$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa File: 29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa (raw, json) Hash identifier: 3MscFGiokweV/idhu3TvnPLmPBiSg82CKHDVSUIe7iw= Subject key identifier: 86:AE:19:36:1C:5E:02:55:DF:72:24:B5:01:42:4B:F0:EE:8B:51:DF Certificate issuer: /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Certificate serial: 010D0C9F4328584EE7BCA5162BF37D4B40A555C0 Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 32931 IP address blocks: 45.41.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:a5:16:2b:f3:7d:4b:40:a5:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=21e9f4e3-62ca-4baa-b5e7-a366ad974f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b6:f8:4b:fd:b3:6f:2b:4b:97:cf:2e:1d:e0: 9e:2c:09:be:f4:a8:35:37:f4:90:0a:26:ee:2c:b6: 17:ec:22:f4:b3:3b:34:1b:25:4d:a5:ae:fa:81:85: e8:8d:f7:8f:a6:ee:1c:34:3b:9d:ae:d0:ba:fd:96: 04:2d:40:5c:f2:aa:07:14:89:24:ca:07:9c:8c:9a: 15:fe:d0:c8:b0:78:b1:55:61:49:64:93:d1:68:a5: 48:91:44:36:b2:91:b8:f2:43:1a:a9:00:89:3b:c2: ef:c8:dd:3c:98:b8:cb:92:e6:69:89:cb:f3:35:b9: af:c4:5a:53:8b:2c:34:01:1e:e1:3a:6a:a8:4b:38: 97:cb:0c:38:bd:64:32:71:56:65:19:dd:85:10:45: 8e:7f:d4:4e:d5:77:38:5b:c5:b3:76:10:d6:dc:59: 21:e7:40:7d:05:4b:46:c1:c3:c8:c6:12:d7:e8:74: 26:5c:67:55:c2:91:ea:59:c9:e6:23:9b:72:19:dc: 3e:d6:e0:d3:c0:a8:60:da:c1:6b:11:40:6b:70:07: ac:6b:e4:d0:74:4f:31:d9:13:35:15:5c:8b:67:a0: 3e:f6:e5:be:18:dd:bb:b5:f4:af:51:6b:5f:25:24: 6f:e0:1d:64:b7:00:6e:0b:d1:d8:22:d0:2e:6f:88: b9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AE:19:36:1C:5E:02:55:DF:72:24:B5:01:42:4B:F0:EE:8B:51:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl X509v3 Authority Key Identifier: keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer sbgp-ipAddrBlock: critical IPv4: 45.41.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:d4:8d:e5:1e:e0:c6:37:6f:54:32:56:6f:32:e3:25:32:9e: 5b:5c:e6:fe:6f:89:31:8f:3d:f1:8c:3a:c7:46:e6:ad:5d:d6: b4:d4:d2:8e:f4:6c:a7:92:8f:1b:39:98:60:a0:b2:98:83:fe: b9:7f:c4:37:dd:2a:98:40:73:5a:c9:92:3b:6f:12:ac:6d:a5: 2a:88:d4:11:5b:bc:29:1c:f9:cc:29:92:b5:18:26:99:9d:38: c7:c6:70:64:e7:46:a9:15:86:6a:1a:30:c7:37:29:79:71:8a: 05:e3:2f:2c:eb:23:bb:cd:98:e3:37:9e:9f:c0:e8:44:36:c1: fc:72:40:37:25:a0:43:f9:79:fe:da:35:4f:19:46:17:cc:9e: 72:49:e3:01:ed:20:51:68:4f:ce:9a:59:be:95:87:b9:b7:c2: b2:85:df:04:30:4e:71:22:21:c3:df:89:71:9d:a3:c9:26:3c: a5:ed:ee:c6:4a:39:5f:08:a8:b0:75:8e:80:29:19:75:2e:c6: c2:57:87:bf:ad:3f:1d:94:6e:1d:b1:40:d1:03:2c:55:6e:bd: f0:81:36:c7:bc:c5:37:1d:72:61:d7:b8:fe:ef:cb:66:d2:49: ed:45:4a:97:7f:19:cf:3b:b1:b4:a8:bf:2e:0f:36:72:e7:88: 7f:7a:7b:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvKUWK/N9S0ClVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NiYjA4NWItOGM1OC00OGYxLWE3YjktZDQ0NmQzZjk2 MWJmMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk MjFlOWY0ZTMtNjJjYS00YmFhLWI1ZTctYTM2NmFkOTc0Zjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrb4S/2zbytLl88uHeCeLAm+9Kg1N/SQCibu LLYX7CL0szs0GyVNpa76gYXojfePpu4cNDudrtC6/ZYELUBc8qoHFIkkygecjJoV /tDIsHixVWFJZJPRaKVIkUQ2spG48kMaqQCJO8LvyN08mLjLkuZpicvzNbmvxFpT iyw0AR7hOmqoSziXyww4vWQycVZlGd2FEEWOf9RO1Xc4W8WzdhDW3Fkh50B9BUtG wcPIxhLX6HQmXGdVwpHqWcnmI5tyGdw+1uDTwKhg2sFrEUBrcAesa+TQdE8x2RM1 FVyLZ6A+9uW+GN27tfSvUWtfJSRv4B1ktwBuC9HYItAub4i59QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIauGTYcXgJV33IktQFCS/Dui1HfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zY2Ji MDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2ZDNmOTYxYmYvMjlhODk0ZWUtMDA4MC0z YTQ5LThiOTEtYTAxZTFiYmJiZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2NiYjA4NWItOGM1OC00OGYxLWE3 YjktZDQ0NmQzZjk2MWJmLzNjYmIwODViLThjNTgtNDhmMS1hN2I5LWQ0NDZkM2Y5 NjFiZi5jcmwwHwYDVR0jBBgwFoAU4e3x8Ae8hTPlv1z+X4vszy8hl7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zY2JiMDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2 ZDNmOTYxYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErUjeUe4MY3b1QyVm8y4yUynltc5v5viTGPPfGMOsdG5q1d1rTU0o70 bKeSjxs5mGCgspiD/rl/xDfdKphAc1rJkjtvEqxtpSqI1BFbvCkc+cwpkrUYJpmd OMfGcGTnRqkVhmoaMMc3KXlxigXjLyzrI7vNmOM3np/A6EQ2wfxyQDcloEP5ef7a NU8ZRhfMnnJJ4wHtIFFoT86aWb6Vh7m3wrKF3wQwTnEiIcPfiXGdo8kmPKXt7sZK OV8IqLB1joApGXUuxsJXh7+tPx2Ubh2xQNEDLFVuvfCBNse8xTcdcmHXuP7vy2bS Se1FSpd/Gc87sbSovy4PNnLniH96e1A= -----END CERTIFICATE-----Generated at Tue Sep 29 10:50:29 2026 by rpki-client