$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/24dd3f45-f2ec-33df-805e-c432de68f74d.roa File: 24dd3f45-f2ec-33df-805e-c432de68f74d.roa (raw, json) Hash identifier: n7tJVvZF2bvHMExBgzHGRoVkmF8ogz+T2QZ9A1WE8iY= Subject key identifier: D3:9D:CB:F2:DC:7A:3B:D1:D7:D4:54:4B:A9:A1:7E:D3:28:90:6E:A9 Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658 Certificate serial: 010D0C9F4328584EE7BCA42579B5C23A01A8D500 Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/24dd3f45-f2ec-33df-805e-c432de68f74d.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 398395 IP address blocks: 45.43.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:a4:25:79:b5:c2:3a:01:a8:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=3a2dbd59-f2fa-4156-918f-82d780a2575c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2b:74:3e:e6:f5:f1:94:84:2c:70:95:5e:ad: df:f8:0f:8b:a0:0f:bb:c3:b7:d4:a9:b9:b4:83:47: a2:38:94:dd:bb:01:8d:f9:e3:c5:1b:5b:47:b0:53: 63:e1:40:9c:89:1a:96:a7:c6:73:ce:c7:bf:c7:e0: c2:01:5a:ee:bd:60:a1:6f:6b:33:e8:72:a0:0b:48: fd:e8:ce:62:bf:dc:1b:41:24:fa:89:92:c6:7f:77: 3a:e6:0b:97:71:22:3d:1c:d5:83:b4:b0:61:d8:1a: 4b:15:26:03:67:42:a0:bc:8e:b4:de:18:c7:50:8f: 66:9f:4d:ad:dd:4a:6a:d1:37:85:55:0d:81:6b:42: 78:2e:89:e9:e9:61:40:b6:79:70:23:e2:7d:03:64: 19:5a:a7:6e:b3:21:c3:12:a3:5c:4e:65:50:17:c9: ad:bb:ef:78:00:0b:15:63:d9:25:45:e3:cf:1b:c4: 1b:6c:94:46:80:b0:f2:31:4b:c6:c4:0f:75:ce:fd: 1a:82:b9:99:6e:2e:ca:bf:e8:ce:73:9e:47:f0:fe: ee:29:12:b4:9a:b7:98:5f:e1:8d:12:5c:c2:12:4e: 82:98:c9:26:09:36:03:a2:72:f4:c7:cf:ce:07:7d: 60:78:c1:a0:88:9e:19:7f:51:80:17:1f:3c:40:26: 0f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9D:CB:F2:DC:7A:3B:D1:D7:D4:54:4B:A9:A1:7E:D3:28:90:6E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/24dd3f45-f2ec-33df-805e-c432de68f74d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl X509v3 Authority Key Identifier: keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer sbgp-ipAddrBlock: critical IPv4: 45.43.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:90:a4:3b:5a:e2:33:64:29:ee:3d:3c:2e:81:19:45:9f:8b: f0:3c:48:70:4e:f3:e1:39:e8:a1:6d:89:8b:33:a6:df:2c:cf: c8:3e:53:73:79:c0:ec:dd:e7:11:07:b6:fa:18:77:06:1d:4b: 46:83:52:80:62:32:02:25:c5:3c:43:0c:23:f9:1d:c2:06:9f: 8f:5f:9f:01:81:2e:71:3b:d4:9c:b9:7f:b5:c6:9e:46:fc:13: 35:50:f2:ec:1f:17:b4:62:1c:da:7a:b6:76:20:16:3e:fe:b8: f0:9a:c4:31:c3:5a:79:b4:9c:68:76:10:bf:d0:65:33:3c:8c: 37:13:71:44:a7:68:73:0a:2a:f9:1e:53:0c:cf:e8:37:99:51: f2:9f:46:d9:8e:b7:df:c6:8a:6e:68:22:e7:0e:54:3e:90:dc: 70:50:bf:48:64:9e:3d:fb:33:b4:1c:94:f5:81:5f:40:37:7e: f7:5a:45:58:af:0e:4a:c7:c3:a8:f5:de:50:c6:19:d8:fb:86: f1:fa:ab:56:d9:fd:2c:26:43:39:61:56:38:a3:4d:60:45:8d: f4:f9:20:2c:0f:da:fb:b0:95:ab:72:f6:5e:97:d3:18:99:b3: 29:e9:02:26:a4:2b:12:6a:bb:51:19:83:25:72:df:ff:d1:1e: 25:cc:bb:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvKQlebXCOgGo1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0 NjU4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk M2EyZGJkNTktZjJmYS00MTU2LTkxOGYtODJkNzgwYTI1NzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyt0Pub18ZSELHCVXq3f+A+LoA+7w7fUqbm0 g0eiOJTduwGN+ePFG1tHsFNj4UCciRqWp8Zzzse/x+DCAVruvWChb2sz6HKgC0j9 6M5iv9wbQST6iZLGf3c65guXcSI9HNWDtLBh2BpLFSYDZ0KgvI603hjHUI9mn02t 3Upq0TeFVQ2Ba0J4Lonp6WFAtnlwI+J9A2QZWqdusyHDEqNcTmVQF8mtu+94AAsV Y9klRePPG8QbbJRGgLDyMUvGxA91zv0agrmZbi7Kv+jOc55H8P7uKRK0mreYX+GN ElzCEk6CmMkmCTYDonL0x8/OB31geMGgiJ4Zf1GAFx88QCYP/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOdy/LcejvR19RUS6mhftMokG6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvMjRkZDNmNDUtZjJlYy0z M2RmLTgwNWUtYzQzMmRlNjhmNzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz NzY1MzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLSsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGQpDta4jNkKe49PC6BGUWfi/A8SHBO8+E56KFtiYszpt8sz8g+U3N5 wOzd5xEHtvoYdwYdS0aDUoBiMgIlxTxDDCP5HcIGn49fnwGBLnE71Jy5f7XGnkb8 EzVQ8uwfF7RiHNp6tnYgFj7+uPCaxDHDWnm0nGh2EL/QZTM8jDcTcUSnaHMKKvke UwzP6DeZUfKfRtmOt9/Gim5oIucOVD6Q3HBQv0hknj37M7QclPWBX0A3fvdaRViv DkrHw6j13lDGGdj7hvH6q1bZ/SwmQzlhVjijTWBFjfT5ICwP2vuwlaty9l6X0xiZ synpAiakKxJqu1EZgyVy3//RHiXMu+g= -----END CERTIFICATE-----Generated at Sat Sep 26 08:57:03 2026 by rpki-client