$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/ce5287be-0832-3723-9c79-1059a2079834.roa File: ce5287be-0832-3723-9c79-1059a2079834.roa (raw, json) Hash identifier: a8V8VRn6kc7Pb4cLmZIphg1iSzz1UBlqlRAQp1KUM1I= Subject key identifier: 95:96:BD:C0:F3:22:1E:7A:3C:4C:FA:A4:B9:07:D9:46:ED:7D:34:4E Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584AF5212D9A3C3CC5E6FDA03500 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/ce5287be-0832-3723-9c79-1059a2079834.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 33208 IP address blocks: 45.42.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2d:9a:3c:3c:c5:e6:fd:a0:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=042a5a98-3bfb-4e2f-b3c5-e6cce8bacdce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ec:dd:fc:e0:d8:0c:6b:e7:04:ac:ae:72:3d: ba:c0:04:00:89:f1:29:9b:79:f1:f8:69:2b:ee:1c: e6:ab:00:52:72:0e:f6:77:c4:a0:7f:5f:3e:da:0c: 7a:2d:21:ab:67:5f:9c:7c:a6:41:de:71:f8:95:7c: 10:66:61:26:d4:96:d3:16:fd:07:24:b8:3e:a0:a3: b5:e0:ed:f2:f9:c8:e2:a0:25:ef:62:ee:e0:0e:29: 1f:16:0c:a7:76:b9:a3:e0:66:db:3a:90:24:01:0a: 54:54:92:75:6e:03:a0:89:ad:a5:19:2f:44:33:ee: 26:92:f0:29:85:4e:bf:b3:5c:04:d0:d1:f0:7c:3e: 9d:5b:72:76:b8:e4:15:e1:67:e5:f9:7a:22:da:33: f9:27:e8:bd:34:fb:65:bf:a5:5f:f4:ac:d7:cd:b0: 6f:38:5b:26:6a:a5:25:5d:74:eb:09:37:ff:50:ac: 3b:c0:0d:a1:79:1a:1e:09:a8:ef:27:7b:57:da:2b: 61:79:7e:b2:59:20:27:75:bb:cb:99:27:22:93:7d: a1:d5:a3:75:51:4e:da:1e:2a:31:e4:13:e5:d0:81: 11:8e:8a:2b:94:98:f7:e9:91:ba:15:80:17:15:da: 09:6c:cd:30:94:11:71:d0:c2:37:b5:25:38:a5:1e: 27:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:96:BD:C0:F3:22:1E:7A:3C:4C:FA:A4:B9:07:D9:46:ED:7D:34:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/ce5287be-0832-3723-9c79-1059a2079834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 45.42.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:aa:60:1f:3c:83:50:23:00:a2:cd:30:0a:5c:da:c5:68:dc: 38:6e:2b:1a:f6:3c:fd:31:66:f7:2a:22:15:88:1e:26:3b:40: 00:1a:62:f2:ad:51:b5:c4:2e:c0:8b:32:46:b9:43:ba:42:23: 7d:24:0e:69:b0:19:e7:8a:5b:94:a5:65:25:0a:bc:74:3d:e1: 33:4f:8a:8a:35:eb:a0:3c:0d:f9:05:72:2c:17:69:b4:30:78: 2b:d7:31:39:02:0e:1b:ac:39:91:4e:9f:b4:45:98:b4:d6:bc: 8d:2f:7b:a3:31:38:fa:e0:69:dc:cd:d7:02:ed:7f:a4:9c:a3: e7:84:1f:65:d9:3f:34:52:68:ec:ee:bf:a2:db:03:36:49:95: f7:a7:f5:f4:c0:09:74:9c:c9:36:be:14:39:7f:e4:f9:17:7b: a1:95:0e:0c:fd:d0:0e:63:b7:a1:ce:ef:0b:13:94:2f:7b:ae: e7:45:bc:43:f6:94:f1:65:8f:26:2a:e8:ea:18:95:33:d8:a2: f8:ff:d6:44:64:85:eb:99:e2:88:f5:1e:f3:12:3d:79:6e:a7: b8:15:09:ae:6a:90:77:d6:81:33:01:8c:ef:d8:1c:1c:f8:d4: 21:c5:aa:ac:85:65:e0:cc:e7:79:ea:92:1f:06:2a:f6:2e:af: 09:9c:22:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IS2aPDzF5v2gNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MDQyYTVhOTgtM2JmYi00ZTJmLWIzYzUtZTZjY2U4YmFjZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uzd/ODYDGvnBKyucj26wAQAifEpm3nx+Gkr 7hzmqwBScg72d8Sgf18+2gx6LSGrZ1+cfKZB3nH4lXwQZmEm1JbTFv0HJLg+oKO1 4O3y+cjioCXvYu7gDikfFgyndrmj4GbbOpAkAQpUVJJ1bgOgia2lGS9EM+4mkvAp hU6/s1wE0NHwfD6dW3J2uOQV4Wfl+Xoi2jP5J+i9NPtlv6Vf9KzXzbBvOFsmaqUl XXTrCTf/UKw7wA2heRoeCajvJ3tX2itheX6yWSAndbvLmScik32h1aN1UU7aHiox 5BPl0IERjoorlJj36ZG6FYAXFdoJbM0wlBFx0MI3tSU4pR4naQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWWvcDzIh56PEz6pLkH2UbtfTROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvY2U1Mjg3YmUtMDgzMi0z NzIzLTljNzktMTA1OWEyMDc5ODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuqYB88g1AjAKLNMApc2sVo3DhuKxr2PP0xZvcqIhWIHiY7QAAaYvKt UbXELsCLMka5Q7pCI30kDmmwGeeKW5SlZSUKvHQ94TNPioo166A8DfkFciwXabQw eCvXMTkCDhusOZFOn7RFmLTWvI0ve6MxOPrgadzN1wLtf6Sco+eEH2XZPzRSaOzu v6LbAzZJlfen9fTACXScyTa+FDl/5PkXe6GVDgz90A5jt6HO7wsTlC97rudFvEP2 lPFljyYq6OoYlTPYovj/1kRkheuZ4oj1HvMSPXlup7gVCa5qkHfWgTMBjO/YHBz4 1CHFqqyFZeDM53nqkh8GKvYurwmcIn0= -----END CERTIFICATE-----Generated at Sun Oct 19 22:08:58 2025 by rpki-client