$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa File: 29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa (raw, json) Hash identifier: P3BQ5GKLEklNuEgUTMrH0pWG3BFSMYg+0NKtobSVudU= Subject key identifier: 8C:D0:31:C1:10:45:09:75:49:74:49:59:5E:00:BF:6D:0D:01:12:13 Certificate issuer: /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Certificate serial: 010D0C9F4328584BA39D03D541D4293B7D4D0480 Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 32931 IP address blocks: 45.41.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:03:d5:41:d4:29:3b:7d:4d:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=8a9cd292-aaee-4d97-a8f2-58e4dec3b424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:77:54:57:82:29:6e:04:2e:49:33:74:a8:69: c7:25:ff:00:99:78:70:7c:39:58:8c:5d:e4:e3:9a: 6f:38:95:26:e1:fa:60:f1:92:72:b0:bb:94:55:b6: df:43:29:b1:21:88:fa:64:a0:f3:f1:99:44:8e:eb: 41:71:dc:bf:a2:08:e9:02:7c:46:de:63:82:1a:bc: fb:4b:32:f2:27:16:8f:e6:74:31:73:2e:92:7e:3b: a3:97:5e:f2:a6:18:5a:2a:cb:67:23:68:c3:59:05: fb:e0:92:29:73:77:7c:80:81:d8:8a:a3:e1:b9:54: 35:bd:61:b0:7e:50:02:44:3b:7f:06:2b:63:9d:2a: e6:d8:2e:8d:ee:6c:58:9d:1e:3b:b5:68:ff:ec:f9: 39:f3:a0:6e:73:bd:e4:f3:96:7b:3a:f8:71:0c:b4: b6:d5:8b:9c:5c:0d:fc:9e:d4:1a:8f:91:42:d8:0e: d2:8b:13:70:e3:cf:2c:4f:1f:d1:bc:06:92:5d:39: 6a:c5:c1:ca:ac:83:b2:5c:5a:61:7c:e2:de:46:66: d7:23:7d:5c:40:84:43:7e:8c:65:b0:74:13:79:94: 6e:04:0b:7a:6a:d7:68:59:51:de:49:ab:26:d8:ab: e0:d4:4a:03:b0:a3:02:00:ac:df:2a:d9:c6:08:c1: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D0:31:C1:10:45:09:75:49:74:49:59:5E:00:BF:6D:0D:01:12:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl X509v3 Authority Key Identifier: keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer sbgp-ipAddrBlock: critical IPv4: 45.41.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:12:24:9d:3c:13:35:3a:66:6b:52:01:ae:90:90:c7:61:93: 88:5a:d5:42:a9:23:7f:1c:e8:14:7d:26:8d:49:1f:e5:a7:7c: 60:7e:fe:ca:28:fd:3b:60:b8:54:48:5f:65:d0:10:f1:89:aa: 4d:89:66:74:53:9f:28:aa:e2:e2:f1:69:ae:07:79:5d:6b:6f: c6:15:92:77:30:dd:7e:23:2c:55:73:78:d1:58:e9:24:cf:8d: b1:8e:57:62:17:47:eb:70:d6:c7:c9:3e:c9:13:a5:95:ec:d4: ad:fd:b2:80:1f:3e:75:d0:f1:f1:63:9e:fb:c6:67:2d:24:5e: 5e:f4:07:b8:55:3f:b1:a1:4e:52:87:85:d5:f6:bd:97:17:f8: 42:1e:40:4f:da:c0:18:9e:4b:4e:6a:db:26:71:a1:0c:2b:ff: 73:fc:85:b4:72:4f:53:89:25:dd:54:2e:c6:e6:c8:76:85:0a: 00:e9:0f:76:e7:fe:89:04:2a:dc:29:65:5a:ac:c9:5b:fb:15: 16:86:b3:31:c7:0f:85:f8:0d:5b:ec:11:28:49:17:ac:34:93: 20:9c:40:b9:87:69:79:f6:ff:06:e7:6b:71:3e:01:60:86:9f: 0b:3d:ef:44:fe:b0:63:9d:09:b6:e2:3a:74:e5:8d:85:1e:d9: d3:7b:e9:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQPVQdQpO31NBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NiYjA4NWItOGM1OC00OGYxLWE3YjktZDQ0NmQzZjk2 MWJmMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OGE5Y2QyOTItYWFlZS00ZDk3LWE4ZjItNThlNGRlYzNiNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjndUV4IpbgQuSTN0qGnHJf8AmXhwfDlYjF3k 45pvOJUm4fpg8ZJysLuUVbbfQymxIYj6ZKDz8ZlEjutBcdy/ogjpAnxG3mOCGrz7 SzLyJxaP5nQxcy6Sfjujl17yphhaKstnI2jDWQX74JIpc3d8gIHYiqPhuVQ1vWGw flACRDt/BitjnSrm2C6N7mxYnR47tWj/7Pk586Buc73k85Z7OvhxDLS21YucXA38 ntQaj5FC2A7SixNw488sTx/RvAaSXTlqxcHKrIOyXFphfOLeRmbXI31cQIRDfoxl sHQTeZRuBAt6atdoWVHeSasm2Kvg1EoDsKMCAKzfKtnGCMFCmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzQMcEQRQl1SXRJWV4Av20NARITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zY2Ji MDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2ZDNmOTYxYmYvMjlhODk0ZWUtMDA4MC0z YTQ5LThiOTEtYTAxZTFiYmJiZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2NiYjA4NWItOGM1OC00OGYxLWE3 YjktZDQ0NmQzZjk2MWJmLzNjYmIwODViLThjNTgtNDhmMS1hN2I5LWQ0NDZkM2Y5 NjFiZi5jcmwwHwYDVR0jBBgwFoAU4e3x8Ae8hTPlv1z+X4vszy8hl7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zY2JiMDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2 ZDNmOTYxYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQSJJ08EzU6ZmtSAa6QkMdhk4ha1UKpI38c6BR9Jo1JH+WnfGB+/soo /TtguFRIX2XQEPGJqk2JZnRTnyiq4uLxaa4HeV1rb8YVkncw3X4jLFVzeNFY6STP jbGOV2IXR+tw1sfJPskTpZXs1K39soAfPnXQ8fFjnvvGZy0kXl70B7hVP7GhTlKH hdX2vZcX+EIeQE/awBieS05q2yZxoQwr/3P8hbRyT1OJJd1ULsbmyHaFCgDpD3bn /okEKtwpZVqsyVv7FRaGszHHD4X4DVvsEShJF6w0kyCcQLmHaXn2/wbna3E+AWCG nws970T+sGOdCbbiOnTljYUe2dN76fY= -----END CERTIFICATE-----Generated at Wed Nov 5 06:55:55 2025 by rpki-client