$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/4dd89c0d-6f7d-3dd6-83e9-7e35e9549dff.roa File: 4dd89c0d-6f7d-3dd6-83e9-7e35e9549dff.roa (raw, json) Hash identifier: fNm6+i0ChAdG6y4/+Yvu1BoQ22DV69cbmBGxKWGoP+o= Subject key identifier: 98:62:C6:29:C3:A9:3B:F7:8C:B8:70:36:5B:31:88:9A:7C:04:E9:72 Certificate issuer: /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Certificate serial: 010D0C9F4328584F4C3DE2C3D3B24C52A0824580 Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/4dd89c0d-6f7d-3dd6-83e9-7e35e9549dff.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 273143 IP address blocks: 45.88.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e2:c3:d3:b2:4c:52:a0:82:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=055161ed-9e8d-421b-82ae-0abb1932be1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:f8:6a:48:04:12:9c:82:31:8a:a9:62:7a: be:94:07:42:53:f1:24:9f:c0:3f:43:4e:30:3b:e3: f3:28:a9:ca:f0:82:02:b4:a3:bd:e2:6f:6b:25:83: 57:1a:51:5b:40:5f:9b:5e:ed:5c:74:d5:5e:75:5d: 4a:23:11:8f:a1:17:fe:ed:01:74:c5:ee:07:98:a2: 6e:be:2c:4a:15:35:c4:82:7a:81:75:85:8b:65:8d: df:60:de:21:28:c7:6b:78:bc:9d:89:da:2e:fe:73: 0c:fe:6b:f5:a3:6a:56:da:ad:13:69:7e:4c:67:d9: 99:41:e2:e7:a3:e3:17:2f:a5:ad:aa:51:8a:76:62: 18:6f:0d:de:0f:22:0d:d0:06:8b:bf:51:f8:f4:71: 26:32:34:ac:de:f7:24:c5:c6:7a:4b:3d:26:d5:7f: 47:43:4e:67:2b:ca:3c:3b:4b:a4:50:b9:f3:1d:fe: 6a:f0:81:4f:2a:10:7a:3c:d8:ad:d3:b3:2a:6a:b6: bd:f5:51:58:b7:64:84:1d:da:ea:ad:fd:ef:b0:84: ad:48:25:a0:be:eb:a7:7e:e9:60:9a:a0:f4:ab:6a: 53:15:82:fd:49:5a:16:67:de:e6:4b:31:2f:32:a9: f4:b0:b4:a4:af:10:07:d0:d4:4d:46:dc:9e:37:bf: 64:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:62:C6:29:C3:A9:3B:F7:8C:B8:70:36:5B:31:88:9A:7C:04:E9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/4dd89c0d-6f7d-3dd6-83e9-7e35e9549dff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl X509v3 Authority Key Identifier: keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer sbgp-ipAddrBlock: critical IPv4: 45.88.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ed:c8:36:bb:36:05:0d:31:2a:c8:95:7b:e8:7e:64:b7:62: e6:00:32:72:df:52:89:89:10:9b:c3:8f:58:75:40:86:06:9c: 0d:8f:d7:e4:c2:ed:48:e5:14:44:03:31:2c:f3:01:88:e7:ef: c5:24:f3:97:19:b8:f9:f9:81:72:4e:79:4c:c2:ac:f8:82:a8: b0:83:ad:ad:ba:69:69:b0:e0:6e:23:3f:a5:c7:18:86:76:cf: c1:63:1a:20:2b:14:84:d4:c6:0f:39:bf:26:cc:98:18:05:cf: d9:ba:3d:4d:27:0d:3b:85:eb:d7:8d:c6:46:f4:bb:3f:c5:36: 9f:97:a6:cb:57:4c:47:04:91:67:db:07:8b:b9:c3:c2:5b:72: e0:97:3b:64:ce:55:3b:3e:92:16:1f:04:de:00:9b:93:1c:bd: 4e:80:da:b1:dd:71:a7:f8:cb:90:98:b6:18:aa:d9:6e:d0:09: 19:8e:e4:a8:ed:08:51:69:18:b5:d4:a7:c2:ed:32:11:dc:16: c3:cd:16:28:b6:a7:65:c7:92:96:d4:3a:dc:68:22:26:c7:ea: 36:30:d7:54:07:8e:34:a1:93:19:5d:ad:30:7c:71:dd:ec:d4: 9c:96:83:b4:3b:b8:c5:d1:64:ab:45:ad:f7:0b:83:3d:09:ab: 06:da:d4:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeLD07JMUqCCRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4 MWIyMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDU1MTYxZWQtOWU4ZC00MjFiLTgyYWUtMGFiYjE5MzJiZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO/4akgEEpyCMYqpYnq+lAdCU/Ekn8A/Q04w O+PzKKnK8IICtKO94m9rJYNXGlFbQF+bXu1cdNVedV1KIxGPoRf+7QF0xe4HmKJu vixKFTXEgnqBdYWLZY3fYN4hKMdreLydidou/nMM/mv1o2pW2q0TaX5MZ9mZQeLn o+MXL6WtqlGKdmIYbw3eDyIN0AaLv1H49HEmMjSs3vckxcZ6Sz0m1X9HQ05nK8o8 O0ukULnzHf5q8IFPKhB6PNit07Mqara99VFYt2SEHdrqrf3vsIStSCWgvuunfulg mqD0q2pTFYL9SVoWZ97mSzEvMqn0sLSkrxAH0NRNRtyeN79keQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhixinDqTv3jLhwNlsxiJp8BOlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFl OGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvNGRkODljMGQtNmY3ZC0z ZGQ2LTgzZTktN2UzNWU5NTQ5ZGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDUxZThkOWYtZDllYS00NWNmLThm YjktMjgxMWU4NmI4MWIyLzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04ZmI5LTI4MTFlODZi ODFiMi5jcmwwHwYDVR0jBBgwFoAU8rMonBGkahiZAc+bjSQ+l9AEF8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODEx ZTg2YjgxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVjbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACztyDa7NgUNMSrIlXvofmS3YuYAMnLfUomJEJvDj1h1QIYGnA2P1+TC 7UjlFEQDMSzzAYjn78Uk85cZuPn5gXJOeUzCrPiCqLCDra26aWmw4G4jP6XHGIZ2 z8FjGiArFITUxg85vybMmBgFz9m6PU0nDTuF69eNxkb0uz/FNp+XpstXTEcEkWfb B4u5w8JbcuCXO2TOVTs+khYfBN4Am5McvU6A2rHdcaf4y5CYthiq2W7QCRmO5Kjt CFFpGLXUp8LtMhHcFsPNFii2p2XHkpbUOtxoIibH6jYw11QHjjShkxldrTB8cd3s 1JyWg7Q7uMXRZKtFrfcLgz0Jqwba1DA= -----END CERTIFICATE-----Generated at Wed Oct 28 14:34:27 2026 by rpki-client