$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa File: 9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa (raw, json) Hash identifier: KRmlZD4JcoZ7lgiUsjn6gEEffJ6L0QcsIybYAzHIC74= Subject key identifier: 95:A0:77:54:E7:98:EC:9A:D2:FB:40:38:61:8A:48:00:89:58:BD:1B Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658 Certificate serial: 010D0C9F4328584B110C0141F3804ADBC90F9580 Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 45.43.7.0/24 maxlen: 24 45.43.8.0/24 maxlen: 24 66.11.125.0/24 maxlen: 24 104.192.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:01:41:f3:80:4a:db:c9:0f:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=dc896237-22b5-4007-b997-388f4cbaf703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:89:fc:1a:dc:cf:6c:f6:c1:f3:2b:f0:f2:e0: 57:4f:6e:11:6f:63:43:ef:c7:85:f6:03:2c:c7:30: 2c:1e:17:b4:59:0c:f6:b3:a6:dc:7b:ce:a5:04:da: 01:b6:57:b1:97:03:9e:66:4c:51:5d:01:a3:b7:2a: 56:f5:5c:44:40:d5:77:e1:4d:30:4c:c6:e3:f7:3c: 26:b4:a4:71:b2:a3:fc:a0:27:e8:c2:fa:42:0f:c2: 37:01:c2:6f:fd:82:89:7c:10:93:36:dd:ca:79:c0: bc:a7:2a:50:2c:08:bd:d0:3e:70:dc:55:37:97:6a: d6:20:64:ff:65:e2:ce:dd:c8:cb:98:d3:ea:d9:f0: d8:01:c0:51:5e:7a:13:ba:8d:ae:74:da:86:d7:d0: f7:85:b1:10:0c:7f:c7:37:c7:f2:72:36:2f:89:ab: 68:0e:33:ac:00:4d:4f:97:99:83:75:6c:62:15:d2: f1:31:48:21:3b:15:46:40:b7:50:19:1c:ff:e7:22: dc:d2:e3:e3:b8:ef:cf:e6:0e:af:75:40:d6:6d:ae: f5:c6:e9:41:77:dd:dc:0a:66:70:e9:a5:79:a2:f7: 2e:0b:34:44:ff:0e:57:a2:a4:6f:f7:e9:ce:f1:d7: 18:5f:42:83:53:54:aa:44:b0:a5:62:51:fd:36:33: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A0:77:54:E7:98:EC:9A:D2:FB:40:38:61:8A:48:00:89:58:BD:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl X509v3 Authority Key Identifier: keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer sbgp-ipAddrBlock: critical IPv4: 45.43.7.0-45.43.8.255 66.11.125.0/24 104.192.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:cb:73:ab:13:bb:33:8a:01:ae:11:40:53:bc:f6:95:8d:c6: c9:b6:cc:75:ee:f6:53:96:b6:67:60:0f:ba:fb:99:76:89:15: 40:93:5a:3c:9d:b0:a2:d9:34:15:80:62:63:38:89:10:63:e0: de:67:50:d5:79:c6:f8:c7:fa:70:92:84:f4:10:b9:9f:0d:bf: eb:ec:1b:27:4b:a4:b9:24:ba:e7:b3:3e:55:8d:71:b3:c4:39: 51:7f:87:b8:07:f9:ba:a5:58:46:1e:f1:68:44:97:b3:0a:64: c3:36:e8:e1:c6:96:5a:75:39:b1:1f:c6:6e:62:2c:41:48:88: 24:78:19:fe:d2:ee:27:fe:c7:03:c9:0a:70:1a:3e:15:1b:21: 25:23:6e:33:8a:7b:49:22:ab:59:55:03:bc:b8:0c:4d:be:1f: 2d:08:1f:c6:77:4c:bd:b8:c1:02:71:98:b4:0e:3f:d4:09:6f: 7d:3c:d2:fb:20:9e:4c:15:da:69:c5:7a:9d:a1:2c:e0:c3:d1: 95:1f:5b:15:b6:74:14:76:be:92:f6:96:28:8c:99:84:4a:3f: 0f:3c:f6:7f:25:b2:2e:cb:f3:98:77:78:90:99:36:94:2b:bf: 22:27:db:ff:4f:bd:e2:23:15:73:ca:56:14:b9:9f:a0:a2:0a: 17:c7:6c:c7 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEsRDAFB84BK28kPlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0 NjU4MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGM4OTYyMzctMjJiNS00MDA3LWI5OTctMzg4ZjRjYmFmNzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYn8GtzPbPbB8yvw8uBXT24Rb2ND78eF9gMs xzAsHhe0WQz2s6bce86lBNoBtlexlwOeZkxRXQGjtypW9VxEQNV34U0wTMbj9zwm tKRxsqP8oCfowvpCD8I3AcJv/YKJfBCTNt3KecC8pypQLAi90D5w3FU3l2rWIGT/ ZeLO3cjLmNPq2fDYAcBRXnoTuo2udNqG19D3hbEQDH/HN8fycjYviatoDjOsAE1P l5mDdWxiFdLxMUghOxVGQLdQGRz/5yLc0uPjuO/P5g6vdUDWba71xulBd93cCmZw 6aV5ovcuCzRE/w5XoqRv9+nO8dcYX0KDU1SqRLClYlH9NjO+HQIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFJWgd1TnmOya0vtAOGGKSACJWL0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvOWEyMDQ1YTItZDFjYy0z NmVhLWFkNzctY2VjYzQxOWIzMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz NzY1MzQ2NTguY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtKwcD BAAtKwgDBABCC30DBABowGcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFctzqxO7M4oBrhFAU7z2lY3GybbM de72U5a2Z2APuvuZdokVQJNaPJ2wotk0FYBiYziJEGPg3mdQ1XnG+Mf6cJKE9BC5 nw2/6+wbJ0ukuSS657M+VY1xs8Q5UX+HuAf5uqVYRh7xaESXswpkwzbo4caWWnU5 sR/GbmIsQUiIJHgZ/tLuJ/7HA8kKcBo+FRshJSNuM4p7SSKrWVUDvLgMTb4fLQgf xndMvbjBAnGYtA4/1AlvfTzS+yCeTBXaacV6naEs4MPRlR9bFbZ0FHa+kvaWKIyZ hEo/Dzz2fyWyLsvzmHd4kJk2lCu/Iifb/0+94iMVc8pWFLmfoKIKF8dsxw== -----END CERTIFICATE-----Generated at Sat Oct 11 03:14:28 2025 by rpki-client