$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa File: f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa (raw, json) Hash identifier: E4FLTajyrv+NkLr9y+arFKt1WCOM5+NOoB16m8GZMt4= Subject key identifier: 97:74:04:D3:EB:DB:6F:99:A1:E5:2D:92:95:79:E6:7A:44:7E:F3:D2 Certificate issuer: /CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1 Certificate serial: 010D0C9F4328584B9E079DD62EC7F6BFD8181C80 Authority key identifier: C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 399214 IP address blocks: 45.42.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:9d:d6:2e:c7:f6:bf:d8:18:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=f1fea910-09e8-4cf2-90d0-f5c748edea73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ac:41:9c:ac:20:83:ae:0c:5a:e1:88:55:83: d8:d7:e7:40:d3:49:19:9d:b4:6e:a1:f7:40:9a:36: 8d:34:fa:89:8b:a2:66:a9:cf:fc:12:78:b4:77:2c: 81:db:4f:5e:b8:f0:c9:32:af:7e:f6:94:1b:22:3e: 15:2d:3d:b6:cf:80:10:27:8c:cf:f5:ae:32:b9:30: 30:66:f8:c1:2a:ef:b6:8e:2b:15:db:d0:dc:b8:8f: 9a:ae:e8:a4:72:1c:c2:d2:15:21:d6:d1:dd:94:8b: 53:96:3b:90:6d:f2:e3:fc:33:75:ba:77:8e:bb:c0: 2d:fa:56:82:b2:4f:0a:97:4b:f5:e6:84:07:42:db: 63:ed:ee:8c:df:df:6a:86:f4:bf:65:a5:76:29:42: d3:f9:6f:62:84:eb:6b:09:46:bf:b3:4d:7a:af:36: 24:10:10:e0:e1:99:80:86:f1:43:b7:c8:3a:3b:b6: 65:2d:88:29:43:d5:f0:e2:16:33:70:79:63:c0:d4: eb:ef:b5:7b:e7:01:81:bf:28:46:28:1f:59:48:d3: 1c:5c:3d:52:d3:44:85:2c:7e:92:f4:c6:5a:f3:cc: 52:98:4b:42:44:25:7a:43:29:f3:a6:17:3f:61:0d: df:bf:53:7d:63:8d:b6:a8:90:54:89:33:c3:ad:a0: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:74:04:D3:EB:DB:6F:99:A1:E5:2D:92:95:79:E6:7A:44:7E:F3:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl X509v3 Authority Key Identifier: keyid:C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer sbgp-ipAddrBlock: critical IPv4: 45.42.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:31:5e:56:d9:cd:7e:b0:3e:8e:e5:42:ff:fe:9d:2a:ae:a7: 4f:8c:02:d8:54:e3:df:8c:56:5f:11:7d:ff:29:c1:97:ab:34: de:2f:11:e3:86:6e:2a:65:5f:ed:5b:ce:36:d6:f6:8e:32:20: 95:d7:97:13:18:b0:bf:38:5a:f4:98:c7:ca:3f:44:05:b4:2a: 4c:41:92:ca:1d:9d:55:bc:bf:4d:b3:02:c2:03:5f:4e:c9:4d: 38:da:f3:82:04:0b:1d:c4:34:ad:a6:4e:8c:34:55:dd:3e:49: 13:47:fb:0a:23:4a:32:6d:9c:03:cf:35:ad:06:5e:fb:62:3e: d4:4e:a3:51:d5:34:a9:0b:ad:c4:be:09:c9:ed:3c:13:0a:2b: 62:0d:ad:aa:14:99:2b:a3:c1:b4:35:0d:35:df:48:bf:fb:11: ca:26:0f:fd:49:93:ef:41:c9:92:33:80:15:db:e7:49:27:a6: 78:d1:a3:70:2c:dd:b4:b1:19:9a:b8:1f:f6:9d:1c:41:d2:04: ed:3b:0a:61:d2:f5:7b:2b:16:58:c5:48:44:5a:b1:20:c7:86: bc:1d:46:72:ef:64:fe:5b:46:53:54:e6:61:07:cd:d5:f0:67: eb:43:04:ea:fe:4b:8b:87:87:1e:73:0c:76:4d:f6:ed:36:68: a6:e3:07:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB53WLsf2v9gYHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmYwZTdjZTktNTVkNC00MzgyLWI4OTQtYWFjYTg5ZjJk ZmQxMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZjFmZWE5MTAtMDllOC00Y2YyLTkwZDAtZjVjNzQ4ZWRlYTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaxBnKwgg64MWuGIVYPY1+dA00kZnbRuofdA mjaNNPqJi6Jmqc/8Eni0dyyB209euPDJMq9+9pQbIj4VLT22z4AQJ4zP9a4yuTAw ZvjBKu+2jisV29DcuI+aruikchzC0hUh1tHdlItTljuQbfLj/DN1uneOu8At+laC sk8Kl0v15oQHQttj7e6M399qhvS/ZaV2KULT+W9ihOtrCUa/s016rzYkEBDg4ZmA hvFDt8g6O7ZlLYgpQ9Xw4hYzcHljwNTr77V75wGBvyhGKB9ZSNMcXD1S00SFLH6S 9MZa88xSmEtCRCV6Qynzphc/YQ3fv1N9Y422qJBUiTPDraCkhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJd0BNPr22+ZoeUtkpV55npEfvPSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBl N2NlOS01NWQ0LTQzODItYjg5NC1hYWNhODlmMmRmZDEvZjM1OTJhYTMtZjdhZS0z NWVjLTk1MmItNmQ1MzU0MWZlMTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmYwZTdjZTktNTVkNC00MzgyLWI4 OTQtYWFjYTg5ZjJkZmQxLzJmMGU3Y2U5LTU1ZDQtNDM4Mi1iODk0LWFhY2E4OWYy ZGZkMS5jcmwwHwYDVR0jBBgwFoAUxwyRk31taXdKMVntxuqEo/T3CpAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBlN2NlOS01NWQ0LTQzODItYjg5NC1hYWNh ODlmMmRmZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLSqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIxXlbZzX6wPo7lQv/+nSqup0+MAthU49+MVl8Rff8pwZerNN4vEeOG biplX+1bzjbW9o4yIJXXlxMYsL84WvSYx8o/RAW0KkxBksodnVW8v02zAsIDX07J TTja84IECx3ENK2mTow0Vd0+SRNH+wojSjJtnAPPNa0GXvtiPtROo1HVNKkLrcS+ CcntPBMKK2INraoUmSujwbQ1DTXfSL/7EcomD/1Jk+9ByZIzgBXb50knpnjRo3As 3bSxGZq4H/adHEHSBO07CmHS9XsrFljFSERasSDHhrwdRnLvZP5bRlNU5mEHzdXw Z+tDBOr+S4uHhx5zDHZN9u02aKbjB7M= -----END CERTIFICATE-----Generated at Wed Nov 5 21:30:38 2025 by rpki-client