$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa File: 46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa (raw, json) Hash identifier: T3HkRo8nae3eNL0pWUgGhqk6O2U/yMLYbVU3xaukQZs= Subject key identifier: 2B:1C:B9:1F:BA:B9:75:09:BC:B2:DA:56:79:92:4C:9D:CA:40:7E:88 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584F067243AD56742FE83CC71980 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 9009 IP address blocks: 45.33.152.0/24 maxlen: 24 45.33.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:43:ad:56:74:2f:e8:3c:c7:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=fa81c147-c936-4434-bf47-efec9a94fbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cd:a9:24:1e:54:90:13:e1:61:3a:ed:e0:39: b4:d5:17:7f:7d:a1:84:47:68:c2:17:bb:7b:4f:6b: 37:f0:8c:ff:a0:9f:51:c3:93:77:e1:fc:25:8d:c0: be:b2:c2:ea:a8:2c:a3:4e:2c:43:84:29:c3:c4:e4: 8a:25:d5:72:ae:eb:73:74:7f:44:e3:76:81:dc:03: 75:ec:34:67:f4:cb:70:0a:fd:f2:56:9e:d5:8b:eb: 24:5e:79:f0:cf:02:ea:38:c8:eb:c5:66:88:fb:98: f5:48:04:50:c1:3c:ab:a9:c4:0b:2e:3a:79:ff:45: 5c:4a:c7:7d:72:02:44:3d:36:cf:b0:a5:3a:85:93: 20:b5:20:13:6b:a6:86:22:66:39:bc:0f:8c:a1:89: aa:82:fb:9b:72:ee:b7:20:8b:5a:92:98:3f:5e:23: 73:38:c7:13:07:d7:13:4d:60:5f:ab:e8:07:2e:81: 5f:a4:29:f2:1c:13:cd:ff:85:bb:68:4b:f0:f9:a9: 41:da:22:cb:f9:53:f4:d2:43:6a:60:4b:80:42:29: 17:1a:04:f2:bc:4e:3b:4e:5d:bc:2e:e6:96:32:4e: 6f:12:3c:8f:d9:21:4e:4b:df:0a:68:5c:d8:08:26: 2a:1e:07:9a:ae:6f:f8:a4:48:35:8a:56:c9:2a:47: 78:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1C:B9:1F:BA:B9:75:09:BC:B2:DA:56:79:92:4C:9D:CA:40:7E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 45.33.152.0/24 45.33.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c8:8c:53:83:7c:05:0d:44:a8:b1:4d:f8:28:c2:91:18:1f: 63:81:ae:7e:c5:b7:a6:63:e3:ea:06:c1:ab:fc:e3:46:1b:f1: f7:ac:49:c6:fd:78:1a:8c:42:4f:f6:f3:1f:00:ab:1d:a0:20: b8:92:17:6f:de:b0:8e:22:a4:74:75:79:86:6f:3b:6f:d3:01: 7b:10:16:57:12:fa:d7:56:ba:28:b6:4d:e5:8b:35:1a:3b:36: d7:df:a4:28:3e:fe:05:76:60:6b:96:c9:f2:11:14:22:27:b7: 5f:42:31:d5:f0:5d:90:74:b2:e3:ad:67:ef:a1:98:a3:9e:f9: 0c:c2:4d:6c:44:54:e5:e9:f7:a9:c7:34:b2:ec:f7:01:b9:c7: 9d:c6:66:44:5b:59:4d:11:c9:87:15:db:1d:46:58:ef:c2:34: 8c:a9:e2:5d:dd:10:e3:54:f2:c4:f4:b3:50:c5:cc:14:69:94: 20:b1:f2:7a:6d:64:60:f7:d3:72:51:ba:9a:54:68:58:49:65: 7d:42:9f:b4:ab:fb:fe:e5:e5:7d:da:ca:4c:f4:48:0f:6a:ae: dd:84:8e:9a:5f:af:24:5f:90:f2:a9:97:06:17:26:db:34:c7: 36:19:d3:da:14:bf:e2:6f:77:19:f8:c1:09:dd:a9:30:fe:fb: 54:bc:f4:6c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8GckOtVnQv6DzHGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZmE4MWMxNDctYzkzNi00NDM0LWJmNDctZWZlYzlhOTRmYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM2pJB5UkBPhYTrt4Dm01Rd/faGER2jCF7t7 T2s38Iz/oJ9Rw5N34fwljcC+ssLqqCyjTixDhCnDxOSKJdVyrutzdH9E43aB3AN1 7DRn9MtwCv3yVp7Vi+skXnnwzwLqOMjrxWaI+5j1SARQwTyrqcQLLjp5/0VcSsd9 cgJEPTbPsKU6hZMgtSATa6aGImY5vA+MoYmqgvubcu63IItakpg/XiNzOMcTB9cT TWBfq+gHLoFfpCnyHBPN/4W7aEvw+alB2iLL+VP00kNqYEuAQikXGgTyvE47Tl28 LuaWMk5vEjyP2SFOS98KaFzYCCYqHgearm/4pEg1ilbJKkd4+wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCscuR+6uXUJvLLaVnmSTJ3KQH6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNDZjMWE3YzItYjNkNi0z ZTFiLWEwYjEtNWM5N2I0YzM2NmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALSGYAwQA LSGfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABPIjFODfAUNRKixTfgowpEYH2OBrn7Ft6Zj4+oGwav840Yb 8fesScb9eBqMQk/28x8Aqx2gILiSF2/esI4ipHR1eYZvO2/TAXsQFlcS+tdWuii2 TeWLNRo7NtffpCg+/gV2YGuWyfIRFCInt19CMdXwXZB0suOtZ++hmKOe+QzCTWxE VOXp96nHNLLs9wG5x53GZkRbWU0RyYcV2x1GWO/CNIyp4l3dEONU8sT0s1DFzBRp lCCx8nptZGD303JRuppUaFhJZX1Cn7Sr+/7l5X3aykz0SA9qrt2EjppfryRfkPKp lwYXJts0xzYZ09oUv+Jvdxn4wQndqTD++1S89Gw= -----END CERTIFICATE-----Generated at Tue Sep 1 03:28:52 2026 by rpki-client