$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/f9874a22-9a02-398f-86a6-217e95468149.roa File: f9874a22-9a02-398f-86a6-217e95468149.roa (raw, json) Hash identifier: 2izg/ghUBDcsRY9RTcnBOuSeBQMPZigCamINftcMckw= Subject key identifier: FF:46:23:77:9E:7C:41:F3:11:46:66:10:EB:1A:75:F3:F4:45:BF:E8 Certificate issuer: /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Certificate serial: 010D0C9F4328584D773A7263C655404A8B76D780 Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/f9874a22-9a02-398f-86a6-217e95468149.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 1011 IP address blocks: 45.45.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:72:63:c6:55:40:4a:8b:76:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=de360353-d90f-41b8-9bf4-c1b58a08a0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4e:cf:34:22:78:dc:db:bb:7e:a9:eb:35:09: 88:99:ba:3f:5c:38:2b:ff:04:4a:08:74:0f:e1:36: 2f:d2:e8:41:8a:9e:aa:1e:19:a8:55:8f:fb:1a:2c: a4:ab:e9:20:18:1e:47:86:b8:9f:42:ac:cb:a2:4d: 74:8c:4c:1f:c9:da:86:37:c9:e8:6d:dd:fa:36:27: d3:9c:a9:36:81:e6:87:35:e4:b4:3c:b3:24:67:84: a5:83:c2:19:17:4f:3e:bd:b2:e6:fb:4b:49:13:5f: 31:e6:21:44:56:84:5f:cc:68:0a:81:6e:29:d6:89: af:d2:45:0e:b0:18:af:b6:21:5e:8b:d2:78:c5:f6: c8:80:5a:07:98:16:9b:00:e8:82:e5:3a:07:0a:cc: 73:61:bc:5b:7c:98:bd:d9:ec:db:90:56:1c:6b:02: e5:8f:16:93:af:45:87:e8:43:96:d3:06:25:8a:ee: 32:81:e7:40:70:04:ce:c8:a3:54:4d:1f:85:df:c7: 84:a8:bc:70:eb:8f:18:b5:e8:48:17:dd:2d:e9:5e: f1:4b:b0:26:73:93:9a:b9:bf:4f:0c:ba:79:2d:b5: 5a:71:f1:3f:37:09:91:35:ac:b8:c3:cc:ee:fa:e5: c6:d8:e8:fd:d0:39:16:e9:4f:e5:f3:1c:66:bf:c2: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:46:23:77:9E:7C:41:F3:11:46:66:10:EB:1A:75:F3:F4:45:BF:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/f9874a22-9a02-398f-86a6-217e95468149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl X509v3 Authority Key Identifier: keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer sbgp-ipAddrBlock: critical IPv4: 45.45.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3f:f0:de:8d:38:9c:3d:01:fe:e8:e1:88:f8:14:35:c6:61: cc:d1:cc:87:23:dd:8d:d3:4c:98:d2:20:f4:89:84:bc:b9:f4: a0:ee:77:79:3b:74:19:1d:b2:47:2a:d6:a3:02:06:c8:8d:f5: 5d:d0:90:2d:d1:c1:05:af:91:3f:af:72:71:1d:c1:e8:cf:f4: 7e:ab:98:38:67:14:0d:a6:c4:a0:d6:9d:02:7e:18:97:49:47: d0:5b:18:47:17:67:82:46:da:15:8c:9a:dd:9b:99:85:41:41: d5:14:dc:c4:f1:24:fd:12:bf:21:23:36:89:a9:46:70:d7:21: c1:7c:71:76:60:9b:9c:e2:a4:ae:04:ef:4c:18:9d:40:2e:a5: 62:eb:2a:c4:0d:e7:dd:ef:01:6c:86:f4:4c:cc:e7:94:85:d3: 0f:bc:a3:fd:89:43:b3:06:32:d4:95:03:88:db:46:63:0e:69: 5a:8f:69:8d:5e:e3:6d:7c:b1:41:41:d3:bb:a8:57:d9:41:cb: 4a:1d:cf:d2:53:8a:41:ac:7e:7a:bd:59:4e:13:58:0c:91:8e: af:b5:db:28:8a:86:b6:8e:70:37:63:df:6c:b4:c8:b4:b2:26: b3:09:1b:08:a0:82:1f:62:ac:a2:d0:81:19:52:a4:09:8e:6b: ee:77:38:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OnJjxlVASot214AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YmM1YzMtOWVmNC00ZGEzLTlmY2YtNGVjNmRhYmJm YmMzMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk ZGUzNjAzNTMtZDkwZi00MWI4LTliZjQtYzFiNThhMDhhMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk7PNCJ43Nu7fqnrNQmImbo/XDgr/wRKCHQP 4TYv0uhBip6qHhmoVY/7Giykq+kgGB5HhrifQqzLok10jEwfydqGN8nobd36NifT nKk2geaHNeS0PLMkZ4Slg8IZF08+vbLm+0tJE18x5iFEVoRfzGgKgW4p1omv0kUO sBivtiFei9J4xfbIgFoHmBabAOiC5ToHCsxzYbxbfJi92ezbkFYcawLljxaTr0WH 6EOW0wYliu4ygedAcATOyKNUTR+F38eEqLxw648YtehIF90t6V7xS7Amc5Oaub9P DLp5LbVacfE/NwmRNay4w8zu+uXG2Oj90DkW6U/l8xxmv8LdUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9GI3eefEHzEUZmEOsadfP0Rb/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRi YzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2ZGFiYmZiYzMvZjk4NzRhMjItOWEwMi0z OThmLTg2YTYtMjE3ZTk1NDY4MTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWY0YmM1YzMtOWVmNC00ZGEzLTlm Y2YtNGVjNmRhYmJmYmMzL2FmNGJjNWMzLTllZjQtNGRhMy05ZmNmLTRlYzZkYWJi ZmJjMy5jcmwwHwYDVR0jBBgwFoAUsrvXRQKNNtbCM39NSIxDRyFgB78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRiYzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2 ZGFiYmZiYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLS36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU/8N6NOJw9Af7o4Yj4FDXGYczRzIcj3Y3TTJjSIPSJhLy59KDud3k7 dBkdskcq1qMCBsiN9V3QkC3RwQWvkT+vcnEdwejP9H6rmDhnFA2mxKDWnQJ+GJdJ R9BbGEcXZ4JG2hWMmt2bmYVBQdUU3MTxJP0SvyEjNompRnDXIcF8cXZgm5zipK4E 70wYnUAupWLrKsQN593vAWyG9EzM55SF0w+8o/2JQ7MGMtSVA4jbRmMOaVqPaY1e 4218sUFB07uoV9lBy0odz9JTikGsfnq9WU4TWAyRjq+12yiKhraOcDdj32y0yLSy JrMJGwiggh9irKLQgRlSpAmOa+53OOo= -----END CERTIFICATE-----Generated at Fri Apr 17 21:29:18 2026 by rpki-client