$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa File: a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa (raw, json) Hash identifier: eXpR8T3Ea2iC5g/xvaz9k7aqAWFYfKxQWfUmk1B5Ujc= Subject key identifier: CD:63:0E:3D:58:77:30:4D:A6:43:33:30:4F:A7:BB:73:BB:ED:08:B7 Certificate issuer: /CN=af121a54-266e-447b-8176-bfcd1dc7867c Certificate serial: 010D0C9F4328584B92DCF6E05874652A28F0A830 Authority key identifier: 32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 152117 IP address blocks: 45.9.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f6:e0:58:74:65:2a:28:f0:a8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af121a54-266e-447b-8176-bfcd1dc7867c Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=e7601eb3-ed05-4e42-8b4b-ef06c061dfdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:00:1f:9a:9a:a1:d7:c3:25:ce:4f:8c:c1:29: 31:d8:37:57:b8:f4:96:b2:71:61:9c:cf:0f:b2:d1: 37:46:76:f5:ac:65:58:46:37:ab:fd:33:0d:9a:29: 30:6b:c2:ef:b9:88:fb:eb:da:c7:fc:bf:ec:75:6a: a5:82:7f:6f:0b:9e:71:6e:7b:c0:5f:df:07:aa:97: f5:70:2a:79:38:be:b0:84:fb:7a:44:11:6c:29:3a: 6a:82:79:f1:8b:06:cf:6f:22:96:ad:2d:91:cf:e9: 5b:f5:52:7b:4d:68:22:5d:c1:d4:05:cc:d4:d7:b2: b1:a5:b0:85:80:32:c4:c2:3d:b6:ad:5b:d2:f0:4c: ed:5e:51:69:4d:1d:5e:6d:65:98:bf:af:0a:e5:68: e1:9d:a4:05:fd:b0:e1:62:42:2e:76:8d:ab:3a:2b: c2:32:a1:ad:f5:ab:34:17:07:4f:75:ea:6e:ec:11: be:ad:a7:d7:1e:f4:41:89:66:af:3a:54:d2:3f:0b: c4:1d:60:0d:e2:a4:64:de:49:41:d2:9e:63:63:2b: 4e:b3:be:0b:e7:ec:09:47:12:94:e1:6f:c2:20:bc: 0f:23:e4:8b:88:79:75:96:01:1b:75:e6:b6:b7:2e: ce:0b:0d:a8:fe:b0:ea:95:aa:83:c6:a7:dd:67:a3: f7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:63:0E:3D:58:77:30:4D:A6:43:33:30:4F:A7:BB:73:BB:ED:08:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl X509v3 Authority Key Identifier: keyid:32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer sbgp-ipAddrBlock: critical IPv4: 45.9.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b7:78:30:39:6e:15:42:91:56:0c:43:42:5b:05:fe:53:3d: d9:52:07:da:8e:61:bd:47:1c:9a:d4:02:a9:80:ba:37:1b:de: be:d6:6b:44:46:4f:b6:b5:87:e7:ae:6c:4d:ce:dd:b3:a5:23: 79:fa:11:f2:60:2c:d2:28:09:af:65:2e:cb:6e:69:4d:b1:2a: 5a:51:42:6a:0c:d3:73:b4:b5:cd:1d:a4:35:79:3d:e0:e8:3f: fe:1d:bc:0f:43:e1:49:14:f9:12:38:2c:9b:46:15:9c:bf:61: 8a:79:72:46:f1:45:7c:03:ab:e1:1f:8d:11:9e:fc:45:2f:e2: 69:c6:5b:a2:33:13:f5:cc:59:5e:0d:c0:87:cf:34:a1:e7:9c: 56:50:0e:84:9a:e8:34:a2:f6:d0:ac:a0:9c:4f:c3:23:fb:78: c1:77:b0:eb:e5:8a:1b:39:85:9e:53:cc:dd:fa:8e:af:bf:28: db:e9:03:33:a3:20:af:66:be:48:6a:f5:fe:fe:bc:94:e5:82: 53:0e:41:65:09:ef:33:12:6e:70:c2:0b:ad:16:84:3a:80:1f: 13:f4:5c:e1:75:2b:66:6e:c6:87:f1:39:b8:ea:41:4d:4c:f0: 2e:85:bf:5c:48:46:ab:a6:c9:4d:37:8e:60:f0:1c:f0:42:d7: 26:b8:bc:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PbgWHRlKijwqDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYxMjFhNTQtMjY2ZS00NDdiLTgxNzYtYmZjZDFkYzc4 NjdjMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ZTc2MDFlYjMtZWQwNS00ZTQyLThiNGItZWYwNmMwNjFkZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQAfmpqh18Mlzk+MwSkx2DdXuPSWsnFhnM8P stE3Rnb1rGVYRjer/TMNmikwa8LvuYj769rH/L/sdWqlgn9vC55xbnvAX98Hqpf1 cCp5OL6whPt6RBFsKTpqgnnxiwbPbyKWrS2Rz+lb9VJ7TWgiXcHUBczU17KxpbCF gDLEwj22rVvS8EztXlFpTR1ebWWYv68K5WjhnaQF/bDhYkIudo2rOivCMqGt9as0 FwdPdepu7BG+rafXHvRBiWavOlTSPwvEHWAN4qRk3klB0p5jYytOs74L5+wJRxKU 4W/CILwPI+SLiHl1lgEbdea2ty7OCw2o/rDqlaqDxqfdZ6P3VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1jDj1YdzBNpkMzME+nu3O77Qi3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZjEy MWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNkMWRjNzg2N2MvYTkyZjBjNjEtYTg2Zi0z YWM2LWFmOTUtZTRlMmUyNGFiNjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWYxMjFhNTQtMjY2ZS00NDdiLTgx NzYtYmZjZDFkYzc4NjdjL2FmMTIxYTU0LTI2NmUtNDQ3Yi04MTc2LWJmY2QxZGM3 ODY3Yy5jcmwwHwYDVR0jBBgwFoAUMnVcxUnAaQnSNG495BOLXF/85b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZjEyMWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNk MWRjNzg2N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi3eDA5bhVCkVYMQ0JbBf5TPdlSB9qOYb1HHJrUAqmAujcb3r7Wa0RG T7a1h+eubE3O3bOlI3n6EfJgLNIoCa9lLstuaU2xKlpRQmoM03O0tc0dpDV5PeDo P/4dvA9D4UkU+RI4LJtGFZy/YYp5ckbxRXwDq+EfjRGe/EUv4mnGW6IzE/XMWV4N wIfPNKHnnFZQDoSa6DSi9tCsoJxPwyP7eMF3sOvlihs5hZ5TzN36jq+/KNvpAzOj IK9mvkhq9f7+vJTlglMOQWUJ7zMSbnDCC60WhDqAHxP0XOF1K2ZuxofxObjqQU1M 8C6Fv1xIRqumyU03jmDwHPBC1ya4vKU= -----END CERTIFICATE-----Generated at Mon Oct 20 23:49:42 2025 by rpki-client