$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e1245ecc-016c-3d87-a13c-64934969ef40.roa File: e1245ecc-016c-3d87-a13c-64934969ef40.roa (raw, json) Hash identifier: t64vYRtuJhrjW3wfoC7yNes+GCSP6lxFJSHzlEt2kjw= Subject key identifier: B5:9D:54:36:35:00:F6:0B:19:41:82:81:BA:E2:12:DE:95:9A:35:97 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AE0311DEFEA5915EE97FA5B00 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e1245ecc-016c-3d87-a13c-64934969ef40.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 212238 IP address blocks: 45.33.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:1d:ef:ea:59:15:ee:97:fa:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=cacd2662-3cf8-42ae-8a17-a6267315c098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9a:98:1b:5a:dc:ec:f9:04:e3:24:1c:54:d1: 44:89:fd:70:79:5b:9e:d5:58:be:63:84:e2:1d:21: 96:66:f0:b4:d7:ae:3e:76:38:27:9f:84:28:f6:bd: 8c:2d:e2:af:c2:1f:32:47:dd:22:42:fc:e2:f8:54: 2e:2f:28:4d:d4:1c:8c:1a:42:c9:2d:5a:b9:ad:41: 5c:b8:e8:69:04:a6:a5:10:29:5d:4d:98:ff:62:85: b8:ca:e8:e2:48:3e:3d:56:69:62:8a:c8:f6:34:3d: 64:c9:b4:72:6a:4c:6c:9d:22:6c:bf:fb:ea:6e:12: 13:01:d7:15:ae:aa:6c:de:e2:12:3c:3c:13:f7:39: 5b:38:f5:2a:b0:ae:c6:16:ff:5a:71:17:b7:3a:88: 27:c9:0b:40:ac:a5:22:15:76:36:21:b8:51:a7:fb: 95:8b:aa:8e:ff:61:ee:dd:97:53:74:7c:da:ed:2d: f2:65:e9:06:38:e8:d7:db:40:34:e3:d7:61:00:d9: dc:08:1e:ef:ed:3a:70:9a:af:13:73:0e:c2:2f:8f: 1f:02:e7:4b:f0:e4:3a:a2:4d:8b:19:aa:fb:6c:b1: dd:25:2e:32:86:c1:66:5b:e8:7a:63:ee:87:75:7e: 66:bb:f4:a5:65:cb:7a:e2:74:95:81:21:6f:6d:4c: b6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9D:54:36:35:00:F6:0B:19:41:82:81:BA:E2:12:DE:95:9A:35:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e1245ecc-016c-3d87-a13c-64934969ef40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 45.33.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a2:28:5d:08:fd:6f:65:06:1d:26:dd:06:66:b4:b3:d6:6a: b5:87:0c:61:8b:20:7a:fa:52:03:f5:c8:81:7b:b6:6e:9a:38: 51:a5:3c:2f:92:b4:a8:f1:a4:ee:82:46:55:05:5b:76:ea:13: 2c:49:25:00:b6:46:26:e2:0e:df:ec:3a:e3:2a:fe:85:a1:91: 0b:bf:69:b3:d4:28:be:42:92:78:87:e7:3d:b8:64:74:fc:21: 99:d8:67:cd:9c:36:0d:b6:09:d3:c7:8e:76:9a:2f:56:b8:c6: c5:f6:97:62:10:47:d1:f8:d5:aa:a0:12:68:d6:12:4b:6c:3c: b5:e6:e7:28:ec:05:f4:b6:ab:12:ee:e4:e6:e0:03:2e:69:d9: 22:d4:8a:0e:9e:22:b3:a7:e2:b0:d5:c3:86:bc:4a:fd:a3:31: 52:1c:01:ff:8b:e8:3f:aa:85:9b:39:37:da:c3:94:55:a1:dd: 59:c2:2b:d7:28:19:76:25:0f:0a:3e:3c:e9:55:5d:57:5a:25: 42:4d:fd:47:09:a0:25:4e:59:d0:a3:da:34:3d:37:92:eb:37: b4:fc:53:8b:f2:1b:41:9b:37:44:b5:8b:9b:8a:51:23:7a:11: fd:cc:e8:c2:73:de:40:2c:52:2b:53:cc:44:97:cd:fa:7c:12: 76:ff:ea:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMR3v6lkV7pf6WwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk Y2FjZDI2NjItM2NmOC00MmFlLThhMTctYTYyNjczMTVjMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJqYG1rc7PkE4yQcVNFEif1weVue1Vi+Y4Ti HSGWZvC0164+djgnn4Qo9r2MLeKvwh8yR90iQvzi+FQuLyhN1ByMGkLJLVq5rUFc uOhpBKalECldTZj/YoW4yujiSD49Vmliisj2ND1kybRyakxsnSJsv/vqbhITAdcV rqps3uISPDwT9zlbOPUqsK7GFv9acRe3OognyQtArKUiFXY2IbhRp/uVi6qO/2Hu 3ZdTdHza7S3yZekGOOjX20A049dhANncCB7v7Tpwmq8Tcw7CL48fAudL8OQ6ok2L Gar7bLHdJS4yhsFmW+h6Y+6HdX5mu/SlZct64nSVgSFvbUy2yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWdVDY1APYLGUGCgbriEt6VmjWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZTEyNDVlY2MtMDE2Yy0z ZDg3LWExM2MtNjQ5MzQ5NjllZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaiKF0I/W9lBh0m3QZmtLPWarWHDGGLIHr6UgP1yIF7tm6aOFGlPC+S tKjxpO6CRlUFW3bqEyxJJQC2RibiDt/sOuMq/oWhkQu/abPUKL5CkniH5z24ZHT8 IZnYZ82cNg22CdPHjnaaL1a4xsX2l2IQR9H41aqgEmjWEktsPLXm5yjsBfS2qxLu 5ObgAy5p2SLUig6eIrOn4rDVw4a8Sv2jMVIcAf+L6D+qhZs5N9rDlFWh3VnCK9co GXYlDwo+POlVXVdaJUJN/UcJoCVOWdCj2jQ9N5LrN7T8U4vyG0GbN0S1i5uKUSN6 Ef3M6MJz3kAsUitTzESXzfp8Enb/6nU= -----END CERTIFICATE-----Generated at Sat Aug 23 20:06:11 2025 by rpki-client