$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3c45d558-4110-3bb1-a881-a92d5ab92991.roa File: 3c45d558-4110-3bb1-a881-a92d5ab92991.roa (raw, json) Hash identifier: k1CDOYPptNXssFNWJLeSl4J9VEWw3By3AOLFSQYEY1k= Subject key identifier: D7:40:12:57:48:7D:3E:E1:02:9B:0D:7E:C6:15:F6:0C:5E:07:3B:4A Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584DD8F06CE46060B0557E6569A0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3c45d558-4110-3bb1-a881-a92d5ab92991.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 46261 IP address blocks: 45.33.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:6c:e4:60:60:b0:55:7e:65:69:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=99c250a3-299d-4036-8441-b2fbd96381c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d9:51:1c:58:14:75:e8:14:cd:a5:3a:0d:95: 13:f8:98:5a:9c:c6:81:0d:e5:b9:38:bf:bf:99:60: 5f:a2:33:e7:86:4b:4e:24:52:a8:3b:3a:88:77:13: dc:7a:9c:d4:3e:80:1e:3e:4d:0e:cf:6e:f7:c9:2a: de:66:da:bd:b8:83:fd:7d:d2:09:30:90:e8:f7:51: f5:93:27:d9:67:4f:61:6e:1a:33:9e:fd:c4:32:8f: be:a5:97:9b:98:7c:80:b9:e1:7c:2b:84:88:a6:59: c5:74:c2:a2:a9:bf:03:eb:5f:9f:2f:07:11:57:c5: c6:08:9a:13:44:9a:3b:c5:30:84:29:e1:41:ce:b3: c3:c4:fd:cb:86:48:91:cc:db:d7:62:e9:cb:06:09: 2b:1e:6f:e9:51:6a:28:df:1c:d2:a0:36:83:ca:0a: d2:ba:ad:02:5e:39:9c:25:b1:0f:00:d7:4d:20:03: 9e:04:fa:78:d4:bc:56:4a:aa:4a:f5:14:82:40:32: df:3f:76:b1:55:de:c2:b7:93:e2:c0:3f:1f:f5:1a: 77:9c:62:2a:a8:33:56:90:35:09:e9:bd:9f:0d:48: 4f:47:25:15:46:ce:aa:91:20:80:12:95:09:2b:97: a6:1a:ad:d5:5a:e4:82:c4:66:ad:1b:69:c3:f0:9d: e0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:40:12:57:48:7D:3E:E1:02:9B:0D:7E:C6:15:F6:0C:5E:07:3B:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3c45d558-4110-3bb1-a881-a92d5ab92991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 45.33.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:9f:c0:cd:07:76:f5:ac:30:57:1d:1f:a9:ed:33:7a:0d:ca: 19:63:b4:4d:3b:22:36:18:80:0c:9f:19:30:44:95:34:a3:78: 6b:ac:ff:de:15:d2:7b:66:5d:c5:5f:2d:f5:b2:cb:0e:9e:d1: 32:f7:59:7d:4a:1a:67:e2:6b:17:59:b7:aa:8e:b5:1f:93:ae: fa:97:fb:a5:4d:46:da:04:75:0d:55:73:0e:b6:f5:f4:d6:de: 50:c8:aa:38:9c:38:96:7b:10:20:c5:8b:ae:9f:ee:26:12:44: 2f:c6:2f:ae:78:57:33:f0:32:90:c8:b7:49:83:ca:26:d2:4b: f9:fa:8e:75:37:3e:72:fc:ae:f8:36:0b:66:7e:0c:e9:b8:7a: 94:b8:2e:56:55:35:05:34:46:27:5f:77:4f:1c:55:32:c1:fa: a9:0a:9c:f5:61:b8:e2:f9:8a:69:64:ed:bb:4d:7d:26:a5:63: 15:33:be:3c:88:74:bc:48:bf:bc:01:f9:c8:72:53:c5:50:f2: 52:f0:6e:38:78:92:03:a5:52:da:e3:0a:23:27:7e:9d:62:fd: 46:44:17:29:eb:22:96:14:bf:bb:87:9c:12:39:07:da:39:cf: 61:c4:d2:0b:d4:f7:ba:05:05:69:86:eb:8a:06:a7:76:b9:a3: 90:ca:06:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8GzkYGCwVX5laaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk OTljMjUwYTMtMjk5ZC00MDM2LTg0NDEtYjJmYmQ5NjM4MWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9lRHFgUdegUzaU6DZUT+JhanMaBDeW5OL+/ mWBfojPnhktOJFKoOzqIdxPcepzUPoAePk0Oz273ySreZtq9uIP9fdIJMJDo91H1 kyfZZ09hbhoznv3EMo++pZebmHyAueF8K4SIplnFdMKiqb8D61+fLwcRV8XGCJoT RJo7xTCEKeFBzrPDxP3LhkiRzNvXYunLBgkrHm/pUWoo3xzSoDaDygrSuq0CXjmc JbEPANdNIAOeBPp41LxWSqpK9RSCQDLfP3axVd7Ct5PiwD8f9Rp3nGIqqDNWkDUJ 6b2fDUhPRyUVRs6qkSCAEpUJK5emGq3VWuSCxGatG2nD8J3g+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdAEldIfT7hApsNfsYV9gxeBztKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2M0NWQ1NTgtNDExMC0z YmIxLWE4ODEtYTkyZDVhYjkyOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSfwM0HdvWsMFcdH6ntM3oNyhljtE07IjYYgAyfGTBElTSjeGus/94V 0ntmXcVfLfWyyw6e0TL3WX1KGmfiaxdZt6qOtR+TrvqX+6VNRtoEdQ1Vcw629fTW 3lDIqjicOJZ7ECDFi66f7iYSRC/GL654VzPwMpDIt0mDyibSS/n6jnU3PnL8rvg2 C2Z+DOm4epS4LlZVNQU0Ridfd08cVTLB+qkKnPVhuOL5imlk7btNfSalYxUzvjyI dLxIv7wB+chyU8VQ8lLwbjh4kgOlUtrjCiMnfp1i/UZEFynrIpYUv7uHnBI5B9o5 z2HE0gvU97oFBWmG64oGp3a5o5DKBr0= -----END CERTIFICATE-----Generated at Fri Jun 5 23:38:53 2026 by rpki-client