$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/227faccd-39d8-36d2-9fd6-be8fcb11603e.roa File: 227faccd-39d8-36d2-9fd6-be8fcb11603e.roa (raw, json) Hash identifier: 4PXMooElilal+TmJ+RnY5e1Xl4aRq9VnPPUpoN5XssM= Subject key identifier: DB:56:2A:B0:8B:A8:0F:79:CC:DF:FE:0F:36:6A:26:61:53:B4:52:A5 Certificate issuer: /CN=49aa3661-0fa7-43a8-937b-3dbcc28b39d5 Certificate serial: 010D0C9F4328584BB2AB55B14DD611198AF0EF80 Authority key identifier: BC:D1:5B:DC:4C:F1:27:56:D4:0E:CF:F0:CE:C6:EC:7A:B5:B1:DD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/227faccd-39d8-36d2-9fd6-be8fcb11603e.roa Signing time: Thu 30 Oct 2025 22:26:48 +0000 ROA not before: Thu 30 Oct 2025 22:26:48 +0000 ROA not after: Wed 28 Jan 2026 23:26:48 +0000 asID: 31898 IP address blocks: 45.42.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:ab:55:b1:4d:d6:11:19:8a:f0:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49aa3661-0fa7-43a8-937b-3dbcc28b39d5 Validity Not Before: Oct 30 22:26:48 2025 GMT Not After : Jan 28 23:26:48 2026 GMT Subject: CN=e87b30d2-6606-4d7a-b40f-d3ff7d5cd878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:4f:03:cb:bf:a5:41:64:cb:26:76:fe:45: 3b:a3:66:4e:3f:d3:c9:44:b2:b6:2e:3c:c9:e8:bd: 52:00:10:74:1d:fc:28:f4:7a:b7:5e:16:e8:e4:6f: 88:6b:54:49:dc:17:ad:05:3e:1e:1d:a6:fc:82:25: 21:2c:73:0f:61:0b:48:1d:f4:1a:d2:0f:48:53:4a: d4:f0:ec:4d:99:94:19:f2:c7:31:f7:4f:fd:a8:95: af:d0:ad:20:07:b6:47:3a:c7:2e:a0:0d:eb:2d:a5: 32:8b:fb:bd:99:79:81:23:1a:80:4c:fb:bf:45:0b: c5:2b:b2:62:f7:f0:e8:1a:81:27:2f:c7:4b:be:1c: 11:76:33:ac:8b:b3:15:34:8b:e8:71:68:88:10:1d: 61:eb:a6:98:d8:b7:fc:34:1d:87:78:39:6a:c8:b4: 1a:5c:02:3c:bb:e4:2a:36:9e:c0:61:2c:e1:86:0a: fb:a2:d3:f6:f7:64:d6:96:52:58:01:e0:9f:69:dc: a4:0f:5c:62:c5:55:50:0a:e6:d0:32:97:21:44:18: 6a:ba:86:7e:a9:6f:7a:86:98:44:6d:eb:91:0b:73: 88:32:c1:66:27:3c:df:10:af:24:be:ba:82:7e:f4: e9:57:38:e7:25:56:ee:08:cc:8d:88:b9:9d:87:53: ed:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:56:2A:B0:8B:A8:0F:79:CC:DF:FE:0F:36:6A:26:61:53:B4:52:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/227faccd-39d8-36d2-9fd6-be8fcb11603e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.crl X509v3 Authority Key Identifier: keyid:BC:D1:5B:DC:4C:F1:27:56:D4:0E:CF:F0:CE:C6:EC:7A:B5:B1:DD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer sbgp-ipAddrBlock: critical IPv4: 45.42.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f9:17:4b:7e:7a:92:63:fd:b0:bf:30:0d:ca:8e:e3:b3:62: 54:19:f3:aa:99:02:74:a0:47:a8:fc:f3:fc:78:34:1d:51:5f: bf:56:fe:a4:38:6e:b6:39:ca:d4:20:fb:1e:91:11:38:55:9e: a0:c6:8e:6e:d7:24:a4:67:b1:20:d0:22:ea:a7:d1:76:ac:95: 9a:b4:84:11:1e:4d:c8:57:05:fb:b2:23:1d:b9:14:4c:b7:9a: fc:c3:ac:d9:22:c6:56:8b:e5:39:f4:ca:ee:4d:14:75:c2:c9: 93:85:2c:0b:64:a7:2f:5c:b7:ac:16:67:3b:79:4b:ea:08:ec: bd:ed:e4:28:0c:69:83:c4:21:21:d6:34:4a:85:7a:a4:11:1f: 68:3a:6f:29:0f:9a:08:03:4e:8a:d6:81:93:92:f7:d3:4f:64: df:1c:ec:28:da:d6:71:4d:88:3b:44:ff:c2:cf:28:d8:4a:83: 75:d9:cb:2f:f1:41:3e:b6:1c:6f:0c:74:20:78:69:6d:65:36: 00:a9:dc:1e:76:a4:02:b4:83:1b:b7:73:94:b2:c7:61:a7:3b: 42:7a:e7:f7:ba:7a:79:bb:fa:95:97:df:24:3f:7a:c2:a4:4f: 60:c6:39:38:b7:8b:c1:da:c0:c7:09:91:9f:6c:4e:bf:9b:3e: a6:a0:71:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuyq1WxTdYRGYrw74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDlhYTM2NjEtMGZhNy00M2E4LTkzN2ItM2RiY2MyOGIz OWQ1MB4XDTI1MTAzMDIyMjY0OFoXDTI2MDEyODIzMjY0OFowLzEtMCsGA1UEAxMk ZTg3YjMwZDItNjYwNi00ZDdhLWI0MGYtZDNmZjdkNWNkODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdRPA8u/pUFkyyZ2/kU7o2ZOP9PJRLK2LjzJ 6L1SABB0Hfwo9Hq3Xhbo5G+Ia1RJ3BetBT4eHab8giUhLHMPYQtIHfQa0g9IU0rU 8OxNmZQZ8scx90/9qJWv0K0gB7ZHOscuoA3rLaUyi/u9mXmBIxqATPu/RQvFK7Ji 9/DoGoEnL8dLvhwRdjOsi7MVNIvocWiIEB1h66aY2Lf8NB2HeDlqyLQaXAI8u+Qq Np7AYSzhhgr7otP292TWllJYAeCfadykD1xixVVQCubQMpchRBhquoZ+qW96hphE beuRC3OIMsFmJzzfEK8kvrqCfvTpVzjnJVbuCMyNiLmdh1Pt7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtWKrCLqA95zN/+DzZqJmFTtFKlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80OWFh MzY2MS0wZmE3LTQzYTgtOTM3Yi0zZGJjYzI4YjM5ZDUvMjI3ZmFjY2QtMzlkOC0z NmQyLTlmZDYtYmU4ZmNiMTE2MDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDlhYTM2NjEtMGZhNy00M2E4LTkz N2ItM2RiY2MyOGIzOWQ1LzQ5YWEzNjYxLTBmYTctNDNhOC05MzdiLTNkYmNjMjhi MzlkNS5jcmwwHwYDVR0jBBgwFoAUvNFb3EzxJ1bUDs/wzsbserWx3SEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80OWFhMzY2MS0wZmE3LTQzYTgtOTM3Yi0zZGJj YzI4YjM5ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSrtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADf5F0t+epJj/bC/MA3KjuOzYlQZ86qZAnSgR6j88/x4NB1RX79W/qQ4 brY5ytQg+x6REThVnqDGjm7XJKRnsSDQIuqn0XaslZq0hBEeTchXBfuyIx25FEy3 mvzDrNkixlaL5Tn0yu5NFHXCyZOFLAtkpy9ct6wWZzt5S+oI7L3t5CgMaYPEISHW NEqFeqQRH2g6bykPmggDTorWgZOS99NPZN8c7Cja1nFNiDtE/8LPKNhKg3XZyy/x QT62HG8MdCB4aW1lNgCp3B52pAK0gxu3c5Syx2GnO0J65/e6enm7+pWX3yQ/esKk T2DGOTi3i8HawMcJkZ9sTr+bPqagcZ0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:04:57 2025 by rpki-client