$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/29a8684a-4966-3724-bf0d-9a0ec918c504.roa File: 29a8684a-4966-3724-bf0d-9a0ec918c504.roa (raw, json) Hash identifier: j0uqGhJQy24k/50NvK9Ny3I+PzDA+K/oTHtVyZyav+Y= Subject key identifier: 1F:53:5A:40:27:2D:3E:BC:45:D1:D5:F4:0E:6C:5B:97:D1:9F:7C:F7 Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658 Certificate serial: 010D0C9F4328584B13D6ACEFF1283FBB3A166B40 Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/29a8684a-4966-3724-bf0d-9a0ec918c504.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 980 IP address blocks: 45.43.7.0/24 maxlen: 24 45.43.8.0/24 maxlen: 24 66.11.125.0/24 maxlen: 24 104.192.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:ac:ef:f1:28:3f:bb:3a:16:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=e99084a8-38c6-465f-a859-25beb42a1e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:35:cc:07:64:f1:aa:80:36:20:f4:45:6e:22: 9d:ad:58:9c:3e:7f:51:45:6b:b0:6d:e4:2a:7d:23: 40:d2:7e:d4:86:0f:0b:2b:2b:13:4c:b2:fb:de:a5: 4f:49:02:b7:0a:a5:7b:cc:8c:2b:ec:1f:24:58:da: c7:dc:57:ec:64:cc:f0:a7:c3:55:d6:4d:05:4c:1f: ab:c2:94:8d:bf:c7:95:57:eb:e9:c6:6a:ff:3b:a3: e0:9d:9e:80:58:27:d3:94:f5:02:0d:4d:8d:61:52: 44:a4:e6:28:8b:95:74:f8:20:fc:0f:ac:26:bf:17: 97:30:c8:9d:4c:df:aa:bd:8e:76:22:58:69:30:dd: 62:77:ff:65:59:7c:bd:55:21:c4:3e:d5:11:a0:0c: 64:9b:b8:2a:f1:f4:27:ed:75:d4:ce:24:43:c6:ba: b7:8f:d1:20:90:9b:49:6a:8d:bb:a6:7f:34:4a:fc: 3a:92:19:53:2a:3c:ee:11:03:31:6a:cd:4c:c9:10: 14:ce:58:7d:55:2b:cb:e8:6e:4c:98:88:ed:c9:02: 95:35:2a:94:6d:08:25:a4:8d:36:61:da:a2:e7:6e: 80:bf:00:f8:8b:8f:b9:40:0c:d6:a6:3e:8d:5c:4a: 06:b7:55:1d:f1:5e:be:65:b8:7e:6d:0f:8e:24:04: 2f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:53:5A:40:27:2D:3E:BC:45:D1:D5:F4:0E:6C:5B:97:D1:9F:7C:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/29a8684a-4966-3724-bf0d-9a0ec918c504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl X509v3 Authority Key Identifier: keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer sbgp-ipAddrBlock: critical IPv4: 45.43.7.0-45.43.8.255 66.11.125.0/24 104.192.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:43:e7:df:16:70:a4:18:3a:87:98:7b:5e:d6:c2:4a:99:47: e8:9e:45:5e:84:9a:a6:4e:2e:d6:19:f1:b0:41:23:4c:f2:2b: e3:34:42:b1:a2:2f:d4:3c:67:94:bb:8f:e7:90:03:aa:15:5e: 8d:8e:2e:be:8f:de:72:81:62:2d:a5:ff:f4:5a:30:d5:d8:1b: 2e:1a:d7:80:64:b1:6d:62:95:15:0e:38:10:12:1a:a5:6b:0c: ca:88:97:ea:27:53:fb:9c:0d:a6:56:bd:14:26:aa:da:98:e3: 82:41:56:3b:96:59:63:95:6a:c1:c2:f5:10:be:0e:ec:56:ac: dc:c5:5d:52:19:79:54:34:95:3a:9e:20:45:99:36:f9:8c:d6: c8:a9:43:50:7a:4d:91:33:d9:a0:20:51:60:d6:2a:ef:2f:b5: 98:a2:84:e7:98:8f:8e:2b:62:31:ae:51:64:8c:ac:4e:26:70: 6d:f2:fe:85:17:6c:fb:0d:b0:67:00:92:98:8d:1c:8e:ce:d4: 6e:41:03:e1:e8:6d:05:21:fd:7d:f4:c6:a2:cc:e1:0d:42:e2: b1:e7:b4:cc:be:77:72:b2:9a:7d:47:01:63:9a:b0:15:38:b0: 05:da:03:0a:aa:03:06:00:48:d3:01:2b:90:cc:30:2d:43:aa: 8b:86:05:c8 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEsT1qzv8Sg/uzoWa0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0 NjU4MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZTk5MDg0YTgtMzhjNi00NjVmLWE4NTktMjViZWI0MmExZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjXMB2TxqoA2IPRFbiKdrVicPn9RRWuwbeQq fSNA0n7Uhg8LKysTTLL73qVPSQK3CqV7zIwr7B8kWNrH3FfsZMzwp8NV1k0FTB+r wpSNv8eVV+vpxmr/O6PgnZ6AWCfTlPUCDU2NYVJEpOYoi5V0+CD8D6wmvxeXMMid TN+qvY52IlhpMN1id/9lWXy9VSHEPtURoAxkm7gq8fQn7XXUziRDxrq3j9EgkJtJ ao27pn80Svw6khlTKjzuEQMxas1MyRAUzlh9VSvL6G5MmIjtyQKVNSqUbQglpI02 Ydqi526AvwD4i4+5QAzWpj6NXEoGt1Ud8V6+Zbh+bQ+OJAQvqQIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFB9TWkAnLT68RdHV9A5sW5fRn3z3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvMjlhODY4NGEtNDk2Ni0z NzI0LWJmMGQtOWEwZWM5MThjNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz NzY1MzQ2NTguY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtKwcD BAAtKwgDBABCC30DBABowGcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAo0Pn3xZwpBg6h5h7XtbCSplH6J5F XoSapk4u1hnxsEEjTPIr4zRCsaIv1DxnlLuP55ADqhVejY4uvo/ecoFiLaX/9Fow 1dgbLhrXgGSxbWKVFQ44EBIapWsMyoiX6idT+5wNpla9FCaq2pjjgkFWO5ZZY5Vq wcL1EL4O7Fas3MVdUhl5VDSVOp4gRZk2+YzWyKlDUHpNkTPZoCBRYNYq7y+1mKKE 55iPjitiMa5RZIysTiZwbfL+hRds+w2wZwCSmI0cjs7UbkED4ehtBSH9ffTGoszh DULisee0zL53crKafUcBY5qwFTiwBdoDCqoDBgBI0wErkMwwLUOqi4YFyA== -----END CERTIFICATE-----Generated at Wed Oct 29 10:53:55 2025 by rpki-client