$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/04ba894d-7ab9-3666-854a-e12c6c64b133.roa File: 04ba894d-7ab9-3666-854a-e12c6c64b133.roa (raw, json) Hash identifier: wNk5cg2Ax0EM/2mYfoN8sO1jKGlIQEAG2ZzEZ7chSVE= Subject key identifier: 2C:95:31:65:F6:78:52:87:0C:60:52:28:BC:DB:7B:5D:31:7C:87:78 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584F46A7DAFDE0B6E2325B203280 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/04ba894d-7ab9-3666-854a-e12c6c64b133.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 397373 IP address blocks: 45.33.144.0/24 maxlen: 24 45.33.145.0/24 maxlen: 24 45.33.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:da:fd:e0:b6:e2:32:5b:20:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=cd32b5ac-0218-4285-a52b-5297229644c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a3:e5:aa:9d:18:fb:9a:a1:63:b8:e6:0d:3b: e6:74:11:7d:52:b7:20:ed:4f:e4:52:58:6f:42:17: 17:d3:ab:05:cd:75:5e:3d:b5:e3:13:d6:1a:05:37: 45:c2:a9:63:fc:b9:09:04:18:65:71:db:14:f9:44: 9e:69:29:c7:ec:71:19:62:1a:73:e0:0e:20:1a:76: 11:9a:0c:84:50:cb:3f:e2:b7:3a:0f:de:ac:3d:25: a2:81:a9:2d:07:ce:b3:cd:ee:a1:fd:ff:c2:3b:f9: 69:05:17:59:6a:11:2d:34:b3:9c:9f:5c:ab:a1:f2: f5:72:19:2c:48:17:f4:a0:41:2f:8f:aa:f5:a6:d0: 7f:7e:0c:8b:c9:0b:29:73:97:6a:f4:66:59:af:3e: 55:f6:cd:c4:5b:70:c9:c7:21:b8:9f:f0:64:d0:12: 20:6e:4b:e5:6d:71:78:50:46:49:41:29:16:dd:50: 71:08:87:65:4d:a5:27:7b:22:3f:2d:a6:3d:07:bb: 85:82:bd:56:c3:33:c4:f1:4c:4e:50:49:d0:6e:8b: 28:ea:7a:97:5e:8d:89:de:8f:73:39:ed:a4:8f:c4: 05:b6:8d:32:da:69:8e:25:69:0b:d0:04:d9:1e:01: f1:10:27:aa:5a:5d:5f:02:d2:5d:29:ea:cc:cc:42: d0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:95:31:65:F6:78:52:87:0C:60:52:28:BC:DB:7B:5D:31:7C:87:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/04ba894d-7ab9-3666-854a-e12c6c64b133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 45.33.144.0/23 45.33.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:fb:c6:f0:7e:59:f1:8b:3d:b8:d7:b8:44:a6:a1:76:ea:0c: 41:77:2f:c3:15:58:97:11:64:eb:58:64:ef:59:d4:5e:81:37: 62:c2:8e:41:cc:55:a3:86:eb:54:65:44:9f:56:20:fa:28:56: 95:43:bb:79:7b:25:95:04:70:14:b2:f3:44:34:06:f8:59:91: 0a:cc:a9:33:0a:92:35:8e:60:44:78:fe:a5:86:14:67:24:4c: 9f:9a:37:74:73:ab:85:57:d2:c3:f8:b7:e4:5d:e3:62:7b:8b: 6f:97:26:24:d4:a8:2d:a2:c2:ee:99:9c:b5:04:93:1d:62:1c: 71:6c:80:cc:7b:8b:17:4a:55:71:2a:a3:36:af:dd:44:bb:c2: 3f:6c:3e:c6:73:ed:26:5a:32:5e:bf:aa:10:ac:50:8f:d5:18: 00:c2:6a:90:11:b8:62:7b:71:32:c5:a5:97:b9:0b:3c:5b:4e: 16:39:2e:9f:cd:77:cc:c2:3f:10:08:08:cc:98:c1:e8:ed:79: b9:9d:e6:fc:6d:47:da:cd:a4:65:a6:98:6d:b1:80:fe:96:3c: 6a:39:48:6a:80:30:02:7f:07:9f:74:39:28:2e:75:44:bb:80: 1c:9d:3f:ab:09:de:71:b2:d9:2f:76:4a:32:f2:44:5c:60:7f: 18:91:28:60 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Gp9r94LbiMlsgMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk Y2QzMmI1YWMtMDIxOC00Mjg1LWE1MmItNTI5NzIyOTY0NGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaPlqp0Y+5qhY7jmDTvmdBF9Urcg7U/kUlhv QhcX06sFzXVePbXjE9YaBTdFwqlj/LkJBBhlcdsU+USeaSnH7HEZYhpz4A4gGnYR mgyEUMs/4rc6D96sPSWigaktB86zze6h/f/CO/lpBRdZahEtNLOcn1yrofL1chks SBf0oEEvj6r1ptB/fgyLyQspc5dq9GZZrz5V9s3EW3DJxyG4n/Bk0BIgbkvlbXF4 UEZJQSkW3VBxCIdlTaUneyI/LaY9B7uFgr1WwzPE8UxOUEnQboso6nqXXo2J3o9z Oe2kj8QFto0y2mmOJWkL0ATZHgHxECeqWl1fAtJdKerMzELQEQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCyVMWX2eFKHDGBSKLzbe10xfId4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMDRiYTg5NGQtN2FiOS0z NjY2LTg1NGEtZTEyYzZjNjRiMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLSGQAwQA LSGcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABT7xvB+WfGLPbjXuESmoXbqDEF3L8MVWJcRZOtYZO9Z1F6B N2LCjkHMVaOG61RlRJ9WIPooVpVDu3l7JZUEcBSy80Q0BvhZkQrMqTMKkjWOYER4 /qWGFGckTJ+aN3Rzq4VX0sP4t+Rd42J7i2+XJiTUqC2iwu6ZnLUEkx1iHHFsgMx7 ixdKVXEqozav3US7wj9sPsZz7SZaMl6/qhCsUI/VGADCapARuGJ7cTLFpZe5Czxb ThY5Lp/Nd8zCPxAICMyYwejtebmd5vxtR9rNpGWmmG2xgP6WPGo5SGqAMAJ/B590 OSgudUS7gBydP6sJ3nGy2S92SjLyRFxgfxiRKGA= -----END CERTIFICATE-----Generated at Thu Sep 24 07:21:49 2026 by rpki-client