$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/b406d167-2ce2-3fa8-862b-3dcec677300a.roa File: b406d167-2ce2-3fa8-862b-3dcec677300a.roa (raw, json) Hash identifier: c22iz7s4IwJWAuwUctOvyXZ5Vl3P7K/0gjSgmyul8Ek= Subject key identifier: 4D:5C:E3:E1:69:05:F4:34:A6:13:D9:83:33:50:06:81:8F:CB:AF:B2 Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F4328584F119CEEDB8AD0AC9A12C76F00 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/b406d167-2ce2-3fa8-862b-3dcec677300a.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 53828 IP address blocks: 45.61.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:ee:db:8a:d0:ac:9a:12:c7:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=29ae9371-652d-4395-bfe8-5e92b5a50142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2c:f9:f3:04:d6:6e:b3:bf:b7:b7:a2:14:84: b9:d9:e1:6a:ba:8f:b1:9f:0b:d3:52:c5:a5:69:22: dd:b5:78:3a:5e:62:57:63:c2:fe:9d:b8:14:38:51: 6d:9e:ba:76:10:5b:22:25:92:a0:ce:c7:71:82:fe: 00:04:0d:23:c1:e0:e5:aa:96:42:20:8c:9b:6f:c0: 42:39:51:ff:24:67:e6:98:a7:ac:07:86:c2:b2:b5: 1a:d2:58:40:fc:d0:7a:29:7a:ec:4c:1a:9b:86:a7: da:2c:f1:f2:a7:ca:c0:fc:ed:58:f2:82:47:d8:b9: 56:d6:f0:79:87:97:0a:dc:c3:e4:43:df:de:66:c4: e1:93:61:85:ba:81:f5:ab:25:60:d9:9e:db:d1:a9: a4:61:3c:24:33:00:42:a5:41:44:b6:59:77:24:15: b0:ec:fa:f2:0a:4a:5a:4b:18:a9:34:e1:1f:0b:db: 8e:d3:80:39:c2:a8:5c:9e:b4:e1:45:30:36:2c:b0: 37:d8:9c:c0:75:3e:c7:03:d5:5d:03:42:cd:19:e0: 86:db:4d:06:0d:58:08:db:d0:eb:01:8b:e6:29:13: bd:e4:02:17:01:81:59:88:65:d5:6a:8d:ba:c7:d9: e3:db:b7:ee:f3:16:b6:ec:9a:96:c3:65:1a:a1:ae: e2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5C:E3:E1:69:05:F4:34:A6:13:D9:83:33:50:06:81:8F:CB:AF:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/b406d167-2ce2-3fa8-862b-3dcec677300a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 45.61.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:96:80:9a:7e:69:2e:13:ce:7b:fd:21:4c:f3:ba:ea:c6:8c: 37:21:93:66:e1:55:df:c7:7a:41:60:7e:66:55:44:e4:43:0a: 73:1b:73:d0:2f:b6:d7:cb:64:0b:bd:6f:2b:79:ca:20:3e:03: f2:48:b5:45:a5:aa:25:5d:36:75:7e:8c:a6:d4:85:94:70:aa: 9b:44:73:0a:2f:82:34:24:52:d6:08:68:b9:c0:1c:d9:0f:0f: 74:ae:33:0c:82:01:3d:78:db:09:87:04:86:53:1e:6c:75:92: a2:e1:a2:a1:43:9f:9c:d9:5b:cc:b7:64:85:39:d8:a1:16:93: de:16:0f:28:a8:4e:e0:cb:d7:14:c2:46:a3:7c:81:c9:19:1e: 62:f8:2d:76:89:5e:16:f6:e0:24:95:f2:d9:7f:65:af:0a:cd: 1a:2a:33:ef:00:d9:89:93:c9:d1:3e:36:30:b8:9b:85:53:b7: 76:1c:ec:cc:6a:af:a3:ea:01:b5:18:48:b3:09:51:ce:53:fb: 04:03:15:93:ad:5d:df:58:2f:98:d9:a6:0d:c3:b5:4b:5b:12: 3e:dc:55:18:2b:34:89:b2:6f:98:68:1d:8d:79:3c:19:c5:56: 02:9a:b9:f2:63:0c:e4:7b:40:35:a4:86:17:c8:4a:21:be:87: 74:fc:8a:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnO7bitCsmhLHbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MjlhZTkzNzEtNjUyZC00Mzk1LWJmZTgtNWU5MmI1YTUwMTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iz58wTWbrO/t7eiFIS52eFquo+xnwvTUsWl aSLdtXg6XmJXY8L+nbgUOFFtnrp2EFsiJZKgzsdxgv4ABA0jweDlqpZCIIybb8BC OVH/JGfmmKesB4bCsrUa0lhA/NB6KXrsTBqbhqfaLPHyp8rA/O1Y8oJH2LlW1vB5 h5cK3MPkQ9/eZsThk2GFuoH1qyVg2Z7b0amkYTwkMwBCpUFEtll3JBWw7PryCkpa SxipNOEfC9uO04A5wqhcnrThRTA2LLA32JzAdT7HA9VdA0LNGeCG200GDVgI29Dr AYvmKRO95AIXAYFZiGXVao26x9nj27fu8xa27JqWw2Uaoa7i+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1c4+FpBfQ0phPZgzNQBoGPy6+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvYjQwNmQxNjctMmNlMi0z ZmE4LTg2MmItM2RjZWM2NzczMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELT0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyWgJp+aS4Tznv9IUzzuurGjDchk2bhVd/HekFgfmZVRORDCnMbc9Av ttfLZAu9byt5yiA+A/JItUWlqiVdNnV+jKbUhZRwqptEcwovgjQkUtYIaLnAHNkP D3SuMwyCAT142wmHBIZTHmx1kqLhoqFDn5zZW8y3ZIU52KEWk94WDyioTuDL1xTC RqN8gckZHmL4LXaJXhb24CSV8tl/Za8KzRoqM+8A2YmTydE+NjC4m4VTt3Yc7Mxq r6PqAbUYSLMJUc5T+wQDFZOtXd9YL5jZpg3DtUtbEj7cVRgrNImyb5hoHY15PBnF VgKaufJjDOR7QDWkhhfISiG+h3T8ikY= -----END CERTIFICATE-----Generated at Sat Oct 10 22:45:58 2026 by rpki-client