$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/403d2a0e-ce3d-3142-bfda-3420120bd555.roa File: 403d2a0e-ce3d-3142-bfda-3420120bd555.roa (raw, json) Hash identifier: eZDpJkNgIbvBsLyzoDcrMmc3LjgNKwKI9st5/dtOGfw= Subject key identifier: CB:37:9B:47:22:56:70:DB:18:C6:BB:19:40:63:AE:79:F5:7F:A7:C1 Certificate issuer: /CN=fe1d4594-94df-4fba-9cf4-2280ebebbbbd Certificate serial: 010D0C9F4328584B4D11F3BABD05AA30CE2FDF60 Authority key identifier: 43:2E:78:72:CE:A8:A6:2D:95:3B:7E:F9:AC:BF:89:F5:4C:D8:4D:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/403d2a0e-ce3d-3142-bfda-3420120bd555.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 399790 IP address blocks: 45.150.58.0/24 maxlen: 24 68.68.219.0/24 maxlen: 24 199.34.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/fe1d4594-94df-4fba-9cf4-2280ebebbbbd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/fe1d4594-94df-4fba-9cf4-2280ebebbbbd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:f3:ba:bd:05:aa:30:ce:2f:df:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe1d4594-94df-4fba-9cf4-2280ebebbbbd Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=42eaef5f-f2c0-490f-9217-580537ce4b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6a:85:45:d1:05:dd:a7:f4:64:a2:68:3f:80: f1:80:59:e7:a8:4b:00:ff:1f:79:95:31:fd:26:05: 4d:b5:99:b1:31:eb:6a:5c:c8:d8:cc:b1:32:66:8f: 24:d3:4d:1b:de:d3:27:21:e6:c7:15:8c:28:d6:2a: a8:5a:c9:35:36:2a:a9:08:ac:06:79:96:80:dc:97: be:26:57:85:10:7d:18:57:0e:1c:f7:0b:5a:1a:93: 4c:65:30:6f:df:91:d0:19:29:ba:f5:5c:68:ce:17: 8e:75:f3:d3:ac:c9:10:49:79:ad:5b:65:fa:4c:ad: 1f:27:db:d1:52:8e:b0:3c:ff:5f:fc:29:e0:ed:9b: ff:32:4d:4a:3a:3d:7f:41:a5:61:96:7b:49:bb:22: 8e:58:92:9c:e2:fb:28:0c:04:b5:ae:af:10:92:0c: 18:71:76:8f:dd:de:03:c8:d2:00:63:60:3c:27:97: 43:96:4e:11:cf:5e:97:e7:a0:1b:ef:1d:fd:6e:b9: 05:92:2e:59:15:ac:99:bf:ca:09:4b:49:60:e9:be: 78:44:2c:4d:33:78:7f:17:ab:c1:af:cd:9c:1a:99: 7d:37:5a:59:22:dd:ba:66:30:51:19:d4:69:1a:9a: 8c:70:2a:30:52:92:58:bb:d5:80:05:de:2c:40:e8: 25:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:37:9B:47:22:56:70:DB:18:C6:BB:19:40:63:AE:79:F5:7F:A7:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/403d2a0e-ce3d-3142-bfda-3420120bd555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/fe1d4594-94df-4fba-9cf4-2280ebebbbbd.crl X509v3 Authority Key Identifier: keyid:43:2E:78:72:CE:A8:A6:2D:95:3B:7E:F9:AC:BF:89:F5:4C:D8:4D:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd.cer sbgp-ipAddrBlock: critical IPv4: 45.150.58.0/24 68.68.219.0/24 199.34.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:fe:7b:5c:62:09:4f:78:9b:c9:7d:c4:f4:ae:ee:29:f2:a1: a1:6f:14:9c:8c:09:3b:20:d6:2c:b6:ed:39:74:9e:2a:a6:b0: 7b:d4:7f:5f:9f:72:81:5a:99:4e:17:76:4a:d4:fd:95:54:ea: b0:b0:f3:0b:b8:51:95:25:d2:16:d0:94:45:97:9d:60:86:55: 9f:c6:a5:cf:08:ba:8a:d9:88:eb:5a:e8:fb:9e:dd:9a:8f:1c: 57:0f:ab:fa:bb:64:4c:07:79:87:c6:21:71:53:c4:21:47:83: ab:f4:3f:15:f7:e9:a7:7b:d9:1a:d6:ea:51:91:8e:d3:1c:e1: 96:76:d2:57:df:e0:80:82:89:14:0c:25:72:10:a1:2b:67:7f: f5:f7:49:56:24:e2:7e:a5:7a:92:35:de:76:15:a1:20:26:cc: 70:4c:ec:41:4a:ae:d3:57:12:ff:08:53:90:00:a5:58:4d:d2: 46:c6:eb:35:dd:6d:4b:0c:d7:7b:82:ef:5f:58:0b:fb:0a:4f: 02:4c:d7:64:4f:4d:99:bf:1c:87:b1:8d:63:a4:da:53:d1:89: ac:2e:f8:9b:d3:81:f1:c9:92:5c:41:78:9a:ce:5c:f3:89:7f: fc:51:6c:82:b8:a3:0c:a6:47:65:a4:75:57:1a:4d:49:34:bb: 5b:55:73:84 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEtNEfO6vQWqMM4v32AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmUxZDQ1OTQtOTRkZi00ZmJhLTljZjQtMjI4MGViZWJi YmJkMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NDJlYWVmNWYtZjJjMC00OTBmLTkyMTctNTgwNTM3Y2U0YjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWqFRdEF3af0ZKJoP4DxgFnnqEsA/x95lTH9 JgVNtZmxMetqXMjYzLEyZo8k000b3tMnIebHFYwo1iqoWsk1NiqpCKwGeZaA3Je+ JleFEH0YVw4c9wtaGpNMZTBv35HQGSm69VxozheOdfPTrMkQSXmtW2X6TK0fJ9vR Uo6wPP9f/Cng7Zv/Mk1KOj1/QaVhlntJuyKOWJKc4vsoDAS1rq8QkgwYcXaP3d4D yNIAY2A8J5dDlk4Rz16X56Ab7x39brkFki5ZFayZv8oJS0lg6b54RCxNM3h/F6vB r82cGpl9N1pZIt26ZjBRGdRpGpqMcCowUpJYu9WABd4sQOglWwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMs3m0ciVnDbGMa7GUBjrnn1f6fBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mZTFk NDU5NC05NGRmLTRmYmEtOWNmNC0yMjgwZWJlYmJiYmQvNDAzZDJhMGUtY2UzZC0z MTQyLWJmZGEtMzQyMDEyMGJkNTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZmUxZDQ1OTQtOTRkZi00ZmJhLTlj ZjQtMjI4MGViZWJiYmJkL2ZlMWQ0NTk0LTk0ZGYtNGZiYS05Y2Y0LTIyODBlYmVi YmJiZC5jcmwwHwYDVR0jBBgwFoAUQy54cs6opi2VO375rL+J9UzYTbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mZTFkNDU5NC05NGRmLTRmYmEtOWNmNC0yMjgw ZWJlYmJiYmQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZY6AwQA RETbAwQAxyJgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFX+e1xiCU94m8l9xPSu7inyoaFvFJyMCTsg1iy2 7Tl0niqmsHvUf1+fcoFamU4XdkrU/ZVU6rCw8wu4UZUl0hbQlEWXnWCGVZ/Gpc8I uorZiOta6Pue3ZqPHFcPq/q7ZEwHeYfGIXFTxCFHg6v0PxX36ad72RrW6lGRjtMc 4ZZ20lff4ICCiRQMJXIQoStnf/X3SVYk4n6lepI13nYVoSAmzHBM7EFKrtNXEv8I U5AApVhN0kbG6zXdbUsM13uC719YC/sKTwJM12RPTZm/HIexjWOk2lPRiawu+JvT gfHJklxBeJrOXPOJf/xRbIK4owymR2WkdVcaTUk0u1tVc4Q= -----END CERTIFICATE-----Generated at Wed Oct 8 19:36:46 2025 by rpki-client