$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa File: 0649525a-4f78-38b5-9509-f91bdf00cd84.roa (raw, json) Hash identifier: EeGk6fy5msKMg1R97JQf9WQ87Xfw/RciuP5/Gf+AMrs= Subject key identifier: 49:FD:17:26:FF:78:39:6C:50:B5:8F:5E:1F:0F:AB:3C:76:8B:B6:DD Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584F9E987F42C5092F051F3CF780 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 53356 IP address blocks: 45.62.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:7f:42:c5:09:2f:05:1f:3c:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=f29fc168-53ed-4fd1-96b3-a0e67be59ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:61:ca:b7:69:c9:3c:5d:a4:c0:63:25:05:ec: d7:9f:92:ed:ee:87:13:9b:0e:47:2b:59:33:2d:d9: 43:60:48:cd:36:07:2e:90:45:4f:02:4d:7b:81:83: bc:29:f7:a8:99:45:d7:9f:a1:74:19:d0:c1:b8:fc: 0f:fc:9b:64:1f:a4:33:b9:d9:49:ac:58:28:f0:69: b4:bd:b1:7c:29:1f:90:fa:9e:f9:89:0f:37:ed:95: 62:e1:73:77:63:d2:6a:8a:44:47:82:89:6f:26:d5: 4e:15:9d:c6:bf:8b:32:c6:88:6e:f4:87:b1:76:2d: eb:48:51:21:67:c0:ca:22:bb:bb:b5:09:20:08:b0: d8:44:3e:57:17:37:2f:1a:23:d6:ee:9d:48:d5:24: e4:a4:20:a1:70:11:1f:ed:73:80:80:56:ee:2d:7f: b3:82:d2:b1:a9:69:9b:1e:ed:e1:b9:91:7d:00:4e: 13:66:40:47:f5:b1:99:b5:7c:65:06:c7:22:6c:8e: 60:ff:fe:31:c5:b8:e2:5e:73:8c:4e:a4:14:43:f5: f8:7a:65:0b:ed:0e:d1:7d:f7:2d:20:2a:d0:e0:2a: 61:87:49:8c:25:a5:07:83:4a:cd:4c:69:a5:6e:59: 1e:2c:c5:1e:f6:5c:a3:36:b5:1d:9e:d2:e8:63:96: 8e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FD:17:26:FF:78:39:6C:50:B5:8F:5E:1F:0F:AB:3C:76:8B:B6:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.62.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:2b:d5:95:0c:f7:0b:72:59:29:1a:2f:4b:4e:5b:2a:f8:37: 90:38:a4:45:35:50:5c:0d:a8:08:42:00:f7:c9:47:29:f5:8b: b2:16:02:b5:75:2f:e1:cd:e0:a1:58:0b:c4:f9:87:48:8d:e8: 09:c7:26:8e:7b:70:6a:2f:96:c8:97:07:eb:26:79:34:20:ba: 99:d4:83:14:bc:9f:05:be:6c:da:76:4f:c9:d6:6b:a3:7b:7f: 93:26:56:d9:0f:73:b0:44:b5:ca:ae:8c:da:aa:1f:8d:74:c3: 49:b3:15:3f:81:e9:72:9c:e1:dd:5e:50:d2:95:d6:aa:af:82: da:8d:a7:d5:7e:0d:5b:39:07:8b:82:28:f4:37:d8:20:ca:92: 93:35:7e:09:27:d1:78:e7:ef:a3:78:3d:4f:51:72:bd:b5:96: 40:9a:44:e7:44:65:27:18:3d:dd:93:ac:70:2d:0f:1d:52:c3: 82:9d:b3:a9:f3:9f:33:52:a3:71:f3:c1:a3:97:60:7c:13:f7: 54:40:4b:aa:7d:ed:c1:cb:10:9c:97:6b:2a:6b:5d:a9:00:00: 00:b8:f9:d4:a5:75:6b:a1:a8:11:1a:61:fc:30:96:10:32:ab: dc:bb:a5:f3:33:64:b2:65:c3:01:89:5b:63:ce:07:ce:72:45: b0:e6:44:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emH9CxQkvBR8894AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk ZjI5ZmMxNjgtNTNlZC00ZmQxLTk2YjMtYTBlNjdiZTU5YWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGHKt2nJPF2kwGMlBezXn5Lt7ocTmw5HK1kz LdlDYEjNNgcukEVPAk17gYO8KfeomUXXn6F0GdDBuPwP/JtkH6QzudlJrFgo8Gm0 vbF8KR+Q+p75iQ837ZVi4XN3Y9JqikRHgolvJtVOFZ3Gv4syxohu9Iexdi3rSFEh Z8DKIru7tQkgCLDYRD5XFzcvGiPW7p1I1STkpCChcBEf7XOAgFbuLX+zgtKxqWmb Hu3huZF9AE4TZkBH9bGZtXxlBscibI5g//4xxbjiXnOMTqQUQ/X4emUL7Q7Rffct ICrQ4Cphh0mMJaUHg0rNTGmlblkeLMUe9lyjNrUdntLoY5aOSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEn9Fyb/eDlsULWPXh8Pqzx2i7bdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMDY0OTUyNWEtNGY3OC0z OGI1LTk1MDktZjkxYmRmMDBjZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT6rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcr1ZUM9wtyWSkaL0tOWyr4N5A4pEU1UFwNqAhCAPfJRyn1i7IWArV1 L+HN4KFYC8T5h0iN6AnHJo57cGovlsiXB+smeTQgupnUgxS8nwW+bNp2T8nWa6N7 f5MmVtkPc7BEtcqujNqqH410w0mzFT+B6XKc4d1eUNKV1qqvgtqNp9V+DVs5B4uC KPQ32CDKkpM1fgkn0Xjn76N4PU9Rcr21lkCaROdEZScYPd2TrHAtDx1Sw4Kds6nz nzNSo3HzwaOXYHwT91RAS6p97cHLEJyXayprXakAAAC4+dSldWuhqBEaYfwwlhAy q9y7pfMzZLJlwwGJW2POB85yRbDmRLQ= -----END CERTIFICATE-----Generated at Tue Oct 27 23:25:23 2026 by rpki-client