$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa File: 1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa (raw, json) Hash identifier: bSgDHhIs6xqZdohWz2sY0am+OlspzvRUAgox+jpCCqc= Subject key identifier: 45:C7:50:8A:4E:E6:1F:23:3B:97:A0:70:58:87:55:E9:8C:93:8A:23 Certificate issuer: /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Certificate serial: 010D0C9F4328584D3F64EFC0FEB040313A4E0440 Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 1011 IP address blocks: 45.45.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:ef:c0:fe:b0:40:31:3a:4e:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=73ace077-d5a5-4166-9516-70862283eeb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e8:6b:8f:25:8f:b6:e7:35:f4:42:da:35:eb: a3:59:bf:7a:59:57:e0:76:f3:db:1c:a7:c8:e1:00: af:0a:ce:26:71:b2:9e:52:92:58:52:a1:ab:04:95: 26:a8:e2:d9:af:27:ba:e3:11:7c:9b:92:12:c3:bd: 42:19:9b:53:52:b9:21:05:d5:a2:11:54:e1:12:e6: a7:ce:9f:bd:15:53:e2:c1:75:7f:9a:8d:37:c4:f3: 93:4b:64:38:43:aa:fd:a8:df:78:f0:e5:3b:d2:8f: 17:63:72:94:ff:27:00:40:3a:f7:57:14:a4:bf:bd: a6:62:71:4b:d2:f9:30:8f:e8:93:91:f3:0c:75:fa: 16:67:20:0e:53:1b:62:3b:e6:f7:86:33:c2:2a:0d: 49:fc:32:2a:48:69:a3:2c:82:db:73:c8:16:0b:c8: 71:b4:e4:e5:66:bb:8c:fb:97:42:af:d9:15:85:fe: 27:a4:9a:69:3d:42:f4:00:f4:c9:a2:0f:09:61:6e: c6:10:a8:a2:74:d7:61:5a:82:c3:ce:7d:47:be:50: ff:82:39:2a:c3:33:f1:d1:5f:3c:1d:b5:82:0b:42: 17:0d:02:3e:67:24:89:41:a9:2b:aa:98:11:cd:e4: bf:5a:cd:09:51:6b:14:a7:b4:6e:4c:9f:7e:02:d3: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C7:50:8A:4E:E6:1F:23:3B:97:A0:70:58:87:55:E9:8C:93:8A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl X509v3 Authority Key Identifier: keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer sbgp-ipAddrBlock: critical IPv4: 45.45.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:f3:f6:04:2c:e1:fc:a2:b1:91:bb:06:76:e8:ef:53:25:53: 39:58:6f:f5:a7:5e:fb:3e:29:1f:d9:20:e5:fd:55:3b:4e:8b: 50:34:d7:91:a0:ca:fe:61:91:a7:9e:e7:c6:7d:e2:a2:ae:f4: 25:9b:79:0e:d1:36:d4:07:34:2a:4d:f0:47:8e:f0:b0:db:8a: db:31:0b:0d:0d:2f:ad:84:eb:16:8a:1a:cb:5a:eb:b5:b9:d1: 23:d6:9f:01:f9:ec:67:4c:b8:92:a4:2a:15:28:8f:fd:f9:e7: cb:d0:a6:96:93:28:56:19:af:eb:e0:85:53:64:3c:76:20:be: 7a:02:8a:99:11:35:b2:da:14:77:d8:03:07:24:74:0d:d2:9a: f7:11:3c:ea:68:77:37:b5:5b:7d:2b:aa:79:31:c6:86:76:a4: 7f:01:0f:b1:9b:f1:5d:e4:49:ad:49:e3:eb:cc:6a:5a:bb:f7: 88:75:74:28:37:0e:7b:84:5e:c0:39:37:86:fa:07:5b:f0:d3: 74:cd:65:45:21:30:c6:01:1f:7e:44:64:df:05:4d:f0:71:0b: 7a:49:65:4b:d7:7d:38:3a:75:84:f2:b1:42:ca:0f:78:ac:1f: 8d:fd:ea:ec:5d:11:38:4a:fb:f2:9d:15:82:dd:13:3e:09:62: 20:5e:c2:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZO/A/rBAMTpOBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YmM1YzMtOWVmNC00ZGEzLTlmY2YtNGVjNmRhYmJm YmMzMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NzNhY2UwNzctZDVhNS00MTY2LTk1MTYtNzA4NjIyODNlZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuhrjyWPtuc19ELaNeujWb96WVfgdvPbHKfI 4QCvCs4mcbKeUpJYUqGrBJUmqOLZrye64xF8m5ISw71CGZtTUrkhBdWiEVThEuan zp+9FVPiwXV/mo03xPOTS2Q4Q6r9qN948OU70o8XY3KU/ycAQDr3VxSkv72mYnFL 0vkwj+iTkfMMdfoWZyAOUxtiO+b3hjPCKg1J/DIqSGmjLILbc8gWC8hxtOTlZruM +5dCr9kVhf4npJppPUL0APTJog8JYW7GEKiidNdhWoLDzn1HvlD/gjkqwzPx0V88 HbWCC0IXDQI+ZySJQakrqpgRzeS/Ws0JUWsUp7RuTJ9+AtNK8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXHUIpO5h8jO5egcFiHVemMk4ojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRi YzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2ZGFiYmZiYzMvMWM4N2MxYzktMzMxYS0z NTI0LTlmNDQtMWJjNGUzMzA1OWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWY0YmM1YzMtOWVmNC00ZGEzLTlm Y2YtNGVjNmRhYmJmYmMzL2FmNGJjNWMzLTllZjQtNGRhMy05ZmNmLTRlYzZkYWJi ZmJjMy5jcmwwHwYDVR0jBBgwFoAUsrvXRQKNNtbCM39NSIxDRyFgB78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRiYzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2 ZGFiYmZiYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHz9gQs4fyisZG7Bnbo71MlUzlYb/WnXvs+KR/ZIOX9VTtOi1A015Gg yv5hkaee58Z94qKu9CWbeQ7RNtQHNCpN8EeO8LDbitsxCw0NL62E6xaKGsta67W5 0SPWnwH57GdMuJKkKhUoj/3558vQppaTKFYZr+vghVNkPHYgvnoCipkRNbLaFHfY AwckdA3SmvcRPOpodze1W30rqnkxxoZ2pH8BD7Gb8V3kSa1J4+vMalq794h1dCg3 DnuEXsA5N4b6B1vw03TNZUUhMMYBH35EZN8FTfBxC3pJZUvXfTg6dYTysULKD3is H4396uxdEThK+/KdFYLdEz4JYiBewqE= -----END CERTIFICATE-----Generated at Thu Mar 26 06:54:14 2026 by rpki-client