$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa File: 1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa (raw, json) Hash identifier: doFovt9Q7BkhNXqwD9WxjkCGjiKImoCob/TKdMA5n9s= Subject key identifier: F3:F5:F2:7B:CD:52:D2:CE:EB:2C:38:F6:62:3D:B7:62:57:56:28:A4 Certificate issuer: /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Certificate serial: 010D0C9F4328584F63F820C0D1264BDDF65C10C0 Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 1011 IP address blocks: 45.45.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:20:c0:d1:26:4b:dd:f6:5c:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=a57c0d46-de66-4423-bf16-726fbc21c697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:81:88:40:e2:96:42:54:00:83:bb:2e:fb:21: 60:6a:88:0d:90:a3:09:15:2b:1b:85:39:72:96:67: d9:90:66:d7:21:15:83:6a:5e:f6:ea:9f:62:0e:b0: d5:03:6f:52:c0:9a:a5:2d:5f:86:ec:37:28:ed:24: 65:cd:1e:cf:78:32:ca:6a:99:a1:de:29:d9:65:f5: 83:6d:97:91:92:36:fa:58:44:ea:f3:b0:4f:4c:e0: 42:84:77:f3:57:42:c4:e0:4b:b9:06:10:ab:65:67: 41:cb:60:54:46:35:7c:14:9e:42:a9:43:e5:44:43: f8:a1:33:a2:9c:20:38:7d:ec:6b:da:7d:17:ea:fd: c4:c1:a3:15:96:5d:c2:fc:ad:3e:26:e6:de:f5:83: 7f:81:05:d5:62:7b:9a:14:b2:80:67:79:d2:e7:02: 02:80:09:a7:01:de:80:3b:01:cb:1c:95:ec:24:a7: a6:cb:b8:4e:70:6e:fd:35:3d:99:c3:e0:83:66:90: c0:fe:a4:c1:9f:93:b8:71:cb:d0:93:0d:8c:92:b3: f6:03:80:f9:50:1f:d4:52:7c:1c:51:cd:ed:23:74: 6e:b0:a0:b8:3b:68:8b:0d:4d:f9:b1:2c:c9:dc:92: 9a:96:07:bf:dc:ea:08:cb:76:84:50:ef:09:84:d1: 14:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F5:F2:7B:CD:52:D2:CE:EB:2C:38:F6:62:3D:B7:62:57:56:28:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl X509v3 Authority Key Identifier: keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer sbgp-ipAddrBlock: critical IPv4: 45.45.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:60:f1:51:54:e8:69:c4:83:90:70:a4:0d:0e:32:be:ef:77: c9:29:c7:cf:e4:ee:28:6f:e5:6c:f0:41:4b:37:f1:c7:91:7b: 1f:59:5c:f7:ee:b9:d5:ee:3d:45:57:87:f1:8f:a3:00:71:fe: 15:63:39:e9:f0:9a:79:c4:8b:bb:59:3a:eb:71:5f:36:e3:a2: 8e:5a:d1:85:8f:50:17:9b:f7:6e:74:68:31:72:60:02:1c:7b: c3:b3:23:e5:8a:84:ec:46:5a:05:e4:db:3c:03:44:03:70:9e: 86:a5:77:37:03:72:b1:33:1e:b4:e6:f1:a6:2e:68:1b:25:b7: 04:dd:38:4e:98:81:bd:ce:0c:95:a3:26:73:4b:c6:42:d7:97: 98:46:65:11:83:aa:96:09:5b:50:41:c3:3e:9c:51:b8:53:03: 05:1e:4f:b0:d3:a8:0b:90:b6:ed:3c:0c:80:dd:ac:b5:2d:63: ee:4f:1b:b1:96:46:12:12:c8:0c:8b:27:3f:cb:a1:78:bf:e6: 31:8e:f3:7f:93:0e:52:b5:51:39:1a:ac:44:7b:db:e8:4f:63: f0:2b:6f:13:6a:b1:57:f9:15:c1:9d:58:d4:a2:20:4d:54:b6: f2:b5:77:90:18:d3:c9:58:f2:ec:2f:10:33:78:44:a4:b9:49: 0d:1d:72:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+CDA0SZL3fZcEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YmM1YzMtOWVmNC00ZGEzLTlmY2YtNGVjNmRhYmJm YmMzMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk YTU3YzBkNDYtZGU2Ni00NDIzLWJmMTYtNzI2ZmJjMjFjNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYGIQOKWQlQAg7su+yFgaogNkKMJFSsbhTly lmfZkGbXIRWDal726p9iDrDVA29SwJqlLV+G7Dco7SRlzR7PeDLKapmh3inZZfWD bZeRkjb6WETq87BPTOBChHfzV0LE4Eu5BhCrZWdBy2BURjV8FJ5CqUPlREP4oTOi nCA4fexr2n0X6v3EwaMVll3C/K0+Jube9YN/gQXVYnuaFLKAZ3nS5wICgAmnAd6A OwHLHJXsJKemy7hOcG79NT2Zw+CDZpDA/qTBn5O4ccvQkw2MkrP2A4D5UB/UUnwc Uc3tI3RusKC4O2iLDU35sSzJ3JKalge/3OoIy3aEUO8JhNEU+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPP18nvNUtLO6yw49mI9t2JXViikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRi YzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2ZGFiYmZiYzMvMWM4N2MxYzktMzMxYS0z NTI0LTlmNDQtMWJjNGUzMzA1OWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWY0YmM1YzMtOWVmNC00ZGEzLTlm Y2YtNGVjNmRhYmJmYmMzL2FmNGJjNWMzLTllZjQtNGRhMy05ZmNmLTRlYzZkYWJi ZmJjMy5jcmwwHwYDVR0jBBgwFoAUsrvXRQKNNtbCM39NSIxDRyFgB78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRiYzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2 ZGFiYmZiYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdg8VFU6GnEg5BwpA0OMr7vd8kpx8/k7ihv5WzwQUs38ceRex9ZXPfu udXuPUVXh/GPowBx/hVjOenwmnnEi7tZOutxXzbjoo5a0YWPUBeb9250aDFyYAIc e8OzI+WKhOxGWgXk2zwDRANwnoaldzcDcrEzHrTm8aYuaBsltwTdOE6Ygb3ODJWj JnNLxkLXl5hGZRGDqpYJW1BBwz6cUbhTAwUeT7DTqAuQtu08DIDdrLUtY+5PG7GW RhISyAyLJz/LoXi/5jGO83+TDlK1UTkarER72+hPY/ArbxNqsVf5FcGdWNSiIE1U tvK1d5AY08lY8uwvEDN4RKS5SQ0dcno= -----END CERTIFICATE-----Generated at Sun Oct 4 20:14:08 2026 by rpki-client