$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/bf01d3af-b9c6-3be3-9dc7-52c3221ae329.roa File: bf01d3af-b9c6-3be3-9dc7-52c3221ae329.roa (raw, json) Hash identifier: fFNmTSI3c7DhjbGZrtTrwNhR8Zx9WTgobwd7FXZH2z8= Subject key identifier: CB:2A:1D:F3:C2:16:9B:BC:0D:AA:4B:DD:81:43:26:28:39:4D:A5:9F Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584F3E47EDE37021619572AE3B80 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/bf01d3af-b9c6-3be3-9dc7-52c3221ae329.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 22652 IP address blocks: 45.61.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:ed:e3:70:21:61:95:72:ae:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=5fae93e8-98b1-46d5-8dea-c93e222c6c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:12:ff:b7:f7:28:b2:72:11:17:7f:ce:7e: 63:f7:4f:e7:37:fb:ab:ac:9d:b4:3b:09:81:f3:f0: d2:eb:bd:ca:c2:f7:c0:2b:12:85:bc:0d:e2:67:70: 3c:63:11:e1:30:eb:bb:34:10:90:20:c7:19:38:76: 03:e4:bd:79:aa:28:b8:95:73:82:a2:95:2e:22:9c: 5a:8e:55:eb:1f:fe:3d:ac:be:03:fd:76:14:af:2f: 28:9d:b4:76:2a:4f:81:fc:b1:19:0a:e8:16:83:81: 22:f2:0e:fa:37:cc:07:62:80:5c:63:7d:c9:f6:c4: 44:37:68:24:e5:ee:00:30:a9:9f:d0:3f:dd:cf:9b: 73:1a:c5:a5:10:b3:0b:b3:dd:42:79:d6:a7:6e:58: fd:da:bb:45:5b:8f:31:14:30:86:66:ba:fc:b8:74: 04:03:7f:d7:a6:9c:12:4d:d3:62:ba:3b:9c:47:a8: 79:1d:4d:1a:d8:96:a0:e4:3b:39:b0:61:9f:95:bb: 32:ac:73:cd:78:c7:5e:47:d8:11:08:ef:20:f2:41: e1:08:74:71:f8:f2:65:0a:48:fc:ca:18:cc:e6:c6: cd:b0:7e:bc:b1:23:13:d4:42:38:0a:65:14:c0:f1: 48:9a:bb:1e:60:93:48:db:f3:7e:d4:50:aa:40:a0: 7e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2A:1D:F3:C2:16:9B:BC:0D:AA:4B:DD:81:43:26:28:39:4D:A5:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/bf01d3af-b9c6-3be3-9dc7-52c3221ae329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 45.61.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:df:5e:24:fa:6d:18:4f:79:2d:02:9c:4c:b2:44:3d:ec:5b: a0:80:da:ad:ad:94:08:5d:d7:dd:74:4e:bd:48:a7:df:8f:b7: c0:c2:79:13:61:e0:6a:f2:ba:b7:86:b4:63:6f:49:cf:f9:ba: e6:f8:85:10:c5:e1:d6:32:05:6e:42:22:3b:a3:56:fd:e0:2f: e0:6a:7a:b5:bc:58:dd:00:1c:39:f1:4e:0b:1b:96:a0:6e:20: 17:04:9d:28:d2:dd:a9:42:4e:57:d3:ba:c5:7e:9d:48:00:e8: d1:aa:c9:ed:7e:e8:61:b6:b4:09:99:e4:c4:a6:9d:01:98:0e: 22:5c:ef:9c:85:81:09:c1:a4:fb:48:49:e8:21:c5:0b:b4:8d: 1d:6f:2d:6a:65:a3:15:c8:a3:35:79:c9:2d:6c:5b:64:52:21: e2:d5:a6:6a:c7:e2:ba:f1:df:cd:00:a3:ef:bf:0d:77:dc:21: e8:7a:88:cb:2e:d9:64:0c:1a:ca:f6:b4:2d:03:19:37:f0:e9: 68:8a:37:29:e4:68:91:d5:2d:a4:1b:45:07:71:70:7b:87:9f: 5c:62:02:24:0c:92:43:45:26:94:b3:bf:8b:cc:17:51:4d:de: 76:bf:2f:51:18:33:01:ac:4a:fc:4f:02:43:9f:a7:32:a4:09: c4:a5:43:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+3jcCFhlXKuO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NWZhZTkzZTgtOThiMS00NmQ1LThkZWEtYzkzZTIyMmM2YzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQAS/7f3KLJyERd/zn5j90/nN/urrJ20OwmB 8/DS673KwvfAKxKFvA3iZ3A8YxHhMOu7NBCQIMcZOHYD5L15qii4lXOCopUuIpxa jlXrH/49rL4D/XYUry8onbR2Kk+B/LEZCugWg4Ei8g76N8wHYoBcY33J9sREN2gk 5e4AMKmf0D/dz5tzGsWlELMLs91Cedanblj92rtFW48xFDCGZrr8uHQEA3/XppwS TdNiujucR6h5HU0a2Jag5Ds5sGGflbsyrHPNeMdeR9gRCO8g8kHhCHRx+PJlCkj8 yhjM5sbNsH68sSMT1EI4CmUUwPFImrseYJNI2/N+1FCqQKB+1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsqHfPCFpu8DapL3YFDJig5TaWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYmYwMWQzYWYtYjljNi0z YmUzLTlkYzctNTJjMzIyMWFlMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT0NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/fXiT6bRhPeS0CnEyyRD3sW6CA2q2tlAhd1910Tr1Ip9+Pt8DCeRNh 4GryureGtGNvSc/5uub4hRDF4dYyBW5CIjujVv3gL+BqerW8WN0AHDnxTgsblqBu IBcEnSjS3alCTlfTusV+nUgA6NGqye1+6GG2tAmZ5MSmnQGYDiJc75yFgQnBpPtI SeghxQu0jR1vLWploxXIozV5yS1sW2RSIeLVpmrH4rrx380Ao++/DXfcIeh6iMsu 2WQMGsr2tC0DGTfw6WiKNynkaJHVLaQbRQdxcHuHn1xiAiQMkkNFJpSzv4vMF1FN 3na/L1EYMwGsSvxPAkOfpzKkCcSlQwg= -----END CERTIFICATE-----Generated at Wed Sep 23 01:35:58 2026 by rpki-client