$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa File: ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa (raw, json) Hash identifier: cB6WQpNd+tTQhcGyHoeICMo4CK1ujZZuQdjP95vYLxA= Subject key identifier: FD:99:5A:2C:09:59:99:90:07:40:16:72:19:B1:84:00:87:E0:3D:15 Certificate issuer: /CN=497813be-498e-4129-a627-225f97d0e2b5 Certificate serial: 010D0C9F4328584E6144AA0DA4D8CE49AE1E9640 Authority key identifier: B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 399606 IP address blocks: 45.45.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:aa:0d:a4:d8:ce:49:ae:1e:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=497813be-498e-4129-a627-225f97d0e2b5 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=1de068b7-6437-472e-ad38-9b2762dd3103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f7:2a:9e:45:37:fd:dc:73:61:d7:c2:56:fc: a8:93:b0:1c:f3:92:0c:70:20:a7:35:9c:41:d7:35: 3a:2e:92:9f:8d:9b:05:d3:1b:13:99:fd:13:05:0b: 98:83:61:b9:37:53:fd:b8:0b:ee:85:8e:c7:73:db: 91:98:41:fc:9d:d6:5a:d9:29:3f:1e:f8:08:a4:7f: da:70:7d:8e:7d:7a:61:b4:a6:98:45:80:fe:5f:48: 94:c5:f3:c0:b6:cf:d3:eb:97:b2:1c:7b:58:f0:ad: 36:5c:58:69:89:da:ee:9f:33:5f:44:ca:34:36:ff: 84:99:b3:a1:e6:ed:91:07:5c:87:62:6c:7c:8c:69: 41:4c:5b:a9:24:2d:20:a7:39:1b:31:be:38:ca:80: c9:c9:af:02:8c:0f:89:9e:44:6c:c9:3d:f5:27:dc: 96:31:33:94:b5:27:4d:0b:88:79:33:c7:91:92:1f: 32:e3:60:21:9c:8e:76:a2:c3:4c:d1:9d:1e:fd:81: 55:dc:11:5c:37:a2:d4:6b:bd:2c:ca:a8:33:ff:86: 28:42:b7:c4:60:24:00:d2:88:60:4e:c4:1c:84:7a: 1c:39:3c:b1:46:6d:92:3b:f7:3b:19:ba:0d:1e:9a: ca:aa:ea:f2:55:c3:1f:3e:85:df:12:2e:71:17:6d: 67:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:99:5A:2C:09:59:99:90:07:40:16:72:19:B1:84:00:87:E0:3D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl X509v3 Authority Key Identifier: keyid:B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer sbgp-ipAddrBlock: critical IPv4: 45.45.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ab:0c:35:09:5f:5e:f9:7a:5b:94:1a:8e:ee:a1:15:34:aa: 88:cd:ba:9c:d5:b7:36:8b:97:66:5e:76:1f:23:e5:96:ef:3f: b6:1f:25:50:1b:34:57:bb:0b:22:31:3a:dc:e6:08:42:4e:05: 98:8d:7c:f4:6e:e6:fd:71:be:a9:fd:19:af:9d:92:ed:2f:55: c7:df:95:03:8c:d8:6d:4e:cf:c8:1c:4c:de:1a:64:33:1c:42: 50:91:4a:b2:01:d9:f8:32:0a:07:60:a2:e1:85:45:ff:42:d6: 4a:bd:bc:56:e2:85:3e:06:f7:5a:3c:c4:0b:5e:68:7f:e4:c9: 94:a2:5d:a0:19:3a:a2:22:95:b7:8b:9f:db:c1:d5:2d:92:45: ca:bc:48:a3:27:cd:1f:8b:cc:23:dd:85:6c:1c:2b:e7:b9:c7: 37:59:ac:72:8d:19:ca:a5:00:8d:65:68:eb:8c:5b:fb:8a:80: 17:0e:15:32:db:d5:00:4c:20:7d:9b:ee:ba:6b:c9:25:01:85: 01:52:b7:e2:3c:c6:c6:eb:52:c5:3e:15:34:71:8b:57:d0:a1: e7:d2:f6:19:c7:15:71:4c:e9:0e:ac:09:79:e0:77:6e:da:06: 09:79:36:38:c6:64:e6:a3:ff:a2:4d:0f:9f:be:a3:06:51:f8: 66:82:73:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRKoNpNjOSa4elkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk3ODEzYmUtNDk4ZS00MTI5LWE2MjctMjI1Zjk3ZDBl MmI1MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk MWRlMDY4YjctNjQzNy00NzJlLWFkMzgtOWIyNzYyZGQzMTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvcqnkU3/dxzYdfCVvyok7Ac85IMcCCnNZxB 1zU6LpKfjZsF0xsTmf0TBQuYg2G5N1P9uAvuhY7Hc9uRmEH8ndZa2Sk/HvgIpH/a cH2OfXphtKaYRYD+X0iUxfPAts/T65eyHHtY8K02XFhpidrunzNfRMo0Nv+EmbOh 5u2RB1yHYmx8jGlBTFupJC0gpzkbMb44yoDJya8CjA+JnkRsyT31J9yWMTOUtSdN C4h5M8eRkh8y42AhnI52osNM0Z0e/YFV3BFcN6LUa70syqgz/4YoQrfEYCQA0ohg TsQchHocOTyxRm2SO/c7GboNHprKquryVcMfPoXfEi5xF21nBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2ZWiwJWZmQB0AWchmxhACH4D0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OTc4 MTNiZS00OThlLTQxMjktYTYyNy0yMjVmOTdkMGUyYjUvY2U0N2M5NjgtMGExNi0z MTcwLTk0OGQtYTJjZmFlM2ViOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk3ODEzYmUtNDk4ZS00MTI5LWE2 MjctMjI1Zjk3ZDBlMmI1LzQ5NzgxM2JlLTQ5OGUtNDEyOS1hNjI3LTIyNWY5N2Qw ZTJiNS5jcmwwHwYDVR0jBBgwFoAUuDd7Tk8D/gmswblAiz+e8Eyi/yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OTc4MTNiZS00OThlLTQxMjktYTYyNy0yMjVm OTdkMGUyYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEurDDUJX175eluUGo7uoRU0qojNupzVtzaLl2Zedh8j5ZbvP7YfJVAb NFe7CyIxOtzmCEJOBZiNfPRu5v1xvqn9Ga+dku0vVcfflQOM2G1Oz8gcTN4aZDMc QlCRSrIB2fgyCgdgouGFRf9C1kq9vFbihT4G91o8xAteaH/kyZSiXaAZOqIilbeL n9vB1S2SRcq8SKMnzR+LzCPdhWwcK+e5xzdZrHKNGcqlAI1laOuMW/uKgBcOFTLb 1QBMIH2b7rprySUBhQFSt+I8xsbrUsU+FTRxi1fQoefS9hnHFXFM6Q6sCXngd27a Bgl5NjjGZOaj/6JND5++owZR+GaCc2o= -----END CERTIFICATE-----Generated at Wed Jul 8 08:39:35 2026 by rpki-client