$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/a68019a7-c61a-39c2-8f6c-4d3fc7d47e5b.roa File: a68019a7-c61a-39c2-8f6c-4d3fc7d47e5b.roa (raw, json) Hash identifier: i9xWBu9lfHZMoW5OzVIAFgcC/PP5kFnboWzMPvqMO7o= Subject key identifier: 49:89:BC:FF:7D:28:E4:C7:4A:8D:BA:76:E7:99:AC:03:B0:BB:33:99 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584B21CC1FE0FB45EA14C2D8B8F8 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/a68019a7-c61a-39c2-8f6c-4d3fc7d47e5b.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 21743 IP address blocks: 45.42.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1f:e0:fb:45:ea:14:c2:d8:b8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=6793d815-ae02-42e5-b41c-008181d6bb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e2:9e:8f:81:72:85:10:ef:d3:8f:15:7a:18: cb:3c:9d:d8:83:c8:d5:18:8d:ad:0c:85:1d:04:1c: 52:a9:f3:42:02:58:8d:ac:79:32:5c:99:f8:f8:0c: 30:c7:5a:76:f1:31:2f:42:bd:2f:f0:24:d2:88:ab: ef:1f:c6:07:36:50:3c:1f:29:6e:f7:18:dd:3e:b8: 9e:51:5d:33:30:42:cd:5a:12:cc:68:7a:06:1b:52: 0e:fb:a2:e2:2b:e7:7c:0c:04:a4:8e:fb:85:75:62: 58:07:f4:27:63:63:a4:cc:2e:6f:ae:bd:2e:12:49: 0f:c2:c7:27:e0:6e:78:21:e6:87:eb:28:0d:da:91: 7d:10:d0:84:da:6c:59:f2:fb:fc:77:72:79:a7:2b: 3c:c8:47:82:09:50:0e:2f:d4:37:04:7c:be:a9:f5: 27:62:e1:ce:dc:f3:93:2e:da:22:3e:e2:8b:d9:12: c7:d8:8e:1b:0d:42:1c:b1:1c:00:b1:62:31:d5:9b: 1a:4b:90:26:fa:78:ea:d8:b0:ab:14:e2:0c:0e:41: 47:81:1a:e7:7b:fe:b9:25:35:f7:57:cf:25:af:2d: 6b:3f:d4:e3:50:92:f0:5b:51:b5:41:d1:c8:04:af: 66:4c:14:ac:ba:83:ca:e9:f0:8f:2e:e3:03:37:cd: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:89:BC:FF:7D:28:E4:C7:4A:8D:BA:76:E7:99:AC:03:B0:BB:33:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/a68019a7-c61a-39c2-8f6c-4d3fc7d47e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 45.42.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b5:db:23:3b:1d:7c:b0:5a:8d:cc:68:b2:4c:df:14:0f:79: f9:04:a7:a4:ac:e4:de:1a:31:b3:81:a8:d4:5f:f3:ce:7d:3f: 3c:0f:bd:e5:d2:7a:30:72:9e:7f:da:a5:c9:96:a9:f5:7f:bf: f2:e5:44:ab:14:b8:b0:6c:01:64:57:e1:40:e8:68:c5:c7:d6: fd:61:d4:cf:3a:ee:0d:d1:a3:ac:ae:8e:9c:d9:e8:7c:9a:c1: 92:92:fd:cf:97:8f:85:ad:f8:e7:34:ee:d6:37:d2:bc:9a:93: 17:a7:79:64:c2:77:a9:13:bf:bb:b5:42:4f:35:35:95:bf:23: a5:9d:da:f5:7c:a1:97:42:7c:35:72:36:5e:ab:35:5d:2f:0c: 9c:23:40:50:6d:5e:98:12:33:6a:32:8c:ac:90:1f:89:4d:f4: d2:bd:d3:be:c4:8f:fc:12:e3:af:72:14:77:0b:9f:28:63:02: ab:ed:87:97:68:6e:3d:a4:59:bc:7d:96:53:40:cc:49:fd:c1: 80:06:03:8a:1c:58:01:1e:c9:92:f2:a8:ad:8a:61:91:77:b3: f5:f0:7b:4e:77:d2:a8:ec:c6:7d:49:0f:8d:8e:47:5f:d4:cd: 4a:5c:8c:6c:fc:a8:80:27:3e:b0:90:69:96:42:0d:7b:71:ee: d5:c9:2b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzB/g+0XqFMLYuPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk Njc5M2Q4MTUtYWUwMi00MmU1LWI0MWMtMDA4MTgxZDZiYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uKej4FyhRDv048VehjLPJ3Yg8jVGI2tDIUd BBxSqfNCAliNrHkyXJn4+Awwx1p28TEvQr0v8CTSiKvvH8YHNlA8Hylu9xjdPrie UV0zMELNWhLMaHoGG1IO+6LiK+d8DASkjvuFdWJYB/QnY2OkzC5vrr0uEkkPwscn 4G54IeaH6ygN2pF9ENCE2mxZ8vv8d3J5pys8yEeCCVAOL9Q3BHy+qfUnYuHO3POT LtoiPuKL2RLH2I4bDUIcsRwAsWIx1ZsaS5Am+njq2LCrFOIMDkFHgRrne/65JTX3 V88lry1rP9TjUJLwW1G1QdHIBK9mTBSsuoPK6fCPLuMDN83l4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmJvP99KOTHSo26dueZrAOwuzOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvYTY4MDE5YTctYzYxYS0z OWMyLThmNmMtNGQzZmM3ZDQ3ZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSqOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE612yM7HXywWo3MaLJM3xQPefkEp6Ss5N4aMbOBqNRf8859PzwPveXS ejBynn/apcmWqfV/v/LlRKsUuLBsAWRX4UDoaMXH1v1h1M867g3Ro6yujpzZ6Hya wZKS/c+Xj4Wt+Oc07tY30ryakxeneWTCd6kTv7u1Qk81NZW/I6Wd2vV8oZdCfDVy Nl6rNV0vDJwjQFBtXpgSM2oyjKyQH4lN9NK9077Ej/wS469yFHcLnyhjAqvth5do bj2kWbx9llNAzEn9wYAGA4ocWAEeyZLyqK2KYZF3s/Xwe0530qjsxn1JD42OR1/U zUpcjGz8qIAnPrCQaZZCDXtx7tXJK5o= -----END CERTIFICATE-----Generated at Mon Oct 27 09:59:09 2025 by rpki-client