$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/25d04c7f-5d48-3add-b08a-ef43cdcfb32f.roa File: 25d04c7f-5d48-3add-b08a-ef43cdcfb32f.roa (raw, json) Hash identifier: ztAvlSSjH59urQPk3dOjHP78fo/Dio6MeavgoJ5PJkw= Subject key identifier: 70:AC:31:47:2E:0A:19:5B:68:C0:44:FD:27:1E:2F:F6:C7:3F:71:25 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B44B1C28C4990CD9482101B60 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/25d04c7f-5d48-3add-b08a-ef43cdcfb32f.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 16591 IP address blocks: 45.56.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c2:8c:49:90:cd:94:82:10:1b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=0c2d8a0e-2c63-4bb7-b6ef-53e8aaa31062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c5:31:0d:1e:02:08:01:44:cf:56:99:2f:cb: e5:f8:ba:4a:cd:24:21:b5:3c:38:76:bf:6e:ed:3a: 91:86:04:ed:f2:2d:b5:62:ee:41:cd:81:e2:c0:1c: e8:89:ea:32:af:87:6b:6e:7b:1c:a9:67:bd:c1:af: 3a:da:88:78:32:d5:d6:77:45:06:66:f6:51:66:e3: 3d:2f:fd:16:00:9e:49:23:3b:55:42:6d:a6:83:ac: c8:4a:96:66:92:f2:7b:88:da:4c:31:f2:24:af:e5: 5c:28:a1:4d:63:22:98:fa:3e:25:24:60:20:43:61: 2b:5e:6e:9c:80:ba:3d:98:6d:84:8f:be:00:e6:38: fa:d3:86:c8:2c:1a:1c:7a:0a:c4:05:10:96:4d:02: 6e:c4:02:ff:7e:92:4b:78:ff:e9:bd:a3:c0:92:2f: 4d:73:59:9b:03:68:6b:f8:41:0b:14:6e:91:54:48: 6d:89:cc:a7:7e:4e:56:8e:a5:61:57:e7:6d:24:37: 19:0b:b8:e8:07:b1:a6:45:ab:0d:20:40:6f:8f:e4: a4:9d:e3:ec:0a:3a:f7:8d:f1:0b:ea:cf:56:da:59: a3:3d:3c:91:6b:83:f4:2c:a1:fe:c0:ad:23:3d:1d: ce:e7:f3:37:16:12:b7:4e:c5:8e:1c:86:bd:af:58: 14:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AC:31:47:2E:0A:19:5B:68:C0:44:FD:27:1E:2F:F6:C7:3F:71:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/25d04c7f-5d48-3add-b08a-ef43cdcfb32f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 45.56.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:48:96:32:78:a6:7d:17:65:04:c6:57:1e:f4:40:20:9c:93: 82:15:85:a3:a0:0d:61:81:62:c0:82:b8:06:a1:56:f6:55:88: 68:05:15:1b:70:66:24:4f:bd:6c:42:9c:3e:07:72:09:99:33: b7:2b:5e:d2:9d:55:2f:0c:15:ae:58:96:2d:ce:84:59:a7:59: a6:48:db:e6:68:68:b7:4c:78:bc:c9:0b:83:31:b5:83:69:76: 3f:f8:89:e4:6f:44:06:fa:ef:2f:25:7a:88:81:c8:77:c7:43: 64:2d:62:6a:fe:31:65:aa:9b:af:d6:53:2f:ce:08:c2:0d:06: fa:65:cf:bb:be:25:06:4d:4b:e3:45:c7:52:a0:b1:06:e2:5e: 1e:03:cb:e2:95:b7:34:c1:44:3a:0b:ee:2f:03:31:4c:4a:08: 9f:89:72:d2:88:ef:fd:63:71:5c:8e:dc:cf:e4:69:ad:08:b6: 43:69:63:13:03:75:79:76:ae:04:2d:c2:1a:9f:e5:ba:b5:e9: 33:61:2b:20:aa:68:27:ac:24:c9:03:28:0c:32:e2:c3:df:d5: ec:13:ca:b9:c8:49:df:06:ec:28:01:1c:16:60:82:15:05:b6: b4:8d:a6:38:42:f6:ba:0e:98:d6:61:6c:c9:5d:4f:86:83:a5: b0:e3:51:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEscKMSZDNlIIQG2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk MGMyZDhhMGUtMmM2My00YmI3LWI2ZWYtNTNlOGFhYTMxMDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8UxDR4CCAFEz1aZL8vl+LpKzSQhtTw4dr9u 7TqRhgTt8i21Yu5BzYHiwBzoieoyr4drbnscqWe9wa862oh4MtXWd0UGZvZRZuM9 L/0WAJ5JIztVQm2mg6zISpZmkvJ7iNpMMfIkr+VcKKFNYyKY+j4lJGAgQ2ErXm6c gLo9mG2Ej74A5jj604bILBocegrEBRCWTQJuxAL/fpJLeP/pvaPAki9Nc1mbA2hr +EELFG6RVEhticynfk5WjqVhV+dtJDcZC7joB7GmRasNIEBvj+SknePsCjr3jfEL 6s9W2lmjPTyRa4P0LKH+wK0jPR3O5/M3FhK3TsWOHIa9r1gUCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCsMUcuChlbaMBE/SceL/bHP3ElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjVkMDRjN2YtNWQ0OC0z YWRkLWIwOGEtZWY0M2NkY2ZiMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLTgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBIljJ4pn0XZQTGVx70QCCck4IVhaOgDWGBYsCCuAahVvZViGgFFRtw ZiRPvWxCnD4HcgmZM7crXtKdVS8MFa5Yli3OhFmnWaZI2+ZoaLdMeLzJC4MxtYNp dj/4ieRvRAb67y8leoiByHfHQ2QtYmr+MWWqm6/WUy/OCMINBvplz7u+JQZNS+NF x1KgsQbiXh4Dy+KVtzTBRDoL7i8DMUxKCJ+JctKI7/1jcVyO3M/kaa0ItkNpYxMD dXl2rgQtwhqf5bq16TNhKyCqaCesJMkDKAwy4sPf1ewTyrnISd8G7CgBHBZgghUF trSNpjhC9roOmNZhbMldT4aDpbDjUXQ= -----END CERTIFICATE-----Generated at Wed Nov 5 07:56:07 2025 by rpki-client