$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa File: ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa (raw, json) Hash identifier: OGyux3BNwouZScMr27ng7J+zXwWBO5kAp8A4aOVeRx8= Subject key identifier: E4:5C:94:9F:13:46:37:64:74:6A:38:18:E2:8C:3A:DF:66:D8:CA:AE Certificate issuer: /CN=497813be-498e-4129-a627-225f97d0e2b5 Certificate serial: 010D0C9F4328584BBFA596FC529AB3B6DFA41000 Authority key identifier: B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 399606 IP address blocks: 45.45.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:96:fc:52:9a:b3:b6:df:a4:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=497813be-498e-4129-a627-225f97d0e2b5 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=b8b611b2-1ae0-4781-a1e2-ccd2a01756b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:3a:6f:6c:05:71:fd:ac:fc:32:39:c3:d8: 21:14:08:4c:8c:1f:a0:b7:6b:e3:c8:50:0d:2f:5a: cc:93:97:8e:5d:9b:f5:74:82:27:7a:f2:fe:a9:3b: 48:dd:93:57:e3:63:a2:d6:d4:01:37:1e:59:45:cc: 95:e7:d3:3e:f0:6f:9b:80:82:ba:ef:4c:40:14:2d: 43:cc:be:9f:55:16:72:8c:2f:35:44:de:7e:6c:53: 9c:61:29:bc:2a:bd:c5:3d:a2:67:5d:68:5f:7d:41: 12:3a:0a:a1:85:9f:4f:fc:36:aa:b9:51:66:ed:a7: c9:cc:6e:df:aa:35:de:bd:e0:1b:7c:cb:b8:1f:55: cb:49:dd:bd:27:3d:24:ee:11:2e:97:b9:28:6c:90: 2b:2d:e3:fd:bb:2b:8f:d8:ef:da:05:01:ed:9a:26: f2:7f:49:31:72:e1:91:48:91:08:63:37:6a:19:59: 7c:fe:2b:fb:d8:29:8f:34:35:d5:9c:22:d3:06:e0: eb:a7:0d:53:03:8b:ff:63:b2:53:51:84:c5:b2:3b: a8:a8:4f:65:a0:29:26:98:cb:8d:c5:ad:90:0c:ac: 2c:32:1a:44:f1:c1:43:7b:ed:de:66:be:c0:22:c8: 27:f3:b1:e6:56:4d:d6:62:75:bc:b3:1f:d9:f7:6d: bc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5C:94:9F:13:46:37:64:74:6A:38:18:E2:8C:3A:DF:66:D8:CA:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl X509v3 Authority Key Identifier: keyid:B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer sbgp-ipAddrBlock: critical IPv4: 45.45.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:b6:4e:ff:08:93:54:d5:3e:c7:7f:93:70:ec:02:da:e0:a2: 04:e6:b9:40:f2:0e:69:45:62:9e:b9:90:83:0c:41:a0:44:34: a0:95:17:36:7e:17:da:24:25:cb:15:d3:34:db:df:5b:21:82: bf:0b:50:90:39:de:9f:7c:d9:9d:57:87:38:19:e1:78:ae:91: 11:9d:ef:8f:33:2d:f8:67:a0:7c:2e:7f:91:d7:f6:e8:66:32: f7:6c:50:94:6e:eb:bf:02:8a:85:d2:2c:b6:e8:25:08:21:a2: a7:8d:c4:0f:d0:ff:68:8c:8c:cf:6d:f2:28:33:ff:26:d7:e2: ee:68:0e:52:d4:83:07:01:d5:84:7f:c7:6b:ea:e1:4b:1d:dc: cd:84:83:f9:dd:65:df:49:5c:db:91:01:48:fe:dc:32:65:7f: aa:97:34:bf:d6:f8:67:dc:26:12:80:73:4c:c1:9d:80:56:36: 7b:42:af:ed:7f:e7:08:93:b5:ec:6a:a8:3a:18:d4:ed:aa:12: d4:f3:fc:f2:c9:fd:f5:fb:12:1b:91:7e:5c:1a:eb:f7:9f:75: 2c:3a:c4:87:c2:32:fe:e5:ec:32:cd:e3:ad:b9:22:61:69:e7: 6f:ce:ef:bd:b0:74:ce:10:be:78:c8:b2:1c:0b:bd:06:6e:d8: fc:41:e3:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZb8Upqztt+kEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk3ODEzYmUtNDk4ZS00MTI5LWE2MjctMjI1Zjk3ZDBl MmI1MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk YjhiNjExYjItMWFlMC00NzgxLWExZTItY2NkMmEwMTc1NmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRE6b2wFcf2s/DI5w9ghFAhMjB+gt2vjyFAN L1rMk5eOXZv1dIInevL+qTtI3ZNX42Oi1tQBNx5ZRcyV59M+8G+bgIK670xAFC1D zL6fVRZyjC81RN5+bFOcYSm8Kr3FPaJnXWhffUESOgqhhZ9P/DaquVFm7afJzG7f qjXeveAbfMu4H1XLSd29Jz0k7hEul7kobJArLeP9uyuP2O/aBQHtmibyf0kxcuGR SJEIYzdqGVl8/iv72CmPNDXVnCLTBuDrpw1TA4v/Y7JTUYTFsjuoqE9loCkmmMuN xa2QDKwsMhpE8cFDe+3eZr7AIsgn87HmVk3WYnW8sx/Z9228AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORclJ8TRjdkdGo4GOKMOt9m2MquMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OTc4 MTNiZS00OThlLTQxMjktYTYyNy0yMjVmOTdkMGUyYjUvY2U0N2M5NjgtMGExNi0z MTcwLTk0OGQtYTJjZmFlM2ViOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk3ODEzYmUtNDk4ZS00MTI5LWE2 MjctMjI1Zjk3ZDBlMmI1LzQ5NzgxM2JlLTQ5OGUtNDEyOS1hNjI3LTIyNWY5N2Qw ZTJiNS5jcmwwHwYDVR0jBBgwFoAUuDd7Tk8D/gmswblAiz+e8Eyi/yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OTc4MTNiZS00OThlLTQxMjktYTYyNy0yMjVm OTdkMGUyYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACu2Tv8Ik1TVPsd/k3DsAtrgogTmuUDyDmlFYp65kIMMQaBENKCVFzZ+ F9okJcsV0zTb31shgr8LUJA53p982Z1XhzgZ4XiukRGd748zLfhnoHwuf5HX9uhm MvdsUJRu678CioXSLLboJQghoqeNxA/Q/2iMjM9t8igz/ybX4u5oDlLUgwcB1YR/ x2vq4Usd3M2Eg/ndZd9JXNuRAUj+3DJlf6qXNL/W+GfcJhKAc0zBnYBWNntCr+1/ 5wiTtexqqDoY1O2qEtTz/PLJ/fX7EhuRflwa6/efdSw6xIfCMv7l7DLN4625ImFp 52/O772wdM4QvnjIshwLvQZu2PxB47I= -----END CERTIFICATE-----Generated at Wed Nov 5 09:09:51 2025 by rpki-client