$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ee1a4e04-68da-38e4-9471-1d40d048b137.roa File: ee1a4e04-68da-38e4-9471-1d40d048b137.roa (raw, json) Hash identifier: +qbiUTSeJ7rowopBvOKEKZcmgJKkiHRpHjYb44+q8k0= Subject key identifier: E0:B7:C3:D3:7A:57:59:D5:D6:2F:C1:C2:9D:1A:82:3A:36:EC:F3:17 Certificate issuer: /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Certificate serial: 010D0C9F4328584F093CDA2860F1CD6A6E189580 Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ee1a4e04-68da-38e4-9471-1d40d048b137.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 174 IP address blocks: 45.45.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:da:28:60:f1:cd:6a:6e:18:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=7b5f9ca3-d1c1-4fd0-b512-dd034fdf196b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:f4:8f:a4:e3:53:09:31:9d:26:30:e5:93: b9:47:d2:02:a6:49:de:95:99:a3:09:52:d2:bf:fe: ea:c0:b2:75:0a:a0:14:2a:34:d0:a8:f4:70:85:7b: 82:ed:85:5a:30:c7:02:f6:a0:d1:a3:fe:aa:8d:87: 73:d4:69:ab:7a:98:c0:ac:c3:0e:f4:ca:d2:a9:f9: 9d:2d:77:1b:2c:2c:3c:8a:07:35:c8:59:17:b7:3b: 08:97:b4:e6:7e:87:e6:1c:60:e3:b8:41:05:d7:b8: 74:8b:f0:82:a0:27:24:50:1a:b4:3c:8d:81:33:12: c0:6d:48:b4:23:77:b1:e6:c1:d0:dc:6c:c9:71:7e: 19:6c:e6:83:ab:c1:31:9c:4f:80:4d:59:02:fb:01: 70:72:10:c1:e3:31:ee:5e:2c:f2:2f:0a:60:f2:9c: 18:a0:fd:e2:ae:56:a9:47:11:0a:28:32:f6:c3:b9: 0c:d9:05:72:ab:ec:07:1a:02:b2:ca:ae:7d:e0:c9: df:b6:a2:7b:08:b4:7b:5e:6d:e4:8d:e9:e5:c4:2f: d2:68:cd:19:a5:85:9a:e6:eb:9d:ec:f7:3f:95:7d: b3:ed:cb:95:ce:22:ed:4d:62:8e:fd:9b:aa:af:df: eb:a2:1d:29:aa:89:9a:b5:9e:25:91:3a:b1:87:09: a0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B7:C3:D3:7A:57:59:D5:D6:2F:C1:C2:9D:1A:82:3A:36:EC:F3:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ee1a4e04-68da-38e4-9471-1d40d048b137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl X509v3 Authority Key Identifier: keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer sbgp-ipAddrBlock: critical IPv4: 45.45.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:21:df:5b:9c:b2:49:b5:a3:58:51:2c:c9:ae:c0:e9:04:10: d2:bd:88:f1:92:4b:d9:1f:00:26:9c:9e:bf:df:32:4f:5f:2c: f3:67:29:3b:2a:14:49:15:60:af:33:c3:d4:4b:b2:aa:9b:98: e4:60:ef:2b:63:5e:cf:85:73:fd:24:08:e7:b5:de:77:15:44: ec:e0:7e:08:a4:37:4f:e0:c3:0e:9a:a6:aa:36:e7:2b:18:25: f8:ba:0e:3b:9d:c3:32:c7:6f:40:a9:64:8b:bb:50:6b:25:ea: 9d:56:ec:f2:04:96:c1:6a:48:17:60:3a:70:05:3e:78:de:ee: 27:b3:99:2d:91:dd:a4:68:9d:66:3e:b0:ec:d0:7d:3b:78:2e: 12:b6:58:69:7f:cc:d8:39:9d:b5:2c:bc:a8:9e:5a:e6:c6:9e: 2c:81:4f:ae:f6:29:2c:54:ac:cd:69:54:3f:21:b5:d3:c0:18: f5:2a:2d:99:96:6b:9b:95:e1:e4:10:29:2f:ef:fb:6b:af:2a: 65:f2:0a:27:11:75:82:05:55:f5:5f:9f:f3:63:bb:49:ee:d1: d8:d6:3a:6d:dc:a3:97:5f:30:62:d1:4e:3e:e2:79:36:ae:ab: 96:1a:5e:3e:bc:de:75:59:06:54:0d:ce:36:ce:b0:0b:82:88: 59:c1:af:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNooYPHNam4YlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRkNzFkYTktNmZmMS00OWFiLWExZTUtNmM0OGY4ZjBj MWQ2MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk N2I1ZjljYTMtZDFjMS00ZmQwLWI1MTItZGQwMzRmZGYxOTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkan0j6TjUwkxnSYw5ZO5R9ICpknelZmjCVLS v/7qwLJ1CqAUKjTQqPRwhXuC7YVaMMcC9qDRo/6qjYdz1GmrepjArMMO9MrSqfmd LXcbLCw8igc1yFkXtzsIl7TmfofmHGDjuEEF17h0i/CCoCckUBq0PI2BMxLAbUi0 I3ex5sHQ3GzJcX4ZbOaDq8ExnE+ATVkC+wFwchDB4zHuXizyLwpg8pwYoP3irlap RxEKKDL2w7kM2QVyq+wHGgKyyq594MnftqJ7CLR7Xm3kjenlxC/SaM0ZpYWa5uud 7Pc/lX2z7cuVziLtTWKO/Zuqr9/roh0pqomatZ4lkTqxhwmgEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOC3w9N6V1nV1i/Bwp0agjo27PMXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3 MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4ZjhmMGMxZDYvZWUxYTRlMDQtNjhkYS0z OGU0LTk0NzEtMWQ0MGQwNDhiMTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRkNzFkYTktNmZmMS00OWFiLWEx ZTUtNmM0OGY4ZjBjMWQ2L2I0ZDcxZGE5LTZmZjEtNDlhYi1hMWU1LTZjNDhmOGYw YzFkNi5jcmwwHwYDVR0jBBgwFoAUT4QpIPFqZbJeSMpRP7Uli1CK9fswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4 ZjhmMGMxZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS3CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8h31ucskm1o1hRLMmuwOkEENK9iPGSS9kfACacnr/fMk9fLPNnKTsq FEkVYK8zw9RLsqqbmORg7ytjXs+Fc/0kCOe13ncVROzgfgikN0/gww6apqo25ysY Jfi6DjudwzLHb0CpZIu7UGsl6p1W7PIElsFqSBdgOnAFPnje7iezmS2R3aRonWY+ sOzQfTt4LhK2WGl/zNg5nbUsvKieWubGniyBT672KSxUrM1pVD8htdPAGPUqLZmW a5uV4eQQKS/v+2uvKmXyCicRdYIFVfVfn/Nju0nu0djWOm3co5dfMGLRTj7ieTau q5YaXj683nVZBlQNzjbOsAuCiFnBr0c= -----END CERTIFICATE-----Generated at Tue Sep 22 21:47:17 2026 by rpki-client