$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/0235de37-aa1e-3c3c-8809-dbbc1fa44d9c.roa File: 0235de37-aa1e-3c3c-8809-dbbc1fa44d9c.roa (raw, json) Hash identifier: WyE63dImeGf/x1gysAbQdBaSsl5GSTmKVxqTRnRIkHg= Subject key identifier: D6:89:25:55:9D:24:AC:D1:97:37:0B:16:0B:EF:1B:A3:DE:34:0A:CD Certificate issuer: /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Certificate serial: 010D0C9F4328584EA788CA5EFF9DCB7E4ACE46C0 Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/0235de37-aa1e-3c3c-8809-dbbc1fa44d9c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 203144 IP address blocks: 45.89.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:ca:5e:ff:9d:cb:7e:4a:ce:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9e319f88-08da-49a9-a347-668f21c73c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:08:8d:3f:d2:64:05:50:c4:b7:02:90:e7:0d: 36:35:f8:8e:54:40:cd:94:7e:77:52:2a:5a:3b:cb: d2:40:7c:2a:93:8a:37:7d:1e:8c:e7:00:35:4c:85: b6:b6:50:ca:24:31:71:a2:51:25:1b:1c:eb:14:47: 62:5c:aa:ef:e4:ed:02:bb:93:be:49:56:65:9e:50: 00:35:e8:49:e7:16:a9:c3:5e:c5:1e:ab:87:4b:71: b4:23:7c:1b:26:f4:c9:a4:26:e7:b4:94:46:b7:94: 9f:7d:3d:26:fb:ca:62:7a:23:ef:1b:26:c8:92:1b: 0c:fa:92:7f:f5:0b:bc:4c:05:2e:a2:f4:d8:f6:46: 73:09:ac:f1:7c:6e:9c:65:99:55:fe:ae:f0:4c:17: 9e:28:23:bc:5a:b8:40:21:59:12:5f:2b:5a:8e:f0: 7e:0d:34:16:bd:bc:cd:cf:51:d9:79:c3:54:b0:82: 5d:0c:ea:29:b7:7a:59:61:5c:6c:f7:10:35:89:6d: d9:0a:c4:23:ab:4c:d2:af:60:b3:91:ad:17:fb:67: 15:c0:90:65:38:d0:29:70:63:73:e9:e9:6b:13:a6: e9:e4:17:e5:cf:1c:e4:60:aa:d0:24:19:c6:d0:a2: 3b:2f:a6:ec:75:27:7a:9b:d7:c6:3f:86:11:43:12: b5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:89:25:55:9D:24:AC:D1:97:37:0B:16:0B:EF:1B:A3:DE:34:0A:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/0235de37-aa1e-3c3c-8809-dbbc1fa44d9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl X509v3 Authority Key Identifier: keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer sbgp-ipAddrBlock: critical IPv4: 45.89.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:03:6e:38:64:39:57:9b:a7:b6:42:b3:e7:4f:39:c9:52:0e: 17:d8:70:5a:31:e5:3b:f2:c9:c3:03:fa:d8:7e:12:9d:29:b9: 6c:00:16:5a:41:b9:7c:fe:16:50:ce:d5:a1:be:ac:4e:d3:6f: e6:44:61:c9:60:b7:45:dc:b7:53:10:fc:51:d9:d5:be:a0:e1: 74:ae:49:84:7e:a6:a5:12:6f:84:4c:13:8e:c6:b7:9d:32:64: 59:ff:25:1d:f0:b1:41:cc:c5:d7:22:8c:da:1b:a8:66:bd:d0: b9:85:cb:3e:fc:cd:36:6b:da:6d:37:52:59:a7:9c:5c:45:72: 50:cd:58:2f:78:dc:8b:06:f7:6c:01:be:61:3f:79:2b:53:13: 50:03:89:6e:a2:a6:86:b2:37:ce:1d:83:b2:6f:09:e2:6d:d2: ec:91:4c:b1:c8:6d:b3:28:22:36:32:dd:09:12:29:60:71:3d: 09:75:b8:42:a5:a4:d3:4b:49:aa:a8:3e:14:12:59:d7:9a:bc: 38:2e:2a:b2:c8:10:b8:f8:61:e7:ca:ac:37:0e:1e:3d:7f:4a: 4a:ff:36:fb:b8:44:3e:bd:3e:a9:15:7a:39:10:85:6e:cb:4a: cb:8f:12:ad:01:28:0e:e9:30:4e:0d:88:ab:49:b7:38:44:65: 20:28:c7:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niMpe/53LfkrORsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4 MWIyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWUzMTlmODgtMDhkYS00OWE5LWEzNDctNjY4ZjIxYzczYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQiNP9JkBVDEtwKQ5w02NfiOVEDNlH53Uipa O8vSQHwqk4o3fR6M5wA1TIW2tlDKJDFxolElGxzrFEdiXKrv5O0Cu5O+SVZlnlAA NehJ5xapw17FHquHS3G0I3wbJvTJpCbntJRGt5SffT0m+8pieiPvGybIkhsM+pJ/ 9Qu8TAUuovTY9kZzCazxfG6cZZlV/q7wTBeeKCO8WrhAIVkSXytajvB+DTQWvbzN z1HZecNUsIJdDOopt3pZYVxs9xA1iW3ZCsQjq0zSr2Czka0X+2cVwJBlONApcGNz 6elrE6bp5BflzxzkYKrQJBnG0KI7L6bsdSd6m9fGP4YRQxK1VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaJJVWdJKzRlzcLFgvvG6PeNArNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFl OGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvMDIzNWRlMzctYWExZS0z YzNjLTg4MDktZGJiYzFmYTQ0ZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDUxZThkOWYtZDllYS00NWNmLThm YjktMjgxMWU4NmI4MWIyLzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04ZmI5LTI4MTFlODZi ODFiMi5jcmwwHwYDVR0jBBgwFoAU8rMonBGkahiZAc+bjSQ+l9AEF8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODEx ZTg2YjgxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVkyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIDbjhkOVebp7ZCs+dPOclSDhfYcFox5TvyycMD+th+Ep0puWwAFlpB uXz+FlDO1aG+rE7Tb+ZEYclgt0Xct1MQ/FHZ1b6g4XSuSYR+pqUSb4RME47Gt50y ZFn/JR3wsUHMxdcijNobqGa90LmFyz78zTZr2m03UlmnnFxFclDNWC943IsG92wB vmE/eStTE1ADiW6ipoayN84dg7JvCeJt0uyRTLHIbbMoIjYy3QkSKWBxPQl1uEKl pNNLSaqoPhQSWdeavDguKrLIELj4YefKrDcOHj1/Skr/Nvu4RD69PqkVejkQhW7L SsuPEq0BKA7pME4NiKtJtzhEZSAox8c= -----END CERTIFICATE-----Generated at Fri Sep 11 06:51:07 2026 by rpki-client