$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/0c4ff13f-3242-3568-97dc-9a027e3d5659.roa File: 0c4ff13f-3242-3568-97dc-9a027e3d5659.roa (raw, json) Hash identifier: lKQGqbiToMSWUss85LfY77RpJ/hWM7c+gVe5gCrYJsw= Subject key identifier: C0:CC:29:74:60:79:AA:29:5C:C7:20:C3:DA:88:70:75:C9:7B:73:C5 Certificate issuer: /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Certificate serial: 010D0C9F4328584B477C9D3D8285B53429A06C00 Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/0c4ff13f-3242-3568-97dc-9a027e3d5659.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 395201 IP address blocks: 45.139.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:9d:3d:82:85:b5:34:29:a0:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=d73074eb-6291-47a5-a501-8aab470295b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:9f:16:f4:93:98:c7:cc:b4:2a:88:fb:47: 0b:68:7d:f3:55:34:8d:02:f8:1f:2e:e8:ec:ee:39: 72:1b:9d:21:0e:72:16:e0:06:7f:f1:6c:e7:47:03: 18:2c:fb:be:f9:2d:ff:30:bd:fd:43:94:50:c3:54: 0d:a4:2b:e4:2f:e1:90:19:78:75:8c:a4:fe:de:56: 73:6a:19:c9:a6:7c:78:e9:91:99:24:67:4a:aa:ae: ed:0b:f4:ef:a6:3f:fb:b2:04:ac:9a:a3:24:39:cc: d6:24:99:cb:50:7e:cb:4e:06:70:4e:fb:3c:36:41: e1:0c:7a:c2:31:99:6b:92:fa:2d:f6:a4:22:cc:64: 1e:44:35:85:04:b4:82:7e:ae:20:66:74:e4:16:b8: 44:fa:ce:ac:3d:95:8e:51:61:a7:9e:1e:d0:87:bb: 85:cf:df:6a:ee:fc:d6:1d:9e:da:e7:5b:f2:77:51: 8b:01:4e:06:66:1c:32:33:11:b8:e4:0f:d8:95:ac: ca:da:2b:8a:30:1b:6e:f6:ee:1f:0e:2f:70:c6:18: e7:44:1e:30:63:63:c3:ea:bb:f9:39:e1:cf:7b:87: 3f:6e:6e:4f:b8:4e:fc:07:93:8f:8a:8c:1d:c7:9a: bf:d4:1c:33:d9:a3:7b:26:f4:e1:d1:7e:38:85:42: c6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CC:29:74:60:79:AA:29:5C:C7:20:C3:DA:88:70:75:C9:7B:73:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/0c4ff13f-3242-3568-97dc-9a027e3d5659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl X509v3 Authority Key Identifier: keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer sbgp-ipAddrBlock: critical IPv4: 45.139.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:97:51:3b:f6:2d:00:56:d9:79:95:cc:df:c4:b8:64:91:80: 19:5e:de:8d:11:22:16:e2:b2:e7:5c:36:5f:6b:be:4d:4c:d4: 17:fc:ac:25:40:55:a8:57:c3:29:89:20:f9:7f:46:a0:b5:e6: a6:b9:e5:b4:9d:04:2d:f8:8a:a0:0d:24:2c:5a:4f:06:b2:1b: c9:23:ab:8a:35:ea:78:f7:d7:3e:49:11:87:7a:cd:90:22:1b: 9d:79:ee:d3:18:d0:f2:b1:4c:e0:c0:e6:fa:ae:8f:1a:4c:51: 5c:a1:ef:9f:bb:66:5d:20:87:71:e1:5b:70:0e:92:3f:d6:27: 7e:dc:08:84:00:8a:62:a3:6d:36:1d:31:bb:de:ff:ba:f1:cc: e3:80:19:9b:c2:01:21:2f:d1:d2:90:6e:ee:cb:98:68:21:97: b6:4b:2f:5b:14:8a:3f:bd:cb:b3:ba:4a:26:c8:d3:7b:76:75: 5e:59:56:25:d2:e4:a6:2a:6e:fd:86:db:b6:68:84:d1:b4:cc: 0e:74:58:be:41:70:42:7d:b8:26:22:b3:a8:9e:27:7e:d8:1b: e4:40:d2:19:a8:c4:0b:ac:9e:4e:5b:4b:d5:33:23:ab:b8:d5: b9:09:3b:45:eb:57:07:97:04:ac:11:89:87:35:eb:11:c4:96: 43:7f:54:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJ09goW1NCmgbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkwY2ViMWUtMzhmMC00NjkwLThlMTItZmRlZjBkYzBl ZGRiMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ZDczMDc0ZWItNjI5MS00N2E1LWE1MDEtOGFhYjQ3MDI5NWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt+fFvSTmMfMtCqI+0cLaH3zVTSNAvgfLujs 7jlyG50hDnIW4AZ/8WznRwMYLPu++S3/ML39Q5RQw1QNpCvkL+GQGXh1jKT+3lZz ahnJpnx46ZGZJGdKqq7tC/Tvpj/7sgSsmqMkOczWJJnLUH7LTgZwTvs8NkHhDHrC MZlrkvot9qQizGQeRDWFBLSCfq4gZnTkFrhE+s6sPZWOUWGnnh7Qh7uFz99q7vzW HZ7a51vyd1GLAU4GZhwyMxG45A/YlazK2iuKMBtu9u4fDi9wxhjnRB4wY2PD6rv5 OeHPe4c/bm5PuE78B5OPiowdx5q/1Bwz2aN7JvTh0X44hULGCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDMKXRgeaopXMcgw9qIcHXJe3PFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBj ZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVmMGRjMGVkZGIvMGM0ZmYxM2YtMzI0Mi0z NTY4LTk3ZGMtOWEwMjdlM2Q1NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwY2ViMWUtMzhmMC00NjkwLThl MTItZmRlZjBkYzBlZGRiLzM5MGNlYjFlLTM4ZjAtNDY5MC04ZTEyLWZkZWYwZGMw ZWRkYi5jcmwwHwYDVR0jBBgwFoAU7IhVYel9//xGKMwSEvEQkth0VUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBjZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVm MGRjMGVkZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCXUTv2LQBW2XmVzN/EuGSRgBle3o0RIhbisudcNl9rvk1M1Bf8rCVA VahXwymJIPl/RqC15qa55bSdBC34iqANJCxaTwayG8kjq4o16nj31z5JEYd6zZAi G5157tMY0PKxTODA5vqujxpMUVyh75+7Zl0gh3HhW3AOkj/WJ37cCIQAimKjbTYd Mbve/7rxzOOAGZvCASEv0dKQbu7LmGghl7ZLL1sUij+9y7O6SibI03t2dV5ZViXS 5KYqbv2G27ZohNG0zA50WL5BcEJ9uCYis6ieJ37YG+RA0hmoxAusnk5bS9UzI6u4 1bkJO0XrVweXBKwRiYc16xHElkN/VOo= -----END CERTIFICATE-----Generated at Tue Oct 14 02:22:46 2025 by rpki-client