$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/d0af02a9-0d8a-3be9-89c3-b3f9051c6a65.roa File: d0af02a9-0d8a-3be9-89c3-b3f9051c6a65.roa (raw, json) Hash identifier: RM/CJb1wGQvvWtu/K4rZZ723TdA8QGPXcQmEXEvRYu0= Subject key identifier: E7:41:6A:65:45:AB:59:B1:56:0C:65:0B:CD:94:56:AA:89:9B:32:38 Certificate issuer: /CN=1019a62c-c6e6-45a6-a0e7-472a84b5ba68 Certificate serial: 010D0C9F4328584BB727BC9F314E0CC1894EFF80 Authority key identifier: CE:02:0E:11:62:45:2E:57:D6:13:BA:B6:EE:85:52:C2:30:31:BE:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/d0af02a9-0d8a-3be9-89c3-b3f9051c6a65.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 399979 IP address blocks: 45.139.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:bc:9f:31:4e:0c:c1:89:4e:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1019a62c-c6e6-45a6-a0e7-472a84b5ba68 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=7ff7b95c-9b1c-42e1-b23f-368e43e91571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:21:81:2f:57:49:87:14:38:a9:5f:62:35:a7: 86:72:4d:69:1a:39:3c:b6:09:57:d4:fd:25:0f:2b: 13:af:2c:df:11:77:0d:b5:80:aa:df:5b:9f:1f:5a: ef:2d:09:1d:f5:ca:37:6b:c0:31:96:42:cf:26:c7: 94:3a:ed:0d:dd:67:f3:82:83:55:10:35:21:ac:9d: 1d:83:f0:71:d4:d1:b0:d8:e7:60:2a:ac:8b:29:a2: ab:81:c2:17:9e:cf:62:97:1c:5d:4f:6f:23:00:b0: ff:75:d3:46:37:ec:cf:f7:1c:83:55:0c:25:58:69: 90:4a:52:b1:a8:e6:04:a0:49:2f:47:93:71:ef:57: 74:cd:b8:2d:a5:63:38:30:de:10:f8:52:9e:f9:1f: 93:9f:cf:53:97:7d:88:37:1f:4d:5f:74:82:d7:24: 9a:c9:58:5b:19:3e:56:52:69:95:bb:a3:4e:c9:40: 23:60:77:c8:8e:f9:01:c4:15:bf:6a:a6:c8:f6:79: bb:92:15:a5:40:d7:91:4d:bb:2b:13:3b:db:f7:fc: 1d:72:0b:38:dd:82:bd:bb:f2:27:49:84:e4:02:d6: 1a:2e:d4:45:2f:bb:6d:91:f6:49:d2:17:7e:8c:57: 90:46:ae:3f:cf:29:5b:1f:1e:95:e4:d9:71:48:0b: 2e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:41:6A:65:45:AB:59:B1:56:0C:65:0B:CD:94:56:AA:89:9B:32:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/d0af02a9-0d8a-3be9-89c3-b3f9051c6a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.crl X509v3 Authority Key Identifier: keyid:CE:02:0E:11:62:45:2E:57:D6:13:BA:B6:EE:85:52:C2:30:31:BE:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.cer sbgp-ipAddrBlock: critical IPv4: 45.139.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:4e:ed:0b:42:78:8f:86:82:c3:4c:3a:9d:dc:a0:bf:b0:9b: 4e:0f:57:20:00:ad:af:6d:09:be:8f:8f:99:c1:56:df:f1:76: 3a:c5:36:0b:f4:cd:d6:94:2a:91:46:a0:e3:68:e4:18:23:13: fd:d3:4e:94:4c:cf:b0:89:fe:69:84:42:4f:53:76:82:b0:02: 1c:40:6a:4e:0e:23:31:e5:25:c2:dc:eb:ac:0d:81:86:d7:28: 80:7b:d8:c1:f3:58:cb:45:02:d1:40:d6:1a:69:e7:c7:07:66: 9a:26:c7:25:f7:3b:4d:5c:d1:18:99:09:1b:f0:3b:b5:78:85: 94:d7:c0:bd:68:56:97:0d:7a:9a:1f:36:72:33:f1:a1:4a:fb: b2:56:cb:9f:7b:89:82:47:53:82:fd:7e:2d:8e:ba:70:1d:47: 2f:8d:8f:7e:2c:67:39:ab:de:83:8c:cc:1f:be:d8:66:e1:7d: e3:66:a0:e1:07:67:e0:07:03:08:89:aa:04:27:c6:68:11:e7: 27:bc:c3:99:2a:f3:fe:e6:c3:ae:9d:f5:63:eb:a7:06:57:4d: 17:2f:03:52:d3:59:2f:c0:75:51:f1:90:ff:7b:a5:8e:df:a7: e0:f3:45:f2:c3:14:f1:44:32:c7:c2:87:8e:eb:4b:70:c7:71: 53:d3:33:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7yfMU4MwYlO/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTAxOWE2MmMtYzZlNi00NWE2LWEwZTctNDcyYTg0YjVi YTY4MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk N2ZmN2I5NWMtOWIxYy00MmUxLWIyM2YtMzY4ZTQzZTkxNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSGBL1dJhxQ4qV9iNaeGck1pGjk8tglX1P0l DysTryzfEXcNtYCq31ufH1rvLQkd9co3a8AxlkLPJseUOu0N3WfzgoNVEDUhrJ0d g/Bx1NGw2OdgKqyLKaKrgcIXns9ilxxdT28jALD/ddNGN+zP9xyDVQwlWGmQSlKx qOYEoEkvR5Nx71d0zbgtpWM4MN4Q+FKe+R+Tn89Tl32INx9NX3SC1ySayVhbGT5W UmmVu6NOyUAjYHfIjvkBxBW/aqbI9nm7khWlQNeRTbsrEzvb9/wdcgs43YK9u/In SYTkAtYaLtRFL7ttkfZJ0hd+jFeQRq4/zylbHx6V5NlxSAsu8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdBamVFq1mxVgxlC82UVqqJmzI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDE5 YTYyYy1jNmU2LTQ1YTYtYTBlNy00NzJhODRiNWJhNjgvZDBhZjAyYTktMGQ4YS0z YmU5LTg5YzMtYjNmOTA1MWM2YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTAxOWE2MmMtYzZlNi00NWE2LWEw ZTctNDcyYTg0YjViYTY4LzEwMTlhNjJjLWM2ZTYtNDVhNi1hMGU3LTQ3MmE4NGI1 YmE2OC5jcmwwHwYDVR0jBBgwFoAUzgIOEWJFLlfWE7q27oVSwjAxvoEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDE5YTYyYy1jNmU2LTQ1YTYtYTBlNy00NzJh ODRiNWJhNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtO7QtCeI+GgsNMOp3coL+wm04PVyAAra9tCb6Pj5nBVt/xdjrFNgv0 zdaUKpFGoONo5BgjE/3TTpRMz7CJ/mmEQk9TdoKwAhxAak4OIzHlJcLc66wNgYbX KIB72MHzWMtFAtFA1hpp58cHZpomxyX3O01c0RiZCRvwO7V4hZTXwL1oVpcNepof NnIz8aFK+7JWy597iYJHU4L9fi2OunAdRy+Nj34sZzmr3oOMzB++2GbhfeNmoOEH Z+AHAwiJqgQnxmgR5ye8w5kq8/7mw66d9WPrpwZXTRcvA1LTWS/AdVHxkP97pY7f p+DzRfLDFPFEMsfCh47rS3DHcVPTM6Y= -----END CERTIFICATE-----Generated at Wed Nov 5 22:43:35 2025 by rpki-client