$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/d0af02a9-0d8a-3be9-89c3-b3f9051c6a65.roa File: d0af02a9-0d8a-3be9-89c3-b3f9051c6a65.roa (raw, json) Hash identifier: ttkN2b9opSIdAQ+K7/9StChSkwMdkguT8awrGgTGwLQ= Subject key identifier: 04:C8:E3:41:E0:D2:A8:FB:2B:9E:40:F9:14:F2:1B:D1:DC:03:12:0C Certificate issuer: /CN=1019a62c-c6e6-45a6-a0e7-472a84b5ba68 Certificate serial: 010D0C9F4328584EF9E20BD814E079A0F6400A80 Authority key identifier: CE:02:0E:11:62:45:2E:57:D6:13:BA:B6:EE:85:52:C2:30:31:BE:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/d0af02a9-0d8a-3be9-89c3-b3f9051c6a65.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 399979 IP address blocks: 45.139.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:0b:d8:14:e0:79:a0:f6:40:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1019a62c-c6e6-45a6-a0e7-472a84b5ba68 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=dce21762-3383-4adf-b57f-e3eb04598c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:87:7f:d8:d4:55:cd:41:97:a8:96:92:a5:b9: 78:f3:ce:21:3e:32:3c:a6:6e:c6:f9:e8:64:94:d4: 61:fb:9e:e5:3f:ab:87:72:b1:89:a8:9a:50:69:35: 5f:d0:50:de:ed:9c:21:6d:e8:81:57:16:5e:ed:b3: 62:4b:b4:0e:1f:b0:62:cc:53:6e:c4:5c:57:74:7e: a9:38:54:79:44:5c:01:91:56:de:bf:14:3c:16:6b: 00:87:20:c3:d2:05:82:e9:1d:32:4a:72:1e:92:19: e1:fb:5b:19:da:b5:c1:04:83:7c:44:c0:f0:c2:4a: 55:9f:13:f9:3f:61:d0:f2:af:00:d8:27:ba:62:5a: 3d:c7:05:1a:51:fd:8b:c5:f3:44:d2:8d:28:b6:d5: 50:f4:ad:98:d0:9f:59:27:d2:d1:c8:9e:a1:98:6d: 0a:5d:4b:d2:3d:3c:1b:8a:b0:3b:be:70:86:8c:90: dc:12:48:dd:7f:df:e7:df:a0:68:c5:0a:af:15:31: 34:e0:1f:88:98:2c:91:51:29:83:3e:ec:2f:89:2d: 72:7e:de:9c:10:cc:d4:84:fc:a1:e3:3a:2f:97:15: 88:34:ac:be:87:f4:83:99:02:db:68:2d:61:05:86: cc:dc:0a:b8:9b:d5:fc:fb:eb:14:cd:da:57:55:e5: 3c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C8:E3:41:E0:D2:A8:FB:2B:9E:40:F9:14:F2:1B:D1:DC:03:12:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/d0af02a9-0d8a-3be9-89c3-b3f9051c6a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.crl X509v3 Authority Key Identifier: keyid:CE:02:0E:11:62:45:2E:57:D6:13:BA:B6:EE:85:52:C2:30:31:BE:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.cer sbgp-ipAddrBlock: critical IPv4: 45.139.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ad:70:c5:55:96:5e:f6:3c:1a:42:4b:0e:97:48:85:93:69: c1:4b:4f:42:03:d8:a9:d0:f5:c7:33:da:49:63:b2:8d:0e:ad: d8:67:ec:2c:ee:18:0d:19:68:80:7a:fb:fb:e6:12:ac:d3:31: 68:03:ee:af:32:29:de:cd:04:66:42:c5:0e:f7:b6:12:63:78: 46:c8:2b:b6:5e:be:fa:bc:80:6b:93:85:87:7f:5f:b6:67:ff: 88:c9:79:ca:c1:89:0e:33:d2:9e:6c:74:4b:43:e0:d9:e2:c5: 35:88:09:1f:d3:42:7f:6d:86:05:fa:ad:1a:05:49:82:bb:e4: 52:d0:c5:3b:80:13:92:6f:e1:ab:0e:96:a2:57:8c:61:73:6e: 0a:6d:fe:11:1a:28:c0:02:fc:ef:62:2c:0e:40:93:d3:4c:d6: 58:9f:8f:38:5e:55:77:64:23:9c:dd:14:92:af:53:a3:17:71: 6d:03:20:c8:94:a0:b8:02:2c:5b:1f:cf:dc:98:d0:3a:08:ae: b1:b4:be:65:e0:29:1a:dc:e4:0c:69:23:57:e9:78:d3:33:51: 8f:dd:a1:1f:61:89:ee:4d:34:1c:79:83:b7:fe:2a:23:e6:49: 70:4e:6b:51:74:d1:22:40:7f:e6:c8:14:cf:a3:28:b3:a8:58: c2:d0:ff:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754gvYFOB5oPZACoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTAxOWE2MmMtYzZlNi00NWE2LWEwZTctNDcyYTg0YjVi YTY4MB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk ZGNlMjE3NjItMzM4My00YWRmLWI1N2YtZTNlYjA0NTk4YzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYd/2NRVzUGXqJaSpbl4884hPjI8pm7G+ehk lNRh+57lP6uHcrGJqJpQaTVf0FDe7ZwhbeiBVxZe7bNiS7QOH7BizFNuxFxXdH6p OFR5RFwBkVbevxQ8FmsAhyDD0gWC6R0ySnIekhnh+1sZ2rXBBIN8RMDwwkpVnxP5 P2HQ8q8A2Ce6Ylo9xwUaUf2LxfNE0o0ottVQ9K2Y0J9ZJ9LRyJ6hmG0KXUvSPTwb irA7vnCGjJDcEkjdf9/n36BoxQqvFTE04B+ImCyRUSmDPuwviS1yft6cEMzUhPyh 4zovlxWINKy+h/SDmQLbaC1hBYbM3Aq4m9X8++sUzdpXVeU8RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATI40Hg0qj7K55A+RTyG9HcAxIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDE5 YTYyYy1jNmU2LTQ1YTYtYTBlNy00NzJhODRiNWJhNjgvZDBhZjAyYTktMGQ4YS0z YmU5LTg5YzMtYjNmOTA1MWM2YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTAxOWE2MmMtYzZlNi00NWE2LWEw ZTctNDcyYTg0YjViYTY4LzEwMTlhNjJjLWM2ZTYtNDVhNi1hMGU3LTQ3MmE4NGI1 YmE2OC5jcmwwHwYDVR0jBBgwFoAUzgIOEWJFLlfWE7q27oVSwjAxvoEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDE5YTYyYy1jNmU2LTQ1YTYtYTBlNy00NzJh ODRiNWJhNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOtcMVVll72PBpCSw6XSIWTacFLT0ID2KnQ9ccz2kljso0Ordhn7Czu GA0ZaIB6+/vmEqzTMWgD7q8yKd7NBGZCxQ73thJjeEbIK7Zevvq8gGuThYd/X7Zn /4jJecrBiQ4z0p5sdEtD4NnixTWICR/TQn9thgX6rRoFSYK75FLQxTuAE5Jv4asO lqJXjGFzbgpt/hEaKMAC/O9iLA5Ak9NM1lifjzheVXdkI5zdFJKvU6MXcW0DIMiU oLgCLFsfz9yY0DoIrrG0vmXgKRrc5AxpI1fpeNMzUY/doR9hie5NNBx5g7f+KiPm SXBOa1F00SJAf+bIFM+jKLOoWMLQ/1c= -----END CERTIFICATE-----Generated at Sun Oct 4 00:08:08 2026 by rpki-client