$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa File: f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa (raw, json) Hash identifier: hw+zqwzpl4tJ3D66KXFXqMjk8MFQsE9SbpvL3PWE8GY= Subject key identifier: 10:EC:2A:31:58:47:7C:B1:57:68:A8:96:3B:1A:71:9B:C3:F9:90:FA Certificate issuer: /CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1 Certificate serial: 010D0C9F4328584EE0C1F0E816A2157E18184840 Authority key identifier: C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 399214 IP address blocks: 45.42.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c1:f0:e8:16:a2:15:7e:18:18:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=0fea020e-9d83-47fd-9787-6d2462e76c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:6d:54:2c:64:5e:e8:c8:fb:e0:c1:1b:b9: 21:54:03:ef:52:2f:15:d4:fd:df:ee:d1:97:c2:88: c2:1c:79:24:f6:a9:04:b2:43:c4:54:09:c1:b3:3d: 48:e5:db:ee:f6:98:aa:39:1a:d4:70:95:6e:98:a0: 2e:74:33:c6:bc:4b:0a:2e:09:b7:d0:72:58:ff:42: 94:ac:6f:27:fe:52:c4:f5:bb:7d:a5:7a:a8:71:73: a4:ae:ac:13:46:d1:9d:47:7c:92:b1:a5:b9:68:24: 67:5d:1a:09:21:33:3b:62:d4:85:f9:12:e2:46:92: 08:76:2f:5e:1b:64:ec:91:68:ca:76:84:4c:d2:15: e5:d6:18:6a:27:9d:6b:3b:d0:34:39:ee:50:67:48: cd:08:eb:a4:65:57:67:57:0b:73:48:24:41:34:5e: c8:e1:25:57:40:f6:50:0e:bb:3f:8c:93:74:91:01: 07:1f:9a:1a:2e:1f:50:3f:a4:86:a9:41:07:7b:d2: b9:b5:15:41:24:2a:89:89:1b:cd:11:b2:17:7d:50: fe:2d:52:d1:53:d1:5e:9d:82:a0:00:d7:b8:74:6b: c7:79:6a:5a:dd:4d:81:c2:7e:60:71:c0:9a:bc:ee: a6:4a:76:d3:2b:75:02:de:13:28:3c:7f:f7:2b:f7: 95:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EC:2A:31:58:47:7C:B1:57:68:A8:96:3B:1A:71:9B:C3:F9:90:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl X509v3 Authority Key Identifier: keyid:C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer sbgp-ipAddrBlock: critical IPv4: 45.42.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:03:14:0e:8d:c1:86:c5:68:59:fe:56:b8:93:6d:e8:aa:24: 51:69:d1:a3:db:1f:c0:ba:d2:a5:62:3a:70:27:cd:a0:06:3d: b6:5a:bc:74:54:69:0c:f0:79:b6:6b:ac:27:00:23:21:bc:9d: 6b:e2:8f:ed:4a:a9:9a:87:3a:e0:76:ef:4e:58:46:be:e4:6f: 73:35:fc:b0:cd:37:fa:50:22:64:b8:8f:41:ea:06:05:b2:9e: 68:a9:2b:43:7a:fb:f0:fc:80:e3:9f:50:32:a3:fe:28:1d:c1: fc:e9:ee:1e:6b:39:5b:d4:4c:de:f1:69:af:1b:f2:7d:99:2d: 60:e4:d5:94:69:58:48:7e:bb:cc:ed:6e:44:dc:69:2e:1e:3b: 01:de:cd:69:c2:2e:95:47:53:6d:69:91:06:8a:1b:cc:63:23: 4a:26:cd:38:17:f5:5c:51:05:75:c3:c6:c2:bf:86:e4:7b:8c: e6:5b:45:f3:5c:b9:2c:ae:ae:48:d9:b8:59:7f:a4:55:f6:a3: 09:b0:07:c1:85:bb:a3:b3:cd:79:64:78:c6:0e:d6:09:9e:41: e2:d1:51:29:21:04:f5:a0:8a:a7:df:47:f5:93:ee:41:82:20: d2:2b:1d:53:8f:d7:44:33:e4:9b:09:46:a0:b9:4b:a4:65:4b: 76:ae:e3:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwfDoFqIVfhgYSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmYwZTdjZTktNTVkNC00MzgyLWI4OTQtYWFjYTg5ZjJk ZmQxMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk MGZlYTAyMGUtOWQ4My00N2ZkLTk3ODctNmQyNDYyZTc2YzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKFtVCxkXujI++DBG7khVAPvUi8V1P3f7tGX wojCHHkk9qkEskPEVAnBsz1I5dvu9piqORrUcJVumKAudDPGvEsKLgm30HJY/0KU rG8n/lLE9bt9pXqocXOkrqwTRtGdR3ySsaW5aCRnXRoJITM7YtSF+RLiRpIIdi9e G2TskWjKdoRM0hXl1hhqJ51rO9A0Oe5QZ0jNCOukZVdnVwtzSCRBNF7I4SVXQPZQ Drs/jJN0kQEHH5oaLh9QP6SGqUEHe9K5tRVBJCqJiRvNEbIXfVD+LVLRU9FenYKg ANe4dGvHeWpa3U2Bwn5gccCavO6mSnbTK3UC3hMoPH/3K/eVVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDsKjFYR3yxV2ioljsacZvD+ZD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBl N2NlOS01NWQ0LTQzODItYjg5NC1hYWNhODlmMmRmZDEvZjM1OTJhYTMtZjdhZS0z NWVjLTk1MmItNmQ1MzU0MWZlMTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmYwZTdjZTktNTVkNC00MzgyLWI4 OTQtYWFjYTg5ZjJkZmQxLzJmMGU3Y2U5LTU1ZDQtNDM4Mi1iODk0LWFhY2E4OWYy ZGZkMS5jcmwwHwYDVR0jBBgwFoAUxwyRk31taXdKMVntxuqEo/T3CpAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBlN2NlOS01NWQ0LTQzODItYjg5NC1hYWNh ODlmMmRmZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLSqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8DFA6NwYbFaFn+VriTbeiqJFFp0aPbH8C60qViOnAnzaAGPbZavHRU aQzwebZrrCcAIyG8nWvij+1KqZqHOuB2705YRr7kb3M1/LDNN/pQImS4j0HqBgWy nmipK0N6+/D8gOOfUDKj/igdwfzp7h5rOVvUTN7xaa8b8n2ZLWDk1ZRpWEh+u8zt bkTcaS4eOwHezWnCLpVHU21pkQaKG8xjI0omzTgX9VxRBXXDxsK/huR7jOZbRfNc uSyurkjZuFl/pFX2owmwB8GFu6OzzXlkeMYO1gmeQeLRUSkhBPWgiqffR/WT7kGC INIrHVOP10Qz5JsJRqC5S6RlS3au45I= -----END CERTIFICATE-----Generated at Thu Aug 27 17:47:36 2026 by rpki-client