$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7c3d53e9-5cbb-3aab-961a-679cfb87b3f8.roa File: 7c3d53e9-5cbb-3aab-961a-679cfb87b3f8.roa (raw, json) Hash identifier: 0m6Tre+WtAld9U7gnj5eYSl+2seYOFsnb0WzTfgMH9w= Subject key identifier: BA:E3:27:ED:37:64:8F:F0:1F:DB:94:E4:4D:BC:C8:A0:77:A6:AD:64 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BBCDAE0B36D4E8596A92F1680 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7c3d53e9-5cbb-3aab-961a-679cfb87b3f8.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 30036 IP address blocks: 45.59.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:e0:b3:6d:4e:85:96:a9:2f:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=f9110028-c157-4c83-af86-003fba6f9705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4a:cf:45:b5:67:c4:32:c5:d8:0d:50:dc:e6: bf:5b:7f:02:a8:a5:cd:9f:e4:5d:fd:90:e9:52:b4: a3:73:06:d4:e7:48:5c:2b:70:fe:05:9c:27:78:e9: 51:fa:c6:2e:4f:05:8c:24:72:3e:62:de:cc:2e:af: 35:51:cf:31:82:70:96:a3:1a:e4:b2:d2:c0:c2:c2: f9:1e:67:a4:9d:04:ac:ac:c3:bc:38:c4:03:e3:c8: 07:44:45:f0:1b:89:0b:00:40:0a:cd:b8:27:10:a6: c4:94:16:a1:96:f6:9c:b0:73:05:1a:c8:cd:62:cb: 0f:54:8b:b5:7e:93:73:1c:9b:c7:44:e6:4c:58:d8: 7b:1f:62:79:e4:fa:51:98:fa:ec:01:ae:fc:d5:23: fa:c1:f1:4b:8a:df:40:ef:ef:eb:48:01:9c:6b:22: b1:99:70:08:d9:6a:a4:88:95:1b:93:1a:46:d3:e6: ef:92:04:38:cb:d7:ea:d8:e5:d2:c5:df:20:75:aa: c7:75:4c:2f:c9:d5:76:a6:fc:99:08:21:c4:6f:54: ed:c6:a5:e0:d6:d7:83:4a:15:e8:c4:cb:6b:9c:7a: 6f:9f:60:82:64:83:fb:87:56:54:d2:d8:13:f8:ab: f1:29:90:22:3f:87:ae:23:e8:3a:dc:62:f7:0c:da: 23:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E3:27:ED:37:64:8F:F0:1F:DB:94:E4:4D:BC:C8:A0:77:A6:AD:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7c3d53e9-5cbb-3aab-961a-679cfb87b3f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 45.59.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:fb:16:18:b6:98:f2:b2:1a:37:0b:38:b3:46:ca:c1:91:cb: d9:b3:c3:41:bb:b6:47:98:b3:59:9d:19:3a:7a:80:d7:50:9e: d3:2d:6b:d0:50:86:84:50:b4:02:98:46:de:11:75:01:2e:a6: 12:9f:b7:a3:ba:09:31:db:3f:64:c0:0f:f6:3b:80:5c:3b:28: 3d:fb:7b:e9:2d:e7:87:56:fc:4f:78:4d:ae:0c:aa:37:c6:06: a3:70:df:53:66:21:42:1d:ac:e9:bb:3b:c6:da:02:ed:74:38: 51:8a:f5:3e:a6:d7:4f:67:c2:4a:40:1e:30:f5:5a:ee:16:a7: e6:5c:4f:0f:ed:b3:b8:0b:e6:5e:be:87:7d:95:76:1b:e1:e8: 4f:7a:8d:c4:90:8b:2a:50:f8:79:4e:54:55:de:74:50:47:97: 32:b0:d8:e1:4b:7d:64:ed:ee:14:8d:b4:46:b4:7a:0e:af:d2: 13:be:3d:1b:28:99:24:76:54:05:2c:15:7a:2c:e4:97:93:82: 1c:77:38:37:4e:36:05:ca:e8:69:f4:f7:cd:c0:18:6e:29:c0: be:0d:c9:3f:33:fc:0b:4b:75:3a:a3:7a:da:0d:6d:29:a9:18: dd:45:97:01:37:44:22:f3:9e:de:00:58:e7:27:c9:2b:c8:8d: c7:84:fd:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu82uCzbU6FlqkvFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk ZjkxMTAwMjgtYzE1Ny00YzgzLWFmODYtMDAzZmJhNmY5NzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0rPRbVnxDLF2A1Q3Oa/W38CqKXNn+Rd/ZDp UrSjcwbU50hcK3D+BZwneOlR+sYuTwWMJHI+Yt7MLq81Uc8xgnCWoxrkstLAwsL5 HmeknQSsrMO8OMQD48gHREXwG4kLAEAKzbgnEKbElBahlvacsHMFGsjNYssPVIu1 fpNzHJvHROZMWNh7H2J55PpRmPrsAa781SP6wfFLit9A7+/rSAGcayKxmXAI2Wqk iJUbkxpG0+bvkgQ4y9fq2OXSxd8gdarHdUwvydV2pvyZCCHEb1TtxqXg1teDShXo xMtrnHpvn2CCZIP7h1ZU0tgT+KvxKZAiP4euI+g63GL3DNoj7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrjJ+03ZI/wH9uU5E28yKB3pq1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvN2MzZDUzZTktNWNiYi0z YWFiLTk2MWEtNjc5Y2ZiODdiM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTsCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEX7Fhi2mPKyGjcLOLNGysGRy9mzw0G7tkeYs1mdGTp6gNdQntMta9BQ hoRQtAKYRt4RdQEuphKft6O6CTHbP2TAD/Y7gFw7KD37e+kt54dW/E94Ta4MqjfG BqNw31NmIUIdrOm7O8baAu10OFGK9T6m109nwkpAHjD1Wu4Wp+ZcTw/ts7gL5l6+ h32Vdhvh6E96jcSQiypQ+HlOVFXedFBHlzKw2OFLfWTt7hSNtEa0eg6v0hO+PRso mSR2VAUsFXos5JeTghx3ODdONgXK6Gn0983AGG4pwL4NyT8z/AtLdTqjetoNbSmp GN1FlwE3RCLznt4AWOcnySvIjceE/RM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:48 2025 by rpki-client