$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/9ce86c31-9590-3701-8ee2-433e109b499e.roa File: 9ce86c31-9590-3701-8ee2-433e109b499e.roa (raw, json) Hash identifier: YAqR00uHu39E+uHqXJDAerEMRXzf5Yb5m0mdjYSX6iY= Subject key identifier: 26:97:63:40:4A:17:EC:BD:B5:BA:F5:40:7A:69:5B:2D:83:56:C1:4E Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584B4FDC6FA864401ADC9E207900 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/9ce86c31-9590-3701-8ee2-433e109b499e.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 54198 IP address blocks: 45.44.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:6f:a8:64:40:1a:dc:9e:20:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=dc36a199-9861-4084-9dcc-7c220df61128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5b:fa:1d:aa:f8:fd:14:3c:40:59:06:cf:45: db:4c:b2:b6:9d:c3:f4:61:02:e8:00:8c:e7:d6:d9: 63:78:1e:e8:1c:05:32:c1:1a:a0:46:ed:3e:13:21: 50:28:1a:6c:e5:bd:61:c4:a8:8a:0a:ad:44:ea:a2: bb:73:22:e6:ad:0d:52:8c:0f:b2:a1:6f:dd:c6:02: b1:75:c6:cc:f3:27:30:a8:c8:67:27:36:35:6b:4b: ee:df:52:a4:b1:bf:f6:d2:84:4d:2a:3d:2c:77:2e: 4e:5d:f2:21:9e:ac:85:dd:bc:83:b5:c1:fc:d2:68: 70:4c:b6:b4:53:b8:a2:bf:96:c9:98:69:23:dd:4f: 07:20:5b:c5:cc:b1:eb:96:02:34:f7:b5:f4:62:18: d9:9a:48:d8:95:59:10:13:e2:be:77:6e:a8:2e:c4: 87:7a:da:bd:78:e5:ae:bd:bd:e6:3f:25:72:c1:6b: 3c:72:d7:92:3d:92:b1:0e:76:59:47:eb:84:98:c7: 7a:0e:4d:a1:9e:13:97:51:5e:9e:0b:e2:07:13:69: ff:a0:91:47:ee:91:3d:70:31:9d:58:27:b6:25:b1: eb:5f:98:3f:ba:48:16:89:8d:71:fa:22:6c:07:89: 40:03:a4:96:9c:c6:3d:a5:ea:8f:3f:cf:67:ea:1c: 06:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:97:63:40:4A:17:EC:BD:B5:BA:F5:40:7A:69:5B:2D:83:56:C1:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/9ce86c31-9590-3701-8ee2-433e109b499e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 45.44.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:20:15:fa:09:2f:b9:2a:07:e5:f1:07:31:f5:e7:bb:cc:a9: 69:54:48:69:10:16:d9:94:36:b7:f5:1b:53:1b:66:d3:cc:0a: 8c:9a:58:73:32:24:ba:e0:58:61:05:fb:8e:e2:90:cf:3e:a1: 12:fa:6e:3e:3b:bc:4d:d8:f8:bc:bf:22:73:a8:80:ce:f3:a2: 55:6e:e7:a7:0f:60:4c:cb:db:2b:87:25:c9:0f:d4:c9:c4:52: 4b:6a:6e:49:99:98:ba:32:10:99:0e:cf:4a:24:0f:7e:4a:b7: 42:66:b1:84:06:78:ce:3a:2a:bb:5c:2b:6f:d7:6a:ff:0c:13: aa:f9:a3:dd:9e:d5:c5:18:e0:24:d0:69:74:d8:af:ef:7c:92: 63:2c:d8:98:87:ba:a7:9a:4c:7c:be:7c:14:d6:5c:04:7c:ae: 37:c4:c5:8b:b3:11:0c:56:ab:73:e4:f2:a6:6e:89:a5:fe:3b: 81:dc:ca:1c:87:c6:a4:70:ab:46:c5:4d:72:7e:df:71:d2:38: 13:81:c2:2f:14:96:af:c7:d7:ad:2b:9c:c4:f8:25:3d:03:35: bc:ad:58:fc:a4:26:83:bb:67:27:c8:4c:24:1f:95:41:e3:68: 66:ac:c1:2d:1b:95:8a:c6:d5:c4:04:2e:9d:2d:17:9e:b9:f2: f5:ce:3c:8a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtP3G+oZEAa3J4geQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGMzNmExOTktOTg2MS00MDg0LTlkY2MtN2MyMjBkZjYxMTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVv6Har4/RQ8QFkGz0XbTLK2ncP0YQLoAIzn 1tljeB7oHAUywRqgRu0+EyFQKBps5b1hxKiKCq1E6qK7cyLmrQ1SjA+yoW/dxgKx dcbM8ycwqMhnJzY1a0vu31Kksb/20oRNKj0sdy5OXfIhnqyF3byDtcH80mhwTLa0 U7iiv5bJmGkj3U8HIFvFzLHrlgI097X0YhjZmkjYlVkQE+K+d26oLsSHetq9eOWu vb3mPyVywWs8cteSPZKxDnZZR+uEmMd6Dk2hnhOXUV6eC+IHE2n/oJFH7pE9cDGd WCe2JbHrX5g/ukgWiY1x+iJsB4lAA6SWnMY9peqPP89n6hwGOQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCaXY0BKF+y9tbr1QHppWy2DVsFOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvOWNlODZjMzEtOTU5MC0z NzAxLThlZTItNDMzZTEwOWI0OTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMALSwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZyAV+gkvuSoH5fEHMfXnu8ypaVRIaRAW2ZQ2t/UbUxtm08wKjJpYczIk uuBYYQX7juKQzz6hEvpuPju8Tdj4vL8ic6iAzvOiVW7npw9gTMvbK4clyQ/UycRS S2puSZmYujIQmQ7PSiQPfkq3QmaxhAZ4zjoqu1wrb9dq/wwTqvmj3Z7VxRjgJNBp dNiv73ySYyzYmIe6p5pMfL58FNZcBHyuN8TFi7MRDFarc+Typm6Jpf47gdzKHIfG pHCrRsVNcn7fcdI4E4HCLxSWr8fXrSucxPglPQM1vK1Y/KQmg7tnJ8hMJB+VQeNo ZqzBLRuVisbVxAQunS0Xnrny9c48ig== -----END CERTIFICATE-----Generated at Wed Nov 5 13:30:52 2025 by rpki-client