$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/d1facf3a-0252-3062-bd40-b1752bcaaa35.roa File: d1facf3a-0252-3062-bd40-b1752bcaaa35.roa (raw, json) Hash identifier: 9zpD6TTdo+RzUbXaTrHHpR/L3CtD3sLeOT0bV3qONSA= Subject key identifier: 66:F7:06:E1:25:05:7D:48:C6:00:C1:1C:9C:36:5B:14:1C:C9:E9:FD Certificate issuer: /CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6 Certificate serial: 010D0C9F4328584AF9513FC01F12E0E3863FC400 Authority key identifier: CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/d1facf3a-0252-3062-bd40-b1752bcaaa35.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 16509 IP address blocks: 45.45.214.0/24 maxlen: 24 136.175.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:3f:c0:1f:12:e0:e3:86:3f:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=f9b18368-f187-48af-9467-38b5e7b47324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cd:9e:56:41:10:0d:b0:95:1d:4a:d4:94:94: 43:5e:71:40:7f:ee:d6:ed:89:f6:b3:39:0a:db:ae: 03:75:0a:30:11:45:73:f6:86:84:66:25:a0:17:62: be:31:2f:14:61:03:dd:fb:2a:d7:25:eb:92:d3:ab: 6a:4f:a6:a8:e0:51:71:27:08:5e:82:d2:b7:75:e6: 4f:57:d1:ee:29:11:e2:63:c7:85:c1:1e:1c:1c:49: 51:9f:17:3f:07:5a:dc:a6:c2:94:84:b1:13:63:de: 3e:b4:79:5b:34:71:fd:81:3e:76:b4:91:c7:de:b0: 4c:ec:c2:ba:65:12:4b:92:0f:de:e5:95:5e:07:7a: 2e:f8:e6:4e:62:79:02:40:1d:62:c2:51:b0:67:64: 3c:c6:01:9c:b3:eb:0e:e2:ca:06:69:8f:64:0c:57: ce:b5:ea:ae:ee:a4:eb:31:c2:9c:d0:4a:86:aa:c9: 77:6b:a8:a1:df:34:d6:ee:f2:7e:58:f2:5e:42:9e: 1e:96:46:ec:da:49:b3:88:8c:2e:3f:81:b0:64:11: f0:a7:d5:41:e6:85:ad:1f:03:97:b0:3a:25:e9:bc: 22:c8:05:0c:80:78:cc:59:c6:de:65:92:d7:c9:24: c2:e8:23:3a:e8:e6:2a:e2:d0:16:d9:ac:8a:f3:36: ab:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F7:06:E1:25:05:7D:48:C6:00:C1:1C:9C:36:5B:14:1C:C9:E9:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/d1facf3a-0252-3062-bd40-b1752bcaaa35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl X509v3 Authority Key Identifier: keyid:CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer sbgp-ipAddrBlock: critical IPv4: 45.45.214.0/24 136.175.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:95:dc:0a:a5:4b:5e:da:be:96:9b:32:f1:46:99:40:5f:a8: e6:9b:d7:2b:9c:1d:a4:57:26:12:a2:20:ae:a0:10:f7:b2:b1: 46:5b:e5:f6:13:8f:1e:52:af:b1:ef:5e:43:14:23:d9:5e:5e: f8:4a:58:87:9c:c7:58:52:61:b9:d6:80:b7:cc:a0:27:b8:9f: 6a:7c:3e:6c:73:f9:11:2a:e2:a2:59:7c:cf:41:c4:ea:88:12: 8c:22:5e:0a:5c:2a:41:9e:4c:d3:8c:49:31:40:13:d6:56:11: c8:7e:96:1c:8e:e4:87:00:ae:43:e2:fe:e6:2e:29:99:6a:d1: 91:d2:13:29:0d:2a:69:d0:2b:6c:05:d4:d5:6a:6b:4a:65:8d: eb:8b:fe:32:7a:e7:0b:ad:6e:e9:6f:a3:cd:48:d2:d2:1e:ea: 43:11:dc:aa:fa:67:a1:00:4a:c7:23:d8:8a:32:2b:d0:d0:03: bc:0d:2b:fa:85:4b:de:78:c7:8b:7e:72:56:bc:4f:9c:24:34: 03:8b:10:25:b7:d5:d9:61:8f:1b:09:77:7f:5f:b0:bc:9b:76: e0:47:65:6f:ef:61:af:99:61:63:26:93:c0:50:49:1f:dc:75: 9b:1a:b6:ce:23:d3:ba:50:3c:4a:4c:c4:7a:05:f9:b3:f8:32: 39:47:18:75 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEr5UT/AHxLg44Y/xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU5OGE1ZTEtOWViOS00MDg3LWIyYzEtZDI1YTU4Zjkw MGM2MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZjliMTgzNjgtZjE4Ny00OGFmLTk0NjctMzhiNWU3YjQ3MzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s2eVkEQDbCVHUrUlJRDXnFAf+7W7Yn2szkK 264DdQowEUVz9oaEZiWgF2K+MS8UYQPd+yrXJeuS06tqT6ao4FFxJwhegtK3deZP V9HuKRHiY8eFwR4cHElRnxc/B1rcpsKUhLETY94+tHlbNHH9gT52tJHH3rBM7MK6 ZRJLkg/e5ZVeB3ou+OZOYnkCQB1iwlGwZ2Q8xgGcs+sO4soGaY9kDFfOtequ7qTr McKc0EqGqsl3a6ih3zTW7vJ+WPJeQp4elkbs2kmziIwuP4GwZBHwp9VB5oWtHwOX sDol6bwiyAUMgHjMWcbeZZLXySTC6CM66OYq4tAW2ayK8zarlwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGb3BuElBX1IxgDBHJw2WxQcyen9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NTk4 YTVlMS05ZWI5LTQwODctYjJjMS1kMjVhNThmOTAwYzYvZDFmYWNmM2EtMDI1Mi0z MDYyLWJkNDAtYjE3NTJiY2FhYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODU5OGE1ZTEtOWViOS00MDg3LWIy YzEtZDI1YTU4ZjkwMGM2Lzg1OThhNWUxLTllYjktNDA4Ny1iMmMxLWQyNWE1OGY5 MDBjNi5jcmwwHwYDVR0jBBgwFoAUylQfThcBLKrmOgWKbqIyVo6cFSowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NTk4YTVlMS05ZWI5LTQwODctYjJjMS1kMjVh NThmOTAwYzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALS3WAwQA iK+eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE2V3AqlS17avpabMvFGmUBfqOab1yucHaRXJhKiIK6gEPey sUZb5fYTjx5Sr7HvXkMUI9leXvhKWIecx1hSYbnWgLfMoCe4n2p8Pmxz+REq4qJZ fM9BxOqIEowiXgpcKkGeTNOMSTFAE9ZWEch+lhyO5IcArkPi/uYuKZlq0ZHSEykN KmnQK2wF1NVqa0pljeuL/jJ65wutbulvo81I0tIe6kMR3Kr6Z6EASscj2IoyK9DQ A7wNK/qFS954x4t+cla8T5wkNAOLECW31dlhjxsJd39fsLybduBHZW/vYa+ZYWMm k8BQSR/cdZsats4j07pQPEpMxHoF+bP4MjlHGHU= -----END CERTIFICATE-----Generated at Wed Oct 8 23:16:25 2025 by rpki-client