTRkYzAtODkxYS1iMzhm OWQ3Y2IzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0b+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkiVfh2+epmMbm3hVhlOzah6yki+sB0EuFYpio7kol1ybk2yHaOL7wE Xueyq5XoC3K3Ed5o7Ci3nn2MuRNV4aZL/TwarsCShIhD25zQplagdTn8XtB9oRPg 3KozGUY9VOMtT17lrz8w/PQyenqKpWzfRSMhLgdV2q5CpIcXUw2uiW67HmhNA4+X MAo5N2Odvs4sC7TlnC0J3VEcL+0TMP6Jps7d0HlPNr3SFG/2FKb07un4NuzxjtKU U2QIAB60o3WelnoH9rWrpbkzznBu2tspHTtvHTcAy2T4IaE/KG6SsHYxVV14G+0O P/egxHY9b+0/Kc25ujBZym+x7ra4lsA= -----END CERTIFICATE-----Generated at Mon Apr 13 17:34:06 2026 by rpki-client