$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/c3d0bea2-c0f3-30e9-b3bf-5c5d0d02c867.roa File: c3d0bea2-c0f3-30e9-b3bf-5c5d0d02c867.roa (raw, json) Hash identifier: ulB9mJtcfmvAPRl49+QuSS1MBSxK9SEtBvJhXv9bE10= Subject key identifier: 57:34:18:F6:28:48:A5:DE:70:75:A8:6D:ED:57:87:49:60:FA:DE:91 Certificate issuer: /CN=ac5a7f9f-da2b-4121-b0ab-afc083ef9928 Certificate serial: 010D0C9F4328584F63F808991180A994164F8A80 Authority key identifier: A7:B1:F7:12:06:D7:BA:B6:7A:3C:23:2D:F7:6B:0E:B3:86:98:40:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/c3d0bea2-c0f3-30e9-b3bf-5c5d0d02c867.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 394177 IP address blocks: 45.45.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:08:99:11:80:a9:94:16:4f:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac5a7f9f-da2b-4121-b0ab-afc083ef9928 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=ea28a821-2ec9-436c-bcab-30a51f2fb7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9a:03:2b:be:78:1c:75:f0:12:82:b2:b2:af: a5:8c:08:fd:52:3b:13:cd:a1:86:bc:17:7e:1a:ec: 8f:5a:de:e3:15:1d:be:48:4b:79:0e:6e:23:e3:82: 66:76:71:9d:8a:24:3e:bd:da:63:58:76:79:29:ca: 37:d4:a2:0b:d5:7f:32:de:58:33:05:bc:b2:e7:f6: 8f:f8:5e:01:c1:13:d6:da:51:27:e0:82:86:30:65: 8a:cb:ff:20:b3:23:5e:29:f9:c2:c0:ad:46:ce:ed: cd:13:e5:77:46:c7:16:35:73:17:dc:84:da:ee:8d: 57:db:36:65:4a:ed:21:c8:b4:2b:7a:3c:98:95:cb: 0c:f1:bb:59:ae:0a:77:e1:6d:a3:df:e2:1d:81:a8: 55:c0:fb:69:a9:dd:b9:b2:1b:e9:96:90:c2:c2:0f: f6:3b:2a:63:e7:b1:c5:f1:41:5f:c8:01:99:eb:a1: c5:cb:d9:01:46:d3:41:23:14:00:55:be:c9:93:f3: 77:72:50:4c:7f:ab:39:67:59:1e:06:b4:46:b3:43: 15:7d:c2:09:33:b5:21:a9:78:39:0b:9d:14:5c:3e: 42:70:11:09:7d:9c:18:a0:b2:77:f0:46:07:67:c2: 29:4a:a8:29:2a:ab:a8:e4:2a:a0:dd:bc:f5:0d:46: a4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:34:18:F6:28:48:A5:DE:70:75:A8:6D:ED:57:87:49:60:FA:DE:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/c3d0bea2-c0f3-30e9-b3bf-5c5d0d02c867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.crl X509v3 Authority Key Identifier: keyid:A7:B1:F7:12:06:D7:BA:B6:7A:3C:23:2D:F7:6B:0E:B3:86:98:40:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.cer sbgp-ipAddrBlock: critical IPv4: 45.45.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:18:30:04:56:ba:a7:52:d8:b7:fb:92:07:69:a6:cf:67:73: 30:4d:92:85:b2:be:d5:7c:92:41:62:11:e6:c4:e7:78:4e:56: be:b3:0b:16:5a:36:c6:2d:a4:30:40:88:f3:10:1d:ed:5a:6a: 34:87:31:04:84:af:7a:58:4f:ea:d9:fc:4c:07:73:22:b4:52: c1:cd:8d:db:84:d2:23:26:31:50:4a:b1:00:57:35:7f:16:a5: 07:83:90:ec:2d:ec:ab:ca:5e:7b:a4:54:68:98:9e:c5:1b:3b: 36:c0:24:83:da:c1:03:a9:76:d9:9f:6c:d3:fc:b7:de:91:20: 2a:ba:ba:9f:c1:e3:63:e7:7a:02:0d:ff:1a:c2:ae:d2:7c:57: ea:41:81:c5:d8:bb:1c:5f:d9:17:6c:4a:36:33:0b:5a:ea:2c: 0d:b0:f0:77:8e:3c:83:12:7c:34:08:49:04:c0:f3:f5:50:8c: af:b0:f4:ef:c9:e8:55:ee:bc:d6:c9:28:10:99:20:89:30:17: 0d:6c:98:ad:9a:53:68:32:0e:2d:3c:14:fc:17:3b:62:8c:6d: e1:e0:3f:a6:95:14:46:32:e1:b8:25:c0:13:97:1c:61:1d:b1: bc:30:75:2d:8e:eb:de:39:44:79:64:3c:47:69:e5:f8:84:29: 62:5b:bd:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+AiZEYCplBZPioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM1YTdmOWYtZGEyYi00MTIxLWIwYWItYWZjMDgzZWY5 OTI4MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZWEyOGE4MjEtMmVjOS00MzZjLWJjYWItMzBhNTFmMmZiN2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJoDK754HHXwEoKysq+ljAj9UjsTzaGGvBd+ GuyPWt7jFR2+SEt5Dm4j44JmdnGdiiQ+vdpjWHZ5Kco31KIL1X8y3lgzBbyy5/aP +F4BwRPW2lEn4IKGMGWKy/8gsyNeKfnCwK1Gzu3NE+V3RscWNXMX3ITa7o1X2zZl Su0hyLQrejyYlcsM8btZrgp34W2j3+IdgahVwPtpqd25shvplpDCwg/2Oypj57HF 8UFfyAGZ66HFy9kBRtNBIxQAVb7Jk/N3clBMf6s5Z1keBrRGs0MVfcIJM7UhqXg5 C50UXD5CcBEJfZwYoLJ38EYHZ8IpSqgpKquo5Cqg3bz1DUaktQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFc0GPYoSKXecHWobe1Xh0lg+t6RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzVh N2Y5Zi1kYTJiLTQxMjEtYjBhYi1hZmMwODNlZjk5MjgvYzNkMGJlYTItYzBmMy0z MGU5LWIzYmYtNWM1ZDBkMDJjODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM1YTdmOWYtZGEyYi00MTIxLWIw YWItYWZjMDgzZWY5OTI4L2FjNWE3ZjlmLWRhMmItNDEyMS1iMGFiLWFmYzA4M2Vm OTkyOC5jcmwwHwYDVR0jBBgwFoAUp7H3EgbXurZ6PCMt92sOs4aYQMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzVhN2Y5Zi1kYTJiLTQxMjEtYjBhYi1hZmMw ODNlZjk5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS3DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUYMARWuqdS2Lf7kgdpps9nczBNkoWyvtV8kkFiEebE53hOVr6zCxZa NsYtpDBAiPMQHe1aajSHMQSEr3pYT+rZ/EwHcyK0UsHNjduE0iMmMVBKsQBXNX8W pQeDkOwt7KvKXnukVGiYnsUbOzbAJIPawQOpdtmfbNP8t96RICq6up/B42PnegIN /xrCrtJ8V+pBgcXYuxxf2RdsSjYzC1rqLA2w8HeOPIMSfDQISQTA8/VQjK+w9O/J 6FXuvNbJKBCZIIkwFw1smK2aU2gyDi08FPwXO2KMbeHgP6aVFEYy4bglwBOXHGEd sbwwdS2O6945RHlkPEdp5fiEKWJbvb8= -----END CERTIFICATE-----Generated at Thu Nov 5 04:25:25 2026 by rpki-client