$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/70500725-1d16-3314-af46-dc1cac6e83b3.roa File: 70500725-1d16-3314-af46-dc1cac6e83b3.roa (raw, json) Hash identifier: lKfY0+G0k6HYb5mtaOGMq2mXk5ToJcEQmDwAseONMh4= Subject key identifier: 2E:AD:E5:35:65:0F:74:F3:E5:B1:CF:CD:6B:F0:29:89:3A:B0:C9:97 Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec Certificate serial: 010D0C9F4328584EEEB77C241D5CF2E6510EC5B0 Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/70500725-1d16-3314-af46-dc1cac6e83b3.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 400967 IP address blocks: 45.42.172.0/23 maxlen: 24 45.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:7c:24:1d:5c:f2:e6:51:0e:c5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=a7885cc0-3f5f-417f-aefa-9822a3d3c137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:ea:e0:d2:ca:fe:94:01:5b:6d:53:69:59: 5a:1d:e4:1b:a7:24:3f:6e:02:3e:5f:89:db:a7:23: 7e:69:80:ee:4b:51:ff:c3:36:00:d8:54:ee:dd:86: b9:50:26:12:54:d3:c0:d3:2a:eb:de:04:bd:27:0e: 8b:3f:bc:04:df:7e:04:b3:ba:80:ea:e1:2c:c7:52: 18:fd:94:5c:f2:f5:12:a8:79:55:3f:58:10:29:8c: 71:47:4f:4b:38:4e:d1:df:45:87:e7:04:1a:dc:8e: 90:ee:88:31:fe:07:cb:26:60:c2:5b:60:30:4f:aa: 90:8f:c3:e2:b2:0f:84:88:a7:a7:b3:3f:d0:c8:a1: cb:34:28:a0:6e:a4:83:67:d2:9f:75:64:e9:8b:dc: 18:48:09:ba:a3:16:10:d1:b7:c5:12:8b:d6:be:98: 1c:6c:15:55:7f:ff:94:df:b9:ee:5d:fc:c9:11:78: f3:5d:73:c7:68:43:b7:8f:29:3f:f4:2f:26:e6:e2: cd:3d:41:cd:3c:4f:2d:0e:e5:4c:02:f1:87:a8:f1: 20:d7:2c:48:ee:8a:17:33:05:cd:60:67:bf:6b:4e: b7:fa:c9:c7:ba:27:b3:30:20:39:80:ef:d5:e0:36: 0b:a9:39:28:16:83:78:5b:a3:7c:57:8e:6e:05:37: c8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AD:E5:35:65:0F:74:F3:E5:B1:CF:CD:6B:F0:29:89:3A:B0:C9:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/70500725-1d16-3314-af46-dc1cac6e83b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl X509v3 Authority Key Identifier: keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer sbgp-ipAddrBlock: critical IPv4: 45.42.172.0-45.42.174.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:1f:54:2b:e7:62:14:fa:88:18:42:45:3d:fe:07:3a:45:60: ab:f0:07:22:05:7f:f7:52:65:8e:07:c5:10:15:7b:21:3e:fb: f6:80:ef:9c:81:f2:24:1a:2a:0c:d9:f1:eb:e5:e8:14:e3:be: 18:52:05:26:eb:cc:a9:96:a2:2c:55:c0:6d:50:f7:1e:40:8b: 91:d5:4b:cf:f5:bb:7e:35:61:99:6e:4e:ea:8a:dd:eb:46:5a: c7:57:87:12:0d:07:4e:0b:ef:7b:60:37:33:42:9d:fb:af:e6: f1:cf:15:ec:bc:3f:fb:50:a7:0b:8e:94:bb:a6:1d:68:9c:9b: e3:fc:4a:5f:80:0e:71:ba:5d:ff:17:17:1e:23:ba:13:cc:52: 20:0a:11:81:46:a4:39:a0:82:25:8c:c1:ae:eb:4c:54:1d:37: ee:b0:ec:8b:c2:1e:eb:76:a7:73:c0:f1:83:ca:68:3f:48:38: b4:9b:1a:b4:2d:36:4d:18:88:4d:3a:46:79:38:07:06:15:e6: 2d:bb:a8:85:4b:8b:d2:61:fb:d9:72:86:40:46:f9:f4:b3:77: 36:23:27:a6:df:d9:e6:95:26:d8:af:46:e9:6b:1f:6f:1f:c9: a5:49:6f:a4:44:74:da:e8:df:cd:6e:d6:b1:e1:3e:a6:a0:b2: 0b:ce:23:b9 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE7ut3wkHVzy5lEOxbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZmNzMzNDUtYjc3MS00NWZkLWJlODEtMWY0MWE3Zjc3 N2VjMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk YTc4ODVjYzAtM2Y1Zi00MTdmLWFlZmEtOTgyMmEzZDNjMTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4zq4NLK/pQBW21TaVlaHeQbpyQ/bgI+X4nb pyN+aYDuS1H/wzYA2FTu3Ya5UCYSVNPA0yrr3gS9Jw6LP7wE334Es7qA6uEsx1IY /ZRc8vUSqHlVP1gQKYxxR09LOE7R30WH5wQa3I6Q7ogx/gfLJmDCW2AwT6qQj8Pi sg+EiKensz/QyKHLNCigbqSDZ9KfdWTpi9wYSAm6oxYQ0bfFEovWvpgcbBVVf/+U 37nuXfzJEXjzXXPHaEO3jyk/9C8m5uLNPUHNPE8tDuVMAvGHqPEg1yxI7ooXMwXN YGe/a063+snHuiezMCA5gO/V4DYLqTkoFoN4W6N8V45uBTfISwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFC6t5TVlD3Tz5bHPzWvwKYk6sMmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3 MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdmNzc3ZWMvNzA1MDA3MjUtMWQxNi0z MzE0LWFmNDYtZGMxY2FjNmU4M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWZmNzMzNDUtYjc3MS00NWZkLWJl ODEtMWY0MWE3Zjc3N2VjL2VmZjczMzQ1LWI3NzEtNDVmZC1iZTgxLTFmNDFhN2Y3 NzdlYy5jcmwwHwYDVR0jBBgwFoAUmmU/aXxyav0itCAZwUUwlk0VckYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQx YTdmNzc3ZWMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItKqwD BAAtKq4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAGh9UK+diFPqIGEJFPf4HOkVgq/AHIgV/91JljgfFEBV7 IT779oDvnIHyJBoqDNnx6+XoFOO+GFIFJuvMqZaiLFXAbVD3HkCLkdVLz/W7fjVh mW5O6ord60Zax1eHEg0HTgvve2A3M0Kd+6/m8c8V7Lw/+1CnC46Uu6YdaJyb4/xK X4AOcbpd/xcXHiO6E8xSIAoRgUakOaCCJYzBrutMVB037rDsi8Ie63anc8Dxg8po P0g4tJsatC02TRiITTpGeTgHBhXmLbuohUuL0mH72XKGQEb59LN3NiMnpt/Z5pUm 2K9G6Wsfbx/JpUlvpER02ujfzW7WseE+pqCyC84juQ== -----END CERTIFICATE-----Generated at Sun Oct 11 11:33:00 2026 by rpki-client