$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/f9874a22-9a02-398f-86a6-217e95468149.roa File: f9874a22-9a02-398f-86a6-217e95468149.roa (raw, json) Hash identifier: N61TLzmhelYtg8du57aOzAO6UGDZnz5jZ8y8kKZykJA= Subject key identifier: EB:49:24:B3:A0:B4:11:85:D4:74:69:0E:09:39:34:83:56:57:E5:A5 Certificate issuer: /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Certificate serial: 010D0C9F4328584BB727B860CEB10ECF90AB3100 Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/f9874a22-9a02-398f-86a6-217e95468149.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 1011 IP address blocks: 45.45.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:b8:60:ce:b1:0e:cf:90:ab:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=b0e2b7d0-5619-4ba1-b0f2-f36da74f222f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:be:20:10:fa:c6:9a:be:31:88:6e:0e:81:49: 0b:6e:50:8b:e2:fd:30:2f:34:ea:21:7d:6a:af:98: 7e:94:26:3b:09:21:d5:33:e5:48:29:1a:09:8c:89: cf:f3:95:90:9a:31:a6:c2:56:73:aa:cd:24:cc:be: 89:46:c4:24:94:d5:19:ba:e0:f8:2d:af:d8:0c:98: 17:61:bb:18:63:e9:d2:66:e1:ee:9f:0c:c3:43:29: 5b:a3:10:73:f6:49:16:df:f2:db:a8:0a:21:82:f4: 19:38:74:f5:48:e1:4f:26:5c:f2:5f:b3:b0:17:43: 9f:69:10:c9:02:d8:38:0b:60:ea:90:56:e0:30:55: fd:75:a9:48:77:21:93:86:33:f7:72:42:ae:d6:e2: 52:ee:18:6a:23:1d:ff:68:5d:80:39:7c:d7:93:6e: f7:54:d8:c2:71:a9:57:85:c5:c8:ad:32:b5:77:ea: a2:54:67:90:0e:bf:c7:3c:31:fa:9d:b1:51:5f:88: 62:d9:0a:e2:8d:b7:7c:27:95:78:5d:ec:18:13:32: 0d:9a:2b:32:6d:cb:e8:83:9d:58:47:d9:e3:dd:b6: c4:81:f6:de:f7:cc:e7:8b:db:26:47:09:39:af:a6: c4:69:6b:eb:ac:f3:97:db:0a:56:f1:cd:1a:31:08: e4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:49:24:B3:A0:B4:11:85:D4:74:69:0E:09:39:34:83:56:57:E5:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/f9874a22-9a02-398f-86a6-217e95468149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl X509v3 Authority Key Identifier: keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer sbgp-ipAddrBlock: critical IPv4: 45.45.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:66:83:ae:87:d0:2f:d4:66:be:1f:71:8d:e8:ab:80:72:44: 84:2c:e2:49:fc:6d:58:cb:22:00:28:77:ea:f8:83:d4:a1:47: f9:df:6a:16:75:79:46:1a:79:fc:df:aa:dc:35:13:4e:b6:e6: 61:ed:4b:09:0e:eb:a6:fd:e5:3f:76:2f:78:24:17:1b:ac:b2: 80:fd:ad:26:f2:be:46:e0:12:ab:69:56:bf:8a:5d:6e:f6:d0: 17:91:dc:48:1c:d8:d3:8c:3b:c8:c1:18:fa:18:62:6d:41:90: 5b:1c:38:61:eb:05:db:8b:74:07:a4:35:8d:42:94:e1:89:1e: f1:23:4d:b9:db:2e:10:97:f7:b9:be:9e:56:47:50:3a:6a:91: 3b:75:94:54:06:79:34:24:69:e7:a8:45:a0:ea:37:ab:64:60: 69:cc:c5:1a:1f:98:2d:aa:58:16:87:d1:aa:dd:24:12:bc:e0: df:da:a4:0d:57:f1:7b:f9:6f:b5:17:8f:73:b3:d7:91:9c:1d: 84:a3:a9:91:ea:d0:77:16:70:0f:fd:a7:bd:be:5a:2b:e2:18: 38:82:c6:23:4f:35:71:1f:76:94:a9:73:50:bc:f1:bf:f8:a2: 01:2e:59:84:77:22:88:1c:36:29:00:01:f1:b8:3f:90:af:72: 68:ff:65:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7hgzrEOz5CrMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YmM1YzMtOWVmNC00ZGEzLTlmY2YtNGVjNmRhYmJm YmMzMB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk YjBlMmI3ZDAtNTYxOS00YmExLWIwZjItZjM2ZGE3NGYyMjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb4gEPrGmr4xiG4OgUkLblCL4v0wLzTqIX1q r5h+lCY7CSHVM+VIKRoJjInP85WQmjGmwlZzqs0kzL6JRsQklNUZuuD4La/YDJgX YbsYY+nSZuHunwzDQylboxBz9kkW3/LbqAohgvQZOHT1SOFPJlzyX7OwF0OfaRDJ Atg4C2DqkFbgMFX9dalIdyGThjP3ckKu1uJS7hhqIx3/aF2AOXzXk273VNjCcalX hcXIrTK1d+qiVGeQDr/HPDH6nbFRX4hi2Qrijbd8J5V4XewYEzINmisybcvog51Y R9nj3bbEgfbe98zni9smRwk5r6bEaWvrrPOX2wpW8c0aMQjkowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtJJLOgtBGF1HRpDgk5NINWV+WlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRi YzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2ZGFiYmZiYzMvZjk4NzRhMjItOWEwMi0z OThmLTg2YTYtMjE3ZTk1NDY4MTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWY0YmM1YzMtOWVmNC00ZGEzLTlm Y2YtNGVjNmRhYmJmYmMzL2FmNGJjNWMzLTllZjQtNGRhMy05ZmNmLTRlYzZkYWJi ZmJjMy5jcmwwHwYDVR0jBBgwFoAUsrvXRQKNNtbCM39NSIxDRyFgB78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRiYzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2 ZGFiYmZiYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLS36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdmg66H0C/UZr4fcY3oq4ByRIQs4kn8bVjLIgAod+r4g9ShR/nfahZ1 eUYaefzfqtw1E0625mHtSwkO66b95T92L3gkFxussoD9rSbyvkbgEqtpVr+KXW72 0BeR3Egc2NOMO8jBGPoYYm1BkFscOGHrBduLdAekNY1ClOGJHvEjTbnbLhCX97m+ nlZHUDpqkTt1lFQGeTQkaeeoRaDqN6tkYGnMxRofmC2qWBaH0ardJBK84N/apA1X 8Xv5b7UXj3Oz15GcHYSjqZHq0HcWcA/9p72+WiviGDiCxiNPNXEfdpSpc1C88b/4 ogEuWYR3IogcNikAAfG4P5Cvcmj/Zbs= -----END CERTIFICATE-----Generated at Wed Nov 5 14:39:52 2025 by rpki-client