$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0df9c686-d3ed-3828-9767-b750494665b8.roa File: 0df9c686-d3ed-3828-9767-b750494665b8.roa (raw, json) Hash identifier: 6et86JpqC1ULQrvRJJI5e96ZD/RrinmxVn24FrqrcZg= Subject key identifier: 74:CF:6E:51:17:0A:B5:22:20:BE:B8:21:8C:E2:B8:50:63:F9:5A:87 Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584D386A508B54757FA2D259E410 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0df9c686-d3ed-3828-9767-b750494665b8.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 5645 IP address blocks: 167.88.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:50:8b:54:75:7f:a2:d2:59:e4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=4a015974-04c0-455d-a3fa-3e8a6631a916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:63:9f:f2:9d:25:e3:1e:01:2b:50:b5:f9: 61:92:e2:2c:9b:71:8f:10:83:f4:73:57:5e:c5:84: 08:81:0b:a1:b5:cb:0d:31:3b:56:1a:b8:f6:db:99: 9d:6b:68:6e:d9:80:fe:65:69:87:b5:30:f6:42:c7: 7a:9d:c2:03:bc:7e:a5:e8:d2:bf:51:26:ed:0f:1e: 4d:8b:d7:48:0f:64:89:4e:13:10:4d:1a:43:63:e5: 90:52:bb:46:b6:59:3e:a8:fe:4b:33:62:82:0c:35: 81:81:42:26:f7:bd:10:d1:25:62:18:81:18:d5:02: 7e:c1:49:6c:cd:87:95:cc:6d:20:30:78:1b:88:ed: 41:bf:91:7c:8b:81:1d:cc:45:0e:16:db:7c:3d:09: 3c:12:d0:05:e3:31:e8:1c:87:d6:56:7c:c6:62:4d: 95:7a:bd:c8:88:77:5f:84:f3:5d:61:78:f0:56:b2: e5:71:c9:db:ef:ae:a4:84:73:33:62:b5:3d:0a:54: ee:f4:c0:15:fb:fc:3c:3b:9b:01:01:1e:d6:7d:ea: da:79:22:31:c6:20:fe:b4:ae:ec:9e:b7:f5:98:7b: 55:95:47:94:18:04:3d:85:01:07:10:1a:52:a4:a1: cc:8e:38:a5:b9:87:73:86:a8:62:df:92:03:0a:64: f3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CF:6E:51:17:0A:B5:22:20:BE:B8:21:8C:E2:B8:50:63:F9:5A:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0df9c686-d3ed-3828-9767-b750494665b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 167.88.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:10:5f:ce:1a:88:9e:cf:cc:d8:46:78:e9:a9:a1:cb:c0:16: 89:06:4f:09:46:40:5a:08:5e:69:c6:4b:0f:52:15:97:ab:76: 5b:74:d5:d4:67:08:85:35:27:8a:61:48:e9:b1:fc:6b:aa:03: 68:da:1b:be:31:f5:6e:c2:c9:e5:18:a9:57:9e:01:fb:b0:a1: fa:1f:74:5d:5c:b6:e8:7b:2d:01:a6:41:59:71:5c:eb:0f:f8: b5:c4:01:87:a5:b6:44:1b:ea:3a:9b:fc:b8:ba:1e:8c:e1:90: 39:ab:22:b1:49:e8:9c:98:2b:60:65:4c:59:e7:ed:d6:9f:52: c0:22:dc:1f:af:70:2d:18:54:9a:9d:f0:14:62:d7:7f:20:b2: 8b:e4:f1:05:98:54:9e:c9:53:a9:0a:67:f3:44:74:2d:88:ad: 4a:6d:ad:38:61:13:c7:55:eb:f5:3d:9c:a3:d8:8f:85:8c:b9: 51:6b:02:ac:63:30:44:58:68:51:cd:28:10:c8:77:98:6c:72: 1a:73:9e:53:db:b5:9f:4c:0b:29:57:b1:d1:82:82:29:63:f7: 13:48:8d:57:3e:89:87:cd:56:63:7c:29:61:04:eb:3d:46:96: 1b:0f:1d:9c:2d:80:02:7c:12:55:ec:99:e4:ef:4e:d4:9e:f7: 46:d6:6d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alCLVHV/otJZ5BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NGEwMTU5NzQtMDRjMC00NTVkLWEzZmEtM2U4YTY2MzFhOTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuBjn/KdJeMeAStQtflhkuIsm3GPEIP0c1de xYQIgQuhtcsNMTtWGrj225mda2hu2YD+ZWmHtTD2Qsd6ncIDvH6l6NK/USbtDx5N i9dID2SJThMQTRpDY+WQUrtGtlk+qP5LM2KCDDWBgUIm970Q0SViGIEY1QJ+wUls zYeVzG0gMHgbiO1Bv5F8i4EdzEUOFtt8PQk8EtAF4zHoHIfWVnzGYk2Ver3IiHdf hPNdYXjwVrLlccnb766khHMzYrU9ClTu9MAV+/w8O5sBAR7WferaeSIxxiD+tK7s nrf1mHtVlUeUGAQ9hQEHEBpSpKHMjjiluYdzhqhi35IDCmTz9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTPblEXCrUiIL64IYziuFBj+VqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMGRmOWM2ODYtZDNlZC0z ODI4LTk3NjctYjc1MDQ5NDY2NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp1gQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM8QX84aiJ7PzNhGeOmpocvAFokGTwlGQFoIXmnGSw9SFZerdlt01dRn CIU1J4phSOmx/GuqA2jaG74x9W7CyeUYqVeeAfuwofofdF1ctuh7LQGmQVlxXOsP +LXEAYeltkQb6jqb/Li6HozhkDmrIrFJ6JyYK2BlTFnn7dafUsAi3B+vcC0YVJqd 8BRi138gsovk8QWYVJ7JU6kKZ/NEdC2IrUptrThhE8dV6/U9nKPYj4WMuVFrAqxj MERYaFHNKBDId5hschpznlPbtZ9MCylXsdGCgilj9xNIjVc+iYfNVmN8KWEE6z1G lhsPHZwtgAJ8ElXsmeTvTtSe90bWbaU= -----END CERTIFICATE-----Generated at Wed Mar 25 15:35:47 2026 by rpki-client