$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa File: 46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa (raw, json) Hash identifier: OSX1z2CViOLoY4zD9JvXizWCVwg557O7bE9j1DDrjcw= Subject key identifier: FA:F7:C6:EE:4B:45:36:F2:92:13:34:78:8C:45:DF:19:A8:DF:44:01 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AE1968AECE2EC0CD8FF6C1FE0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 9009 IP address blocks: 45.33.152.0/24 maxlen: 24 45.33.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:8a:ec:e2:ec:0c:d8:ff:6c:1f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=3cfeced2-c185-4999-84ea-f88a0e9c0d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:57:56:4f:07:91:68:00:16:80:ca:02:aa:d8: a6:06:e4:83:d8:6f:da:76:30:cb:25:af:84:8f:c7: 3f:f0:93:a7:ae:75:4e:2d:01:15:b2:cb:40:a4:ca: 03:c1:57:d7:50:33:ae:f6:34:39:b6:c4:a6:7f:43: e8:85:71:2f:46:2b:8c:d9:71:92:eb:9c:51:8c:3f: 46:ba:d7:d5:05:ac:2a:ff:c1:a7:12:ae:c7:0a:18: 9f:d9:d1:e1:85:f1:32:85:e8:3e:6a:d5:55:4b:d5: c2:00:65:c0:05:ed:87:87:b5:cc:53:94:7b:9e:e2: d1:1c:26:2a:bb:da:66:82:e1:99:53:f9:95:cc:9c: b2:5f:10:a2:74:7d:31:44:a9:69:73:43:4c:ff:52: fe:a8:b7:c5:6c:eb:05:8c:7a:e1:a8:42:dd:8b:70: b5:ca:f5:20:cd:76:b2:cd:31:39:37:eb:69:62:4a: 05:ad:9a:46:df:14:37:1a:62:18:67:c6:5f:dd:84: 51:68:a8:9a:a5:b5:b4:9d:5f:06:d6:a5:e0:d9:5c: aa:e9:f6:ce:e1:62:d0:a6:5d:f8:ea:ad:57:30:98: 85:ca:a6:71:2b:1e:14:e9:87:bc:36:ba:8c:15:04: e0:c3:5d:24:4c:b9:1f:8f:4c:7a:b5:af:a4:97:5f: 16:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F7:C6:EE:4B:45:36:F2:92:13:34:78:8C:45:DF:19:A8:DF:44:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 45.33.152.0/24 45.33.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:7c:f1:2c:cb:d6:c1:a3:d6:04:ff:9f:0d:a8:fb:85:0e:87: 22:1b:49:ec:42:7b:f3:be:06:c0:aa:45:83:cb:a5:19:04:55: ac:76:db:1b:c1:4b:50:b3:c8:19:9a:4e:29:65:7b:fe:ea:58: 8c:6e:91:50:20:a4:2e:03:66:73:8d:51:9b:ce:d2:e3:80:c0: d0:98:7d:01:85:26:58:0f:69:55:de:ef:21:ac:b5:11:9c:ed: b5:96:e2:b4:1c:a7:50:47:d4:3b:12:ac:bf:03:30:21:b5:c8: e2:bc:7e:e1:25:76:4c:32:6b:a6:b0:f1:01:7c:76:8c:3a:33: e5:1c:72:02:d1:1c:c8:c3:1c:a0:4a:2e:65:a3:a8:d4:ad:0e: 73:3e:12:b3:35:0e:d2:6f:3e:cd:68:ac:e0:f0:40:b2:0c:60: 69:a0:59:6c:ec:7e:3e:b2:3f:89:e9:09:46:cd:16:19:90:b2: c2:69:f2:ba:66:5c:1c:28:98:5f:18:68:99:fa:6b:56:7b:67: 04:da:5f:b0:cb:7b:98:65:9c:c8:2e:99:0c:e6:9c:f4:cc:a4: c7:db:40:c1:9f:b3:a1:e0:2f:ae:c5:97:83:bf:ea:a6:b6:1c: ce:e9:25:2e:48:4b:47:e3:35:fc:ea:24:a6:a9:33:c2:ed:7b: fd:8c:98:6d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErhlors4uwM2P9sH+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk M2NmZWNlZDItYzE4NS00OTk5LTg0ZWEtZjg4YTBlOWMwZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtldWTweRaAAWgMoCqtimBuSD2G/adjDLJa+E j8c/8JOnrnVOLQEVsstApMoDwVfXUDOu9jQ5tsSmf0PohXEvRiuM2XGS65xRjD9G utfVBawq/8GnEq7HChif2dHhhfEyheg+atVVS9XCAGXABe2Hh7XMU5R7nuLRHCYq u9pmguGZU/mVzJyyXxCidH0xRKlpc0NM/1L+qLfFbOsFjHrhqELdi3C1yvUgzXay zTE5N+tpYkoFrZpG3xQ3GmIYZ8Zf3YRRaKiapbW0nV8G1qXg2Vyq6fbO4WLQpl34 6q1XMJiFyqZxKx4U6Ye8NrqMFQTgw10kTLkfj0x6ta+kl18WfwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPr3xu5LRTbykhM0eIxF3xmo30QBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNDZjMWE3YzItYjNkNi0z ZTFiLWEwYjEtNWM5N2I0YzM2NmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALSGYAwQA LSGfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA988SzL1sGj1gT/nw2o+4UOhyIbSexCe/O+BsCqRYPLpRkE Vax22xvBS1CzyBmaTille/7qWIxukVAgpC4DZnONUZvO0uOAwNCYfQGFJlgPaVXe 7yGstRGc7bWW4rQcp1BH1DsSrL8DMCG1yOK8fuEldkwya6aw8QF8dow6M+UccgLR HMjDHKBKLmWjqNStDnM+ErM1DtJvPs1orODwQLIMYGmgWWzsfj6yP4npCUbNFhmQ ssJp8rpmXBwomF8YaJn6a1Z7ZwTaX7DLe5hlnMgumQzmnPTMpMfbQMGfs6HgL67F l4O/6qa2HM7pJS5IS0fjNfzqJKapM8Lte/2MmG0= -----END CERTIFICATE-----Generated at Sat Aug 23 10:09:33 2025 by rpki-client