$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/8f1396ab-d4fe-3b34-b824-479e04718ca5.roa File: 8f1396ab-d4fe-3b34-b824-479e04718ca5.roa (raw, json) Hash identifier: S9y+blJdws7T8/9RpR42oUgkY3mOqVGLtfcPJbN7P3Y= Subject key identifier: 65:62:9E:6A:6D:D3:DA:30:78:C5:6A:24:00:6F:7E:1C:7F:F6:AA:D5 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584B79BCBD31A5BECC41036B5B00 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/8f1396ab-d4fe-3b34-b824-479e04718ca5.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 5645 IP address blocks: 45.72.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:bd:31:a5:be:cc:41:03:6b:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=77023d4c-5044-4912-a7cc-bf7e6a5b3d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:62:cf:97:eb:42:32:96:79:0b:07:40:43:06: f7:d6:1a:3d:54:79:ff:ff:27:59:8a:b3:ec:e1:07: a9:a8:94:70:ce:08:07:0a:b5:07:b9:75:f9:1b:13: f6:a7:af:87:5b:1d:46:0a:6c:5b:ed:e4:da:07:70: 22:c5:6b:ce:34:2c:00:47:6c:87:d5:f5:c1:c8:9c: 18:d6:60:a1:30:88:7c:34:92:14:48:7e:10:e7:14: c8:28:62:ac:ea:1c:71:91:7d:b2:18:1b:6f:e2:e9: cb:f0:95:87:c4:bd:8f:da:cc:f0:7b:ee:ea:87:51: cc:ea:8d:83:77:3d:9a:e5:46:83:94:4c:55:95:47: f9:d5:a3:22:b0:14:bb:fa:3b:2c:b8:28:e5:ce:2b: 47:ac:a9:dc:f8:60:7a:4d:4c:7c:03:1c:9f:86:a6: 06:35:a6:d4:28:eb:20:dd:51:89:1d:e9:73:7e:fe: df:00:68:a0:f6:4e:6d:65:0b:b7:72:7d:aa:87:e2: 04:af:25:07:9d:91:44:18:4f:d4:3d:d1:44:e7:b9: 15:62:51:88:02:bf:21:6c:4e:d0:cd:8c:d6:c5:9a: f6:e2:6b:21:4c:0f:82:00:c5:57:b2:fd:69:67:5b: e4:2a:ec:a1:57:ad:7c:05:aa:3a:c2:9f:c5:f2:61: 9e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:62:9E:6A:6D:D3:DA:30:78:C5:6A:24:00:6F:7E:1C:7F:F6:AA:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/8f1396ab-d4fe-3b34-b824-479e04718ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 45.72.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:1f:d2:f5:7b:75:46:88:b3:b2:75:b2:ef:87:72:3a:48:56: 35:cb:a9:2d:ea:cd:e7:91:47:1c:db:ec:06:df:0b:4e:13:6e: 12:f1:04:6b:42:07:8c:e1:08:22:2a:8f:bf:18:ec:51:dd:50: e5:3b:45:65:0f:b3:73:ef:3b:04:e0:d3:84:70:e1:03:60:5f: 89:54:bd:53:94:af:20:c9:34:da:92:53:0c:d9:94:bb:c6:c9: 1e:bc:36:34:de:85:02:52:36:4a:c9:00:9a:53:73:68:2c:66: 2b:8d:7c:5f:c8:cd:46:c3:9f:d7:92:96:ff:1b:da:fd:f8:3a: a2:c4:cc:de:48:df:d1:d9:18:b9:c4:3e:86:40:d9:59:0a:92: 4b:60:c2:b5:7b:43:7b:ff:09:74:b6:26:6f:02:c1:83:7a:d4: 19:6a:e5:f6:40:d9:aa:45:dc:07:04:db:cc:30:a3:d8:10:a9: e2:2a:dc:07:0e:cc:2b:2d:94:38:b9:84:ab:29:84:8d:09:b0: 66:40:55:6f:7a:6d:80:6f:ce:83:78:2c:a6:e5:52:31:c2:40: 51:e0:cd:d7:0c:04:7a:87:3a:44:ae:11:a6:68:25:48:6a:13: 18:6c:74:97:c2:d4:da:5a:dd:db:c3:3a:f8:32:9e:01:ac:4b: 22:91:69:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vL0xpb7MQQNrWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NzcwMjNkNGMtNTA0NC00OTEyLWE3Y2MtYmY3ZTZhNWIzZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2LPl+tCMpZ5CwdAQwb31ho9VHn//ydZirPs 4QepqJRwzggHCrUHuXX5GxP2p6+HWx1GCmxb7eTaB3AixWvONCwAR2yH1fXByJwY 1mChMIh8NJIUSH4Q5xTIKGKs6hxxkX2yGBtv4unL8JWHxL2P2szwe+7qh1HM6o2D dz2a5UaDlExVlUf51aMisBS7+jssuCjlzitHrKnc+GB6TUx8AxyfhqYGNabUKOsg 3VGJHelzfv7fAGig9k5tZQu3cn2qh+IEryUHnZFEGE/UPdFE57kVYlGIAr8hbE7Q zYzWxZr24mshTA+CAMVXsv1pZ1vkKuyhV618Bao6wp/F8mGeZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVinmpt09oweMVqJABvfhx/9qrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvOGYxMzk2YWItZDRmZS0z YjM0LWI4MjQtNDc5ZTA0NzE4Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHLUiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4f0vV7dUaIs7J1su+HcjpIVjXLqS3qzeeRRxzb7AbfC04TbhLxBGtC B4zhCCIqj78Y7FHdUOU7RWUPs3PvOwTg04Rw4QNgX4lUvVOUryDJNNqSUwzZlLvG yR68NjTehQJSNkrJAJpTc2gsZiuNfF/IzUbDn9eSlv8b2v34OqLEzN5I39HZGLnE PoZA2VkKkktgwrV7Q3v/CXS2Jm8CwYN61Blq5fZA2apF3AcE28wwo9gQqeIq3AcO zCstlDi5hKsphI0JsGZAVW96bYBvzoN4LKblUjHCQFHgzdcMBHqHOkSuEaZoJUhq ExhsdJfC1Npa3dvDOvgyngGsSyKRaW8= -----END CERTIFICATE-----Generated at Thu Oct 30 03:15:36 2025 by rpki-client