$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/e39a26be-d5d4-35a8-85eb-10dcab62f82f.roa File: e39a26be-d5d4-35a8-85eb-10dcab62f82f.roa (raw, json) Hash identifier: h7nGjoBdWUMZ7xMzN/RBI9CeFXoWOjAsxGSLhOcsN5c= Subject key identifier: E2:CD:8E:35:2C:1E:30:56:06:EB:31:05:02:7A:B8:BE:D3:60:92:BF Certificate issuer: /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Certificate serial: 010D0C9F4328584F0ED22C6A79245E818D5E3FF0 Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/e39a26be-d5d4-35a8-85eb-10dcab62f82f.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 397285 IP address blocks: 45.33.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:2c:6a:79:24:5e:81:8d:5e:3f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=3a0bca3d-2d37-44be-99c0-c89764ef4e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:54:ad:77:6d:88:b0:68:45:01:42:4a:4c: d7:b9:bd:5d:1d:c6:9f:25:eb:5e:34:7f:81:91:21: 20:cf:f9:75:18:12:fb:e1:a7:08:88:4e:ec:fb:ec: b1:85:1a:cb:94:1d:81:7c:65:53:4f:9f:d4:d1:a9: 1c:06:14:f6:9b:fe:03:d5:8b:10:9b:e1:84:3b:2e: ac:20:f5:81:6a:10:7a:db:7f:c0:c6:af:26:79:f4: c1:d9:43:68:d1:35:7b:70:2f:ea:99:c7:19:25:0d: 0e:6e:2d:f2:98:1f:b1:d5:7f:23:3a:ed:a9:94:db: 7b:f1:26:66:10:f7:b8:67:d4:0a:50:21:0c:9f:ff: 2b:0c:30:7e:e5:21:b1:ae:e4:1f:dc:dd:ae:31:84: 8b:2c:c5:e2:c5:40:8b:ee:96:32:4f:31:f3:fb:92: 5f:ad:ba:41:b5:ee:ba:05:4c:4c:73:c1:65:b5:d1: 09:e0:cc:fe:1e:3e:bb:de:1c:44:1c:8c:60:14:d6: 5d:a2:61:1f:01:cd:99:31:33:e7:fa:18:c7:9b:79: 37:11:00:74:60:86:04:2a:b4:44:10:7b:b2:bb:cb: 40:e9:e4:8b:d7:a8:be:39:93:63:db:a4:a4:21:bb: 7f:20:59:2c:e1:b2:6f:91:1e:36:25:24:47:79:a3: d2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CD:8E:35:2C:1E:30:56:06:EB:31:05:02:7A:B8:BE:D3:60:92:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/e39a26be-d5d4-35a8-85eb-10dcab62f82f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl X509v3 Authority Key Identifier: keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer sbgp-ipAddrBlock: critical IPv4: 45.33.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:32:0d:0b:e7:c4:aa:44:c4:65:f0:2e:a0:cb:6d:3d:e9:f5: 1f:9b:db:82:9b:a4:58:ca:82:86:0e:97:b2:35:33:ef:ae:1b: 72:6f:d8:c7:fa:6b:20:30:21:5c:53:3a:ec:91:5a:d0:00:c5: fc:4f:b3:4c:a4:9d:78:ac:83:07:cf:4b:d0:97:d6:ac:e6:76: b8:e4:6f:6a:1a:75:94:50:34:41:94:b1:82:39:0e:c5:04:2a: 11:b4:ed:13:03:a5:ba:11:86:e4:d3:3c:03:bc:90:22:87:b9: f3:65:e8:7d:49:63:91:14:a6:8b:78:33:17:f1:cb:f9:39:18: a5:fe:72:de:69:2a:b1:40:90:0f:1d:33:81:d5:2b:fd:9a:44: 02:92:9a:d7:84:68:3a:02:52:91:73:df:6c:80:c5:77:40:15: 66:3e:da:61:4f:60:e5:ff:15:69:5a:87:20:7a:c4:0a:e7:54: c9:0f:d5:7e:61:24:40:21:a8:74:6f:e6:05:cf:0d:35:1c:5b: 80:80:dc:61:e8:43:28:ed:51:eb:6a:c8:56:88:bb:49:ad:74: a8:cc:29:65:62:24:a0:ef:2f:f8:17:ac:93:56:22:a3:d6:7c: ba:5f:c0:fd:80:79:75:bd:cd:b3:c9:7a:ac:ae:1a:52:e3:bc: 6d:0e:37:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0ixqeSRegY1eP/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjZhMTUxODMtMmMyMy00ZDBhLTlhYWEtZmVlNDdmN2E2 MWYxMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk M2EwYmNhM2QtMmQzNy00NGJlLTk5YzAtYzg5NzY0ZWY0ZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpZUrXdtiLBoRQFCSkzXub1dHcafJeteNH+B kSEgz/l1GBL74acIiE7s++yxhRrLlB2BfGVTT5/U0akcBhT2m/4D1YsQm+GEOy6s IPWBahB623/Axq8mefTB2UNo0TV7cC/qmccZJQ0Obi3ymB+x1X8jOu2plNt78SZm EPe4Z9QKUCEMn/8rDDB+5SGxruQf3N2uMYSLLMXixUCL7pYyTzHz+5JfrbpBte66 BUxMc8FltdEJ4Mz+Hj673hxEHIxgFNZdomEfAc2ZMTPn+hjHm3k3EQB0YIYEKrRE EHuyu8tA6eSL16i+OZNj26SkIbt/IFks4bJvkR42JSRHeaPSowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLNjjUsHjBWBusxBQJ6uL7TYJK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNmEx NTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0N2Y3YTYxZjEvZTM5YTI2YmUtZDVkNC0z NWE4LTg1ZWItMTBkY2FiNjJmODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjZhMTUxODMtMmMyMy00ZDBhLTlh YWEtZmVlNDdmN2E2MWYxL2Y2YTE1MTgzLTJjMjMtNGQwYS05YWFhLWZlZTQ3Zjdh NjFmMS5jcmwwHwYDVR0jBBgwFoAUXn1mq2g8dHRGhTS6+1CkL33PqZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNmExNTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0 N2Y3YTYxZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSHaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsyDQvnxKpExGXwLqDLbT3p9R+b24KbpFjKgoYOl7I1M++uG3Jv2Mf6 ayAwIVxTOuyRWtAAxfxPs0yknXisgwfPS9CX1qzmdrjkb2oadZRQNEGUsYI5DsUE KhG07RMDpboRhuTTPAO8kCKHufNl6H1JY5EUpot4Mxfxy/k5GKX+ct5pKrFAkA8d M4HVK/2aRAKSmteEaDoCUpFz32yAxXdAFWY+2mFPYOX/FWlahyB6xArnVMkP1X5h JEAhqHRv5gXPDTUcW4CA3GHoQyjtUetqyFaIu0mtdKjMKWViJKDvL/gXrJNWIqPW fLpfwP2AeXW9zbPJeqyuGlLjvG0ON8o= -----END CERTIFICATE-----Generated at Sat Sep 5 01:16:53 2026 by rpki-client