$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/bea233f7-8a64-378f-9dc5-2458cdb4223a.roa File: bea233f7-8a64-378f-9dc5-2458cdb4223a.roa (raw, json) Hash identifier: HLX+xIEdBhleYYl2v0CjldjNFbCkyl6yQnAA89z6RtE= Subject key identifier: B9:86:29:5D:4E:80:F6:12:6C:7F:FB:8D:B5:E6:F2:68:16:D3:23:B7 Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584D386A506FAF4B42AF67682D00 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/bea233f7-8a64-378f-9dc5-2458cdb4223a.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 5645 IP address blocks: 108.175.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:50:6f:af:4b:42:af:67:68:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=8dfae799-4de0-4759-9311-9e6ae6f03ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5f:92:cf:d4:66:c3:67:9e:94:c9:3b:94:7c: 83:57:f9:32:df:a3:b7:f9:a6:4f:6c:26:db:dc:2e: ca:e0:ec:d5:86:71:9c:12:1c:eb:7f:51:9b:7d:3e: 9e:00:e4:e4:21:5a:62:46:ec:2d:64:c4:b4:d5:84: a6:55:65:f7:58:37:1a:4e:cc:b3:32:2c:8f:6e:63: 29:36:e5:7d:ca:3c:e2:d7:dd:70:e6:fa:a0:d5:28: 05:4b:5d:40:f4:28:17:22:44:03:dd:a7:8c:74:4f: 25:ec:22:2c:8f:ae:c6:d3:1e:c5:63:95:fa:c5:77: 62:21:ef:65:9d:ac:6d:8c:e8:55:17:e3:32:7e:e6: db:b7:5e:51:4e:63:8b:a2:3a:9d:65:0e:fc:65:65: 39:79:1b:58:5f:f4:70:3f:7c:9e:4b:0e:39:18:63: ff:c6:fe:06:8c:c6:60:0b:d9:05:7b:93:1a:e4:60: 30:d0:5e:ca:e2:10:96:f4:76:22:62:85:65:93:aa: f7:a1:b3:75:bb:a8:f2:6e:5b:b0:00:15:90:96:b1: f1:8d:4a:8e:de:e3:7d:5c:2a:0e:26:bb:ca:2b:39: eb:f7:dd:90:45:18:95:0b:ff:5e:76:e5:42:81:40: ac:67:83:33:30:63:cb:4e:a9:d5:8c:ed:43:26:dc: 22:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:86:29:5D:4E:80:F6:12:6C:7F:FB:8D:B5:E6:F2:68:16:D3:23:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/bea233f7-8a64-378f-9dc5-2458cdb4223a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 108.175.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:eb:c9:1b:b4:78:d8:f0:80:fc:a3:ef:2f:b2:4d:40:9f:3c: ce:0b:2c:22:05:08:3f:bb:dd:2e:ad:f4:48:d3:c0:7a:74:36: 87:27:ec:41:d3:bd:bc:fa:85:37:4a:29:ad:08:8a:f0:67:08: f5:de:d5:c4:2c:49:ea:e5:f6:31:21:c0:9b:3e:9a:40:f7:f8: 9e:19:7a:89:a6:19:15:36:24:a3:ae:67:1d:b9:3a:b6:bd:2e: ff:a5:5d:27:57:13:bd:cb:28:b7:5a:f7:1f:02:2d:58:93:32: 93:86:9c:f7:4c:4d:49:ad:f1:e7:0d:13:72:fa:54:0c:7c:d3: 8b:4f:40:78:0a:f7:2f:80:18:46:e1:d4:0a:1d:70:d6:a5:35: 5e:4c:7a:8a:b0:24:cb:fd:e8:a5:00:71:94:38:9f:66:19:4d: 8c:61:00:23:20:52:9f:95:11:47:c7:51:55:6c:a8:2c:54:8d: e7:5e:62:51:c9:84:87:b5:c1:95:4e:73:63:8f:64:76:95:23: 32:c6:e7:f6:eb:c7:51:66:f3:9f:98:83:18:a1:9a:9f:22:80: c6:47:e4:9a:3e:0e:bd:5f:ca:bd:11:f8:f9:91:b2:42:54:ff: 8f:4a:a8:37:f6:67:c8:2c:01:58:ab:28:a8:ca:20:e4:73:bc: f3:02:e4:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alBvr0tCr2doLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk OGRmYWU3OTktNGRlMC00NzU5LTkzMTEtOWU2YWU2ZjAzY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl+Sz9Rmw2eelMk7lHyDV/ky36O3+aZPbCbb 3C7K4OzVhnGcEhzrf1GbfT6eAOTkIVpiRuwtZMS01YSmVWX3WDcaTsyzMiyPbmMp NuV9yjzi191w5vqg1SgFS11A9CgXIkQD3aeMdE8l7CIsj67G0x7FY5X6xXdiIe9l naxtjOhVF+Myfubbt15RTmOLojqdZQ78ZWU5eRtYX/RwP3yeSw45GGP/xv4GjMZg C9kFe5Ma5GAw0F7K4hCW9HYiYoVlk6r3obN1u6jybluwABWQlrHxjUqO3uN9XCoO JrvKKznr992QRRiVC/9eduVCgUCsZ4MzMGPLTqnVjO1DJtwi3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmGKV1OgPYSbH/7jbXm8mgW0yO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvYmVhMjMzZjctOGE2NC0z NzhmLTlkYzUtMjQ1OGNkYjQyMjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbK/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzryRu0eNjwgPyj7y+yTUCfPM4LLCIFCD+73S6t9EjTwHp0Nocn7EHT vbz6hTdKKa0IivBnCPXe1cQsSerl9jEhwJs+mkD3+J4ZeommGRU2JKOuZx25Ora9 Lv+lXSdXE73LKLda9x8CLViTMpOGnPdMTUmt8ecNE3L6VAx804tPQHgK9y+AGEbh 1AodcNalNV5MeoqwJMv96KUAcZQ4n2YZTYxhACMgUp+VEUfHUVVsqCxUjedeYlHJ hIe1wZVOc2OPZHaVIzLG5/brx1Fm85+Ygxihmp8igMZH5Jo+Dr1fyr0R+PmRskJU /49KqDf2Z8gsAVirKKjKIORzvPMC5PE= -----END CERTIFICATE-----Generated at Wed Mar 25 15:33:34 2026 by rpki-client