$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa File: 0649525a-4f78-38b5-9509-f91bdf00cd84.roa (raw, json) Hash identifier: 2DPkZwgKAjzgU9E0EkhK6pydzuF+CxE4E5MIEZ7ZgeI= Subject key identifier: D1:1A:76:DF:0A:29:7F:38:93:39:31:77:B0:FE:C4:F8:D9:05:81:F7 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584BB88D260F97DB4998FA66FB40 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 53356 IP address blocks: 45.62.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:26:0f:97:db:49:98:fa:66:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=7a215495-8cd2-454b-a5fe-77035d91790a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c9:91:a9:ea:73:43:e0:bf:56:c5:a1:79:2f: 6b:c5:04:0b:35:a8:cf:29:6c:6c:46:4b:fa:08:b9: 73:e1:3d:2e:13:72:6e:86:0b:aa:96:2e:61:2d:26: c7:a0:60:dd:a5:a3:43:02:f1:31:f4:6a:37:1e:bc: c8:dd:3a:f2:a8:71:fe:4f:1c:a1:89:7f:90:77:b6: 94:16:60:e6:0e:d0:04:00:4c:05:c4:00:9b:72:65: 39:8d:f1:68:24:15:fb:39:6b:35:5d:bc:f4:45:1c: d7:e9:4c:65:a5:22:e0:f1:ae:cd:a1:00:e3:2c:90: 7d:9d:44:25:58:e7:ef:c6:0d:64:39:1a:c6:d7:54: 8a:da:c7:35:28:9f:8f:bb:ee:10:df:af:43:72:33: f0:d0:ca:11:c6:c3:92:15:bb:22:c1:b8:c9:4a:95: f7:e4:01:e7:5c:f3:f7:99:71:bc:d4:e0:3f:09:48: 1f:4e:cf:3d:c7:0c:e8:69:4e:0b:69:e9:40:3f:f7: 80:8b:4b:f0:eb:f9:eb:b8:a8:27:ed:a1:a3:4a:d1: f2:4f:57:4c:91:9d:d7:93:56:c9:6d:2e:7b:79:ba: 2a:1a:06:7b:54:31:fd:77:dc:b1:75:4d:20:05:9b: e4:c0:5e:7a:87:02:8c:8f:2c:b3:c8:58:c1:72:e8: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1A:76:DF:0A:29:7F:38:93:39:31:77:B0:FE:C4:F8:D9:05:81:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.62.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:20:af:04:09:17:b5:29:08:29:23:62:74:3d:d6:7b:8b:4f: 2a:1d:bf:eb:50:b4:d9:ac:85:37:a8:d7:a5:cc:a7:95:57:bc: 72:e8:9b:c0:68:17:04:ec:bf:0e:51:5b:ce:8f:7b:78:f9:2d: 8d:af:dd:2f:f7:30:3f:3c:a4:29:63:d2:99:07:7f:e7:15:42: c9:f9:f9:1a:86:92:97:2a:b7:6f:4e:16:32:93:62:e6:80:4d: 80:27:10:6f:e3:15:e0:a4:14:08:d2:05:73:46:70:19:0a:b3: 81:d3:51:7c:10:ee:46:ad:d1:73:7e:7a:08:7b:56:d4:64:05: 86:cc:56:af:f9:7b:ee:a6:5c:1c:bb:da:36:e0:3c:fe:29:14: 08:c8:8e:52:f6:8a:ab:cf:8f:0a:34:87:ee:cf:d0:20:16:66: e5:4e:54:f6:12:5e:84:6f:bc:34:66:7d:5d:97:3e:43:6d:c2: f6:ca:79:8c:36:ce:d9:fe:fe:1c:94:a0:19:71:c6:e6:a5:ed: 35:47:39:6a:54:1f:bd:b2:da:34:4d:8b:f9:c7:8b:1f:60:ff: ef:a3:25:17:22:7e:6b:e2:e3:02:d7:d5:eb:4c:ac:b2:4a:94: ed:dc:e0:ab:a6:29:d6:e6:c6:7a:d2:09:38:26:4f:8c:59:26: f0:4c:eb:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSYPl9tJmPpm+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk N2EyMTU0OTUtOGNkMi00NTRiLWE1ZmUtNzcwMzVkOTE3OTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcmRqepzQ+C/VsWheS9rxQQLNajPKWxsRkv6 CLlz4T0uE3Juhguqli5hLSbHoGDdpaNDAvEx9Go3HrzI3TryqHH+TxyhiX+Qd7aU FmDmDtAEAEwFxACbcmU5jfFoJBX7OWs1Xbz0RRzX6UxlpSLg8a7NoQDjLJB9nUQl WOfvxg1kORrG11SK2sc1KJ+Pu+4Q369DcjPw0MoRxsOSFbsiwbjJSpX35AHnXPP3 mXG81OA/CUgfTs89xwzoaU4LaelAP/eAi0vw6/nruKgn7aGjStHyT1dMkZ3Xk1bJ bS57eboqGgZ7VDH9d9yxdU0gBZvkwF56hwKMjyyzyFjBcuh5pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEadt8KKX84kzkxd7D+xPjZBYH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMDY0OTUyNWEtNGY3OC0z OGI1LTk1MDktZjkxYmRmMDBjZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT6rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYgrwQJF7UpCCkjYnQ91nuLTyodv+tQtNmshTeo16XMp5VXvHLom8Bo FwTsvw5RW86Pe3j5LY2v3S/3MD88pClj0pkHf+cVQsn5+RqGkpcqt29OFjKTYuaA TYAnEG/jFeCkFAjSBXNGcBkKs4HTUXwQ7kat0XN+egh7VtRkBYbMVq/5e+6mXBy7 2jbgPP4pFAjIjlL2iqvPjwo0h+7P0CAWZuVOVPYSXoRvvDRmfV2XPkNtwvbKeYw2 ztn+/hyUoBlxxual7TVHOWpUH72y2jRNi/nHix9g/++jJRcifmvi4wLX1etMrLJK lO3c4KumKdbmxnrSCTgmT4xZJvBM6/A= -----END CERTIFICATE-----Generated at Tue Nov 4 08:07:51 2025 by rpki-client