$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/43cb54d4-5005-3f5a-9016-88744b8f4490.roa File: 43cb54d4-5005-3f5a-9016-88744b8f4490.roa (raw, json) Hash identifier: WiADtsSEK4+/aBeh3Aim8Q9N2qZfDQt8NHz1+0GdGJE= Subject key identifier: 66:57:7C:55:29:3E:51:04:84:60:F7:D2:33:4E:05:D7:8A:27:FC:3D Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Certificate serial: 010D0C9F4328584B1C36C37CF1C889D465A61480 Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/43cb54d4-5005-3f5a-9016-88744b8f4490.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 45.223.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c3:7c:f1:c8:89:d4:65:a6:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=3a05bcda-1f46-4e17-9323-0e27136af9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1d:9c:75:9b:d6:7e:68:69:d0:7d:7b:fe:ce: ad:ce:b2:c5:78:6a:fb:29:1e:95:1b:fd:8a:3e:dd: 3a:87:d9:b8:61:60:e8:7b:09:e6:6d:92:1f:f8:0a: d0:28:0f:73:81:be:21:c1:f8:02:53:b8:f1:7b:b2: 24:ea:d1:8b:2f:61:ae:2e:39:9d:99:9f:5d:51:0b: 72:31:69:86:7c:bc:0b:04:31:bc:59:e4:13:09:82: 73:30:3c:7d:37:51:d7:05:4b:f1:b6:3b:e1:a3:fe: c6:7a:22:5d:e1:2c:4a:61:72:4c:b9:06:c5:f4:10: d6:68:f4:dc:f9:a2:11:d2:63:41:26:84:ba:58:2d: d7:9e:ef:47:0d:50:e8:ef:3a:33:9b:16:f7:6f:f8: 0f:46:af:22:92:e5:71:92:a5:11:e8:dc:fe:c5:ad: 8f:0b:5f:d0:11:f1:a0:36:7c:e1:a6:49:0a:b9:de: a2:ca:56:e6:c5:89:89:ae:4d:68:74:95:71:4e:88: e9:b5:ff:32:66:26:b8:de:c4:67:ee:6f:b5:96:c5: 00:0a:23:82:8a:ba:bb:86:37:f0:aa:31:5c:9c:d2: 37:b7:8f:65:74:2a:e9:63:8f:29:ab:3a:16:e8:a3: b9:d1:c0:cb:a1:cd:37:8b:17:12:8f:59:ed:e5:7a: fd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:57:7C:55:29:3E:51:04:84:60:F7:D2:33:4E:05:D7:8A:27:FC:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/43cb54d4-5005-3f5a-9016-88744b8f4490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl X509v3 Authority Key Identifier: keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer sbgp-ipAddrBlock: critical IPv4: 45.223.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:93:81:62:03:84:fd:09:e8:16:09:04:7f:09:9f:0b:ea:d8: 5c:27:74:a5:88:2c:db:b4:87:78:80:05:6c:29:5e:c8:f1:18: 2b:d2:71:c1:a6:de:fc:46:c5:48:51:f9:39:81:2c:6d:a2:8f: db:f5:02:25:42:42:6e:c0:3e:7e:7f:0e:2c:83:c7:7a:1e:d7: a9:a9:bb:c5:b5:b2:60:d1:23:dc:6f:05:b7:0d:21:cc:fd:1c: 19:6f:99:dd:e9:cc:d9:8f:17:41:0f:b2:35:ae:5d:e8:31:51: c9:67:08:34:2c:fc:9b:62:f3:43:51:3b:64:3d:ed:1e:1e:f5: 08:80:54:36:12:cb:55:80:a3:36:b0:24:3a:4d:64:7e:90:de: 4f:76:2b:31:fa:a1:c0:41:fb:e6:ba:50:b8:c1:57:3b:ed:97: 97:8c:56:ed:3a:9c:91:70:02:7d:0b:57:33:f7:eb:4a:d9:34: 00:e7:ac:17:f4:26:d6:0f:d7:da:2c:08:54:32:da:2a:ed:26: 88:af:b1:79:29:8b:09:14:b7:ba:91:a6:0d:78:2d:31:a7:a8: 1e:59:bb:a0:29:e4:a5:12:64:a9:cf:c5:05:ce:cc:87:10:72: d0:b2:df:10:7b:96:d2:c9:11:3f:c2:a1:93:53:da:eb:d0:ae: 94:4a:8f:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsN88ciJ1GWmFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj Yzc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk M2EwNWJjZGEtMWY0Ni00ZTE3LTkzMjMtMGUyNzEzNmFmOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox2cdZvWfmhp0H17/s6tzrLFeGr7KR6VG/2K Pt06h9m4YWDoewnmbZIf+ArQKA9zgb4hwfgCU7jxe7Ik6tGLL2GuLjmdmZ9dUQty MWmGfLwLBDG8WeQTCYJzMDx9N1HXBUvxtjvho/7GeiJd4SxKYXJMuQbF9BDWaPTc +aIR0mNBJoS6WC3Xnu9HDVDo7zozmxb3b/gPRq8ikuVxkqUR6Nz+xa2PC1/QEfGg NnzhpkkKud6iylbmxYmJrk1odJVxTojptf8yZia43sRn7m+1lsUACiOCirq7hjfw qjFcnNI3t49ldCrpY48pqzoW6KO50cDLoc03ixcSj1nt5Xr9wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZXfFUpPlEEhGD30jNOBdeKJ/w9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvNDNjYjU0ZDQtNTAwNS0z ZjVhLTkwMTYtODg3NDRiOGY0NDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0 ZDZiY2NjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALd8NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeTgWIDhP0J6BYJBH8Jnwvq2FwndKWILNu0h3iABWwpXsjxGCvSccGm 3vxGxUhR+TmBLG2ij9v1AiVCQm7APn5/DiyDx3oe16mpu8W1smDRI9xvBbcNIcz9 HBlvmd3pzNmPF0EPsjWuXegxUclnCDQs/Jti80NRO2Q97R4e9QiAVDYSy1WAozaw JDpNZH6Q3k92KzH6ocBB++a6ULjBVzvtl5eMVu06nJFwAn0LVzP360rZNADnrBf0 JtYP19osCFQy2irtJoivsXkpiwkUt7qRpg14LTGnqB5Zu6Ap5KUSZKnPxQXOzIcQ ctCy3xB7ltLJET/CoZNT2uvQrpRKj7A= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:27 2025 by rpki-client