$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa File: f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa (raw, json) Hash identifier: nrS04021ocdbcxUqogFEDumtJi8+3WJtOAM9GAScfVA= Subject key identifier: 22:01:75:EB:8D:5A:F2:41:08:B5:F2:5E:CC:DA:6F:49:1D:69:51:E2 Certificate issuer: /CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1 Certificate serial: 010D0C9F4328584F82ADA238FAD400A25BDEE840 Authority key identifier: C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 399214 IP address blocks: 45.42.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:a2:38:fa:d4:00:a2:5b:de:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=dcd3b60a-74e6-4503-9132-906cd8abb8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b9:06:78:2a:c2:d9:ed:d4:7d:97:9a:76:14: f1:0f:0f:58:7f:cf:6c:a5:fe:20:26:0c:d7:9c:06: cb:b9:09:88:9e:f0:f7:8a:8d:49:84:09:a9:1c:ec: a3:89:65:63:5c:13:68:fc:e0:55:c3:62:f4:ee:10: 29:f6:a9:23:a7:40:ad:73:a6:a1:4e:f1:11:9a:12: 91:5c:c3:9d:da:da:85:d4:14:bc:45:02:8f:4d:15: da:a2:00:b1:b0:c0:97:9c:4d:79:09:61:fe:ae:05: 27:60:2a:4e:e6:44:50:26:c6:c8:e2:4a:49:54:9f: 2b:2c:03:b6:eb:4f:04:4d:17:2a:3e:4c:b6:4b:b7: 05:f0:2d:d7:be:62:46:6d:b8:70:33:17:ae:b0:96: 36:7d:fc:19:6b:25:ef:12:b0:f9:2f:89:2b:54:32: 1f:e7:62:35:5e:41:68:c9:c5:aa:4a:83:1b:fa:95: 20:dc:e9:26:d9:51:6c:4f:aa:8d:d2:7c:0c:ef:0b: 61:d2:55:59:31:aa:0e:17:47:2a:7a:80:3d:0a:2f: 3a:5c:13:2e:f7:30:00:61:ed:53:81:9a:34:43:cc: ba:d5:cb:b1:c6:72:4b:28:66:2b:6e:c4:79:6f:3e: 33:59:c0:fb:5c:6b:e7:e2:6e:25:96:86:78:8a:38: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:01:75:EB:8D:5A:F2:41:08:B5:F2:5E:CC:DA:6F:49:1D:69:51:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl X509v3 Authority Key Identifier: keyid:C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer sbgp-ipAddrBlock: critical IPv4: 45.42.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:85:78:45:28:ee:5e:48:63:92:c0:d8:e5:90:58:be:15:f2: 82:6c:22:7a:1f:bc:8e:fd:8d:4e:d4:6b:fd:aa:fe:31:ce:9f: 6e:26:ad:db:b6:14:e3:4b:0d:81:4f:51:e2:95:db:19:00:f0: 9b:25:1b:e8:98:7b:20:29:2e:5d:a0:88:c0:eb:c3:c2:69:84: f9:18:e8:a2:8c:75:cd:5f:4b:78:ef:85:62:30:7d:2a:05:d9: 97:9b:9c:99:1c:93:e6:e9:b9:78:e4:b3:b8:93:c6:8e:12:8e: ff:61:e7:af:92:87:21:a9:09:79:66:03:bd:0d:61:1d:80:be: 86:d9:b1:55:56:43:a1:91:dc:22:99:83:fb:de:1e:50:d6:9e: 8d:79:7c:02:32:c5:99:42:ce:0a:42:6e:ac:36:92:3b:ca:f4: e6:65:94:7d:e7:23:0f:21:e3:d0:1d:0e:68:f1:e7:a7:08:94: 8e:d0:d4:1d:e4:e9:dc:2b:b3:bc:4f:e1:17:8e:16:b0:a0:99: 30:05:3e:60:1f:03:9a:f3:9b:59:ff:ff:d2:96:c2:32:2c:da: 5c:62:40:0c:85:cb:e4:5d:93:31:4e:37:b3:97:61:2c:00:cf: a6:0d:2a:d5:1b:d5:14:e0:9c:e2:8f:24:1a:13:dc:40:ef:ac: d6:71:4c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CraI4+tQAolve6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmYwZTdjZTktNTVkNC00MzgyLWI4OTQtYWFjYTg5ZjJk ZmQxMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk ZGNkM2I2MGEtNzRlNi00NTAzLTkxMzItOTA2Y2Q4YWJiOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7kGeCrC2e3UfZeadhTxDw9Yf89spf4gJgzX nAbLuQmInvD3io1JhAmpHOyjiWVjXBNo/OBVw2L07hAp9qkjp0Ctc6ahTvERmhKR XMOd2tqF1BS8RQKPTRXaogCxsMCXnE15CWH+rgUnYCpO5kRQJsbI4kpJVJ8rLAO2 608ETRcqPky2S7cF8C3XvmJGbbhwMxeusJY2ffwZayXvErD5L4krVDIf52I1XkFo ycWqSoMb+pUg3Okm2VFsT6qN0nwM7wth0lVZMaoOF0cqeoA9Ci86XBMu9zAAYe1T gZo0Q8y61cuxxnJLKGYrbsR5bz4zWcD7XGvn4m4lloZ4ijiZ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIBdeuNWvJBCLXyXszab0kdaVHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBl N2NlOS01NWQ0LTQzODItYjg5NC1hYWNhODlmMmRmZDEvZjM1OTJhYTMtZjdhZS0z NWVjLTk1MmItNmQ1MzU0MWZlMTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmYwZTdjZTktNTVkNC00MzgyLWI4 OTQtYWFjYTg5ZjJkZmQxLzJmMGU3Y2U5LTU1ZDQtNDM4Mi1iODk0LWFhY2E4OWYy ZGZkMS5jcmwwHwYDVR0jBBgwFoAUxwyRk31taXdKMVntxuqEo/T3CpAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBlN2NlOS01NWQ0LTQzODItYjg5NC1hYWNh ODlmMmRmZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLSqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSFeEUo7l5IY5LA2OWQWL4V8oJsInofvI79jU7Ua/2q/jHOn24mrdu2 FONLDYFPUeKV2xkA8JslG+iYeyApLl2giMDrw8JphPkY6KKMdc1fS3jvhWIwfSoF 2ZebnJkck+bpuXjks7iTxo4Sjv9h56+ShyGpCXlmA70NYR2AvobZsVVWQ6GR3CKZ g/veHlDWno15fAIyxZlCzgpCbqw2kjvK9OZllH3nIw8h49AdDmjx56cIlI7Q1B3k 6dwrs7xP4ReOFrCgmTAFPmAfA5rzm1n//9KWwjIs2lxiQAyFy+RdkzFON7OXYSwA z6YNKtUb1RTgnOKPJBoT3EDvrNZxTFc= -----END CERTIFICATE-----Generated at Sun Oct 25 23:16:22 2026 by rpki-client