$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/7fdcbf13-2c45-320d-abcf-6414fdb919b0.roa File: 7fdcbf13-2c45-320d-abcf-6414fdb919b0.roa (raw, json) Hash identifier: bV+VZLLsc2350Glqc8if3MnS1RLACKJyka0y4xcvEi8= Subject key identifier: B6:2C:2D:7C:F0:99:34:CE:0C:2D:BC:A0:85:60:B6:3E:81:EF:06:E7 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584B1AD187F4B3E36E2F4E6C6540 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/7fdcbf13-2c45-320d-abcf-6414fdb919b0.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 40788 IP address blocks: 45.3.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:87:f4:b3:e3:6e:2f:4e:6c:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=404d2df5-91e1-4f8b-ad02-d828f71208ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:73:70:37:2a:8f:bb:1f:83:bd:9c:2e:96:58: 37:31:6f:b1:33:ff:ea:f7:c5:9f:a5:1b:8f:5b:2f: 83:81:82:5b:0a:d4:32:10:e5:91:13:50:3b:d7:e8: 20:d9:1d:c1:90:cf:61:f7:0f:e0:ec:c3:4b:81:0f: 5a:f1:28:fe:b9:78:3c:2a:30:88:e4:dc:02:b0:e4: e3:0f:28:12:5b:40:f7:8a:82:83:4f:f5:00:94:2a: 98:95:05:cb:97:c8:dd:17:06:c6:2e:eb:aa:28:38: 82:65:3c:9b:0d:39:8e:12:83:6c:25:6a:98:89:e2: eb:2e:c0:d6:3f:aa:9f:cd:f1:3e:25:a2:63:57:fa: b0:30:c0:c1:2b:87:dc:44:86:69:30:f3:1d:a1:42: 03:13:39:2b:f3:68:db:9a:a2:de:90:28:65:be:d8: 30:e6:f2:97:cb:b0:9c:a6:89:a2:db:e6:5d:29:04: 68:f7:55:f0:ee:3b:22:82:56:ad:88:6e:90:48:02: 82:ae:be:8c:cc:78:23:71:ad:99:38:60:b3:12:38: 37:4d:1a:f2:95:4c:c1:e6:84:aa:67:b7:f2:48:7a: e6:db:a7:42:9f:5c:7f:d6:d9:40:9a:7c:12:35:1f: 4d:40:56:bd:87:86:50:53:30:78:52:ab:74:7a:5d: d8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2C:2D:7C:F0:99:34:CE:0C:2D:BC:A0:85:60:B6:3E:81:EF:06:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/7fdcbf13-2c45-320d-abcf-6414fdb919b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 45.3.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:15:67:32:66:73:f9:37:d3:ed:b5:38:8f:a6:44:ab:3f:12: 18:f0:29:a1:78:c4:79:81:36:9c:2f:6d:00:c8:9e:47:01:37: 7a:88:f8:62:26:48:4e:44:cd:b8:19:85:e3:89:d0:b1:e9:5b: ae:17:aa:4d:9b:c5:4b:dd:6b:b3:2f:b8:8a:bf:26:a7:fd:da: 31:a9:8a:a8:f4:09:b0:f5:52:9c:74:d3:a8:ca:b1:a2:a4:61: df:c4:de:53:e8:4c:f9:d1:ab:db:ff:4e:12:5a:6a:03:e3:64: 71:2c:c2:9c:55:c5:07:17:3e:d6:d2:2c:42:c9:82:84:05:c6: 49:c3:e1:f2:a3:37:ff:39:b0:e6:a9:9a:cf:22:db:4e:cd:fc: cc:9b:cc:11:c9:6c:e9:de:6b:4c:25:e8:f2:a1:c4:a0:48:10: f3:73:fb:50:e1:12:a6:9d:e9:c4:a8:00:ee:c9:c9:f2:1f:99: 59:82:cf:0f:f1:dd:c6:55:0f:25:74:a6:f3:be:0b:88:49:f8: 1b:df:66:1b:dc:cd:26:86:50:fa:98:98:0a:ba:2e:6d:ca:90: 72:b7:35:4e:b2:12:42:12:7c:64:17:1d:18:c3:12:ff:74:84: cc:b4:c7:80:15:d0:29:93:7d:6f:56:3a:f8:46:0e:99:9c:5f: ec:57:de:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Yf0s+NuL05sZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NDA0ZDJkZjUtOTFlMS00ZjhiLWFkMDItZDgyOGY3MTIwOGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXNwNyqPux+DvZwullg3MW+xM//q98WfpRuP Wy+DgYJbCtQyEOWRE1A71+gg2R3BkM9h9w/g7MNLgQ9a8Sj+uXg8KjCI5NwCsOTj DygSW0D3ioKDT/UAlCqYlQXLl8jdFwbGLuuqKDiCZTybDTmOEoNsJWqYieLrLsDW P6qfzfE+JaJjV/qwMMDBK4fcRIZpMPMdoUIDEzkr82jbmqLekChlvtgw5vKXy7Cc pomi2+ZdKQRo91Xw7jsiglatiG6QSAKCrr6MzHgjca2ZOGCzEjg3TRrylUzB5oSq Z7fySHrm26dCn1x/1tlAmnwSNR9NQFa9h4ZQUzB4Uqt0el3YWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYsLXzwmTTODC28oIVgtj6B7wbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvN2ZkY2JmMTMtMmM0NS0z MjBkLWFiY2YtNjQxNGZkYjkxOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLQMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoVZzJmc/k30+21OI+mRKs/EhjwKaF4xHmBNpwvbQDInkcBN3qI+GIm SE5EzbgZheOJ0LHpW64Xqk2bxUvda7MvuIq/Jqf92jGpiqj0CbD1Upx006jKsaKk Yd/E3lPoTPnRq9v/ThJaagPjZHEswpxVxQcXPtbSLELJgoQFxknD4fKjN/85sOap ms8i207N/MybzBHJbOnea0wl6PKhxKBIEPNz+1DhEqad6cSoAO7JyfIfmVmCzw/x 3cZVDyV0pvO+C4hJ+BvfZhvczSaGUPqYmAq6Lm3KkHK3NU6yEkISfGQXHRjDEv90 hMy0x4AV0CmTfW9WOvhGDpmcX+xX3hQ= -----END CERTIFICATE-----Generated at Fri Oct 10 17:33:22 2025 by rpki-client