$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa File: 29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa (raw, json) Hash identifier: +pDqczLBUZlAvQBv3toBox11UCfLXtZ++uh12MM9Cws= Subject key identifier: F1:61:29:E4:BA:29:95:0B:44:62:9D:E5:4C:88:C2:B3:AE:DE:2E:A4 Certificate issuer: /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Certificate serial: 010D0C9F4328584AC2E0E63D9CED219B507EC280 Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 32931 IP address blocks: 45.41.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e6:3d:9c:ed:21:9b:50:7e:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=b969624f-5952-4250-9e05-13c3287656b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:47:7b:94:b8:cf:0d:31:d6:90:76:d1:2f: 0f:02:ba:f6:74:78:0a:4d:c2:03:04:cf:3f:2e:4c: 9e:c4:0a:84:ba:9c:74:d4:69:f8:01:e6:07:e1:53: e2:91:1e:18:a1:62:a9:a0:48:4e:73:56:de:2b:55: 6d:fc:4a:84:b9:00:b9:fd:ea:b4:90:b4:6b:f1:c1: 12:f7:6b:b2:75:c8:71:63:66:7c:96:a6:94:24:7a: 15:0e:62:d1:24:30:35:fb:a0:b6:ae:ee:fc:99:5b: 28:ef:df:62:6c:e0:05:89:d0:95:85:8c:05:14:7d: de:70:77:1b:57:bd:f6:ef:9d:ca:33:82:b2:10:9e: 7e:cf:06:85:c2:84:b9:ad:6f:23:6e:ff:11:02:e3: 82:2a:c6:29:d3:df:93:e9:b4:85:6e:f8:ea:a2:c6: bb:e4:57:e2:c1:e2:90:c3:9c:b2:1b:b7:55:d3:4d: 69:1e:75:0e:ce:d8:8b:ba:90:0a:53:e6:33:7e:e7: 0b:21:50:a1:52:6c:31:96:80:c8:17:ee:4e:b7:c9: dd:1f:57:ba:08:10:e3:9e:ca:62:d5:f9:0e:e0:96: c1:1c:db:c6:ce:45:6e:9a:4f:b6:97:84:79:cd:2b: 79:31:b4:3e:b6:f7:60:5d:32:1c:5b:b0:5a:1c:49: 61:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:61:29:E4:BA:29:95:0B:44:62:9D:E5:4C:88:C2:B3:AE:DE:2E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl X509v3 Authority Key Identifier: keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer sbgp-ipAddrBlock: critical IPv4: 45.41.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:54:f3:e3:06:68:00:9d:51:10:61:63:c9:49:43:90:db:4e: b4:c5:20:4d:6f:02:a0:22:f9:fe:88:2a:72:94:88:ed:9a:dd: be:75:9a:64:ac:83:3c:ee:e1:f5:8c:39:b5:8f:be:44:44:64: 80:17:dc:f8:ab:89:73:fe:d0:a1:78:f0:c6:a1:70:05:82:a3: 68:af:b1:7c:fa:9d:20:39:9e:19:17:24:3b:0e:24:37:0d:f8: eb:79:de:1a:3c:94:b6:e0:78:1b:05:65:77:f9:5a:89:88:55: 20:3b:d4:3f:b8:8d:f0:af:5b:1a:72:69:bc:f6:7e:2c:1f:de: 31:07:35:81:5f:12:6f:73:1b:df:ad:db:e9:24:48:f0:fa:1a: e2:50:c8:d6:0c:c2:21:81:c3:08:b0:ae:7c:21:ea:93:bb:43: 23:9a:11:c9:f2:51:76:49:d5:2c:b3:c8:f9:9c:ec:18:6d:3b: 76:69:c8:ec:10:06:ac:83:01:08:a0:06:41:07:c5:13:a5:cb: d3:57:dc:09:67:a8:c6:2f:0e:9d:9d:f0:ae:ce:3c:a6:59:7b: 05:7d:5d:78:8a:9d:5a:85:18:f9:ae:e3:dd:48:6b:48:23:69: a9:0c:f7:ee:8c:ce:57:38:02:42:20:a7:a0:b7:a1:9f:8e:ba: 3a:11:0c:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OY9nO0hm1B+woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NiYjA4NWItOGM1OC00OGYxLWE3YjktZDQ0NmQzZjk2 MWJmMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk Yjk2OTYyNGYtNTk1Mi00MjUwLTllMDUtMTNjMzI4NzY1NmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO5He5S4zw0x1pB20S8PArr2dHgKTcIDBM8/ LkyexAqEupx01Gn4AeYH4VPikR4YoWKpoEhOc1beK1Vt/EqEuQC5/eq0kLRr8cES 92uydchxY2Z8lqaUJHoVDmLRJDA1+6C2ru78mVso799ibOAFidCVhYwFFH3ecHcb V732753KM4KyEJ5+zwaFwoS5rW8jbv8RAuOCKsYp09+T6bSFbvjqosa75FfiweKQ w5yyG7dV001pHnUOztiLupAKU+YzfucLIVChUmwxloDIF+5Ot8ndH1e6CBDjnspi 1fkO4JbBHNvGzkVumk+2l4R5zSt5MbQ+tvdgXTIcW7BaHElhnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFhKeS6KZULRGKd5UyIwrOu3i6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zY2Ji MDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2ZDNmOTYxYmYvMjlhODk0ZWUtMDA4MC0z YTQ5LThiOTEtYTAxZTFiYmJiZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2NiYjA4NWItOGM1OC00OGYxLWE3 YjktZDQ0NmQzZjk2MWJmLzNjYmIwODViLThjNTgtNDhmMS1hN2I5LWQ0NDZkM2Y5 NjFiZi5jcmwwHwYDVR0jBBgwFoAU4e3x8Ae8hTPlv1z+X4vszy8hl7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zY2JiMDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2 ZDNmOTYxYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNU8+MGaACdURBhY8lJQ5DbTrTFIE1vAqAi+f6IKnKUiO2a3b51mmSs gzzu4fWMObWPvkREZIAX3PiriXP+0KF48MahcAWCo2ivsXz6nSA5nhkXJDsOJDcN +Ot53ho8lLbgeBsFZXf5WomIVSA71D+4jfCvWxpyabz2fiwf3jEHNYFfEm9zG9+t 2+kkSPD6GuJQyNYMwiGBwwiwrnwh6pO7QyOaEcnyUXZJ1SyzyPmc7BhtO3ZpyOwQ BqyDAQigBkEHxROly9NX3AlnqMYvDp2d8K7OPKZZewV9XXiKnVqFGPmu491Ia0gj aakM9+6Mzlc4AkIgp6C3oZ+OujoRDHY= -----END CERTIFICATE-----Generated at Wed Aug 20 23:07:50 2025 by rpki-client