$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/221d322a-480c-3d6d-a072-437baab19169.roa File: 221d322a-480c-3d6d-a072-437baab19169.roa (raw, json) Hash identifier: 10dyZtk5unGcLnmLsluvPvUcQbAC71HYX3qZ6/9rx2g= Subject key identifier: EB:80:B4:38:DF:25:A5:66:D4:F0:96:B7:21:C9:64:0C:94:6D:EC:21 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584EEA874B49C556590DE951D500 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/221d322a-480c-3d6d-a072-437baab19169.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 27395 IP address blocks: 45.45.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:4b:49:c5:56:59:0d:e9:51:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=016da439-eeae-4f74-8ba7-eb9f6a1f6329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:49:ff:21:5d:d7:77:92:01:7e:05:9f:84:b5: 26:88:bc:28:ab:ee:5f:0f:55:f3:58:7d:f7:9d:23: af:06:af:46:98:9e:09:e3:ff:97:cf:07:37:fb:21: 8f:2c:8c:9f:9e:d9:1e:ec:63:84:31:93:f6:68:7e: a4:33:f3:79:bf:73:c9:91:71:b2:71:1e:ef:99:9f: 53:63:fb:7a:04:6f:53:3e:45:04:ba:c7:1f:1f:2b: e8:81:63:ca:66:bd:c5:ff:21:37:9c:a7:2d:14:4f: c9:8e:63:a2:da:ac:9f:40:b7:09:02:5f:79:ce:7f: 49:88:6b:fd:f2:a5:b7:1a:95:c2:25:97:65:30:7f: ab:c8:6d:f7:86:ab:07:64:01:97:c8:06:34:90:03: f4:8a:7e:55:a1:b3:6c:10:97:25:64:22:f3:92:4d: 4a:dd:1f:49:d7:c5:47:89:3c:80:49:5a:50:70:8c: fb:26:df:d3:2e:bd:4c:03:a2:de:06:02:c9:42:7e: e3:9d:38:a9:5e:69:17:5c:e4:99:93:bf:33:86:d2: 5c:a2:c4:55:f5:7f:6d:cc:20:02:39:39:57:f9:0d: 31:39:8b:e3:e1:fd:b7:d7:cf:4d:5b:a7:20:85:b4: 32:33:c0:0d:55:ca:31:cc:11:a8:0e:fd:3e:33:5a: 1e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:80:B4:38:DF:25:A5:66:D4:F0:96:B7:21:C9:64:0C:94:6D:EC:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/221d322a-480c-3d6d-a072-437baab19169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 45.45.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:18:4f:7a:69:0f:16:53:8a:b1:9a:ca:a0:dd:a7:cb:e8:49: 3e:b2:dd:8e:8d:5c:54:31:9b:34:50:73:65:33:a1:0b:7d:fc: 93:79:18:bc:6e:1d:b6:f9:bf:10:b4:2d:62:32:c3:b5:34:97: d3:ff:ca:de:b8:6a:2e:49:d3:4d:7e:e0:08:97:1d:d5:10:af: fb:70:ec:9f:af:0c:b0:df:1d:5d:ed:32:fc:bd:e8:3f:85:85: e9:a8:98:06:8d:d6:87:f7:d5:bd:9b:59:0b:ff:29:e3:1a:f2: 19:8e:e1:e6:8c:a2:84:d2:c1:07:c9:5f:ef:3b:19:f6:d9:72: ac:ed:18:15:11:d1:59:12:0f:95:30:7a:ca:66:29:43:07:4e: 59:f9:d4:fa:cc:2c:cd:67:d3:65:66:26:79:39:25:00:74:97: 4f:04:3c:25:62:9d:ea:79:ce:c5:41:d5:61:e3:cd:f7:f8:43: 1a:7f:ca:e4:e2:0a:ef:51:f1:fe:28:56:bd:3c:62:e6:b6:ab: 09:a5:61:4c:51:07:0d:be:e8:b6:d7:b8:2b:24:4a:fd:35:e8: 5a:a4:95:42:7e:68:53:06:d9:26:f8:95:51:df:6f:d4:83:0f: a4:2c:75:3b:82:65:50:b2:13:78:6e:b6:12:99:00:aa:a7:d1: 2f:bf:27:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh0tJxVZZDelR1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MDE2ZGE0MzktZWVhZS00Zjc0LThiYTctZWI5ZjZhMWY2MzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0n/IV3Xd5IBfgWfhLUmiLwoq+5fD1XzWH33 nSOvBq9GmJ4J4/+Xzwc3+yGPLIyfntke7GOEMZP2aH6kM/N5v3PJkXGycR7vmZ9T Y/t6BG9TPkUEuscfHyvogWPKZr3F/yE3nKctFE/JjmOi2qyfQLcJAl95zn9JiGv9 8qW3GpXCJZdlMH+ryG33hqsHZAGXyAY0kAP0in5VobNsEJclZCLzkk1K3R9J18VH iTyASVpQcIz7Jt/TLr1MA6LeBgLJQn7jnTipXmkXXOSZk78zhtJcosRV9X9tzCAC OTlX+Q0xOYvj4f23189NW6cghbQyM8ANVcoxzBGoDv0+M1oe9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuAtDjfJaVm1PCWtyHJZAyUbewhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvMjIxZDMyMmEtNDgwYy0z ZDZkLWEwNzItNDM3YmFhYjE5MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYYT3ppDxZTirGayqDdp8voST6y3Y6NXFQxmzRQc2UzoQt9/JN5GLxu Hbb5vxC0LWIyw7U0l9P/yt64ai5J001+4AiXHdUQr/tw7J+vDLDfHV3tMvy96D+F hemomAaN1of31b2bWQv/KeMa8hmO4eaMooTSwQfJX+87GfbZcqztGBUR0VkSD5Uw espmKUMHTln51PrMLM1n02VmJnk5JQB0l08EPCVinep5zsVB1WHjzff4Qxp/yuTi Cu9R8f4oVr08Yua2qwmlYUxRBw2+6LbXuCskSv016FqklUJ+aFMG2Sb4lVHfb9SD D6QsdTuCZVCyE3huthKZAKqn0S+/J10= -----END CERTIFICATE-----Generated at Tue Sep 22 17:39:11 2026 by rpki-client