$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/f9874a22-9a02-398f-86a6-217e95468149.roa File: f9874a22-9a02-398f-86a6-217e95468149.roa (raw, json) Hash identifier: HVw++O0a5seJWru4qsALKd+PfYahqGv8+2ZB1Rei2WA= Subject key identifier: D9:04:C7:67:EF:BD:7F:57:B2:8D:C6:C9:E6:5D:11:17:2A:92:BB:D5 Certificate issuer: /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Certificate serial: 010D0C9F4328584EF9E2138DDD9D833DBEF0BF80 Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/f9874a22-9a02-398f-86a6-217e95468149.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 1011 IP address blocks: 45.45.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:13:8d:dd:9d:83:3d:be:f0:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=fb0c75ce-fb09-463f-9164-0285e046b4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d7:3b:59:7a:1f:43:bb:9f:82:65:cf:b8:63: 65:f5:12:db:d3:08:77:e7:a7:3a:9c:94:a4:5e:68: e0:7d:fc:fa:ea:a9:c3:2f:86:d9:92:55:52:eb:11: d0:6b:e6:9c:b2:20:cb:16:47:ee:77:be:30:1e:c0: 85:b2:fa:b0:9c:b2:3c:71:57:fa:9d:b8:8e:84:de: 0d:3a:f6:e3:5a:0f:e1:4d:53:a8:65:61:61:91:13: ef:4f:b9:c4:40:52:01:e7:e5:81:21:1f:50:5c:5d: 24:08:83:71:5a:e3:0f:e9:80:0f:99:8b:d5:5b:d5: e5:50:af:e3:13:ee:52:18:ee:93:50:10:3a:15:99: 41:6a:34:7c:fb:ee:0c:c5:ef:8a:23:68:3c:38:a8: 18:f9:47:e3:13:79:52:80:a1:58:25:56:47:3d:70: 8f:88:32:a6:98:9e:63:ef:b6:10:1b:56:d0:45:7a: 7a:9b:7d:e1:36:3e:cf:c9:01:32:ec:a7:0f:71:21: 47:48:8d:67:85:9e:e3:94:26:68:80:07:a6:dd:03: 87:95:3a:d1:bc:fd:ba:a0:7f:5e:8d:86:e7:2f:77: c7:ee:5c:91:03:54:ef:17:73:bb:b5:ce:85:92:04: 1a:01:04:37:4b:38:92:33:ce:1a:3b:f1:8d:f2:1f: 96:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:04:C7:67:EF:BD:7F:57:B2:8D:C6:C9:E6:5D:11:17:2A:92:BB:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/f9874a22-9a02-398f-86a6-217e95468149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl X509v3 Authority Key Identifier: keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer sbgp-ipAddrBlock: critical IPv4: 45.45.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e4:ee:98:11:bf:70:49:7e:ed:e0:f3:f5:77:cc:22:a0:23: e2:8f:55:0c:67:42:75:34:3d:d2:e1:82:57:f5:1b:18:73:88: ad:e1:2c:ec:25:ad:6a:d0:24:ac:51:63:cd:c3:6f:a2:ff:57: a1:18:62:3b:22:49:40:98:09:27:d8:7b:07:99:bb:b3:66:51: c0:62:a6:bd:d2:8c:21:40:b8:b3:75:b6:77:0c:07:d4:04:91: 52:1d:59:df:dc:3d:6d:dc:c3:ee:2e:85:a2:fc:71:a9:2e:7c: 02:c7:2d:19:95:75:40:1d:b6:ca:b5:de:73:0e:48:2d:02:9e: 69:3c:34:4c:a8:d6:fe:82:79:b1:46:f5:38:d4:df:8a:b8:4c: 7a:4c:32:fe:f0:17:f4:ba:15:69:25:81:c3:0a:74:73:49:5a: 43:c4:0a:f4:32:7e:10:56:8c:fd:85:eb:7a:d5:c0:ff:ee:f2: 8a:b7:a7:84:88:3e:6c:74:0f:02:1a:1e:fa:62:07:91:9b:13: 47:b6:31:5a:7d:d8:9f:ba:92:4d:fa:e8:6b:4a:49:e2:56:aa: d5:32:ac:6c:73:c5:34:a7:7f:47:38:93:7d:c6:a9:86:26:a6: 59:15:5f:7a:3f:a0:a8:40:8f:50:bc:d1:a6:ec:a3:9c:f6:32: 83:c6:ff:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754hON3Z2DPb7wv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YmM1YzMtOWVmNC00ZGEzLTlmY2YtNGVjNmRhYmJm YmMzMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk ZmIwYzc1Y2UtZmIwOS00NjNmLTkxNjQtMDI4NWUwNDZiNGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9c7WXofQ7ufgmXPuGNl9RLb0wh356c6nJSk Xmjgffz66qnDL4bZklVS6xHQa+acsiDLFkfud74wHsCFsvqwnLI8cVf6nbiOhN4N OvbjWg/hTVOoZWFhkRPvT7nEQFIB5+WBIR9QXF0kCINxWuMP6YAPmYvVW9XlUK/j E+5SGO6TUBA6FZlBajR8++4Mxe+KI2g8OKgY+UfjE3lSgKFYJVZHPXCPiDKmmJ5j 77YQG1bQRXp6m33hNj7PyQEy7KcPcSFHSI1nhZ7jlCZogAem3QOHlTrRvP26oH9e jYbnL3fH7lyRA1TvF3O7tc6FkgQaAQQ3SziSM84aO/GN8h+WRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkEx2fvvX9Xso3GyeZdERcqkrvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRi YzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2ZGFiYmZiYzMvZjk4NzRhMjItOWEwMi0z OThmLTg2YTYtMjE3ZTk1NDY4MTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWY0YmM1YzMtOWVmNC00ZGEzLTlm Y2YtNGVjNmRhYmJmYmMzL2FmNGJjNWMzLTllZjQtNGRhMy05ZmNmLTRlYzZkYWJi ZmJjMy5jcmwwHwYDVR0jBBgwFoAUsrvXRQKNNtbCM39NSIxDRyFgB78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRiYzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2 ZGFiYmZiYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLS36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHk7pgRv3BJfu3g8/V3zCKgI+KPVQxnQnU0PdLhglf1GxhziK3hLOwl rWrQJKxRY83Db6L/V6EYYjsiSUCYCSfYeweZu7NmUcBipr3SjCFAuLN1tncMB9QE kVIdWd/cPW3cw+4uhaL8cakufALHLRmVdUAdtsq13nMOSC0Cnmk8NEyo1v6CebFG 9TjU34q4THpMMv7wF/S6FWklgcMKdHNJWkPECvQyfhBWjP2F63rVwP/u8oq3p4SI Pmx0DwIaHvpiB5GbE0e2MVp92J+6kk366GtKSeJWqtUyrGxzxTSnf0c4k33GqYYm plkVX3o/oKhAj1C80abso5z2MoPG/ws= -----END CERTIFICATE-----Generated at Tue Sep 22 17:37:13 2026 by rpki-client