$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa File: 19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa (raw, json) Hash identifier: pUShct59aXLfvqMGycJLdg3uxFtVxnW13+7kUbmmG10= Subject key identifier: FB:EF:D4:F9:1C:4C:C7:34:AB:CC:87:F6:2D:DB:F0:33:78:6D:B9:5B Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584D386A50EAC56F179205843500 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 5645 IP address blocks: 192.252.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:50:ea:c5:6f:17:92:05:84:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=7e454dbb-df3b-4a10-8fba-45906a5c1885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:26:b8:3b:b2:17:6d:d1:8e:02:a1:d8:bc: 11:a6:ba:ac:4f:7a:d5:d0:28:16:64:a3:aa:58:e7: 76:dc:11:8b:81:9f:4e:55:56:c6:e9:5e:81:87:5b: d6:ed:82:40:8b:61:d6:eb:ee:3a:61:27:6b:92:4f: 2e:a3:42:46:90:42:7b:ef:fb:c1:93:4d:40:da:ef: 1f:2f:27:1d:f5:5b:8b:82:ff:5d:ba:a4:e0:68:60: 33:0e:9d:38:60:ef:a6:7d:ad:7b:c3:23:69:6b:75: 74:28:cd:04:91:b3:20:e9:78:01:ca:4c:77:c2:3d: e2:09:79:ce:37:95:d4:6b:57:35:8a:9e:b9:ea:9e: cc:a2:1d:54:51:58:0f:f6:e9:71:38:2d:4c:8d:06: ae:93:e6:4f:46:80:18:87:c6:63:f5:44:81:43:ee: 3e:1a:97:6c:25:e3:21:20:1c:b6:86:07:8e:d1:97: 4d:05:5d:9a:50:18:25:98:f4:3c:b2:71:10:a3:91: 28:4c:78:03:92:cd:82:7a:f6:c4:eb:1a:e0:29:f8: d9:01:97:c1:c1:7e:60:69:ad:0e:d0:1b:e4:d5:16: 8a:e5:9f:50:94:2a:09:e5:2a:83:51:b3:78:c5:1a: 9c:65:45:fb:be:7f:25:af:07:2f:d8:99:16:a1:4c: 4e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EF:D4:F9:1C:4C:C7:34:AB:CC:87:F6:2D:DB:F0:33:78:6D:B9:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 192.252.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:23:9a:93:ab:b0:82:eb:ca:36:59:4f:2d:56:93:ac:6a:c8: c2:00:d4:6c:70:a5:7c:5e:e1:27:2e:42:7d:58:3d:e4:de:a3: c7:d6:81:bc:67:3d:67:0f:33:67:4b:de:c4:41:53:87:c6:53: 03:ae:02:31:f3:87:34:57:3b:59:d3:5c:0c:ad:ed:95:41:5f: ca:b8:60:04:a7:f1:6e:e1:74:09:ff:60:bb:a0:f6:aa:e8:59: 00:fc:7b:52:88:0c:ec:d8:11:f9:9d:56:c7:01:df:e6:c0:39: 93:20:b5:a2:89:08:3e:17:79:f5:11:8c:72:48:9e:c8:18:93: 1e:ec:ad:43:95:7d:c4:c0:e6:f5:f0:6d:15:ca:9c:2b:49:c5: 42:03:ab:31:29:b1:52:1e:28:83:53:5d:20:06:ea:3f:ef:56: 06:40:60:1b:2d:da:50:b7:98:56:0a:ee:1c:a2:85:0e:1b:68: 65:7a:a0:a3:92:c0:c5:d0:1f:7f:d7:8e:08:bb:f3:06:76:22: 5c:7a:89:2b:e0:60:7e:86:93:4a:12:14:2e:80:1d:fe:83:7f: 45:84:6f:e0:e0:f1:79:5a:b9:63:48:84:a7:19:05:a1:db:de: 36:ca:99:b7:92:a3:40:9e:59:0d:af:36:81:79:5b:02:47:26: c0:30:a6:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alDqxW8XkgWENQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk N2U0NTRkYmItZGYzYi00YTEwLThmYmEtNDU5MDZhNWMxODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXYmuDuyF23RjgKh2LwRprqsT3rV0CgWZKOq WOd23BGLgZ9OVVbG6V6Bh1vW7YJAi2HW6+46YSdrkk8uo0JGkEJ77/vBk01A2u8f Lycd9VuLgv9duqTgaGAzDp04YO+mfa17wyNpa3V0KM0EkbMg6XgBykx3wj3iCXnO N5XUa1c1ip656p7Moh1UUVgP9ulxOC1MjQauk+ZPRoAYh8Zj9USBQ+4+GpdsJeMh IBy2hgeO0ZdNBV2aUBglmPQ8snEQo5EoTHgDks2CevbE6xrgKfjZAZfBwX5gaa0O 0Bvk1RaK5Z9QlCoJ5SqDUbN4xRqcZUX7vn8lrwcv2JkWoUxO6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvv1PkcTMc0q8yH9i3b8DN4bblbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMTljNWZhMGEtNGM5NC0z Y2ZlLWE5MTAtOGRlZmZiYWJkYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwPzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkjmpOrsILryjZZTy1Wk6xqyMIA1GxwpXxe4ScuQn1YPeTeo8fWgbxn PWcPM2dL3sRBU4fGUwOuAjHzhzRXO1nTXAyt7ZVBX8q4YASn8W7hdAn/YLug9qro WQD8e1KIDOzYEfmdVscB3+bAOZMgtaKJCD4XefURjHJInsgYkx7srUOVfcTA5vXw bRXKnCtJxUIDqzEpsVIeKINTXSAG6j/vVgZAYBst2lC3mFYK7hyihQ4baGV6oKOS wMXQH3/Xjgi78wZ2Ilx6iSvgYH6Gk0oSFC6AHf6Df0WEb+Dg8XlauWNIhKcZBaHb 3jbKmbeSo0CeWQ2vNoF5WwJHJsAwpks= -----END CERTIFICATE-----Generated at Wed Mar 25 15:37:15 2026 by rpki-client