$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359/0a9e2a69-f4c8-3d1f-9bc7-4b2912186a65.roa File: 0a9e2a69-f4c8-3d1f-9bc7-4b2912186a65.roa (raw, json) Hash identifier: JzKEzgPVYq9StuT4ufWG53xARtn0MdFu6clXm3lHqzQ= Subject key identifier: 2C:81:2A:FC:35:A2:1A:0D:86:B7:C2:51:F1:52:4D:0E:1C:BA:5A:A3 Certificate issuer: /CN=2cbcd744-1d0b-4daf-bb75-fbe69ef2c359 Certificate serial: 010D0C9F4328584D492A67E9B7C9A9F31FA1FB20 Authority key identifier: 09:B8:6C:4B:EF:A0:22:88:CF:47:66:E7:89:22:03:32:50:66:F3:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359/0a9e2a69-f4c8-3d1f-9bc7-4b2912186a65.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 40440 IP address blocks: 45.62.90.0/24 maxlen: 24 45.62.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:67:e9:b7:c9:a9:f3:1f:a1:fb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cbcd744-1d0b-4daf-bb75-fbe69ef2c359 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=5f925fc4-3fe9-47b7-8908-75b845e50056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:81:97:b6:ff:1b:01:dc:32:2c:5a:2c:75:be: fd:39:f2:32:b0:4c:4a:dd:4a:d9:49:ce:ea:ad:02: 90:d6:77:ee:37:12:a6:b8:81:ce:d2:82:4f:d5:80: 56:bc:9f:22:09:29:ec:85:e2:d5:2d:b8:e5:bb:c3: 1a:05:76:80:a5:90:8b:c3:a0:60:15:0c:aa:d4:92: b3:15:a9:be:6e:fe:81:25:64:90:b7:6e:79:bb:b3: 9a:05:86:d7:85:af:52:2b:29:db:ee:b4:30:1b:19: 19:12:03:e2:11:59:42:94:27:3b:25:61:47:96:1d: f8:77:e4:1d:9e:5c:ad:7f:b1:8a:16:91:50:ac:8b: db:05:27:2c:0c:9c:e2:81:ac:07:b4:7a:49:70:e2: b9:44:5b:bf:56:cc:80:80:c0:51:0a:7d:a5:16:db: 46:59:59:30:56:7d:e2:51:7c:d6:f6:9f:f9:7e:e3: 6a:33:f7:88:f4:b5:d8:e9:fb:0d:0e:33:25:d6:ea: 28:61:da:2f:c4:3f:4d:44:f8:bc:4a:31:da:c8:72: 21:5d:4b:4a:0c:25:e6:26:26:6a:b1:71:b7:a7:58: 52:a8:be:91:d7:c7:58:c6:9e:9f:9c:8c:6e:76:a3: a8:21:f1:b3:8d:8a:ce:fb:56:89:dc:5d:82:d4:18: cf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:81:2A:FC:35:A2:1A:0D:86:B7:C2:51:F1:52:4D:0E:1C:BA:5A:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359/0a9e2a69-f4c8-3d1f-9bc7-4b2912186a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359.crl X509v3 Authority Key Identifier: keyid:09:B8:6C:4B:EF:A0:22:88:CF:47:66:E7:89:22:03:32:50:66:F3:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359.cer sbgp-ipAddrBlock: critical IPv4: 45.62.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:59:df:16:4c:89:b4:9d:b6:20:75:bb:36:75:3f:77:f1:a6: 79:ce:72:50:42:a9:40:c0:f5:26:de:a5:ac:ea:8f:18:ed:60: 3f:d9:a4:0c:22:4a:09:87:03:92:ca:ee:25:a1:e1:44:95:8f: bd:67:41:89:28:40:20:03:52:74:c0:aa:eb:6b:85:1f:56:0a: 69:08:19:de:e2:d6:4a:8a:35:3d:41:1e:c7:f1:fe:36:0b:93: 07:b4:32:29:a3:80:e3:ba:67:60:6e:60:d2:9d:cf:8f:a9:21: 40:bb:4c:2e:b8:11:94:92:be:82:7a:e7:b1:ff:89:98:0a:61: 9f:33:ae:96:92:95:e8:51:4d:20:9b:d3:e5:d5:a7:48:71:e0: 78:a3:6e:cc:7c:1e:64:72:9a:91:ae:a3:8e:9d:87:f8:b1:b1: 05:b8:14:89:81:fe:6f:5d:c9:1f:46:44:58:1f:38:ec:3d:77: 90:31:80:6a:09:40:bf:43:a1:9b:34:d0:d2:1a:30:b1:75:34: cf:ea:88:f1:09:d9:e4:7f:eb:3a:3e:97:b7:61:32:35:08:04: 85:ad:0d:1a:f5:ce:3a:79:7e:0a:e7:d4:c2:75:50:0d:63:0a: 01:84:bc:fe:0c:64:93:75:30:79:ea:5e:53:89:04:f2:a5:42: 33:3b:6f:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmfpt8mp8x+h+yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiY2Q3NDQtMWQwYi00ZGFmLWJiNzUtZmJlNjllZjJj MzU5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NWY5MjVmYzQtM2ZlOS00N2I3LTg5MDgtNzViODQ1ZTUwMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioGXtv8bAdwyLFosdb79OfIysExK3UrZSc7q rQKQ1nfuNxKmuIHO0oJP1YBWvJ8iCSnsheLVLbjlu8MaBXaApZCLw6BgFQyq1JKz Fam+bv6BJWSQt255u7OaBYbXha9SKynb7rQwGxkZEgPiEVlClCc7JWFHlh34d+Qd nlytf7GKFpFQrIvbBScsDJzigawHtHpJcOK5RFu/VsyAgMBRCn2lFttGWVkwVn3i UXzW9p/5fuNqM/eI9LXY6fsNDjMl1uooYdovxD9NRPi8SjHayHIhXUtKDCXmJiZq sXG3p1hSqL6R18dYxp6fnIxudqOoIfGzjYrO+1aJ3F2C1BjPzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyBKvw1ohoNhrfCUfFSTQ4culqjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yY2Jj ZDc0NC0xZDBiLTRkYWYtYmI3NS1mYmU2OWVmMmMzNTkvMGE5ZTJhNjktZjRjOC0z ZDFmLTliYzctNGIyOTEyMTg2YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmNiY2Q3NDQtMWQwYi00ZGFmLWJi NzUtZmJlNjllZjJjMzU5LzJjYmNkNzQ0LTFkMGItNGRhZi1iYjc1LWZiZTY5ZWYy YzM1OS5jcmwwHwYDVR0jBBgwFoAUCbhsS++gIojPR2bniSIDMlBm8/0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yY2JjZDc0NC0xZDBiLTRkYWYtYmI3NS1mYmU2 OWVmMmMzNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLT5aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpZ3xZMibSdtiB1uzZ1P3fxpnnOclBCqUDA9SbepazqjxjtYD/ZpAwi SgmHA5LK7iWh4USVj71nQYkoQCADUnTAqutrhR9WCmkIGd7i1kqKNT1BHsfx/jYL kwe0MimjgOO6Z2BuYNKdz4+pIUC7TC64EZSSvoJ657H/iZgKYZ8zrpaSlehRTSCb 0+XVp0hx4Hijbsx8HmRympGuo46dh/ixsQW4FImB/m9dyR9GRFgfOOw9d5AxgGoJ QL9DoZs00NIaMLF1NM/qiPEJ2eR/6zo+l7dhMjUIBIWtDRr1zjp5fgrn1MJ1UA1j CgGEvP4MZJN1MHnqXlOJBPKlQjM7b3A= -----END CERTIFICATE-----Generated at Thu Mar 26 13:09:02 2026 by rpki-client