$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1b4f34b2-f094-302b-b153-ca1eca5c8d15.roa File: 1b4f34b2-f094-302b-b153-ca1eca5c8d15.roa (raw, json) Hash identifier: QoJjS1oI8JoHAF4HxgDRj34UuRLk/tC2dE872KDZmqU= Subject key identifier: B4:33:86:3E:61:28:B3:EC:96:67:FC:CC:A9:57:3B:B6:59:01:DE:9D Certificate issuer: /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31 Certificate serial: 010D0C9F4328584F0F325F1A45E06D22A439D920 Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1b4f34b2-f094-302b-b153-ca1eca5c8d15.roa Signing time: Fri 04 Sep 2026 04:14:04 +0000 ROA not before: Fri 04 Sep 2026 04:14:04 +0000 ROA not after: Sun 22 Nov 2026 13:57:58 +0000 asID: 834 IP address blocks: 45.43.206.0/24 maxlen: 24 45.43.207.0/24 maxlen: 24 45.43.210.0/24 maxlen: 24 45.43.211.0/24 maxlen: 24 45.43.214.0/24 maxlen: 24 45.43.220.0/24 maxlen: 24 104.153.82.0/24 maxlen: 24 104.166.65.0/24 maxlen: 24 104.166.69.0/24 maxlen: 24 160.202.64.0/24 maxlen: 24 160.202.68.0/24 maxlen: 24 160.202.74.0/24 maxlen: 24 160.202.78.0/24 maxlen: 24 160.202.80.0/24 maxlen: 24 160.202.82.0/24 maxlen: 24 160.202.84.0/24 maxlen: 24 160.202.87.0/24 maxlen: 24 160.202.88.0/24 maxlen: 24 160.202.90.0/24 maxlen: 24 160.202.91.0/24 maxlen: 24 160.202.92.0/24 maxlen: 24 160.202.95.0/24 maxlen: 24 160.202.96.0/24 maxlen: 24 160.202.98.0/24 maxlen: 24 160.202.99.0/24 maxlen: 24 160.202.102.0/24 maxlen: 24 160.202.104.0/24 maxlen: 24 160.202.107.0/24 maxlen: 24 160.202.108.0/24 maxlen: 24 160.202.111.0/24 maxlen: 24 160.202.115.0/24 maxlen: 24 160.202.118.0/24 maxlen: 24 160.202.120.0/24 maxlen: 24 160.202.121.0/24 maxlen: 24 160.202.122.0/24 maxlen: 24 172.82.133.0/24 maxlen: 24 172.82.138.0/24 maxlen: 24 172.82.141.0/24 maxlen: 24 172.82.142.0/24 maxlen: 24 172.82.148.0/24 maxlen: 24 172.82.154.0/24 maxlen: 24 172.82.158.0/24 maxlen: 24 172.82.161.0/24 maxlen: 24 172.82.170.0/24 maxlen: 24 172.82.172.0/24 maxlen: 24 172.82.177.0/24 maxlen: 24 172.82.178.0/24 maxlen: 24 172.82.179.0/24 maxlen: 24 172.82.182.0/24 maxlen: 24 172.82.188.0/24 maxlen: 24 172.82.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:32:5f:1a:45:e0:6d:22:a4:39:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31 Validity Not Before: Sep 4 04:14:04 2026 GMT Not After : Nov 22 13:57:58 2026 GMT Subject: CN=5955dbd8-939f-4163-a759-c62b01dd7a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:11:b8:db:58:6c:8e:f3:5d:21:d5:bc:79:c2: 03:d9:4e:2d:d0:da:ad:6d:fd:27:14:a1:43:dc:00: e6:e8:22:2c:4f:f6:c9:7e:ab:35:24:cb:8a:c5:e7: 78:f7:7e:bf:11:be:ac:65:ee:a4:36:2d:50:98:77: 70:34:0e:03:08:ae:4a:8f:55:44:6d:95:db:5b:c6: 6b:a3:6e:b1:e4:9e:c3:99:bf:26:bc:69:5a:6e:7d: e0:5d:05:3f:b6:7a:b4:6b:31:07:d5:a0:c4:34:ec: da:fd:9a:d5:cc:4f:df:64:c6:56:b0:c1:e8:0c:fc: e8:e0:53:a3:75:37:bb:ff:a6:b2:f9:d3:b9:85:7a: a6:49:07:06:dd:6f:e4:53:0e:f6:d3:77:39:6b:02: 7e:86:04:66:5e:96:98:0b:94:9f:6c:9d:e0:1c:4e: 76:8b:f7:ef:87:f8:c7:e9:49:8f:90:45:05:a9:e5: 04:5a:0f:6a:1e:f3:90:1e:ae:f0:98:bf:fb:b5:6b: af:5c:d6:ef:53:ea:c5:45:51:a6:46:22:f2:c2:7b: 67:36:17:98:d2:16:af:6f:51:99:6f:51:b9:4d:09: 27:b1:4e:46:ad:fb:fe:b0:15:62:79:eb:d3:60:99: 7a:fc:92:a7:74:28:ea:71:05:2a:2a:9e:3a:9f:9a: 29:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:33:86:3E:61:28:B3:EC:96:67:FC:CC:A9:57:3B:B6:59:01:DE:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1b4f34b2-f094-302b-b153-ca1eca5c8d15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl X509v3 Authority Key Identifier: keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer sbgp-ipAddrBlock: critical IPv4: 45.43.206.0/23 45.43.210.0/23 45.43.214.0/24 45.43.220.0/24 104.153.82.0/24 104.166.65.0/24 104.166.69.0/24 160.202.64.0/24 160.202.68.0/24 160.202.74.0/24 160.202.78.0/24 160.202.80.0/24 160.202.82.0/24 160.202.84.0/24 160.202.87.0-160.202.88.255 160.202.90.0-160.202.92.255 160.202.95.0-160.202.96.255 160.202.98.0/23 160.202.102.0/24 160.202.104.0/24 160.202.107.0-160.202.108.255 160.202.111.0/24 160.202.115.0/24 160.202.118.0/24 160.202.120.0-160.202.122.255 172.82.133.0/24 172.82.138.0/24 172.82.141.0-172.82.142.255 172.82.148.0/24 172.82.154.0/24 172.82.158.0/24 172.82.161.0/24 172.82.170.0/24 172.82.172.0/24 172.82.177.0-172.82.179.255 172.82.182.0/24 172.82.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:06:bd:04:ec:9a:95:4f:7c:d9:d4:7d:db:11:ab:14:99:ab: e6:71:35:80:84:82:46:71:4f:e2:30:0b:e0:88:13:e6:16:71: 6a:aa:86:61:92:6c:ed:c4:67:eb:64:77:13:ef:03:2e:e6:ca: 56:a9:4d:34:08:09:6b:65:2a:97:60:1c:39:0e:ff:68:10:ae: ed:23:27:d6:ad:1d:d3:4e:77:34:b6:c0:75:85:99:fa:34:7f: 4c:cf:9d:d9:eb:83:c5:8e:b1:91:87:5b:d6:8c:cf:32:55:51: ea:45:fd:a9:9f:67:ba:e7:64:c9:3b:d5:77:42:1f:72:ed:39: ae:c0:a1:d5:b5:86:b4:54:d3:f3:67:c8:d9:eb:57:14:3a:17: 99:ef:ef:13:d9:6c:28:ad:d2:3a:50:4d:ff:93:b7:57:55:21: 95:23:b8:9c:40:ce:47:40:2b:a4:bd:1d:b7:fd:b4:9a:ba:55: 8e:3a:16:ef:12:6e:93:7b:1e:4e:aa:c4:37:d7:f9:eb:1c:1d: fe:7f:87:d8:27:a1:a7:7b:4f:6b:ab:9f:53:f2:92:41:bf:71: 16:50:95:2d:ba:51:cc:73:db:2d:c1:b8:ad:b1:09:c8:62:8b: ef:16:89:7f:67:8a:13:63:35:ed:fa:1d:c0:64:93:b7:a7:a0: e8:b3:98:71 -----BEGIN CERTIFICATE----- MIIHXTCCBkWgAwIBAgIUAQ0Mn0MoWE8PMl8aReBtIqQ52SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTVjOWFmNGEtZTJlNC00ZmI5LTlmNTMtODY5Yzg3NzEw ZTMxMB4XDTI2MDkwNDA0MTQwNFoXDTI2MTEyMjEzNTc1OFowLzEtMCsGA1UEAxMk NTk1NWRiZDgtOTM5Zi00MTYzLWE3NTktYzYyYjAxZGQ3YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRG421hsjvNdIdW8ecID2U4t0Nqtbf0nFKFD 3ADm6CIsT/bJfqs1JMuKxed4936/Eb6sZe6kNi1QmHdwNA4DCK5Kj1VEbZXbW8Zr o26x5J7Dmb8mvGlabn3gXQU/tnq0azEH1aDENOza/ZrVzE/fZMZWsMHoDPzo4FOj dTe7/6ay+dO5hXqmSQcG3W/kUw7203c5awJ+hgRmXpaYC5SfbJ3gHE52i/fvh/jH 6UmPkEUFqeUEWg9qHvOQHq7wmL/7tWuvXNbvU+rFRVGmRiLywntnNheY0havb1GZ b1G5TQknsU5Grfv+sBVieevTYJl6/JKndCjqcQUqKp46n5op8wIDAQABo4IEbzCC BGswHQYDVR0OBBYEFLQzhj5hKLPslmf8zKlXO7ZZAd6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5 YWY0YS1lMmU0LTRmYjktOWY1My04NjljODc3MTBlMzEvMWI0ZjM0YjItZjA5NC0z MDJiLWIxNTMtY2ExZWNhNWM4ZDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTVjOWFmNGEtZTJlNC00ZmI5LTlm NTMtODY5Yzg3NzEwZTMxLzU1YzlhZjRhLWUyZTQtNGZiOS05ZjUzLTg2OWM4Nzcx MGUzMS5jcmwwHwYDVR0jBBgwFoAUzg6k1wXsiaJO1eLQ7FrRxeIdW8YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5YWY0YS1lMmU0LTRmYjktOWY1My04Njlj ODc3MTBlMzEuY2VyMIIBNwYIKwYBBQUHAQcBAf8EggEmMIIBIjCCAR4EAgABMIIB FgMEAS0rzgMEAS0r0gMEAC0r1gMEAC0r3AMEAGiZUgMEAGimQQMEAGimRQMEAKDK QAMEAKDKRAMEAKDKSgMEAKDKTgMEAKDKUAMEAKDKUgMEAKDKVDAMAwQAoMpXAwQA oMpYMAwDBAGgyloDBACgylwwDAMEAKDKXwMEAKDKYAMEAaDKYgMEAKDKZgMEAKDK aDAMAwQAoMprAwQAoMpsAwQAoMpvAwQAoMpzAwQAoMp2MAwDBAOgyngDBACgynoD BACsUoUDBACsUoowDAMEAKxSjQMEAKxSjgMEAKxSlAMEAKxSmgMEAKxSngMEAKxS oQMEAKxSqgMEAKxSrDAMAwQArFKxAwQCrFKwAwQArFK2AwQBrFK8MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHkGvQTsmpVPfNnUfdsRqxSZq+ZxNYCEgkZxT+IwC+CIE+YWcWqqhmGSbO3EZ+tk dxPvAy7mylapTTQICWtlKpdgHDkO/2gQru0jJ9atHdNOdzS2wHWFmfo0f0zPndnr g8WOsZGHW9aMzzJVUepF/amfZ7rnZMk71XdCH3LtOa7AodW1hrRU0/NnyNnrVxQ6 F5nv7xPZbCit0jpQTf+Tt1dVIZUjuJxAzkdAK6S9Hbf9tJq6VY46Fu8SbpN7Hk6q xDfX+escHf5/h9gnoad7T2urn1PykkG/cRZQlS26Ucxz2y3BuK2xCchii+8WiX9n ihNjNe36HcBkk7enoOizmHE= -----END CERTIFICATE-----Generated at Sat Sep 5 00:21:43 2026 by rpki-client