$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/dc128f1c-05ed-377a-8c6f-eb5cf11a3e41.roa File: dc128f1c-05ed-377a-8c6f-eb5cf11a3e41.roa (raw, json) Hash identifier: Ka+8bMixnagdoatVzEO+qFPkO0SygGEUsI8epCmC8RQ= Subject key identifier: E8:96:8D:48:AB:FF:B7:20:35:6B:CF:54:B0:95:99:0B:84:E6:1B:C7 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584BAEC7AB717B512BCBCA1B6980 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/dc128f1c-05ed-377a-8c6f-eb5cf11a3e41.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 2914 IP address blocks: 45.45.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:ab:71:7b:51:2b:cb:ca:1b:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=0ac1a096-cd3a-41ac-a0df-d4cc1db7a452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:ca:3a:95:75:db:5d:6a:cd:74:ac:e3:47: ba:36:77:84:be:d0:6f:4b:df:e9:ed:1b:e2:75:96: d1:f6:e0:48:48:5a:83:bf:ce:83:1b:c2:7d:26:f5: 0f:7f:ba:67:0d:5b:98:ff:5f:25:67:29:c1:ad:3e: 90:3f:a9:a3:6c:4e:b9:3e:52:01:6c:2b:03:8d:aa: 7e:92:92:4f:0a:6f:c9:5a:4a:9a:9f:57:33:ee:b0: 67:c1:3a:87:6d:29:fb:bf:0a:9c:c9:05:34:dd:fe: 26:eb:db:e0:7c:81:a7:b7:d6:84:69:bd:9a:3e:b2: e8:8f:ed:db:65:09:63:ec:84:2e:f4:ab:8c:8e:5d: 79:87:e1:96:5e:03:16:3a:be:69:b4:0f:7b:b1:8c: fc:25:92:9f:61:79:8a:02:f2:55:82:59:03:dd:e9: eb:77:0f:bb:1e:16:87:83:fd:a0:0d:72:9d:f1:21: ce:7e:02:2d:d4:15:58:7d:65:ce:2a:06:bd:00:7c: d8:97:a7:34:50:17:41:c1:55:49:19:e2:fe:98:fc: 4f:f6:ed:2c:9e:18:21:3f:b4:a7:82:ac:c5:b7:2d: f2:7c:5c:5b:72:56:0f:3d:c3:ec:e9:99:cc:e7:c9: a1:9b:29:f2:b4:30:f2:0a:5f:cf:b4:65:71:36:a1: 2a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:96:8D:48:AB:FF:B7:20:35:6B:CF:54:B0:95:99:0B:84:E6:1B:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/dc128f1c-05ed-377a-8c6f-eb5cf11a3e41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 45.45.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:89:de:55:c5:5b:d4:0d:77:3e:5d:68:55:d3:f8:6e:b6:e9: 41:95:09:53:1e:04:42:24:c8:f5:07:64:1d:fa:0f:66:65:d7: 53:f6:48:9a:ec:d7:54:ba:cf:b7:69:db:9a:a1:fc:95:27:e4: 65:3b:4a:07:1e:95:54:5a:3b:09:ee:1b:95:37:dc:77:b8:da: 08:25:62:dc:44:e1:97:08:8a:28:95:8c:cb:30:b5:3a:b8:e8: c6:13:a2:4a:bb:50:1d:01:72:71:f0:10:9d:1b:ad:6f:f0:9e: 5b:dd:b1:df:5e:25:b4:d2:c1:e1:8f:b7:64:5d:00:96:41:88: f8:63:c2:29:ab:10:ac:c8:fb:d6:7b:1b:cc:94:09:c9:1f:1b: 7d:27:57:f0:ca:c8:96:49:1b:d8:6a:6c:3d:06:1c:96:ac:85: 27:05:22:ac:19:45:ee:a5:d0:e0:b8:d6:be:f8:40:e4:b8:dd: 29:03:50:c8:20:e2:31:25:58:d2:dc:28:f1:69:27:cb:be:a9: 80:a0:4c:a5:12:43:1b:0a:dc:d5:0f:12:e7:c1:75:99:32:52: 6e:0e:20:37:09:55:14:51:07:ec:27:e4:f7:f7:00:e2:52:b1: 9b:86:4b:3d:28:ae:30:7a:02:1e:cb:e8:8f:54:ab:54:78:c1: fa:8a:f7:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux6txe1Ery8obaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MGFjMWEwOTYtY2QzYS00MWFjLWEwZGYtZDRjYzFkYjdhNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrXKOpV1211qzXSs40e6NneEvtBvS9/p7Rvi dZbR9uBISFqDv86DG8J9JvUPf7pnDVuY/18lZynBrT6QP6mjbE65PlIBbCsDjap+ kpJPCm/JWkqan1cz7rBnwTqHbSn7vwqcyQU03f4m69vgfIGnt9aEab2aPrLoj+3b ZQlj7IQu9KuMjl15h+GWXgMWOr5ptA97sYz8JZKfYXmKAvJVglkD3enrdw+7HhaH g/2gDXKd8SHOfgIt1BVYfWXOKga9AHzYl6c0UBdBwVVJGeL+mPxP9u0snhghP7Sn gqzFty3yfFxbclYPPcPs6ZnM58mhmynytDDyCl/PtGVxNqEqXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiWjUir/7cgNWvPVLCVmQuE5hvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvZGMxMjhmMWMtMDVlZC0z NzdhLThjNmYtZWI1Y2YxMWEzZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeJ3lXFW9QNdz5daFXT+G626UGVCVMeBEIkyPUHZB36D2Zl11P2SJrs 11S6z7dp25qh/JUn5GU7SgcelVRaOwnuG5U33He42gglYtxE4ZcIiiiVjMswtTq4 6MYTokq7UB0BcnHwEJ0brW/wnlvdsd9eJbTSweGPt2RdAJZBiPhjwimrEKzI+9Z7 G8yUCckfG30nV/DKyJZJG9hqbD0GHJashScFIqwZRe6l0OC41r74QOS43SkDUMgg 4jElWNLcKPFpJ8u+qYCgTKUSQxsK3NUPEufBdZkyUm4OIDcJVRRRB+wn5Pf3AOJS sZuGSz0orjB6Ah7L6I9Uq1R4wfqK994= -----END CERTIFICATE-----Generated at Tue Nov 4 19:30:05 2025 by rpki-client