$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/f9a44f0e-35ca-3a7b-b848-b030707c3804.roa File: f9a44f0e-35ca-3a7b-b848-b030707c3804.roa (raw, json) Hash identifier: KmeXZgLTXjJP9kTPFRzSf2B5rYEM2CLXXfZtgeOjZx8= Subject key identifier: A8:A8:AC:C5:7E:61:0A:43:C4:00:6A:D3:E8:52:5F:81:07:29:DE:54 Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584D386A50DB96C207689CA8C580 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/f9a44f0e-35ca-3a7b-b848-b030707c3804.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 5645 IP address blocks: 192.171.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:50:db:96:c2:07:68:9c:a8:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=43352d48-d5fd-4aae-b458-2bce26c37809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6a:45:02:f3:da:84:28:cc:ee:70:f3:a6:3a: 25:32:75:dc:e0:00:c6:eb:76:c2:cf:c2:11:c8:d7: 92:b1:d3:6b:bc:73:5a:1c:2b:55:f9:23:83:d7:80: 2d:49:d8:cb:f3:e3:91:01:16:eb:13:8e:2e:23:03: 73:2a:ac:26:21:10:6b:06:91:d0:16:61:ae:98:34: 6e:ab:66:d4:e3:a0:31:96:ef:b2:ce:98:be:38:86: e4:21:6b:1f:dd:05:64:da:c5:31:b1:4b:1d:5d:af: 21:a2:fe:39:10:41:0b:fb:fd:1d:eb:d7:a2:ee:ab: 22:d6:d3:73:84:41:94:25:e3:76:f9:f5:ee:93:ec: 1b:61:77:72:7d:af:49:f7:07:a4:ca:5a:f4:c0:e1: e3:3c:8c:4d:ca:fc:5b:84:5b:c2:ff:d7:6c:17:17: 74:ab:37:c6:6c:22:c1:84:76:31:8d:45:96:bc:77: 18:19:1a:3f:ad:9b:64:40:ab:7c:03:fa:83:a6:85: 77:b7:ae:a1:54:1b:db:59:8e:8e:a9:8c:e1:8b:4c: fb:ee:36:e6:ee:7e:19:84:d9:ae:50:05:9f:4e:cf: 82:32:d6:2f:da:ed:0f:74:f2:3a:09:76:fe:9f:c3: 01:1e:8c:df:af:b1:55:65:96:57:af:9f:45:a9:c4: 54:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A8:AC:C5:7E:61:0A:43:C4:00:6A:D3:E8:52:5F:81:07:29:DE:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/f9a44f0e-35ca-3a7b-b848-b030707c3804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 192.171.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a0:17:14:3d:d9:79:a6:43:98:b3:cb:26:5f:7d:80:a8:95: 8f:58:b5:2b:7c:dc:dd:51:8f:1b:58:14:b2:7f:31:c2:fa:74: b2:df:51:81:89:98:7f:d7:7d:3f:90:33:b0:0c:2c:0f:e0:e6: 3c:e7:90:15:78:06:db:d5:5f:e5:70:d7:ed:4e:bd:18:81:04: 63:ce:9c:13:22:fd:88:0d:9d:45:9f:39:ca:1a:05:62:dd:32: aa:fc:f1:e4:94:d3:a1:95:bc:8f:e9:77:3c:32:db:55:33:51: dc:4f:93:99:cd:fe:14:9b:af:18:75:a0:78:b3:92:62:32:9c: 1f:05:41:ce:0b:de:c2:b1:16:54:70:59:a4:d1:cc:39:59:2c: d3:c4:4d:d6:0d:14:52:0b:7d:ab:a1:db:57:5e:b0:6e:c4:f0: 25:6b:f9:9e:e8:ed:ef:3b:19:90:b2:cc:0a:5d:36:ba:dc:83: 86:57:ff:26:a5:a6:52:ff:49:67:88:ac:4d:0a:b5:e3:4f:f1: d3:0c:f4:33:91:67:52:e9:a7:82:7f:ca:f5:ca:50:56:5a:cb: 32:c8:80:74:29:43:69:ed:41:0c:41:0b:a8:fb:ac:d2:e9:c7: bd:34:4a:39:68:f9:5c:bb:ea:0b:02:ab:2e:c7:fa:3d:cf:71: 94:e4:17:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alDblsIHaJyoxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NDMzNTJkNDgtZDVmZC00YWFlLWI0NTgtMmJjZTI2YzM3ODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWpFAvPahCjM7nDzpjolMnXc4ADG63bCz8IR yNeSsdNrvHNaHCtV+SOD14AtSdjL8+ORARbrE44uIwNzKqwmIRBrBpHQFmGumDRu q2bU46Axlu+yzpi+OIbkIWsf3QVk2sUxsUsdXa8hov45EEEL+/0d69ei7qsi1tNz hEGUJeN2+fXuk+wbYXdyfa9J9wekylr0wOHjPIxNyvxbhFvC/9dsFxd0qzfGbCLB hHYxjUWWvHcYGRo/rZtkQKt8A/qDpoV3t66hVBvbWY6OqYzhi0z77jbm7n4ZhNmu UAWfTs+CMtYv2u0PdPI6CXb+n8MBHozfr7FVZZZXr59FqcRUdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiorMV+YQpDxABq0+hSX4EHKd5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvZjlhNDRmMGUtMzVjYS0z YTdiLWI4NDgtYjAzMDcwN2MzODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwKsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGgFxQ92XmmQ5izyyZffYColY9YtSt83N1RjxtYFLJ/McL6dLLfUYGJ mH/XfT+QM7AMLA/g5jznkBV4BtvVX+Vw1+1OvRiBBGPOnBMi/YgNnUWfOcoaBWLd Mqr88eSU06GVvI/pdzwy21UzUdxPk5nN/hSbrxh1oHizkmIynB8FQc4L3sKxFlRw WaTRzDlZLNPETdYNFFILfauh21desG7E8CVr+Z7o7e87GZCyzApdNrrcg4ZX/yal plL/SWeIrE0KteNP8dMM9DORZ1Lpp4J/yvXKUFZayzLIgHQpQ2ntQQxBC6j7rNLp x700Sjlo+Vy76gsCqy7H+j3PcZTkFwQ= -----END CERTIFICATE-----Generated at Wed Mar 25 15:34:20 2026 by rpki-client