$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3c45d558-4110-3bb1-a881-a92d5ab92991.roa File: 3c45d558-4110-3bb1-a881-a92d5ab92991.roa (raw, json) Hash identifier: cDZOzqpqCi9fHlfVu7JmL0BLhP2AYGNXzbB2BzGbcSk= Subject key identifier: 15:C3:1C:7E:6D:53:EF:72:D4:97:36:7F:75:0F:2C:0B:05:83:F3:FC Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B3821A3709A88F08F34E823C0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3c45d558-4110-3bb1-a881-a92d5ab92991.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 46261 IP address blocks: 45.33.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:a3:70:9a:88:f0:8f:34:e8:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=b2a37aad-67b1-4c63-aa3a-c2da551549ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fd:6d:19:6b:09:92:a2:6d:d7:45:92:69:6d: 15:89:54:07:19:d6:c6:5e:96:95:cd:45:ab:b8:f1: 78:e9:18:36:40:2d:d5:1b:2f:cb:3b:35:5b:91:f9: e4:e3:26:89:7c:a2:e4:4d:35:78:3a:e9:2f:c1:93: 99:75:cf:ff:6f:34:9d:c7:3a:f6:04:73:39:78:63: bb:25:b2:ac:6f:d4:e4:e1:8f:d5:23:62:07:12:93: ef:04:a1:14:ac:4c:64:6c:d1:b0:5a:ca:41:0f:c6: 78:6d:1a:21:9d:1c:a2:77:20:65:57:89:9b:af:e4: 12:9e:ed:81:fb:2b:cc:e3:00:9e:a9:f0:c5:70:9f: 88:3d:f2:04:a5:28:e3:90:28:d8:be:13:9e:1c:54: 63:41:15:e3:52:d6:a9:44:d3:1b:93:d2:fe:68:35: ec:d7:e5:6d:cc:f1:f2:28:87:d0:a4:4a:30:34:b0: 48:d7:e0:33:13:10:a0:76:48:18:8a:93:1f:0e:a7: 7e:25:74:17:3c:60:55:25:d7:c6:ba:4c:12:9f:ed: e4:8e:e6:56:27:32:6c:b6:7c:7a:82:42:e5:03:99: 46:93:ef:e9:32:ca:14:47:fc:1f:f5:5d:a8:8c:ee: aa:4a:6f:e7:79:b4:a5:cb:2d:3c:f7:21:80:ea:57: 90:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C3:1C:7E:6D:53:EF:72:D4:97:36:7F:75:0F:2C:0B:05:83:F3:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3c45d558-4110-3bb1-a881-a92d5ab92991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 45.33.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e4:2c:70:d0:70:bb:7b:06:fa:5f:9f:ec:3c:87:48:42:07: 90:2c:b1:ba:b8:33:44:2f:0b:3e:78:ff:67:61:4c:db:0b:75: ce:ce:b5:72:e3:41:a4:44:29:bb:42:f8:72:e6:09:75:79:0b: 1e:78:79:ab:b1:d7:6c:bb:4f:39:97:69:4f:fd:68:bd:1f:0a: d1:16:da:a7:23:c8:6b:3e:f4:e8:65:d0:58:9a:f0:4a:0f:81: a9:ed:2d:01:18:81:be:3c:7d:d4:84:9f:02:1d:33:c3:56:7f: af:a9:ab:ab:0a:d8:95:33:b4:8a:cd:26:62:eb:3d:4e:9f:f6: 41:89:a6:f3:62:13:b4:d5:a8:38:4e:e2:25:dd:d6:33:fa:0d: 53:d3:e5:f7:73:35:06:5f:d3:a2:f2:7b:c3:f0:b9:4c:da:2f: a0:66:b5:75:f8:a5:ea:86:45:6f:3c:b9:a8:fd:a1:96:27:02: 83:6e:48:25:75:fb:71:b9:a1:ac:37:78:bf:38:3f:6b:90:b5: 05:0c:4f:ec:bb:2f:17:6f:e9:3a:ae:65:79:7f:2b:0a:e4:80: ab:b6:0c:5a:8b:36:04:44:ee:83:c1:ea:e5:50:a4:07:61:6d: 9d:8d:e8:55:dc:dc:a7:3f:5d:97:db:87:aa:55:f8:a8:d2:f3: 0b:7e:85:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IaNwmojwjzToI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YjJhMzdhYWQtNjdiMS00YzYzLWFhM2EtYzJkYTU1MTU0OWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/1tGWsJkqJt10WSaW0ViVQHGdbGXpaVzUWr uPF46Rg2QC3VGy/LOzVbkfnk4yaJfKLkTTV4OukvwZOZdc//bzSdxzr2BHM5eGO7 JbKsb9Tk4Y/VI2IHEpPvBKEUrExkbNGwWspBD8Z4bRohnRyidyBlV4mbr+QSnu2B +yvM4wCeqfDFcJ+IPfIEpSjjkCjYvhOeHFRjQRXjUtapRNMbk9L+aDXs1+VtzPHy KIfQpEowNLBI1+AzExCgdkgYipMfDqd+JXQXPGBVJdfGukwSn+3kjuZWJzJstnx6 gkLlA5lGk+/pMsoUR/wf9V2ojO6qSm/nebSlyy089yGA6leQfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXDHH5tU+9y1Jc2f3UPLAsFg/P8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2M0NWQ1NTgtNDExMC0z YmIxLWE4ODEtYTkyZDVhYjkyOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTkLHDQcLt7Bvpfn+w8h0hCB5Assbq4M0QvCz54/2dhTNsLdc7OtXLj QaREKbtC+HLmCXV5Cx54eaux12y7TzmXaU/9aL0fCtEW2qcjyGs+9Ohl0Fia8EoP gantLQEYgb48fdSEnwIdM8NWf6+pq6sK2JUztIrNJmLrPU6f9kGJpvNiE7TVqDhO 4iXd1jP6DVPT5fdzNQZf06Lye8PwuUzaL6BmtXX4peqGRW88uaj9oZYnAoNuSCV1 +3G5oaw3eL84P2uQtQUMT+y7Lxdv6TquZXl/KwrkgKu2DFqLNgRE7oPB6uVQpAdh bZ2N6FXc3Kc/XZfbh6pV+KjS8wt+hXI= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:15 2025 by rpki-client