$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/6b8136d9-d359-31ae-8dfb-e8f07fa48d80.roa File: 6b8136d9-d359-31ae-8dfb-e8f07fa48d80.roa (raw, json) Hash identifier: q2NJHCUgvGPheOwJdTZul9+Yyxc5pGU+u9sHtdq3S84= Subject key identifier: 2B:48:7B:44:97:E5:78:00:11:C7:5F:FB:1F:D9:FD:14:FE:8A:04:5E Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584B21CC18EDCDA32C366CAE0324 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/6b8136d9-d359-31ae-8dfb-e8f07fa48d80.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 21743 IP address blocks: 45.42.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:18:ed:cd:a3:2c:36:6c:ae:03:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=63d4d697-8270-4ed7-95e4-a7d70a53c6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ec:98:be:03:ef:86:53:60:01:12:70:fe:6a: c3:b6:b5:20:b6:87:e5:37:41:45:1e:6a:a5:6e:80: d8:56:36:33:ca:4b:b5:56:85:bc:cc:64:33:92:81: d2:fc:a3:53:96:22:32:cc:82:93:75:02:aa:e6:2e: b7:25:89:24:bc:75:ac:11:da:78:18:1e:61:e5:5e: 80:d7:93:8f:d4:60:bf:60:47:c1:22:c8:60:f9:ab: 3c:b4:0a:58:90:15:86:fc:91:47:68:5a:95:78:1e: 00:0c:81:3d:8f:57:6a:32:8f:2a:30:b3:49:b9:6c: 79:80:3e:7b:fe:35:63:10:01:68:52:51:a2:d4:ff: 42:8b:03:5c:eb:fc:2b:ef:69:4b:38:f4:ef:f0:da: c8:1a:42:4c:bc:83:12:8f:c7:c6:24:12:c1:62:99: fd:5d:53:f2:f7:c2:fa:03:78:f7:aa:5c:98:a6:ba: bd:57:5f:14:d8:92:6e:7d:26:71:4b:fa:75:09:4d: 7f:a6:dc:db:78:45:80:3c:85:3a:4e:1c:83:c5:ac: 0d:46:98:d5:4d:c0:ed:52:be:dd:bb:47:72:6c:15: da:e0:3a:3c:5b:61:26:09:82:e7:cb:56:9f:c1:5b: 35:6c:3f:7f:8b:ea:35:fc:e2:d4:0e:c6:45:62:08: 71:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:48:7B:44:97:E5:78:00:11:C7:5F:FB:1F:D9:FD:14:FE:8A:04:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/6b8136d9-d359-31ae-8dfb-e8f07fa48d80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 45.42.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a6:84:83:8d:6e:44:cc:30:50:5e:2f:88:0d:67:74:d9:4d: 5d:cb:14:85:27:ff:e3:0b:2c:71:5a:bb:e5:03:67:3f:45:11: 41:1e:d5:1a:61:9a:88:1c:c8:29:72:5b:dd:92:50:01:87:a2: bd:a5:af:ef:88:58:25:3a:95:a1:1a:e9:92:3c:ab:12:a3:2b: 89:13:ad:74:ab:71:44:c2:80:5d:75:20:6e:6b:f9:d4:8e:77: 4a:f0:fa:46:47:1d:bb:e3:a3:cd:cd:03:c6:42:e8:6d:2b:08: a1:13:72:26:af:a7:03:f1:d1:06:a0:c2:7c:88:12:32:0a:8c: 73:9b:e3:ed:8d:c7:88:97:d0:ec:ee:cf:e9:d8:c4:46:31:4e: 15:a3:d9:2e:7a:0c:f1:c5:60:52:e8:5b:76:d6:56:ec:66:2f: 54:86:a0:fe:90:21:db:7f:33:2c:5f:cc:ec:ed:e7:ab:25:11: 52:ee:36:7a:af:f0:25:32:15:ab:56:6d:a3:b0:de:b9:ef:fe: 4a:b2:7b:1c:e7:41:49:fe:08:b4:d2:ea:bb:80:39:2c:e1:98: 29:df:71:e4:4b:89:0e:10:c8:6a:7b:46:fc:40:6e:c1:1f:61: b1:e7:56:f8:5a:48:11:bd:31:a4:de:56:48:e9:b7:e2:e7:ed: 19:d6:4e:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBjtzaMsNmyuAyQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NjNkNGQ2OTctODI3MC00ZWQ3LTk1ZTQtYTdkNzBhNTNjNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOyYvgPvhlNgARJw/mrDtrUgtoflN0FFHmql boDYVjYzyku1VoW8zGQzkoHS/KNTliIyzIKTdQKq5i63JYkkvHWsEdp4GB5h5V6A 15OP1GC/YEfBIshg+as8tApYkBWG/JFHaFqVeB4ADIE9j1dqMo8qMLNJuWx5gD57 /jVjEAFoUlGi1P9CiwNc6/wr72lLOPTv8NrIGkJMvIMSj8fGJBLBYpn9XVPy98L6 A3j3qlyYprq9V18U2JJufSZxS/p1CU1/ptzbeEWAPIU6ThyDxawNRpjVTcDtUr7d u0dybBXa4Do8W2EmCYLny1afwVs1bD9/i+o1/OLUDsZFYghxUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtIe0SX5XgAEcdf+x/Z/RT+igReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvNmI4MTM2ZDktZDM1OS0z MWFlLThkZmItZThmMDdmYTQ4ZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABymhIONbkTMMFBeL4gNZ3TZTV3LFIUn/+MLLHFau+UDZz9FEUEe1Rph mogcyClyW92SUAGHor2lr++IWCU6laEa6ZI8qxKjK4kTrXSrcUTCgF11IG5r+dSO d0rw+kZHHbvjo83NA8ZC6G0rCKETciavpwPx0QagwnyIEjIKjHOb4+2Nx4iX0Ozu z+nYxEYxThWj2S56DPHFYFLoW3bWVuxmL1SGoP6QIdt/MyxfzOzt56slEVLuNnqv 8CUyFatWbaOw3rnv/kqyexznQUn+CLTS6ruAOSzhmCnfceRLiQ4QyGp7RvxAbsEf YbHnVvhaSBG9MaTeVkjpt+Ln7RnWThc= -----END CERTIFICATE-----Generated at Mon Oct 27 10:04:35 2025 by rpki-client