$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa File: d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa (raw, json) Hash identifier: Bz6VFJogOLiUPQgBZzqbigpYMyrB8KaNd2uld6OTiXI= Subject key identifier: F1:73:74:6E:F0:33:6D:11:6A:81:39:5B:4F:51:97:9D:BB:38:2C:0A Certificate issuer: /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Certificate serial: 010D0C9F4328584B2066D533A835D867414DFD40 Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 400967 IP address blocks: 45.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:d5:33:a8:35:d8:67:41:4d:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=888745f5-acee-4c36-ad79-f88074b47db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8c:97:d4:5b:b2:86:8c:82:ba:67:ce:71:19: bd:3e:8a:4e:8d:5c:ea:d3:98:7f:21:c3:e0:33:21: cf:f0:d9:5e:e4:39:29:61:76:9f:78:3d:6f:8a:85: 11:a7:1b:be:e7:e4:fc:f4:13:3f:3e:74:57:03:67: f1:08:d7:3d:31:1c:83:fe:12:19:20:97:95:a5:34: d4:73:b4:e5:19:2b:8e:4e:75:9e:ee:74:ca:61:2e: 57:f1:85:bd:45:df:e6:9e:74:9e:87:79:23:72:d2: 64:69:0c:69:1a:77:02:b4:c1:ae:32:be:58:1b:04: 1b:92:e4:ff:de:98:54:f4:d2:9d:4f:01:ca:9e:e8: 5b:21:90:25:e7:95:69:16:63:e6:f9:ce:81:b7:0d: 26:45:72:71:e6:df:76:75:29:91:5e:f2:5d:8c:fa: b6:a6:fa:05:fa:03:f0:f2:1f:46:1c:78:53:0a:f3: ca:a8:60:1d:2f:89:7c:17:97:a4:7c:af:c2:f1:5d: f1:57:07:31:92:08:5c:69:55:e2:4b:b1:c6:81:3f: f8:1a:d4:34:18:dc:14:68:94:fa:2e:75:5d:4b:d8: bd:a9:8d:29:ce:df:8a:bf:70:e8:9e:7b:fc:67:6c: fd:7a:3f:69:31:df:5d:ea:4c:c0:20:16:0b:fd:5b: ce:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:73:74:6E:F0:33:6D:11:6A:81:39:5B:4F:51:97:9D:BB:38:2C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl X509v3 Authority Key Identifier: keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer sbgp-ipAddrBlock: critical IPv4: 45.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:fe:51:64:b7:df:04:e6:cd:8d:9e:8e:98:aa:f5:42:21:68: 30:ea:39:74:4b:69:a4:1e:c0:7f:59:e7:8c:7a:a4:a6:35:f9: a2:92:11:79:80:4e:52:c5:9e:ff:1a:71:e6:91:ae:9b:2a:ca: c8:a1:ac:6d:41:12:99:98:f9:ff:b2:06:39:77:fb:82:d1:6d: b6:44:33:81:b4:84:ff:a7:b7:49:88:6f:1b:78:95:9d:ee:ae: 8b:41:76:c7:69:98:e7:a2:c2:ad:63:ab:5e:f9:dc:30:31:98: ed:82:16:aa:b0:00:7c:c6:b2:20:ca:fe:19:df:e2:81:ba:9b: 35:4e:30:0a:95:d5:12:e2:76:b6:fa:0a:be:00:5d:49:0c:5a: 48:44:0c:b7:0b:ed:e1:1c:a2:37:58:a0:cb:45:db:99:4b:8d: 76:41:f1:1e:14:3a:bb:4b:b0:cc:98:b9:9c:36:2d:5d:59:a8: a8:fc:ad:72:63:ea:e5:93:ac:88:4f:b6:ac:a5:74:d1:6a:1e: 62:90:8d:88:e1:00:ae:99:59:9c:08:aa:5e:7a:d0:8b:c9:1c: 41:1f:aa:b7:c6:2d:d8:1b:44:df:b1:37:1c:33:ef:ba:31:09: 7b:de:d1:28:eb:0b:76:1b:61:df:a8:e6:a8:e7:5b:42:9b:f1: 23:5d:67:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZtUzqDXYZ0FN/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU4ZWQ5NTAtNDQ4OC00OWIxLThkMzktYmI4YzcxYTc2 N2QyMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ODg4NzQ1ZjUtYWNlZS00YzM2LWFkNzktZjg4MDc0YjQ3ZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYyX1FuyhoyCumfOcRm9PopOjVzq05h/IcPg MyHP8Nle5DkpYXafeD1vioURpxu+5+T89BM/PnRXA2fxCNc9MRyD/hIZIJeVpTTU c7TlGSuOTnWe7nTKYS5X8YW9Rd/mnnSeh3kjctJkaQxpGncCtMGuMr5YGwQbkuT/ 3phU9NKdTwHKnuhbIZAl55VpFmPm+c6Btw0mRXJx5t92dSmRXvJdjPq2pvoF+gPw 8h9GHHhTCvPKqGAdL4l8F5ekfK/C8V3xVwcxkghcaVXiS7HGgT/4GtQ0GNwUaJT6 LnVdS9i9qY0pzt+Kv3Donnv8Z2z9ej9pMd9d6kzAIBYL/VvOZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFzdG7wM20RaoE5W09Rl527OCwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThl ZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhjNzFhNzY3ZDIvZDNmZWZmMjQtOWNiMy0z YzdkLTgwYzAtZjRjNzZmZTMwMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWU4ZWQ5NTAtNDQ4OC00OWIxLThk MzktYmI4YzcxYTc2N2QyLzllOGVkOTUwLTQ0ODgtNDliMS04ZDM5LWJiOGM3MWE3 NjdkMi5jcmwwHwYDVR0jBBgwFoAUJhbbhZB9FA+mCJFa84xIt9zz1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThlZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhj NzFhNzY3ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJL+UWS33wTmzY2ejpiq9UIhaDDqOXRLaaQewH9Z54x6pKY1+aKSEXmA TlLFnv8aceaRrpsqysihrG1BEpmY+f+yBjl3+4LRbbZEM4G0hP+nt0mIbxt4lZ3u rotBdsdpmOeiwq1jq1753DAxmO2CFqqwAHzGsiDK/hnf4oG6mzVOMAqV1RLidrb6 Cr4AXUkMWkhEDLcL7eEcojdYoMtF25lLjXZB8R4UOrtLsMyYuZw2LV1ZqKj8rXJj 6uWTrIhPtqyldNFqHmKQjYjhAK6ZWZwIql560IvJHEEfqrfGLdgbRN+xNxwz77ox CXve0SjrC3YbYd+o5qjnW0Kb8SNdZxk= -----END CERTIFICATE-----Generated at Wed Oct 8 23:34:44 2025 by rpki-client