$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/f2b28ae8-59d5-3fcb-9ef9-d18344c43a3e.roa File: f2b28ae8-59d5-3fcb-9ef9-d18344c43a3e.roa (raw, json) Hash identifier: r+LsWehfZq2D4lTKn4+bLRa4s1gG4KutLPcgtG5hUgk= Subject key identifier: 0F:48:93:79:9D:64:CB:DC:AA:6A:D0:E3:3A:FC:41:BC:53:F2:4A:0E Certificate issuer: /CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2 Certificate serial: 010D0C9F4328584B2CF6EB22FE6DD50962133580 Authority key identifier: 09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/f2b28ae8-59d5-3fcb-9ef9-d18344c43a3e.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 399661 IP address blocks: 45.41.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:eb:22:fe:6d:d5:09:62:13:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=b4afe1e8-e3fb-4adf-93d5-96fb2de53330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:81:f7:27:f5:01:41:cd:a8:2d:da:75:5b:53: f9:b1:5b:1b:2a:02:92:05:5d:5a:d5:c2:d1:40:a1: 0d:84:80:00:48:2e:f9:fa:66:6d:de:16:b0:8e:6f: e8:13:7a:ae:15:e0:ce:1e:c5:23:2a:19:65:5b:fb: 5f:8e:ff:2c:eb:77:f1:01:d9:48:f9:8a:b1:63:9d: 54:b7:52:c7:9a:bf:bc:ed:c6:15:12:d1:88:cf:62: b1:08:8f:83:5f:26:ad:a7:8b:9d:7f:7d:a3:c3:43: d2:85:3f:99:85:ba:80:91:f1:3c:33:f2:46:de:2d: 6a:ac:eb:39:a9:46:c2:16:45:c1:a4:c4:c6:7f:b9: f1:ac:2c:2a:4b:a5:c6:bb:d4:44:69:1c:a2:a3:3a: 36:68:6c:e3:43:6f:c3:3a:b5:42:41:c3:d1:12:43: 57:12:83:71:db:25:6a:cc:54:ec:bd:76:7e:52:46: da:47:9f:11:6d:ca:76:dd:b8:60:8c:f1:c4:9b:61: c3:a2:9b:94:12:9d:d4:9a:03:0c:0b:8d:8f:16:37: d8:e2:b6:d3:cf:b6:de:d9:d2:b4:62:5b:b9:46:5a: 60:34:87:e7:bb:96:3f:28:ff:f6:7f:c1:84:ee:5a: 6c:04:44:b2:6e:5e:b0:38:0b:84:e0:ae:1f:6f:7a: 23:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:48:93:79:9D:64:CB:DC:AA:6A:D0:E3:3A:FC:41:BC:53:F2:4A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/f2b28ae8-59d5-3fcb-9ef9-d18344c43a3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl X509v3 Authority Key Identifier: keyid:09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer sbgp-ipAddrBlock: critical IPv4: 45.41.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ac:15:f1:49:20:a9:13:8c:64:fc:ab:73:4d:dc:f4:14:bb: 78:ce:0d:74:6f:26:a0:87:e3:e2:42:ae:2e:b4:ff:b1:be:4e: d0:70:ef:ae:01:7d:93:51:47:6c:f7:34:ba:c4:e4:59:b0:2e: 47:17:54:e1:24:86:99:e6:22:c4:95:b1:ee:f4:f6:5f:58:55: e5:46:fb:42:6b:5c:53:a6:71:8b:f0:38:8b:af:9b:65:9c:6a: 6c:b5:50:e4:84:b6:48:c4:43:dd:4e:3c:51:43:ea:af:5c:60: 66:d1:da:d7:8e:e5:e4:90:a0:89:00:3c:fa:61:ed:c9:2f:3b: b6:d0:1d:1f:0e:69:ee:69:f0:d4:0d:d0:2c:68:42:cc:9e:41: 88:18:9b:4a:3a:6f:7e:6b:6f:c6:11:6e:42:25:30:33:7b:b3: a2:9a:b1:2b:42:d6:bb:52:00:76:db:15:1c:c6:bf:3c:a7:8a: a3:4b:66:cf:27:90:da:1d:67:2e:4c:be:6e:ea:7d:71:5c:69: 33:12:d6:a8:d2:bd:dd:d9:98:eb:5e:31:41:25:5a:7c:e5:58: 73:04:9e:e8:42:bf:40:95:7c:d8:01:35:7b:34:c0:99:a8:16: 4a:63:4c:ff:c4:ff:f4:f0:49:62:e9:1c:a1:0e:a1:fb:2b:30: 8a:b8:ac:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9usi/m3VCWITNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRkMThkNTMtNTljOC00MjdmLTljMmYtMWY2MmVhYjk3 Y2IyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk YjRhZmUxZTgtZTNmYi00YWRmLTkzZDUtOTZmYjJkZTUzMzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoH3J/UBQc2oLdp1W1P5sVsbKgKSBV1a1cLR QKENhIAASC75+mZt3hawjm/oE3quFeDOHsUjKhllW/tfjv8s63fxAdlI+YqxY51U t1LHmr+87cYVEtGIz2KxCI+DXyatp4udf32jw0PShT+ZhbqAkfE8M/JG3i1qrOs5 qUbCFkXBpMTGf7nxrCwqS6XGu9REaRyiozo2aGzjQ2/DOrVCQcPREkNXEoNx2yVq zFTsvXZ+UkbaR58Rbcp23bhgjPHEm2HDopuUEp3UmgMMC42PFjfY4rbTz7be2dK0 Ylu5RlpgNIfnu5Y/KP/2f8GE7lpsBESybl6wOAuE4K4fb3ojQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9Ik3mdZMvcqmrQ4zr8QbxT8koOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZGQx OGQ1My01OWM4LTQyN2YtOWMyZi0xZjYyZWFiOTdjYjIvZjJiMjhhZTgtNTlkNS0z ZmNiLTllZjktZDE4MzQ0YzQzYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmRkMThkNTMtNTljOC00MjdmLTlj MmYtMWY2MmVhYjk3Y2IyLzJkZDE4ZDUzLTU5YzgtNDI3Zi05YzJmLTFmNjJlYWI5 N2NiMi5jcmwwHwYDVR0jBBgwFoAUCbrTA0tqLMF0QYmByxVbZWRC/80wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZGQxOGQ1My01OWM4LTQyN2YtOWMyZi0xZjYy ZWFiOTdjYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+sFfFJIKkTjGT8q3NN3PQUu3jODXRvJqCH4+JCri60/7G+TtBw764B fZNRR2z3NLrE5FmwLkcXVOEkhpnmIsSVse709l9YVeVG+0JrXFOmcYvwOIuvm2Wc amy1UOSEtkjEQ91OPFFD6q9cYGbR2teO5eSQoIkAPPph7ckvO7bQHR8Oae5p8NQN 0CxoQsyeQYgYm0o6b35rb8YRbkIlMDN7s6KasStC1rtSAHbbFRzGvzyniqNLZs8n kNodZy5Mvm7qfXFcaTMS1qjSvd3ZmOteMUElWnzlWHMEnuhCv0CVfNgBNXs0wJmo FkpjTP/E//TwSWLpHKEOofsrMIq4rMM= -----END CERTIFICATE-----Generated at Fri Oct 10 22:01:40 2025 by rpki-client