$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa File: a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa (raw, json) Hash identifier: UH/GOMUJVqdp3YldPPDUhIblIc0jKSKSdQLpI/aS008= Subject key identifier: 20:B1:BE:D2:CB:12:EF:70:E2:07:81:91:D8:B1:E3:25:51:08:FC:BD Certificate issuer: /CN=af121a54-266e-447b-8176-bfcd1dc7867c Certificate serial: 010D0C9F4328584E31CF19F5F96FB93D12901FC0 Authority key identifier: 32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 152117 IP address blocks: 45.9.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:19:f5:f9:6f:b9:3d:12:90:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af121a54-266e-447b-8176-bfcd1dc7867c Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=52f49a8e-6ab0-4c58-8f93-5483da17f24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:91:30:1d:c8:a8:2a:bf:01:3f:0f:a1:2e:27: 0d:5d:e4:ce:d8:02:5f:8e:b0:44:aa:bd:4d:39:05: 74:94:b7:42:1f:f0:75:61:a0:d7:43:2f:f5:44:90: 8e:b9:b9:20:fb:16:ba:63:32:ca:06:e1:06:9d:79: 01:bb:06:eb:eb:82:a6:d5:66:41:55:4f:21:3e:1a: 17:e7:30:ed:51:6d:e6:34:fc:95:28:8d:d3:4f:12: 8e:5a:37:eb:bd:5e:09:14:3b:b1:97:8f:cd:2c:74: 95:9a:5e:8b:a1:d7:d5:51:6c:5c:0c:6b:2c:53:59: 74:68:5b:a5:4f:bf:83:65:9d:9d:72:16:02:9f:84: e5:f7:fa:ae:c2:5f:e1:03:ba:11:25:14:b6:f9:9b: b3:55:dd:12:a3:23:88:5e:33:25:a5:a6:32:93:62: 4b:4b:9c:13:9d:d1:56:2d:88:b5:65:d0:88:14:8d: 39:75:d0:e4:0f:b5:4f:b5:58:51:f6:4c:b5:a5:56: 74:b8:b7:2f:f7:80:a0:ad:47:e8:87:87:73:ef:38: df:78:d2:73:ef:01:92:eb:c5:23:2a:b5:1d:23:6e: 08:cc:af:c9:33:3f:03:46:f0:af:02:94:5a:a4:2c: db:8e:d4:bd:d2:20:fe:b7:f4:1f:18:29:8a:d9:a0: 9c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B1:BE:D2:CB:12:EF:70:E2:07:81:91:D8:B1:E3:25:51:08:FC:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl X509v3 Authority Key Identifier: keyid:32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer sbgp-ipAddrBlock: critical IPv4: 45.9.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:64:ac:0c:e5:60:37:f8:3b:c0:56:83:8d:52:e0:27:39:00: 92:b5:72:c1:1e:0f:d7:35:de:9a:64:24:05:6e:c3:57:51:d9: 29:fc:42:f0:d8:21:99:3c:fc:85:ea:08:c2:cd:da:3b:d3:bc: a8:42:e4:bf:0f:f9:cb:91:8c:27:81:81:8d:55:0f:a4:96:78: df:86:9a:7c:7a:56:07:c8:1c:e4:39:45:1a:9d:34:98:6b:a9: 32:34:9a:d0:32:f8:b8:20:bc:a7:ec:e9:f6:ad:95:26:f1:a8: f9:e1:0b:ae:c4:2b:31:bf:5f:e6:1f:93:fc:c2:75:a2:01:c7: 7d:a7:b8:62:4c:85:2e:e1:55:a1:f2:9c:85:f7:8b:33:21:15: e0:0e:f9:c5:8d:31:a9:fa:5a:be:7b:51:cb:fa:bc:56:f5:82: 74:40:6e:38:99:c6:28:7f:73:4a:ad:70:5b:95:5d:89:16:69: fb:68:1b:67:78:50:38:e0:03:2c:c2:b2:b0:a7:5f:8b:64:e3: e5:f9:4d:66:27:0f:f8:c7:2b:d0:b5:0e:00:b3:62:7f:ad:05: 11:80:00:63:d0:1f:d7:1f:9c:35:5a:9a:75:1f:0b:2b:7a:1d: 34:11:8d:b1:4e:90:d9:a6:57:06:bc:38:b5:62:9e:13:94:3a: 91:31:dd:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzxn1+W+5PRKQH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYxMjFhNTQtMjY2ZS00NDdiLTgxNzYtYmZjZDFkYzc4 NjdjMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk NTJmNDlhOGUtNmFiMC00YzU4LThmOTMtNTQ4M2RhMTdmMjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpEwHcioKr8BPw+hLicNXeTO2AJfjrBEqr1N OQV0lLdCH/B1YaDXQy/1RJCOubkg+xa6YzLKBuEGnXkBuwbr64Km1WZBVU8hPhoX 5zDtUW3mNPyVKI3TTxKOWjfrvV4JFDuxl4/NLHSVml6LodfVUWxcDGssU1l0aFul T7+DZZ2dchYCn4Tl9/quwl/hA7oRJRS2+ZuzVd0SoyOIXjMlpaYyk2JLS5wTndFW LYi1ZdCIFI05ddDkD7VPtVhR9ky1pVZ0uLcv94CgrUfoh4dz7zjfeNJz7wGS68Uj KrUdI24IzK/JMz8DRvCvApRapCzbjtS90iD+t/QfGCmK2aCcNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCxvtLLEu9w4geBkdix4yVRCPy9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZjEy MWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNkMWRjNzg2N2MvYTkyZjBjNjEtYTg2Zi0z YWM2LWFmOTUtZTRlMmUyNGFiNjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWYxMjFhNTQtMjY2ZS00NDdiLTgx NzYtYmZjZDFkYzc4NjdjL2FmMTIxYTU0LTI2NmUtNDQ3Yi04MTc2LWJmY2QxZGM3 ODY3Yy5jcmwwHwYDVR0jBBgwFoAUMnVcxUnAaQnSNG495BOLXF/85b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZjEyMWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNk MWRjNzg2N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9krAzlYDf4O8BWg41S4Cc5AJK1csEeD9c13ppkJAVuw1dR2Sn8QvDY IZk8/IXqCMLN2jvTvKhC5L8P+cuRjCeBgY1VD6SWeN+Gmnx6VgfIHOQ5RRqdNJhr qTI0mtAy+LggvKfs6fatlSbxqPnhC67EKzG/X+Yfk/zCdaIBx32nuGJMhS7hVaHy nIX3izMhFeAO+cWNMan6Wr57Ucv6vFb1gnRAbjiZxih/c0qtcFuVXYkWaftoG2d4 UDjgAyzCsrCnX4tk4+X5TWYnD/jHK9C1DgCzYn+tBRGAAGPQH9cfnDVamnUfCyt6 HTQRjbFOkNmmVwa8OLVinhOUOpEx3RQ= -----END CERTIFICATE-----Generated at Sun Jul 5 11:18:05 2026 by rpki-client