$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa File: 2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa (raw, json) Hash identifier: jisi/qF5tHEUjElWPqPou856SS9ukRmmLliuWmLrdsE= Subject key identifier: B9:F9:2F:1F:76:51:D8:A4:C3:03:AE:F9:56:A8:0E:F0:D8:A0:4B:F4 Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584D386A502ADB65C5BAA94B78C0 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 5645 IP address blocks: 104.222.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:50:2a:db:65:c5:ba:a9:4b:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=38acae73-3697-4700-b526-6e206868c8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8e:7b:2a:76:61:3a:72:75:89:dc:6f:72:c7: 48:9c:a9:d9:a4:9b:df:2f:d2:26:35:ba:cc:b4:fb: 55:a4:0a:49:f2:d1:82:3d:f4:35:43:55:ec:48:0c: 4a:c6:ca:3c:02:b1:ad:36:95:9a:f9:85:3c:37:05: b1:03:eb:fa:05:b0:24:52:fa:41:23:4d:28:b4:e8: 6f:c4:b4:84:c2:69:48:ab:60:59:64:da:88:7d:e9: f9:8d:9c:3b:1f:f0:c7:cb:52:4e:22:af:ba:e9:e1: f5:01:04:de:c8:14:d9:af:80:84:e4:eb:0c:e2:eb: 60:1d:99:e8:dc:28:9d:81:d9:2c:b8:51:0d:37:27: c7:5b:7f:32:38:9c:be:fb:37:32:aa:c3:ef:74:b4: 60:d6:95:77:fd:bf:4e:2d:79:5d:d5:5c:02:10:0f: 03:95:43:81:b3:55:5f:f0:b2:7f:9d:74:e2:19:b4: 5d:72:71:d7:07:27:a9:a8:7e:38:d6:65:d3:4f:2a: e4:5a:a8:e1:f0:ff:0a:77:6d:df:93:3a:62:63:41: 01:80:75:20:6b:0c:ad:5d:e4:8c:e5:45:cc:dc:4b: 31:b9:0f:f6:c9:02:e8:c1:58:1f:fc:b5:67:93:1f: 07:9b:20:ab:d1:01:26:4e:f8:5f:6e:86:b2:9b:7d: e6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F9:2F:1F:76:51:D8:A4:C3:03:AE:F9:56:A8:0E:F0:D8:A0:4B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 104.222.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:8a:58:24:57:f4:b0:f4:77:b6:11:8c:fc:02:fe:b6:ed:ce: be:c0:0b:18:8b:d4:27:73:73:1c:66:e5:03:53:94:ef:36:6a: 74:5b:2a:f1:c5:f4:ad:1c:ae:7f:e4:7b:c5:c9:0e:ee:ea:d9: c3:20:c3:ed:62:11:c5:bc:92:6f:4f:74:3c:01:78:ec:01:8b: 90:07:bf:e7:a3:e7:8e:0d:56:43:c2:5e:cf:f4:57:34:05:3e: 5f:0d:a8:ac:20:b7:c2:61:d1:dd:8d:f7:0d:b4:22:f0:1a:e9: ba:02:9a:62:3d:bd:f4:b0:56:44:65:44:f2:45:61:49:bd:9a: a9:47:40:16:8e:7d:c3:85:27:42:d3:48:13:9f:da:20:af:fa: 40:d5:3a:45:05:b0:32:db:3f:6b:ea:9b:f8:9f:52:49:84:c3: 4f:2f:d1:5f:b0:21:1e:64:35:b0:b5:42:1e:42:f8:58:40:ae: dc:e3:e3:bb:f3:e4:03:a7:fa:08:d9:37:49:22:de:87:5e:6b: 75:07:7e:be:52:9a:0f:c6:52:66:98:7e:5c:8b:7d:b2:e6:67: 2d:d3:2c:46:1f:c5:a4:41:2e:6a:ec:a6:b1:53:23:cb:78:06: 41:47:c2:e1:50:5c:1f:5d:16:cf:52:b8:71:fc:7f:44:f3:b7: 0b:2e:b7:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alAq22XFuqlLeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MzhhY2FlNzMtMzY5Ny00NzAwLWI1MjYtNmUyMDY4NjhjOGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4I57KnZhOnJ1idxvcsdInKnZpJvfL9ImNbrM tPtVpApJ8tGCPfQ1Q1XsSAxKxso8ArGtNpWa+YU8NwWxA+v6BbAkUvpBI00otOhv xLSEwmlIq2BZZNqIfen5jZw7H/DHy1JOIq+66eH1AQTeyBTZr4CE5OsM4utgHZno 3CidgdksuFENNyfHW38yOJy++zcyqsPvdLRg1pV3/b9OLXld1VwCEA8DlUOBs1Vf 8LJ/nXTiGbRdcnHXByepqH441mXTTyrkWqjh8P8Kd23fkzpiY0EBgHUgawytXeSM 5UXM3EsxuQ/2yQLowVgf/LVnkx8HmyCr0QEmTvhfboaym33mEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLn5Lx92UdikwwOu+VaoDvDYoEv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMmQxMjY1ZjAtZmY3ZS0z OTRlLTgxNDQtMWEwY2M1NjAxZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaN5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+KWCRX9LD0d7YRjPwC/rbtzr7ACxiL1Cdzcxxm5QNTlO82anRbKvHF 9K0crn/ke8XJDu7q2cMgw+1iEcW8km9PdDwBeOwBi5AHv+ej544NVkPCXs/0VzQF Pl8NqKwgt8Jh0d2N9w20IvAa6boCmmI9vfSwVkRlRPJFYUm9mqlHQBaOfcOFJ0LT SBOf2iCv+kDVOkUFsDLbP2vqm/ifUkmEw08v0V+wIR5kNbC1Qh5C+FhArtzj47vz 5AOn+gjZN0ki3odea3UHfr5Smg/GUmaYflyLfbLmZy3TLEYfxaRBLmrsprFTI8t4 BkFHwuFQXB9dFs9SuHH8f0Tztwsut20= -----END CERTIFICATE-----Generated at Wed Mar 25 15:33:49 2026 by rpki-client