$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/4ed964cc-f94b-3860-bf7c-6de8c1f9d2a7.roa File: 4ed964cc-f94b-3860-bf7c-6de8c1f9d2a7.roa (raw, json) Hash identifier: +T2dzNZRRmwmMFfX8YZ2baAgceYGN7g6cJBgFTMpmu4= Subject key identifier: 6C:F0:71:4B:83:5B:3B:7A:1E:1D:AD:09:F9:6E:F6:44:51:5C:C4:69 Certificate issuer: /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Certificate serial: 010D0C9F4328584F9A68BEAAC9DD9C93C141B4A0 Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/4ed964cc-f94b-3860-bf7c-6de8c1f9d2a7.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 15830 IP address blocks: 45.91.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:be:aa:c9:dd:9c:93:c1:41:b4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=897b4bf7-0795-4790-b640-9470bd660ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:82:6b:d2:d9:39:c3:3c:da:f9:cb:bf:60:82: b1:f0:be:8c:fb:d9:16:4a:ee:6b:f3:dc:45:10:21: 2b:4b:c9:56:d0:b3:fb:0a:e9:07:78:ac:c3:84:ed: 66:05:b2:27:4e:ae:38:08:1b:cf:7d:1c:33:15:b5: 58:02:c3:26:30:07:84:ac:2a:c9:5b:8e:52:de:84: 62:27:e0:a6:7a:23:ef:08:d8:02:1e:4c:06:a6:6b: 0f:28:77:ad:f1:36:fb:17:8b:ad:48:41:c9:05:72: 71:24:ae:68:2f:75:55:d0:41:bc:6a:fa:76:97:04: 33:7d:ed:32:21:4f:ae:29:84:f2:14:7b:39:de:43: 3d:4d:38:bd:3c:52:03:1e:fa:02:7d:c5:05:ac:9e: ab:47:e2:4d:20:f7:55:f0:a7:0c:83:42:b2:34:a7: 8c:ae:ee:20:8e:7b:c7:8d:20:ee:54:e9:4e:c0:40: f8:c7:a0:ac:45:25:83:e5:17:ee:4e:8e:81:5c:32: 15:a8:d3:7c:a3:40:8e:29:e7:55:c2:ff:80:c0:c2: ec:dc:38:1c:c5:ce:3e:ed:c4:6b:08:01:45:d7:7b: ec:ad:be:a7:16:2b:c6:19:b4:69:92:d6:66:e5:68: 0b:2b:9c:ad:7c:09:cc:6d:92:ed:d2:06:d6:56:22: c4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F0:71:4B:83:5B:3B:7A:1E:1D:AD:09:F9:6E:F6:44:51:5C:C4:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/4ed964cc-f94b-3860-bf7c-6de8c1f9d2a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl X509v3 Authority Key Identifier: keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer sbgp-ipAddrBlock: critical IPv4: 45.91.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:6b:74:0d:40:eb:75:2f:3f:20:a1:3f:65:5b:80:93:66:44: fc:79:55:c1:da:88:83:b6:82:85:ee:70:38:d3:7e:49:d0:37: db:3c:5b:58:0b:c7:99:58:64:af:05:55:1d:3a:a1:b8:fe:e8: e5:ba:4f:c8:61:66:94:93:0a:07:1e:84:e5:36:32:c4:e0:fc: a6:92:26:88:4d:69:31:bb:f6:a0:a6:9b:60:12:c6:6e:12:8e: 02:15:80:aa:2d:3f:71:a6:41:77:7b:26:e9:e4:d0:62:cb:f5: e7:b7:70:fb:88:a0:d1:fe:06:bd:c4:64:41:b4:62:db:bb:fc: 9b:86:10:40:b5:58:6a:a5:de:a9:c7:1d:8b:6e:94:56:65:bb: 3c:d5:d1:76:5f:22:1f:9f:bf:e5:54:e9:5c:87:dd:b6:9d:67: a6:80:e2:64:d4:1e:35:9d:39:80:70:6c:bc:f5:b6:b2:38:c6: 03:83:e5:cc:9c:6d:ae:a7:ee:f7:c8:64:65:9b:d8:63:ea:58: ae:14:5e:e6:43:f7:03:d3:85:88:6f:e9:96:4a:5f:c2:b4:5b: c6:10:b8:a7:c2:e4:59:de:fb:f0:54:d7:0c:8a:bd:1b:70:cb: 54:58:2c:95:b6:11:bb:80:37:0d:80:f6:7c:6a:f3:d6:85:6f: 75:46:0e:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaL6qyd2ck8FBtKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4 MWIyMB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ODk3YjRiZjctMDc5NS00NzkwLWI2NDAtOTQ3MGJkNjYwYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIJr0tk5wzza+cu/YIKx8L6M+9kWSu5r89xF ECErS8lW0LP7CukHeKzDhO1mBbInTq44CBvPfRwzFbVYAsMmMAeErCrJW45S3oRi J+CmeiPvCNgCHkwGpmsPKHet8Tb7F4utSEHJBXJxJK5oL3VV0EG8avp2lwQzfe0y IU+uKYTyFHs53kM9TTi9PFIDHvoCfcUFrJ6rR+JNIPdV8KcMg0KyNKeMru4gjnvH jSDuVOlOwED4x6CsRSWD5RfuTo6BXDIVqNN8o0COKedVwv+AwMLs3Dgcxc4+7cRr CAFF13vsrb6nFivGGbRpktZm5WgLK5ytfAnMbZLt0gbWViLEmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzwcUuDWzt6Hh2tCflu9kRRXMRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFl OGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvNGVkOTY0Y2MtZjk0Yi0z ODYwLWJmN2MtNmRlOGMxZjlkMmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDUxZThkOWYtZDllYS00NWNmLThm YjktMjgxMWU4NmI4MWIyLzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04ZmI5LTI4MTFlODZi ODFiMi5jcmwwHwYDVR0jBBgwFoAU8rMonBGkahiZAc+bjSQ+l9AEF8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODEx ZTg2YjgxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVtuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRrdA1A63UvPyChP2VbgJNmRPx5VcHaiIO2goXucDjTfknQN9s8W1gL x5lYZK8FVR06obj+6OW6T8hhZpSTCgcehOU2MsTg/KaSJohNaTG79qCmm2ASxm4S jgIVgKotP3GmQXd7Junk0GLL9ee3cPuIoNH+Br3EZEG0Ytu7/JuGEEC1WGql3qnH HYtulFZluzzV0XZfIh+fv+VU6VyH3badZ6aA4mTUHjWdOYBwbLz1trI4xgOD5cyc ba6n7vfIZGWb2GPqWK4UXuZD9wPThYhv6ZZKX8K0W8YQuKfC5Fne+/BU1wyKvRtw y1RYLJW2EbuANw2A9nxq89aFb3VGDvw= -----END CERTIFICATE-----Generated at Wed Oct 28 11:37:29 2026 by rpki-client