$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/cdb55576-3077-358a-a411-40c0f4e67ec5.roa File: cdb55576-3077-358a-a411-40c0f4e67ec5.roa (raw, json) Hash identifier: bh5EgJygnrASCZa0C0t5dlSvWqjG/05TjFssTbYne5U= Subject key identifier: 64:EF:B1:89:FF:CA:49:4B:CD:5F:61:3C:F5:2B:C3:22:F3:8F:91:4C Certificate issuer: /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Certificate serial: 010D0C9F4328584F0672301E7C4944EA63732C00 Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/cdb55576-3077-358a-a411-40c0f4e67ec5.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 213122 IP address blocks: 45.61.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:30:1e:7c:49:44:ea:63:73:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=e9b416b0-6b1e-4117-a363-abcce6dcb41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:e0:73:02:e7:1d:e0:74:f5:bd:15:64:10: 71:9e:2a:c5:97:8c:1b:6f:d5:1a:a1:45:c9:7a:77: ac:95:10:7f:0f:5b:26:2d:26:63:9e:48:25:5c:09: 4b:d0:be:fb:45:aa:19:94:92:f9:de:be:ae:d0:aa: 82:ed:4c:dd:43:c2:4d:a1:0e:20:4c:a7:e7:58:d2: 40:be:f5:25:c8:0d:df:00:12:9f:06:79:bd:29:60: 31:bf:70:e2:e5:7a:ef:76:a4:6d:e9:e3:43:9b:2b: 38:6d:08:4b:7e:d2:17:98:bf:a7:2d:55:95:12:c5: 49:c6:05:d5:02:67:04:e7:67:90:e0:39:22:aa:f4: 82:af:23:da:d2:e6:93:02:1a:70:c3:4d:55:68:3d: 92:45:45:06:30:ee:1d:c9:ee:b8:e9:0f:70:46:ae: f6:db:d1:6f:4f:b9:e3:27:47:9d:2e:05:69:30:88: 58:50:9d:ad:11:9c:1e:79:2a:c0:e1:a5:ac:b6:68: 06:0c:05:da:69:e3:88:f0:f1:c3:e5:9c:0c:2a:88: 89:1e:71:6a:24:de:9c:11:28:13:c9:b7:54:4b:8e: 90:f9:d8:bb:18:ac:de:49:32:9c:46:20:05:c8:84: aa:c9:14:de:d1:8a:ad:a2:98:c5:24:d1:57:ac:c1: 3a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EF:B1:89:FF:CA:49:4B:CD:5F:61:3C:F5:2B:C3:22:F3:8F:91:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/cdb55576-3077-358a-a411-40c0f4e67ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl X509v3 Authority Key Identifier: keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer sbgp-ipAddrBlock: critical IPv4: 45.61.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e9:aa:f1:1d:4b:71:27:5b:ab:9d:66:c9:b9:1f:a8:3b:26: 22:40:02:ac:6d:49:34:ff:bd:84:29:93:61:87:2f:e1:bb:4c: 89:b3:d2:0a:bf:c4:4c:6e:ba:f5:4a:7b:9e:e4:ff:c7:ff:03: 99:83:32:67:3b:20:ff:8d:c8:1c:fe:e2:3a:00:ac:9b:b4:df: 20:6e:3a:83:1e:44:0d:72:66:bb:5f:62:d9:5d:1b:b9:39:40: b9:1f:14:fe:13:0f:3d:fa:fa:e2:c5:62:92:9a:24:5e:76:4a: f0:96:78:9a:47:3a:47:75:95:89:a3:2b:44:62:c3:71:70:97: 2d:70:72:98:15:63:32:ef:8c:2a:51:48:9c:13:e6:3e:c8:2e: 97:62:c3:75:e2:15:b6:10:fc:90:41:9e:d4:ee:75:ec:ae:dd: 25:a7:ac:8f:60:da:71:79:43:cd:d9:54:90:a5:b2:5e:2a:5f: 01:8f:3a:af:8c:39:b7:b5:ac:92:28:1f:eb:94:40:e3:27:ce: d8:e3:69:0a:6c:22:a1:e8:a6:0a:a2:30:a1:f1:22:4d:34:cc: b8:aa:6f:b5:cf:b4:2b:7e:1b:a1:cf:e5:f2:76:e8:ef:a4:84: 3b:f9:a5:69:ba:90:7f:03:5f:0a:45:63:c9:4c:d5:97:06:d7: ed:f0:d1:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcjAefElE6mNzLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi OWQ3MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZTliNDE2YjAtNmIxZS00MTE3LWEzNjMtYWJjY2U2ZGNiNDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7TgcwLnHeB09b0VZBBxnirFl4wbb9UaoUXJ eneslRB/D1smLSZjnkglXAlL0L77RaoZlJL53r6u0KqC7UzdQ8JNoQ4gTKfnWNJA vvUlyA3fABKfBnm9KWAxv3Di5XrvdqRt6eNDmys4bQhLftIXmL+nLVWVEsVJxgXV AmcE52eQ4DkiqvSCryPa0uaTAhpww01VaD2SRUUGMO4dye646Q9wRq7229FvT7nj J0edLgVpMIhYUJ2tEZweeSrA4aWstmgGDAXaaeOI8PHD5ZwMKoiJHnFqJN6cESgT ybdUS46Q+di7GKzeSTKcRiAFyISqyRTe0YqtopjFJNFXrME6owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTvsYn/yklLzV9hPPUrwyLzj5FMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvY2RiNTU1NzYtMzA3Ny0z NThhLWE0MTEtNDBjMGY0ZTY3ZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT2rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDpqvEdS3EnW6udZsm5H6g7JiJAAqxtSTT/vYQpk2GHL+G7TImz0gq/ xExuuvVKe57k/8f/A5mDMmc7IP+NyBz+4joArJu03yBuOoMeRA1yZrtfYtldG7k5 QLkfFP4TDz36+uLFYpKaJF52SvCWeJpHOkd1lYmjK0Riw3Fwly1wcpgVYzLvjCpR SJwT5j7ILpdiw3XiFbYQ/JBBntTudeyu3SWnrI9g2nF5Q83ZVJClsl4qXwGPOq+M Obe1rJIoH+uUQOMnztjjaQpsIqHopgqiMKHxIk00zLiqb7XPtCt+G6HP5fJ26O+k hDv5pWm6kH8DXwpFY8lM1ZcG1+3w0QY= -----END CERTIFICATE-----Generated at Sat Sep 5 06:09:04 2026 by rpki-client