$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa File: f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa (raw, json) Hash identifier: RfLncoCvcDJG8qU27HUvAI0A7MD2Llvoub5VhazMg68= Subject key identifier: 5F:4D:DB:67:BF:17:56:EA:53:1D:A9:A1:FF:8C:CB:78:41:FA:5F:B8 Certificate issuer: /CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1 Certificate serial: 010D0C9F4328584ABD4B7D6117A2CA41B0B94EC0 Authority key identifier: C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 399214 IP address blocks: 45.42.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:7d:61:17:a2:ca:41:b0:b9:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=37a19a41-fee5-46b3-8540-d39a28583c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9b:f0:93:c5:0d:7d:68:80:63:cc:27:a5:83: 4c:ca:c6:c8:46:6c:ca:5b:f7:6d:44:e0:50:93:ce: 29:3d:7a:eb:d7:0a:27:c1:d5:22:d6:41:57:7e:ab: d1:c8:7d:58:a3:43:ee:8c:33:3f:aa:5f:37:24:3b: a0:de:fb:1e:24:e0:80:2e:aa:43:f0:55:c9:d7:ef: 44:21:04:62:f9:a9:17:4d:39:e3:8c:56:fd:ff:c7: be:96:14:2d:c4:ba:e6:fe:44:ba:27:1c:1a:4b:75: 4d:ce:f8:77:12:51:83:7d:36:44:dc:2e:55:80:7f: 10:2b:a9:90:63:22:df:15:39:3d:5c:61:5b:5c:3b: b2:4b:d1:9d:d3:9f:ec:38:32:e4:51:4d:4a:67:db: 59:6c:72:eb:ed:ac:ef:d0:c8:3d:f0:04:36:69:90: bb:b5:47:8d:8c:96:15:b4:83:90:2d:9c:cf:f0:3c: 6e:28:ff:80:f8:42:fb:29:39:35:e1:97:c1:2f:4e: 9a:3d:19:3a:09:e8:e2:76:53:45:4e:b7:5f:ef:00: 7a:7f:c7:da:35:d8:4d:5c:ea:98:f1:5c:a6:aa:74: f2:dc:82:3c:7a:12:77:88:d8:ed:98:e0:4f:40:15: 32:1f:2a:2f:ef:f0:e8:85:1d:a7:ea:c4:c3:48:31: 02:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4D:DB:67:BF:17:56:EA:53:1D:A9:A1:FF:8C:CB:78:41:FA:5F:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl X509v3 Authority Key Identifier: keyid:C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer sbgp-ipAddrBlock: critical IPv4: 45.42.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:2c:87:09:4d:8a:31:73:e9:3b:3a:8d:d0:d7:5c:2c:1c:84: b5:29:e3:24:83:76:68:a6:06:6c:75:ab:03:b7:1f:c2:2e:90: b9:db:47:7f:54:3e:e6:46:3b:e1:b3:4e:50:18:55:76:be:ae: e5:6e:49:32:00:3f:d8:76:a5:1c:4a:5c:d3:f9:c3:e2:2f:7f: 45:d5:6d:0b:23:41:ad:a0:03:a8:a6:9f:cd:17:96:5a:bf:a6: 61:48:65:d8:25:46:f9:a4:e2:03:90:69:e8:e8:a2:74:d6:fb: ab:25:01:86:cd:78:63:8a:49:26:a2:31:47:df:c0:ef:85:4b: 2a:1e:0f:d5:54:46:4f:96:60:fb:bb:2f:49:4c:f9:8b:d7:49: 6d:f3:ad:ac:a6:d2:5e:47:f9:ea:44:5d:a9:57:ef:2d:28:e7: eb:95:bc:05:b7:d9:f9:2c:19:cc:e9:d2:d9:c2:14:97:4a:7b: 0e:73:ea:77:da:6d:34:7e:0f:bb:85:56:a0:64:f5:38:7f:12: d9:59:02:7d:d9:f6:dd:47:ee:a7:aa:fa:fd:ba:d3:07:82:b6: 6f:7c:5d:86:5d:e3:d7:ac:1a:1f:e1:1a:ed:b8:bb:27:00:7b: 3c:3a:86:65:15:a5:f1:7e:d9:8f:ca:ce:0a:09:7f:e1:f8:57: ce:aa:ee:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S31hF6LKQbC5TsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmYwZTdjZTktNTVkNC00MzgyLWI4OTQtYWFjYTg5ZjJk ZmQxMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk MzdhMTlhNDEtZmVlNS00NmIzLTg1NDAtZDM5YTI4NTgzYzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5vwk8UNfWiAY8wnpYNMysbIRmzKW/dtROBQ k84pPXrr1wonwdUi1kFXfqvRyH1Yo0PujDM/ql83JDug3vseJOCALqpD8FXJ1+9E IQRi+akXTTnjjFb9/8e+lhQtxLrm/kS6JxwaS3VNzvh3ElGDfTZE3C5VgH8QK6mQ YyLfFTk9XGFbXDuyS9Gd05/sODLkUU1KZ9tZbHLr7azv0Mg98AQ2aZC7tUeNjJYV tIOQLZzP8DxuKP+A+EL7KTk14ZfBL06aPRk6CejidlNFTrdf7wB6f8faNdhNXOqY 8VymqnTy3II8ehJ3iNjtmOBPQBUyHyov7/DohR2n6sTDSDEC1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9N22e/F1bqUx2pof+My3hB+l+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBl N2NlOS01NWQ0LTQzODItYjg5NC1hYWNhODlmMmRmZDEvZjM1OTJhYTMtZjdhZS0z NWVjLTk1MmItNmQ1MzU0MWZlMTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmYwZTdjZTktNTVkNC00MzgyLWI4 OTQtYWFjYTg5ZjJkZmQxLzJmMGU3Y2U5LTU1ZDQtNDM4Mi1iODk0LWFhY2E4OWYy ZGZkMS5jcmwwHwYDVR0jBBgwFoAUxwyRk31taXdKMVntxuqEo/T3CpAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBlN2NlOS01NWQ0LTQzODItYjg5NC1hYWNh ODlmMmRmZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLSqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEshwlNijFz6Ts6jdDXXCwchLUp4ySDdmimBmx1qwO3H8IukLnbR39U PuZGO+GzTlAYVXa+ruVuSTIAP9h2pRxKXNP5w+Ivf0XVbQsjQa2gA6imn80Xllq/ pmFIZdglRvmk4gOQaejoonTW+6slAYbNeGOKSSaiMUffwO+FSyoeD9VURk+WYPu7 L0lM+YvXSW3zraym0l5H+epEXalX7y0o5+uVvAW32fksGczp0tnCFJdKew5z6nfa bTR+D7uFVqBk9Th/EtlZAn3Z9t1H7qeq+v260weCtm98XYZd49esGh/hGu24uycA ezw6hmUVpfF+2Y/KzgoJf+H4V86q7qw= -----END CERTIFICATE-----Generated at Mon Aug 4 15:05:13 2025 by rpki-client