$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/708838d8-8559-3142-a30e-932c38e17aff.roa File: 708838d8-8559-3142-a30e-932c38e17aff.roa (raw, json) Hash identifier: SW+VQBobfBu00nuPhNceHqvjG5rUhRfKvVzC/ZqBkog= Subject key identifier: 8F:52:B8:AC:0D:6A:34:4C:35:A9:3F:69:1C:09:AE:0C:C8:D3:0B:8B Certificate issuer: /CN=4d929512-7541-4207-be46-8af4cc4a4800 Certificate serial: 010D0C9F4328584B4081B31D6B1127F4C0477F00 Authority key identifier: 50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/708838d8-8559-3142-a30e-932c38e17aff.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 26658 IP address blocks: 45.33.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:b3:1d:6b:11:27:f4:c0:47:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d929512-7541-4207-be46-8af4cc4a4800 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=083375ec-7bc4-42f6-8a0d-94338661a9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:75:ad:b3:30:04:94:d6:96:4c:5f:ed:7e:dc: e0:9d:92:c2:67:2a:f6:3c:3b:d0:64:53:56:53:f6: 55:9b:00:63:95:37:2f:60:25:93:7f:3e:dc:eb:86: 3f:e0:3a:d1:0d:36:9d:52:78:09:e9:7c:95:88:1c: e8:1c:9f:c2:e0:43:6a:bc:ee:75:05:33:cd:27:e9: c5:d9:41:e0:ca:55:37:a6:e7:f9:70:14:21:73:52: 16:2b:3e:91:28:39:75:c4:b7:76:7e:a0:62:17:3d: 38:1e:2f:d5:5e:04:ce:63:ff:15:5c:3f:36:8c:6f: e4:f6:42:be:b0:8b:b4:32:d5:19:e4:0e:aa:cc:5b: d5:6d:d4:d7:2f:2c:9e:21:79:33:85:cd:f3:30:be: 73:b0:0e:54:e3:b5:76:d2:e1:ad:dd:70:4f:fc:73: aa:59:a8:5a:5c:6b:92:a3:3a:1f:bb:fe:e0:ae:1b: 29:b8:df:69:d0:ce:eb:3b:55:e3:dc:b1:9e:a7:e8: 81:49:77:9b:cb:ba:19:ca:96:c2:ae:ef:34:80:a7: 46:a2:a6:0e:d8:bc:9a:cb:c8:71:82:94:c6:ba:ba: ed:de:90:3d:e1:41:7e:7d:e7:e4:7d:3c:90:b2:f5: d2:57:34:a3:10:19:e9:ad:ca:8c:57:2d:e1:db:09: 26:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:52:B8:AC:0D:6A:34:4C:35:A9:3F:69:1C:09:AE:0C:C8:D3:0B:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/708838d8-8559-3142-a30e-932c38e17aff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl X509v3 Authority Key Identifier: keyid:50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer sbgp-ipAddrBlock: critical IPv4: 45.33.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d6:aa:17:70:06:37:e0:96:06:ff:c3:b3:d6:b6:4f:30:4d: 74:5e:1d:ab:b5:a3:b2:bd:7a:86:3f:7d:ea:d4:79:d8:9b:75: c7:7d:52:6b:a1:f7:82:3a:e6:fb:61:79:3b:68:ca:c0:7f:e6: c8:bb:11:48:76:b7:94:cb:85:59:d6:09:91:4e:31:03:a1:bc: 63:e3:3d:d2:08:8c:af:71:9a:56:2e:54:f5:b7:29:42:05:29: d6:e3:ed:3e:a5:41:96:3f:36:13:5a:40:d8:12:04:db:43:5c: e5:96:1b:ae:d8:42:86:e6:81:c8:4d:e9:03:8f:04:07:c5:5a: af:f5:5b:e7:9b:d4:39:ad:51:17:98:8b:f2:50:5e:38:62:f0: fc:7b:4c:1e:c6:be:88:d6:28:0c:69:91:b4:22:5f:92:48:ba: a2:72:5a:4b:b2:78:f0:20:ea:14:cd:af:57:b8:5b:c6:f3:ff: 18:16:32:44:66:95:4a:c1:ed:02:1e:0d:3c:ef:a1:60:c1:4d: 87:61:07:ac:0c:a5:82:c0:c8:c5:62:4a:2a:0f:d6:24:82:92: 1d:98:2e:25:ff:a3:9d:d9:f1:c1:2a:c9:e7:8b:31:93:fd:83: 87:28:1c:53:8a:c8:ae:a2:70:36:b5:97:fa:d3:bb:fd:90:aa: 7c:13:ec:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgbMdaxEn9MBHfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5Mjk1MTItNzU0MS00MjA3LWJlNDYtOGFmNGNjNGE0 ODAwMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MDgzMzc1ZWMtN2JjNC00MmY2LThhMGQtOTQzMzg2NjFhOWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinWtszAElNaWTF/tftzgnZLCZyr2PDvQZFNW U/ZVmwBjlTcvYCWTfz7c64Y/4DrRDTadUngJ6XyViBzoHJ/C4ENqvO51BTPNJ+nF 2UHgylU3puf5cBQhc1IWKz6RKDl1xLd2fqBiFz04Hi/VXgTOY/8VXD82jG/k9kK+ sIu0MtUZ5A6qzFvVbdTXLyyeIXkzhc3zML5zsA5U47V20uGt3XBP/HOqWahaXGuS ozofu/7grhspuN9p0M7rO1Xj3LGep+iBSXeby7oZypbCru80gKdGoqYO2Lyay8hx gpTGurrt3pA94UF+fefkfTyQsvXSVzSjEBnprcqMVy3h2wkmnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9SuKwNajRMNak/aRwJrgzI0wuLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80ZDky OTUxMi03NTQxLTQyMDctYmU0Ni04YWY0Y2M0YTQ4MDAvNzA4ODM4ZDgtODU1OS0z MTQyLWEzMGUtOTMyYzM4ZTE3YWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGQ5Mjk1MTItNzU0MS00MjA3LWJl NDYtOGFmNGNjNGE0ODAwLzRkOTI5NTEyLTc1NDEtNDIwNy1iZTQ2LThhZjRjYzRh NDgwMC5jcmwwHwYDVR0jBBgwFoAUUHbGsA5Pv93rRfzEAudPVstdNTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80ZDkyOTUxMi03NTQxLTQyMDctYmU0Ni04YWY0 Y2M0YTQ4MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHWqhdwBjfglgb/w7PWtk8wTXReHau1o7K9eoY/ferUedibdcd9Umuh 94I65vtheTtoysB/5si7EUh2t5TLhVnWCZFOMQOhvGPjPdIIjK9xmlYuVPW3KUIF Kdbj7T6lQZY/NhNaQNgSBNtDXOWWG67YQobmgchN6QOPBAfFWq/1W+eb1DmtUReY i/JQXjhi8Px7TB7GvojWKAxpkbQiX5JIuqJyWkuyePAg6hTNr1e4W8bz/xgWMkRm lUrB7QIeDTzvoWDBTYdhB6wMpYLAyMViSioP1iSCkh2YLiX/o53Z8cEqyeeLMZP9 g4coHFOKyK6icDa1l/rTu/2QqnwT7Kc= -----END CERTIFICATE-----Generated at Wed Nov 5 01:59:59 2025 by rpki-client