$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/28c552d3-cbde-3f46-a3fd-f2c50b01acd9.roa File: 28c552d3-cbde-3f46-a3fd-f2c50b01acd9.roa (raw, json) Hash identifier: 3oa3L2fAWF4hO7cyZBrxABta9R6xfhW0QWqd+ZKtNP0= Subject key identifier: E0:B7:9E:93:17:E1:0D:CD:86:6B:E3:E6:12:20:B5:19:35:4D:98:05 Certificate issuer: /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd Certificate serial: 010D0C9F4328584B41E714063A6D310FCE35EA80 Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/28c552d3-cbde-3f46-a3fd-f2c50b01acd9.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 34553 IP address blocks: 45.59.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:14:06:3a:6d:31:0f:ce:35:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=ac9b43af-980f-4daf-a59a-d131cce7d7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:4a:06:f2:5f:9d:5d:a9:54:24:80:51:24: 5b:65:50:33:4d:f7:33:58:78:94:61:33:24:22:d5: 8e:05:a1:6e:59:8f:98:0b:84:9b:86:09:e5:65:54: 09:c7:0f:44:14:08:1d:f0:70:a3:a8:c0:d2:ba:55: 02:35:5e:f2:a6:45:71:c4:d3:3d:aa:c6:e2:7c:5f: 64:56:c1:38:c4:c7:59:f5:d4:25:a7:e8:e9:dd:50: ba:a6:b5:85:ca:2e:d8:ac:1e:96:81:dd:4b:e8:de: 62:49:bf:ca:59:21:15:28:82:7d:11:8a:a8:1c:7a: 28:cf:79:85:6c:d4:84:16:52:00:46:84:20:b5:41: be:12:61:a3:07:29:c3:a8:c7:ea:2d:cc:9b:2d:0f: 47:35:0e:ad:c6:27:a7:42:37:64:e5:cf:80:e0:0c: 64:9e:ea:4e:63:ac:f8:13:cb:c2:df:65:7b:98:90: 15:54:9f:0b:63:09:67:91:d1:99:da:1f:1c:96:25: 6f:35:0a:60:c0:7d:41:76:d1:17:5f:a6:2a:4d:e6: 89:6e:67:00:24:ee:45:c9:48:1e:fb:d9:17:63:9f: f6:8f:09:bf:dd:77:22:93:1e:3f:63:ee:5d:68:b8: 8c:8c:ea:8a:9e:a2:b6:2d:05:a7:f6:6f:05:82:b9: 11:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B7:9E:93:17:E1:0D:CD:86:6B:E3:E6:12:20:B5:19:35:4D:98:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/28c552d3-cbde-3f46-a3fd-f2c50b01acd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl X509v3 Authority Key Identifier: keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer sbgp-ipAddrBlock: critical IPv4: 45.59.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:22:9d:65:53:2d:52:3a:64:ae:0e:13:c8:c7:0c:d9:58:13: 44:f1:6a:13:19:23:c1:20:12:e5:b1:86:7c:0f:1b:42:16:66: 18:90:15:5b:12:fc:7c:64:2d:7e:47:2b:97:71:42:60:05:a1: 06:e4:f0:ad:ca:1d:45:ab:01:78:f1:45:2e:10:d7:2e:e2:9d: 2e:02:84:a2:8d:64:6d:ec:45:a1:2b:70:bb:a0:dd:4a:ae:a6: b5:f6:4a:e7:42:f2:07:3a:ef:bd:a0:87:f6:e0:e9:1b:9c:16: 38:be:8b:23:14:08:f5:57:9c:87:35:ca:b7:49:ef:73:8d:36: 43:42:db:47:7b:5e:4a:dc:90:79:7b:0b:65:2f:85:ec:5c:5e: d7:3b:5e:ff:5c:a3:48:11:77:1a:1e:d4:c0:0a:6e:af:23:ac: 96:90:85:72:d1:8f:8b:d5:0c:0b:47:28:11:64:16:47:dc:e2: 1b:89:23:a5:d3:4a:b3:46:8e:8d:17:c7:39:11:5b:cd:1f:5b: 21:ea:60:6d:5c:a5:e7:c9:89:9c:df:53:25:bf:f8:36:78:bd: db:09:6e:22:70:ba:14:c2:94:20:f3:9c:a3:9d:1a:86:ac:83: f7:e8:08:62:f6:d9:e8:d0:4e:77:11:e4:69:d3:67:08:b5:78: 36:f4:5c:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xQGOm0xD8416oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3NzJiNGItMTVmYi00YjM4LWI1MDUtZGZlOTE1ZGFl OWNkMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YWM5YjQzYWYtOTgwZi00ZGFmLWE1OWEtZDEzMWNjZTdkN2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB9KBvJfnV2pVCSAUSRbZVAzTfczWHiUYTMk ItWOBaFuWY+YC4SbhgnlZVQJxw9EFAgd8HCjqMDSulUCNV7ypkVxxNM9qsbifF9k VsE4xMdZ9dQlp+jp3VC6prWFyi7YrB6Wgd1L6N5iSb/KWSEVKIJ9EYqoHHooz3mF bNSEFlIARoQgtUG+EmGjBynDqMfqLcybLQ9HNQ6txienQjdk5c+A4AxknupOY6z4 E8vC32V7mJAVVJ8LYwlnkdGZ2h8cliVvNQpgwH1BdtEXX6YqTeaJbmcAJO5FyUge +9kXY5/2jwm/3Xcikx4/Y+5daLiMjOqKnqK2LQWn9m8FgrkRgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOC3npMX4Q3Nhmvj5hIgtRk1TZgFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3 MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5MTVkYWU5Y2QvMjhjNTUyZDMtY2JkZS0z ZjQ2LWEzZmQtZjJjNTBiMDFhY2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGM3NzJiNGItMTVmYi00YjM4LWI1 MDUtZGZlOTE1ZGFlOWNkLzBjNzcyYjRiLTE1ZmItNGIzOC1iNTA1LWRmZTkxNWRh ZTljZC5jcmwwHwYDVR0jBBgwFoAU8UVSzOYiTilOFS1c5L3dBToItXIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5 MTVkYWU5Y2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUinWVTLVI6ZK4OE8jHDNlYE0TxahMZI8EgEuWxhnwPG0IWZhiQFVsS /HxkLX5HK5dxQmAFoQbk8K3KHUWrAXjxRS4Q1y7inS4ChKKNZG3sRaErcLug3Uqu prX2SudC8gc6772gh/bg6RucFji+iyMUCPVXnIc1yrdJ73ONNkNC20d7XkrckHl7 C2UvhexcXtc7Xv9co0gRdxoe1MAKbq8jrJaQhXLRj4vVDAtHKBFkFkfc4huJI6XT SrNGjo0XxzkRW80fWyHqYG1cpefJiZzfUyW/+DZ4vdsJbiJwuhTClCDznKOdGoas g/foCGL22ejQTncR5GnTZwi1eDb0XKE= -----END CERTIFICATE-----Generated at Wed Nov 5 23:52:44 2025 by rpki-client