$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/e7b08dbf-e8ba-3183-8ae5-6651fddc39c7.roa File: e7b08dbf-e8ba-3183-8ae5-6651fddc39c7.roa (raw, json) Hash identifier: Qizx6kZ3FojwQawBbOKCVffHEphB1dRx3PmHcrdxjSw= Subject key identifier: 49:86:C5:23:B6:A8:1B:DC:78:D2:83:92:4F:D7:41:66:C5:EE:5D:2A Certificate issuer: /CN=2a7813c7-65af-4c6b-affc-323cd6e8e909 Certificate serial: 010D0C9F4328584BB2F7D06E6F7EBE7D4DED8360 Authority key identifier: 50:CB:EC:29:C1:E1:EE:E4:2C:53:5D:8A:99:90:53:8E:5B:0A:A9:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/e7b08dbf-e8ba-3183-8ae5-6651fddc39c7.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 33154 IP address blocks: 45.41.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d0:6e:6f:7e:be:7d:4d:ed:83:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a7813c7-65af-4c6b-affc-323cd6e8e909 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=1a60cfe5-88d9-48ae-a5b1-60efcd899f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:38:5e:e5:f9:e1:3c:c4:56:f0:0d:36:8a:fa: 02:ef:05:ec:c2:70:cf:89:83:be:6a:29:45:af:35: f2:d0:7b:cc:08:6a:7e:7e:de:e5:34:96:be:0b:88: 4a:da:32:1d:e8:f2:e9:1f:30:ec:f7:bd:f3:76:81: cf:b6:d1:d4:38:a1:6a:46:86:49:78:3b:34:35:11: ec:02:84:30:a3:ec:37:6b:ac:bb:2f:17:ea:dd:81: 85:a6:77:cd:52:27:14:58:94:8e:60:6d:11:0d:8c: 9d:fd:59:7f:92:1e:f0:87:83:c9:d6:7b:69:46:fc: 2d:cf:36:3c:94:31:be:28:e2:58:76:6d:45:55:1c: 11:77:81:4a:25:78:7a:1d:9d:58:62:8f:04:7f:07: 71:9e:b1:17:42:f6:0f:17:76:45:40:bf:ef:65:d8: 03:19:f2:bc:15:8e:6d:a9:01:4c:ce:5f:9a:85:5a: 3f:80:14:d0:91:17:c2:69:cf:3a:71:9f:b1:00:5c: bb:a4:12:6a:11:f8:3d:62:a9:41:8c:16:3c:e9:90: 8a:2f:67:d1:88:45:23:3c:08:99:f8:a4:49:a2:4c: 1f:d1:2a:82:c7:65:87:a7:76:d3:57:6b:b7:c5:59: 74:85:a0:3e:80:fe:13:08:2e:bd:2e:a1:51:6e:67: dc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:86:C5:23:B6:A8:1B:DC:78:D2:83:92:4F:D7:41:66:C5:EE:5D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/e7b08dbf-e8ba-3183-8ae5-6651fddc39c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.crl X509v3 Authority Key Identifier: keyid:50:CB:EC:29:C1:E1:EE:E4:2C:53:5D:8A:99:90:53:8E:5B:0A:A9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909.cer sbgp-ipAddrBlock: critical IPv4: 45.41.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:2e:bd:0a:8d:2d:87:6e:82:27:9f:b5:35:c4:ad:cd:4e:8a: 24:50:63:73:4d:a1:80:79:88:40:04:9f:cd:84:ba:a4:7e:7c: 27:0b:1e:4e:a7:85:73:79:95:5e:64:85:78:20:03:1e:6c:23: 00:06:ae:e4:c3:87:af:ad:0e:a7:16:54:06:54:e2:97:c7:a2: 94:90:8c:98:d3:5d:9a:df:c2:a4:6b:ad:d9:4e:95:8f:49:71: 99:be:fb:60:62:b3:b2:87:64:f4:08:13:d4:d7:59:86:e6:52: 89:3a:34:69:df:f2:d2:d7:f6:78:7a:f0:94:ed:40:97:d2:5f: 66:31:ff:ae:86:98:0d:c0:02:84:01:d1:53:5b:b4:25:8e:4a: ac:7a:63:fe:72:ad:bf:c8:4f:38:58:d7:3d:8d:10:1b:b5:91: ab:29:22:d1:cb:c0:cd:b8:99:86:28:39:3d:29:18:bb:61:23: 0c:cd:3c:5a:3a:50:f0:5e:7e:fe:1b:e2:eb:f9:a2:d0:a0:f6: 28:3c:88:80:5e:75:43:14:a9:29:f3:a1:bb:45:de:19:8b:8d: 48:c4:5c:45:cd:d7:a4:5c:e8:cc:21:7e:37:c7:4f:27:85:3f: 9d:01:58:94:d1:97:83:74:e2:b1:3e:e1:79:e9:e9:37:83:e5: ec:6e:33:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99Bub36+fU3tg2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE3ODEzYzctNjVhZi00YzZiLWFmZmMtMzIzY2Q2ZThl OTA5MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MWE2MGNmZTUtODhkOS00OGFlLWE1YjEtNjBlZmNkODk5Zjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjhe5fnhPMRW8A02ivoC7wXswnDPiYO+ailF rzXy0HvMCGp+ft7lNJa+C4hK2jId6PLpHzDs973zdoHPttHUOKFqRoZJeDs0NRHs AoQwo+w3a6y7Lxfq3YGFpnfNUicUWJSOYG0RDYyd/Vl/kh7wh4PJ1ntpRvwtzzY8 lDG+KOJYdm1FVRwRd4FKJXh6HZ1YYo8EfwdxnrEXQvYPF3ZFQL/vZdgDGfK8FY5t qQFMzl+ahVo/gBTQkRfCac86cZ+xAFy7pBJqEfg9YqlBjBY86ZCKL2fRiEUjPAiZ +KRJokwf0SqCx2WHp3bTV2u3xVl0haA+gP4TCC69LqFRbmfczwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmGxSO2qBvceNKDkk/XQWbF7l0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYTc4 MTNjNy02NWFmLTRjNmItYWZmYy0zMjNjZDZlOGU5MDkvZTdiMDhkYmYtZThiYS0z MTgzLThhZTUtNjY1MWZkZGMzOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmE3ODEzYzctNjVhZi00YzZiLWFm ZmMtMzIzY2Q2ZThlOTA5LzJhNzgxM2M3LTY1YWYtNGM2Yi1hZmZjLTMyM2NkNmU4 ZTkwOS5jcmwwHwYDVR0jBBgwFoAUUMvsKcHh7uQsU12KmZBTjlsKqX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYTc4MTNjNy02NWFmLTRjNmItYWZmYy0zMjNj ZDZlOGU5MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSnLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQuvQqNLYdugieftTXErc1OiiRQY3NNoYB5iEAEn82EuqR+fCcLHk6n hXN5lV5khXggAx5sIwAGruTDh6+tDqcWVAZU4pfHopSQjJjTXZrfwqRrrdlOlY9J cZm++2Bis7KHZPQIE9TXWYbmUok6NGnf8tLX9nh68JTtQJfSX2Yx/66GmA3AAoQB 0VNbtCWOSqx6Y/5yrb/ITzhY1z2NEBu1kaspItHLwM24mYYoOT0pGLthIwzNPFo6 UPBefv4b4uv5otCg9ig8iIBedUMUqSnzobtF3hmLjUjEXEXN16Rc6MwhfjfHTyeF P50BWJTRl4N04rE+4Xnp6TeD5exuM1U= -----END CERTIFICATE-----Generated at Sat Nov 1 06:34:30 2025 by rpki-client