$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa File: 0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa (raw, json) Hash identifier: T6ch8POP3FLiaN42tM/ZcUEwrHuBVXVcTYNU7kvrBSs= Subject key identifier: FF:0F:F1:63:DA:51:D3:A7:99:3B:6A:28:EF:65:F2:CC:39:18:A5:24 Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584D386A507EE7DCA3B1C3E92900 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 5645 IP address blocks: 157.52.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:50:7e:e7:dc:a3:b1:c3:e9:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=f244734e-36eb-4418-adcc-9eed6a20913f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9a:e8:c1:d4:e2:f3:35:f2:d2:35:d8:4d:e5: 08:57:16:0c:af:80:ab:34:c0:16:46:b4:9e:2c:61: bb:71:f3:55:ed:cf:57:9b:82:41:28:46:95:7f:08: 66:c8:c1:ac:3f:95:64:2d:79:21:a2:77:07:a0:89: 8b:f6:43:31:b6:91:f1:bd:dd:2a:4d:0f:84:0c:c1: 3b:67:90:59:5d:96:32:3b:83:74:28:fd:78:2d:7f: 88:69:53:14:14:a4:3d:c3:b9:79:30:79:76:9c:c6: f1:4c:f5:3e:e8:aa:02:ab:ca:99:e2:04:4d:a0:9a: 5a:30:ea:66:e1:92:28:8d:57:43:ce:f4:f3:dc:15: 6a:92:cd:8e:57:dd:1a:b2:a3:a5:21:fd:09:64:5f: eb:d0:3a:08:92:be:ab:a1:49:d7:20:78:45:b5:69: 1a:c1:67:dc:56:70:2b:32:6c:31:5f:50:5b:99:b5: a7:08:00:39:88:72:90:e0:34:6c:c5:7e:fb:91:9c: dd:46:a5:15:39:0a:c8:16:f3:c7:8c:52:12:64:13: c3:42:8b:2e:b0:d1:26:19:8a:0a:8e:a1:ca:08:9b: ea:1a:a2:d2:bf:d1:2e:8a:57:8d:f2:0b:69:02:fa: 49:11:14:78:80:8c:50:86:d2:57:83:75:cf:2d:e5: 68:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0F:F1:63:DA:51:D3:A7:99:3B:6A:28:EF:65:F2:CC:39:18:A5:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 157.52.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:62:ad:ef:9a:64:9a:ef:33:3e:20:eb:6f:6f:aa:04:76:d5: 48:e8:5d:a6:c9:a5:ae:f8:1e:09:b8:0d:05:76:6e:55:75:4d: d5:c3:98:79:0a:e1:5a:f2:7a:a4:f7:ee:4f:94:9d:59:66:73: 68:04:0c:96:26:37:35:b5:95:1f:1c:7d:c4:cc:57:64:3c:97: 2b:cb:d9:13:06:c5:34:11:69:8e:f0:80:3a:81:0e:68:3a:96: 23:5f:b0:2c:77:e6:0f:5b:41:a1:50:bd:18:32:e9:30:9d:02: ab:3b:bc:b8:55:22:88:4c:d9:57:f2:ec:ec:6b:c7:e9:45:31: 4c:78:33:81:cf:a1:32:7f:82:4d:d6:45:2a:ff:65:90:7a:00: b6:f9:89:9b:be:e5:e5:be:7d:1c:78:cf:9c:94:47:87:e6:97: f6:d1:2c:9e:8e:0b:86:f8:c5:de:a2:54:a2:57:de:d8:2b:bf: 2b:bf:b7:e5:5b:de:7c:af:79:b7:2e:75:ce:e5:b3:b7:f8:2e: c1:b4:ed:b9:17:2d:f7:aa:7c:83:e0:e0:44:3f:7d:d8:eb:44: b8:6b:e6:a4:da:ff:37:76:78:35:fa:0c:00:0b:2f:bf:8d:3e: a8:94:e1:c3:e0:b9:ed:55:fe:4e:3b:25:07:b6:f0:90:a7:a3: 23:16:f7:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alB+59yjscPpKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk ZjI0NDczNGUtMzZlYi00NDE4LWFkY2MtOWVlZDZhMjA5MTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZrowdTi8zXy0jXYTeUIVxYMr4CrNMAWRrSe LGG7cfNV7c9Xm4JBKEaVfwhmyMGsP5VkLXkhoncHoImL9kMxtpHxvd0qTQ+EDME7 Z5BZXZYyO4N0KP14LX+IaVMUFKQ9w7l5MHl2nMbxTPU+6KoCq8qZ4gRNoJpaMOpm 4ZIojVdDzvTz3BVqks2OV90asqOlIf0JZF/r0DoIkr6roUnXIHhFtWkawWfcVnAr MmwxX1BbmbWnCAA5iHKQ4DRsxX77kZzdRqUVOQrIFvPHjFISZBPDQosusNEmGYoK jqHKCJvqGqLSv9EuileN8gtpAvpJERR4gIxQhtJXg3XPLeVo1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8P8WPaUdOnmTtqKO9l8sw5GKUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMGYxMjk0YTMtOThhNC0z ZWJiLTgxYjQtN2YxYTlhMWQyN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnTQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1ire+aZJrvMz4g629vqgR21UjoXabJpa74Hgm4DQV2blV1TdXDmHkK 4VryeqT37k+UnVlmc2gEDJYmNzW1lR8cfcTMV2Q8lyvL2RMGxTQRaY7wgDqBDmg6 liNfsCx35g9bQaFQvRgy6TCdAqs7vLhVIohM2Vfy7Oxrx+lFMUx4M4HPoTJ/gk3W RSr/ZZB6ALb5iZu+5eW+fRx4z5yUR4fml/bRLJ6OC4b4xd6iVKJX3tgrvyu/t+Vb 3nyvebcudc7ls7f4LsG07bkXLfeqfIPg4EQ/fdjrRLhr5qTa/zd2eDX6DAALL7+N PqiU4cPgue1V/k47JQe28JCnoyMW92M= -----END CERTIFICATE-----Generated at Wed Mar 25 15:34:50 2026 by rpki-client