$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/eb528c18-b3ed-362d-8005-f1855f425cf1.roa File: eb528c18-b3ed-362d-8005-f1855f425cf1.roa (raw, json) Hash identifier: dArIl/8ND5dM8uvi/6EnKBt8aJdkKEUQkwtB4++YMrs= Subject key identifier: 3E:81:DF:40:8F:71:9D:E6:D5:83:4B:8F:2D:57:C9:18:EE:B3:F5:F0 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584F2ABD1E2DC8A6795153F87E60 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/eb528c18-b3ed-362d-8005-f1855f425cf1.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 393878 IP address blocks: 45.42.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:1e:2d:c8:a6:79:51:53:f8:7e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=3abdeff0-f277-47c2-a200-7ed90ca8650a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dc:b2:be:11:40:59:9a:9e:40:9a:9e:36:a1: 2f:e1:e4:f0:b0:8f:b1:b3:61:b1:91:90:52:04:20: c3:63:41:b1:72:7f:f8:13:8b:65:c5:b9:66:37:b7: 69:b6:23:7e:4b:4e:69:11:e0:11:e9:7b:03:48:c5: 3c:e9:4f:01:c2:78:f7:0e:7e:59:ce:56:93:db:c1: 90:72:8a:6d:5f:9b:44:55:e0:1e:dc:5d:94:aa:b8: 86:e5:9d:0c:f1:39:5c:03:dc:61:2c:a8:9c:19:ed: 83:66:41:f2:17:bc:6c:9b:98:14:99:1a:70:22:11: 9e:57:0a:a8:47:05:8b:1a:fa:55:76:be:82:6f:13: cd:13:30:14:c6:12:ed:14:6c:0d:f9:a2:e2:96:13: 0c:74:f8:31:bd:ce:8d:ec:4d:96:ae:69:d2:c3:91: 99:bb:d2:60:d4:be:3b:0b:17:a3:af:a5:9c:27:91: 62:59:f2:c5:09:ce:46:b5:3d:91:ff:ca:22:c0:32: 15:b9:bf:b1:69:c1:94:98:c2:f2:ea:1a:50:55:ef: d9:d2:71:30:8d:fc:3f:c9:ef:b9:81:40:0e:97:af: 69:41:64:68:29:11:85:80:0f:e6:e6:9a:ee:ae:ed: 38:12:bd:8e:8d:30:79:62:89:2e:80:62:00:ca:82: 3b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:81:DF:40:8F:71:9D:E6:D5:83:4B:8F:2D:57:C9:18:EE:B3:F5:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/eb528c18-b3ed-362d-8005-f1855f425cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 45.42.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5d:e0:d5:2f:7c:7c:bf:f2:25:00:31:7d:81:83:14:b2:6a: a8:f2:58:f2:e2:5d:fa:66:ff:08:dc:59:e6:43:26:15:31:df: fe:9b:10:ed:5b:3d:75:25:2e:cc:76:52:73:67:5e:cd:2c:94: 25:d1:44:5e:e7:98:5d:2d:90:03:e6:7b:bb:ba:93:ca:62:da: 40:d9:cc:e5:2d:5c:9d:29:c2:76:bd:65:0d:51:0e:3e:7d:57: ff:f1:52:cc:ad:5d:79:99:29:ad:d7:48:8a:ad:5c:28:6b:db: ae:b0:db:4d:de:36:31:bc:0b:2f:fb:72:2f:c0:53:12:40:2e: 49:9b:53:de:59:bc:ad:92:d0:37:8b:e5:cc:e6:4b:98:f2:bd: 7c:d7:84:6c:64:94:74:fc:4d:a9:06:cd:86:92:0f:46:77:d4: ae:e1:33:6b:4d:ce:26:4a:7f:1b:d2:90:e1:73:33:41:81:2c: 8a:4c:4c:5e:7a:86:68:74:73:1f:96:c1:91:85:c2:70:4a:9c: b5:e4:22:c4:96:66:30:46:47:af:ba:32:f2:ef:20:3e:b0:3f: 05:37:0d:10:45:be:17:75:06:6c:9c:2d:ec:70:08:19:8b:a5: 60:74:e4:00:e1:e4:e0:7e:32:b2:35:57:84:01:55:3a:09:92: ce:d5:62:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvR4tyKZ5UVP4fmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk M2FiZGVmZjAtZjI3Ny00N2MyLWEyMDAtN2VkOTBjYTg2NTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9yyvhFAWZqeQJqeNqEv4eTwsI+xs2GxkZBS BCDDY0Gxcn/4E4tlxblmN7dptiN+S05pEeAR6XsDSMU86U8Bwnj3Dn5ZzlaT28GQ coptX5tEVeAe3F2UqriG5Z0M8TlcA9xhLKicGe2DZkHyF7xsm5gUmRpwIhGeVwqo RwWLGvpVdr6CbxPNEzAUxhLtFGwN+aLilhMMdPgxvc6N7E2WrmnSw5GZu9Jg1L47 Cxejr6WcJ5FiWfLFCc5GtT2R/8oiwDIVub+xacGUmMLy6hpQVe/Z0nEwjfw/ye+5 gUAOl69pQWRoKRGFgA/m5pruru04Er2OjTB5YokugGIAyoI7BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6B30CPcZ3m1YNLjy1XyRjus/XwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvZWI1MjhjMTgtYjNlZC0z NjJkLTgwMDUtZjE4NTVmNDI1Y2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9d4NUvfHy/8iUAMX2BgxSyaqjyWPLiXfpm/wjcWeZDJhUx3/6bEO1b PXUlLsx2UnNnXs0slCXRRF7nmF0tkAPme7u6k8pi2kDZzOUtXJ0pwna9ZQ1RDj59 V//xUsytXXmZKa3XSIqtXChr266w203eNjG8Cy/7ci/AUxJALkmbU95ZvK2S0DeL 5czmS5jyvXzXhGxklHT8TakGzYaSD0Z31K7hM2tNziZKfxvSkOFzM0GBLIpMTF56 hmh0cx+WwZGFwnBKnLXkIsSWZjBGR6+6MvLvID6wPwU3DRBFvhd1BmycLexwCBmL pWB05ADh5OB+MrI1V4QBVToJks7VYsE= -----END CERTIFICATE-----Generated at Sun Oct 11 11:32:49 2026 by rpki-client