$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e1245ecc-016c-3d87-a13c-64934969ef40.roa File: e1245ecc-016c-3d87-a13c-64934969ef40.roa (raw, json) Hash identifier: BDiYm9m+vwdKBo+erlVMBcvToYy72Ly/+dLJfFakk6c= Subject key identifier: FF:3B:C9:FD:CC:E7:55:D4:AD:CD:3B:99:DD:F0:75:BD:F2:20:48:A7 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D80FFF8092038116FCCFFF240 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e1245ecc-016c-3d87-a13c-64934969ef40.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 212238 IP address blocks: 45.33.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f8:09:20:38:11:6f:cc:ff:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=aabb8dbb-da6e-4b67-9f0e-069d94fbbdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:01:aa:ed:f7:3d:72:46:84:cf:45:41:43: 9e:a5:98:e6:c4:63:55:01:c5:2b:c3:63:3e:ad:57: 47:70:95:64:a1:26:53:68:83:77:87:d6:e4:1e:d9: 58:8e:16:33:ce:07:81:bd:ec:0c:b8:31:49:17:b2: c6:6a:ff:cc:53:3e:5d:d6:b3:ed:45:6a:db:9b:07: 3b:ff:48:4f:23:7f:18:1c:66:33:21:86:e0:6a:fa: 3b:0c:8b:6c:5d:68:41:ab:ce:f1:00:a7:e3:6e:dc: 2b:87:97:ad:61:6e:77:06:69:3d:4c:a4:42:4a:49: 38:44:e1:4f:ec:22:30:e4:cc:2f:fc:af:a1:a2:40: 78:fc:4f:7f:95:d8:e6:d6:3a:df:f7:d6:f2:70:89: 71:1f:cc:fc:7f:f1:9b:1d:38:54:61:f1:ed:21:fa: 9b:f9:05:97:a8:93:94:69:39:e3:35:36:19:1b:e0: 36:67:e3:ae:44:05:7e:87:85:42:0a:e6:75:87:86: 9d:94:40:e6:7a:b9:0f:c1:ed:11:7c:96:95:5b:67: 25:33:4b:b0:9d:5d:40:11:04:62:e7:2c:dc:14:67: ad:13:7a:8d:22:6c:b3:c8:eb:0b:8a:dc:0c:90:2b: cc:de:1a:c6:ff:78:c9:1f:d8:ee:29:4d:4f:11:25: 14:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3B:C9:FD:CC:E7:55:D4:AD:CD:3B:99:DD:F0:75:BD:F2:20:48:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e1245ecc-016c-3d87-a13c-64934969ef40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 45.33.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:e9:c6:d2:db:3c:1b:69:0c:e3:1f:e3:d4:c6:26:41:3b:f7: 94:54:82:d4:69:37:a3:4e:66:3e:65:ba:ad:9d:eb:59:56:5b: f9:b1:22:d1:cd:d0:1e:9d:54:b1:2f:56:63:73:6e:09:a5:43: bb:c7:1c:3b:2e:99:a0:53:d1:de:42:ba:53:19:fb:4a:47:d5: 0c:80:74:f9:3a:5a:11:5d:28:f5:b0:7d:e7:4d:27:07:82:83: 0b:44:8e:ec:5e:1b:5b:2a:a9:d0:24:58:12:92:70:04:81:15: 5d:fd:d3:69:bd:c4:45:1a:8c:34:ea:4b:d8:52:05:68:f6:3e: f6:ad:af:b0:06:be:c4:55:94:1d:f5:e4:f3:f2:83:10:bf:af: 68:c6:79:9d:c2:5e:a6:a7:0e:68:14:c9:62:60:ea:f5:44:85: 35:ab:3c:d3:46:71:bc:fe:9b:91:f0:be:ab:a0:51:f4:b3:b3: c6:45:2f:f9:fc:6f:bf:88:04:19:15:52:ad:44:4e:8c:bd:18: 93:36:cc:83:4e:d1:a9:ff:48:f8:e1:92:75:a6:86:39:63:14: e8:06:96:80:9f:06:17:f2:6a:77:58:a8:3c:a2:47:26:92:aa: cf:a2:2e:64:6d:91:49:35:4d:36:43:97:94:0f:6a:db:58:e5: cd:cc:44:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//gJIDgRb8z/8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk YWFiYjhkYmItZGE2ZS00YjY3LTlmMGUtMDY5ZDk0ZmJiZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIkBqu33PXJGhM9FQUOepZjmxGNVAcUrw2M+ rVdHcJVkoSZTaIN3h9bkHtlYjhYzzgeBvewMuDFJF7LGav/MUz5d1rPtRWrbmwc7 /0hPI38YHGYzIYbgavo7DItsXWhBq87xAKfjbtwrh5etYW53Bmk9TKRCSkk4ROFP 7CIw5Mwv/K+hokB4/E9/ldjm1jrf99bycIlxH8z8f/GbHThUYfHtIfqb+QWXqJOU aTnjNTYZG+A2Z+OuRAV+h4VCCuZ1h4adlEDmerkPwe0RfJaVW2clM0uwnV1AEQRi 5yzcFGetE3qNImyzyOsLitwMkCvM3hrG/3jJH9juKU1PESUUwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP87yf3M51XUrc07md3wdb3yIEinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZTEyNDVlY2MtMDE2Yy0z ZDg3LWExM2MtNjQ5MzQ5NjllZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7pxtLbPBtpDOMf49TGJkE795RUgtRpN6NOZj5luq2d61lWW/mxItHN 0B6dVLEvVmNzbgmlQ7vHHDsumaBT0d5CulMZ+0pH1QyAdPk6WhFdKPWwfedNJweC gwtEjuxeG1sqqdAkWBKScASBFV3902m9xEUajDTqS9hSBWj2Pvatr7AGvsRVlB31 5PPygxC/r2jGeZ3CXqanDmgUyWJg6vVEhTWrPNNGcbz+m5HwvqugUfSzs8ZFL/n8 b7+IBBkVUq1EToy9GJM2zINO0an/SPjhknWmhjljFOgGloCfBhfyandYqDyiRyaS qs+iLmRtkUk1TTZDl5QPattY5c3MRGk= -----END CERTIFICATE-----Generated at Fri Apr 17 13:03:04 2026 by rpki-client