$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/43eb115a-2968-3e76-bd9b-b0925731c484.roa File: 43eb115a-2968-3e76-bd9b-b0925731c484.roa (raw, json) Hash identifier: tuUg7BfBFz3rLl77JJClUarm1o2zIB87mYBEjGb2u4w= Subject key identifier: 23:30:27:A6:52:A8:D1:57:BA:47:96:F0:50:53:E8:71:5E:E7:19:C9 Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Certificate serial: 010D0C9F4328584BAD624F724C907E6A9E0E0E84 Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/43eb115a-2968-3e76-bd9b-b0925731c484.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 0 IP address blocks: 45.41.248.0/22 maxlen: 22 68.69.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:4f:72:4c:90:7e:6a:9e:0e:0e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=e671490e-7f7e-4547-b998-04098bec5aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:85:df:35:0b:03:57:b7:41:0b:d3:ea:b7:72: dc:04:4e:4a:58:90:29:b9:55:36:9a:fd:d2:4d:ee: 45:f0:72:66:1b:79:f9:c0:96:15:58:08:bb:99:37: dd:33:19:2e:05:5b:71:80:89:8d:68:4b:60:94:65: e1:df:0a:08:d2:84:ff:92:b9:f9:f3:8f:71:4c:04: c1:b7:59:bf:97:4a:dd:66:56:7a:0a:47:41:18:1f: 4b:c8:1a:62:34:6d:d6:4e:c8:e0:cd:e4:bf:e4:65: 47:9c:15:af:e4:a9:03:9f:c0:ec:60:66:b6:6a:e0: 9b:46:cb:ae:ae:c4:72:97:6f:0c:1e:de:78:69:f0: 6c:b0:7c:e0:7e:8e:54:4d:0e:f5:4d:44:f1:94:70: fb:b9:3c:70:c8:a7:41:89:ef:93:e6:73:b2:30:21: 62:62:c3:d5:90:e3:56:a8:6c:74:54:0f:ee:af:7f: 32:d9:80:49:60:a0:d6:6d:0a:6d:43:4d:4a:16:f1: ee:e7:28:b0:e8:38:d2:80:61:37:ce:b5:25:83:61: dc:20:b5:eb:7b:cb:24:46:5b:fc:64:18:d6:6d:cb: b0:f0:75:64:51:12:f9:10:15:33:86:d5:28:10:d1: d5:51:9d:97:eb:c1:46:e0:2f:ba:46:de:7c:ec:da: 51:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:30:27:A6:52:A8:D1:57:BA:47:96:F0:50:53:E8:71:5E:E7:19:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/43eb115a-2968-3e76-bd9b-b0925731c484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl X509v3 Authority Key Identifier: keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer sbgp-ipAddrBlock: critical IPv4: 45.41.248.0/22 68.69.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ea:4f:86:8d:40:7b:35:b3:68:3e:db:64:a1:d0:63:84:a4: c0:ff:6c:5b:ba:a1:c8:ee:b2:ca:0f:55:67:fd:2b:b9:99:de: 51:59:25:c2:32:72:f4:a5:e0:4a:71:de:26:a7:e6:46:f3:6f: 11:49:79:b9:a7:15:b8:5e:59:da:34:32:c1:40:f7:43:bb:e5: f7:1c:b9:43:27:c2:f5:aa:69:d0:a0:d3:bf:d4:a0:fb:27:8c: a3:96:24:21:4e:d1:c9:d9:58:aa:57:13:dd:53:ab:9c:74:f3: 72:c5:1d:74:4b:22:f8:d4:2d:49:31:d3:52:b8:1d:18:2c:a6: d4:d2:8e:0b:de:75:73:68:91:2d:ab:b6:1a:8c:a3:be:62:11: 3a:91:2d:55:5a:67:0d:2e:03:d6:49:07:17:8e:f0:60:b4:1d: 5e:98:89:bd:75:a7:b6:77:c2:00:e6:c2:4a:f8:90:58:65:ba: 2e:82:f9:6a:d5:17:86:be:58:65:cf:db:fe:19:06:8b:bb:1b: 6d:e0:be:a7:54:1c:0d:0a:7c:9e:74:59:33:5b:24:66:c1:ed: 0a:25:bc:d8:00:7c:23:97:42:c9:a3:f5:e6:61:8b:50:9f:21: 3e:54:7d:13:46:00:9f:60:cd:79:74:ba:19:3f:ef:78:52:78: cf:e0:95:e7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEutYk9yTJB+ap4ODoQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4 OTc2MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZTY3MTQ5MGUtN2Y3ZS00NTQ3LWI5OTgtMDQwOThiZWM1YWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoXfNQsDV7dBC9Pqt3LcBE5KWJApuVU2mv3S Te5F8HJmG3n5wJYVWAi7mTfdMxkuBVtxgImNaEtglGXh3woI0oT/krn5849xTATB t1m/l0rdZlZ6CkdBGB9LyBpiNG3WTsjgzeS/5GVHnBWv5KkDn8DsYGa2auCbRsuu rsRyl28MHt54afBssHzgfo5UTQ71TUTxlHD7uTxwyKdBie+T5nOyMCFiYsPVkONW qGx0VA/ur38y2YBJYKDWbQptQ01KFvHu5yiw6DjSgGE3zrUlg2HcILXre8skRlv8 ZBjWbcuw8HVkURL5EBUzhtUoENHVUZ2X68FG4C+6Rt587NpRQwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCMwJ6ZSqNFXukeW8FBT6HFe5xnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvNDNlYjExNWEtMjk2OC0z ZTc2LWJkOWItYjA5MjU3MzFjNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4 ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj YTU2ODg5NzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLSn4AwQC REWwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIDqT4aNQHs1s2g+22Sh0GOEpMD/bFu6ocjussoPVWf9K7mZ 3lFZJcIycvSl4Epx3ian5kbzbxFJebmnFbheWdo0MsFA90O75fccuUMnwvWqadCg 07/UoPsnjKOWJCFO0cnZWKpXE91Tq5x083LFHXRLIvjULUkx01K4HRgsptTSjgve dXNokS2rthqMo75iETqRLVVaZw0uA9ZJBxeO8GC0HV6Yib11p7Z3wgDmwkr4kFhl ui6C+WrVF4a+WGXP2/4ZBou7G23gvqdUHA0KfJ50WTNbJGbB7QolvNgAfCOXQsmj 9eZhi1CfIT5UfRNGAJ9gzXl0uhk/73hSeM/glec= -----END CERTIFICATE-----Generated at Tue Nov 4 22:43:16 2025 by rpki-client