$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/ae65d127-f641-393d-81d0-4f53377d922c.roa File: ae65d127-f641-393d-81d0-4f53377d922c.roa (raw, json) Hash identifier: NLxU8qPIGStbjU3YSKcOGZqkxl9syMZGmPzgj1YGwEI= Subject key identifier: 17:38:6C:51:1B:90:3A:A0:36:2C:F0:84:18:31:D0:9D:D7:28:AC:44 Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Certificate serial: 010D0C9F4328584B1C36BC61A53A431E3F627200 Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/ae65d127-f641-393d-81d0-4f53377d922c.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 45.223.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:bc:61:a5:3a:43:1e:3f:62:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=255da16f-d3de-4cab-96b2-445da3535142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:01:33:3c:a6:48:9d:32:65:63:52:f8:d8:d4: 5b:82:30:ad:02:01:1a:a3:09:c8:d4:13:60:38:ba: 62:48:83:1a:46:bd:60:f5:d6:cc:88:98:8f:38:ea: 70:26:de:90:97:67:c7:77:57:fd:32:23:b2:72:71: a4:f8:88:77:c7:5f:c6:11:bc:4d:c8:31:7b:95:cf: 77:c4:c7:81:7f:86:9e:1f:d3:da:3b:1f:83:2c:d3: 96:4e:3f:85:8f:57:a4:c6:ea:a9:39:c9:3b:5a:4d: e5:47:52:64:3d:30:f7:45:57:50:33:2b:85:31:2f: 81:09:93:4d:c3:01:65:ed:c2:68:9f:63:fc:47:6a: f3:bd:0c:9f:9a:0f:99:03:fb:c4:84:15:12:40:7e: c5:14:44:30:d1:52:0b:47:10:22:8e:36:cb:70:e7: 52:a1:1c:ac:b8:48:e2:17:b2:9e:15:d9:8e:5a:2f: 62:d3:16:c2:d9:38:d8:4b:5b:0c:8e:ef:45:08:c5: 4c:dd:88:4d:02:f2:9b:3e:74:a7:9a:49:16:19:94: 72:ef:57:f1:30:f1:d1:a6:49:aa:30:fb:9e:5e:96: 53:31:ae:1d:e6:53:96:af:81:3f:ed:e5:5a:cf:68: e0:55:e6:07:8c:5d:03:b9:19:66:c1:8f:9c:65:64: 7f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:38:6C:51:1B:90:3A:A0:36:2C:F0:84:18:31:D0:9D:D7:28:AC:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/ae65d127-f641-393d-81d0-4f53377d922c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl X509v3 Authority Key Identifier: keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer sbgp-ipAddrBlock: critical IPv4: 45.223.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:83:34:04:d0:d0:8f:b7:7c:94:81:8a:1e:a2:8d:fa:90:b3: e2:14:5f:b4:18:b0:4b:7c:47:2d:b0:b6:4e:af:46:c0:9d:7f: 00:99:b5:54:eb:cc:0a:5a:11:cf:55:34:7e:1d:7f:b2:b5:57: 63:02:12:3e:73:25:ab:44:17:6b:24:c0:1a:56:73:a1:df:f6: 30:85:ca:d2:8d:f4:ed:33:e4:14:76:0f:99:ff:1d:97:79:71: f1:66:f1:b1:dd:17:cf:65:98:16:73:3f:52:b8:dd:c8:42:9f: ec:cc:c5:9e:f8:8c:70:c9:21:aa:e7:51:91:35:d1:9c:b4:93: 82:66:6d:94:6f:bb:86:25:e2:19:63:93:a8:72:18:42:8f:89: 72:d0:8a:85:b1:2e:c2:e1:df:5a:8f:15:0d:3a:10:47:1f:75: 2d:fd:28:b1:aa:9b:b6:32:e1:bb:07:b0:84:3a:e8:c0:e4:01: 1c:f8:75:10:e7:e3:7d:ab:42:59:5d:75:1b:f5:7e:1b:74:12: 45:f3:a1:24:90:78:2a:c2:c5:aa:c8:26:c9:87:94:45:bc:30: 9f:77:15:70:21:a5:c2:3f:f4:a0:83:a5:21:2b:20:db:0e:15: 91:69:4f:3c:1e:fd:59:51:c6:63:c7:97:16:4a:9b:2f:eb:1f: 0b:db:66:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNrxhpTpDHj9icgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj Yzc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MjU1ZGExNmYtZDNkZS00Y2FiLTk2YjItNDQ1ZGEzNTM1MTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gEzPKZInTJlY1L42NRbgjCtAgEaownI1BNg OLpiSIMaRr1g9dbMiJiPOOpwJt6Ql2fHd1f9MiOycnGk+Ih3x1/GEbxNyDF7lc93 xMeBf4aeH9PaOx+DLNOWTj+Fj1ekxuqpOck7Wk3lR1JkPTD3RVdQMyuFMS+BCZNN wwFl7cJon2P8R2rzvQyfmg+ZA/vEhBUSQH7FFEQw0VILRxAijjbLcOdSoRysuEji F7KeFdmOWi9i0xbC2TjYS1sMju9FCMVM3YhNAvKbPnSnmkkWGZRy71fxMPHRpkmq MPueXpZTMa4d5lOWr4E/7eVaz2jgVeYHjF0DuRlmwY+cZWR/4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBc4bFEbkDqgNizwhBgx0J3XKKxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvYWU2NWQxMjctZjY0MS0z OTNkLTgxZDAtNGY1MzM3N2Q5MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0 ZDZiY2NjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALd8NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSDNATQ0I+3fJSBih6ijfqQs+IUX7QYsEt8Ry2wtk6vRsCdfwCZtVTr zApaEc9VNH4df7K1V2MCEj5zJatEF2skwBpWc6Hf9jCFytKN9O0z5BR2D5n/HZd5 cfFm8bHdF89lmBZzP1K43chCn+zMxZ74jHDJIarnUZE10Zy0k4JmbZRvu4Yl4hlj k6hyGEKPiXLQioWxLsLh31qPFQ06EEcfdS39KLGqm7Yy4bsHsIQ66MDkARz4dRDn 432rQllddRv1fht0EkXzoSSQeCrCxarIJsmHlEW8MJ93FXAhpcI/9KCDpSErINsO FZFpTzwe/VlRxmPHlxZKmy/rHwvbZjg= -----END CERTIFICATE-----Generated at Wed Nov 5 15:08:50 2025 by rpki-client