$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9c4df4af-37b3-3514-a46a-c30cee4dd16c.roa File: 9c4df4af-37b3-3514-a46a-c30cee4dd16c.roa (raw, json) Hash identifier: G23bTlbUZVICtEMmWZfBZ+Jww2OueOPabOpqmXTlLXc= Subject key identifier: E7:2E:1D:D7:3A:AD:2C:FD:69:79:6B:88:1C:5F:CD:8E:08:B7:09:5C Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584B196C07862902C4BFDD49B880 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9c4df4af-37b3-3514-a46a-c30cee4dd16c.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 54339 IP address blocks: 45.62.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:07:86:29:02:c4:bf:dd:49:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=2d5f4f5f-e68b-4b02-af3f-e43858e576b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7b:7b:94:21:f1:55:1f:d1:8c:63:c8:0b:aa: 24:ea:dc:eb:be:3b:c5:e9:bf:4b:37:99:66:c8:22: df:70:d5:67:40:5e:38:bc:3b:0b:fb:e0:e9:1b:94: f5:32:4e:a4:53:78:fd:9f:a9:2f:66:1a:30:a2:3c: dd:a2:ed:fd:ba:11:21:60:1c:1e:07:91:47:32:10: 58:88:b1:48:64:4d:34:9b:d3:15:e4:3f:66:f4:81: 61:e7:23:47:55:d4:53:d3:2c:d5:c1:32:1c:05:3b: cd:b8:f9:73:a9:23:be:22:ef:6a:33:a0:de:8a:bb: 42:2d:47:01:de:9c:34:11:09:5c:7b:03:22:21:19: ca:ea:b5:94:c4:b0:fd:0c:50:6f:69:be:18:da:b6: a2:83:ed:ed:73:94:3d:e5:78:38:dc:94:76:45:a6: 95:13:4e:9e:4f:af:8d:f7:24:6a:2e:bc:b1:08:4e: d8:31:86:73:8a:d0:8d:a4:03:34:6d:24:91:1c:7a: 9a:30:b1:e3:be:7a:03:b4:ab:58:f0:86:eb:53:b1: c6:fd:1b:12:4f:14:1b:5e:7e:84:d2:f5:e5:65:73: 2b:e7:4e:59:44:f2:9d:0e:f3:53:37:c7:c8:04:71: 92:f8:77:a7:95:9a:d8:2f:d8:22:d9:39:99:f1:e3: d0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2E:1D:D7:3A:AD:2C:FD:69:79:6B:88:1C:5F:CD:8E:08:B7:09:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9c4df4af-37b3-3514-a46a-c30cee4dd16c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.62.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:5a:92:4c:74:31:e0:50:54:8b:80:7e:c7:3e:d4:44:be:b7: 11:c0:5c:ba:20:91:1e:7a:02:f7:d5:c9:c9:2b:ec:5f:a3:35: da:0e:02:60:a7:6e:ba:74:11:80:12:58:5a:34:b1:ce:3d:08: 72:59:cf:09:a8:c3:35:50:d2:9b:07:eb:aa:2e:6e:af:db:77: ec:5f:ed:39:13:9e:42:cf:d5:0e:03:e2:60:47:9f:e5:c4:bd: 57:ff:2c:7a:ed:c7:d0:ce:52:86:8a:3d:9d:36:a9:bc:ab:a1: 18:3f:a1:2a:a1:38:03:1f:f1:3f:62:45:63:cf:01:3e:86:46: 42:04:27:fc:56:3e:f6:28:ce:ae:42:6b:13:b2:08:2f:22:16: 49:d9:07:51:95:4d:6a:5d:f9:5c:82:a0:c0:bf:44:dd:bc:7f: 5d:41:b4:42:85:c3:1c:84:29:36:e4:bd:15:4c:cd:0c:ad:70: 4e:72:ff:26:25:cd:5a:88:d9:57:04:21:ce:8b:73:1b:34:1f: 2c:bd:4a:93:0d:e0:fc:f4:65:d2:c3:64:f7:1b:4b:a1:8c:74: b0:50:bc:67:df:82:fe:ab:0e:4e:4c:3c:b7:18:49:47:2c:04: ec:1c:3d:de:8f:fd:59:54:ee:50:4f:90:d7:8f:d8:0b:4f:b1: cd:b0:cb:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbAeGKQLEv91JuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk MmQ1ZjRmNWYtZTY4Yi00YjAyLWFmM2YtZTQzODU4ZTU3NmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHt7lCHxVR/RjGPIC6ok6tzrvjvF6b9LN5lm yCLfcNVnQF44vDsL++DpG5T1Mk6kU3j9n6kvZhowojzdou39uhEhYBweB5FHMhBY iLFIZE00m9MV5D9m9IFh5yNHVdRT0yzVwTIcBTvNuPlzqSO+Iu9qM6DeirtCLUcB 3pw0EQlcewMiIRnK6rWUxLD9DFBvab4Y2raig+3tc5Q95Xg43JR2RaaVE06eT6+N 9yRqLryxCE7YMYZzitCNpAM0bSSRHHqaMLHjvnoDtKtY8IbrU7HG/RsSTxQbXn6E 0vXlZXMr505ZRPKdDvNTN8fIBHGS+HenlZrYL9gi2TmZ8ePQ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcuHdc6rSz9aXlriBxfzY4ItwlcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvOWM0ZGY0YWYtMzdiMy0z NTE0LWE0NmEtYzMwY2VlNGRkMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT6vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFakkx0MeBQVIuAfsc+1ES+txHAXLogkR56AvfVyckr7F+jNdoOAmCn brp0EYASWFo0sc49CHJZzwmowzVQ0psH66oubq/bd+xf7TkTnkLP1Q4D4mBHn+XE vVf/LHrtx9DOUoaKPZ02qbyroRg/oSqhOAMf8T9iRWPPAT6GRkIEJ/xWPvYozq5C axOyCC8iFknZB1GVTWpd+VyCoMC/RN28f11BtEKFwxyEKTbkvRVMzQytcE5y/yYl zVqI2VcEIc6Lcxs0Hyy9SpMN4Pz0ZdLDZPcbS6GMdLBQvGffgv6rDk5MPLcYSUcs BOwcPd6P/VlU7lBPkNeP2AtPsc2wyzA= -----END CERTIFICATE-----Generated at Sat Oct 11 07:15:32 2025 by rpki-client