$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/6f7856c2-df7a-3840-b8a2-53d9ed510ac4.roa File: 6f7856c2-df7a-3840-b8a2-53d9ed510ac4.roa (raw, json) Hash identifier: Toz6gbgcL+vif7eTUShkYZIiUY7SWU+b4ERJu2xp+dY= Subject key identifier: 14:1D:66:45:A3:56:A6:B7:2C:6A:3E:F9:E4:DB:FC:26:55:99:AA:34 Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658 Certificate serial: 010D0C9F4328584B99D7841030CF6675AA9CC9C0 Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/6f7856c2-df7a-3840-b8a2-53d9ed510ac4.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 3356 IP address blocks: 45.43.4.0/24 maxlen: 24 45.43.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:84:10:30:cf:66:75:aa:9c:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=2a1edcdc-14f7-46bc-b2de-749ae7c45fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:e2:7c:ac:2d:d2:6e:78:16:ee:68:4e:04: 75:d7:b3:5d:11:45:65:2b:b6:f8:2b:1f:da:4d:1a: 95:da:2a:8d:59:1b:09:59:36:80:d7:0e:07:07:16: bc:32:ee:a0:03:ab:10:5b:ad:0e:73:c5:51:a9:07: b1:dc:5c:a3:32:a9:f6:d8:cc:17:e2:ea:22:cb:a8: 5d:91:fc:a4:d6:dd:67:60:ea:a5:00:62:55:63:12: 3d:ac:e7:9f:ce:2f:12:c6:39:b5:b8:2d:e6:2a:7e: c1:86:f7:71:ba:73:2b:74:04:a8:c3:2e:33:3a:05: 50:c0:02:d9:51:6f:b9:a4:8f:44:06:56:3c:be:15: 23:63:28:9f:4c:01:6b:f9:e8:99:9b:0f:66:5b:b0: d7:8a:15:1e:b0:37:3f:a5:bf:62:b4:a8:e2:5b:f8: e2:42:18:ff:2a:28:63:90:7b:d2:08:02:24:f8:a7: 29:a2:d4:57:b3:9a:df:e0:d1:bb:1f:7a:b8:6a:0b: 17:72:aa:5c:4c:59:04:20:64:c9:7f:55:a3:12:d6: 80:cd:0e:ba:30:34:bf:28:8a:a3:69:9f:74:44:81: 23:d3:2b:c8:3b:25:2e:0e:29:6d:77:83:b2:93:11: b8:27:ab:1d:d0:03:65:10:96:00:8b:64:f8:9a:68: 4e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1D:66:45:A3:56:A6:B7:2C:6A:3E:F9:E4:DB:FC:26:55:99:AA:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/6f7856c2-df7a-3840-b8a2-53d9ed510ac4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl X509v3 Authority Key Identifier: keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer sbgp-ipAddrBlock: critical IPv4: 45.43.4.0/24 45.43.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:23:b9:82:37:24:aa:c1:ea:c5:69:bb:34:4b:f4:2b:1a:bb: c8:49:d4:61:aa:3e:cc:48:a1:82:9b:0d:fd:c6:34:56:2d:87: 34:fa:d6:c1:02:bb:6f:c3:c0:04:ba:38:50:de:38:85:86:c9: a4:f2:d9:2b:d4:61:79:53:d1:6f:53:1b:0e:74:8d:57:24:61: bf:41:2d:ad:74:03:64:df:ea:f4:0a:a8:f8:a2:1e:39:f9:d4: 9a:0c:0c:31:55:8c:0c:70:b4:a1:82:40:17:da:8c:83:3c:f7: d7:24:f3:95:6e:3b:db:3d:56:6b:e2:d9:82:b1:f7:4a:89:40: c8:e6:35:7e:03:41:a6:08:52:9b:a9:45:a7:8e:90:7b:31:dd: 49:2f:d9:50:41:44:a3:be:34:2f:26:77:b0:ab:e8:9c:be:74: 78:7f:c4:7d:d6:34:de:f5:11:7c:bb:a1:ed:c6:0f:82:82:e0: ca:32:b8:4a:dd:0c:46:28:16:8e:fe:d4:58:da:c7:e0:25:c3: 4c:0f:4c:39:3a:3b:c0:64:8b:9d:7c:a7:c1:a1:26:0c:b0:99: 4d:ac:9d:9c:71:f8:f5:7c:fc:5f:8b:89:76:0f:82:12:08:f8: 5d:e8:03:47:b6:b5:f4:27:fb:77:8a:fd:92:28:4d:7b:0f:b5: bc:bc:75:66 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuZ14QQMM9mdaqcycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0 NjU4MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MmExZWRjZGMtMTRmNy00NmJjLWIyZGUtNzQ5YWU3YzQ1ZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRTifKwt0m54Fu5oTgR117NdEUVlK7b4Kx/a TRqV2iqNWRsJWTaA1w4HBxa8Mu6gA6sQW60Oc8VRqQex3FyjMqn22MwX4uoiy6hd kfyk1t1nYOqlAGJVYxI9rOefzi8Sxjm1uC3mKn7BhvdxunMrdASowy4zOgVQwALZ UW+5pI9EBlY8vhUjYyifTAFr+eiZmw9mW7DXihUesDc/pb9itKjiW/jiQhj/Kihj kHvSCAIk+KcpotRXs5rf4NG7H3q4agsXcqpcTFkEIGTJf1WjEtaAzQ66MDS/KIqj aZ90RIEj0yvIOyUuDiltd4OykxG4J6sd0ANlEJYAi2T4mmhOmQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBQdZkWjVqa3LGo++eTb/CZVmao0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvNmY3ODU2YzItZGY3YS0z ODQwLWI4YTItNTNkOWVkNTEwYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz NzY1MzQ2NTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALSsEAwQA LSsZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALEjuYI3JKrB6sVpuzRL9Csau8hJ1GGqPsxIoYKbDf3GNFYt hzT61sECu2/DwAS6OFDeOIWGyaTy2SvUYXlT0W9TGw50jVckYb9BLa10A2Tf6vQK qPiiHjn51JoMDDFVjAxwtKGCQBfajIM899ck85VuO9s9Vmvi2YKx90qJQMjmNX4D QaYIUpupRaeOkHsx3Ukv2VBBRKO+NC8md7Cr6Jy+dHh/xH3WNN71EXy7oe3GD4KC 4MoyuErdDEYoFo7+1Fjax+Alw0wPTDk6O8Bki518p8GhJgywmU2snZxx+PV8/F+L iXYPghII+F3oA0e2tfQn+3eK/ZIoTXsPtby8dWY= -----END CERTIFICATE-----Generated at Wed Nov 5 00:16:54 2025 by rpki-client