$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa File: 0649525a-4f78-38b5-9509-f91bdf00cd84.roa (raw, json) Hash identifier: /CaVfrpwRVtyF+iAYqZbd9e3Szsjm00mhtxf44e6HC8= Subject key identifier: DC:D9:FF:08:83:E8:AF:27:62:84:A8:2F:2E:80:0F:38:30:04:0A:FB Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584AD7D1217318F277D386CD9CD0 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 53356 IP address blocks: 45.62.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:21:73:18:f2:77:d3:86:cd:9c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=f5266940-010d-48fe-9102-86606112bd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5b:df:3f:12:1d:76:f0:af:04:b0:b2:1d:34: 41:6d:48:37:5b:dc:fd:93:ef:bf:36:e5:82:a6:55: 94:31:5c:f1:c0:9f:c2:36:45:b4:c3:96:98:07:04: 7c:e5:c6:d2:8c:ee:c9:ab:7b:48:66:81:80:c4:26: 71:4a:15:48:1e:fe:1b:2f:9a:d5:3a:77:a3:d6:48: 64:b7:7a:db:89:65:4b:82:2f:b8:aa:d7:23:93:b8: 4d:37:90:ba:e6:71:e1:de:cc:4f:04:60:9c:6e:d1: 96:12:24:9d:b0:1b:f2:af:a2:30:6f:e3:54:f9:6e: 73:99:00:fc:32:18:f5:38:c8:d5:d8:ec:27:8e:d3: 65:ac:a4:a4:50:f3:dd:ed:18:81:f9:e5:9e:73:a5: a5:3f:b7:81:fe:5a:0e:23:a0:2d:94:c3:31:77:0d: 3d:ec:9a:ce:e6:32:16:98:93:29:ee:2d:97:1f:3c: 00:78:e6:4d:57:87:f4:4e:c2:50:b7:84:40:be:6e: 08:6c:75:d6:36:98:50:d4:a3:72:36:d7:71:a3:32: d8:02:ad:da:48:db:04:71:a0:7f:26:d1:91:47:8d: fe:45:33:3d:38:a0:08:33:3d:33:5f:14:42:bf:aa: d8:f3:c6:0a:f0:78:77:e8:2f:cd:c0:7e:ff:66:e3: 90:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D9:FF:08:83:E8:AF:27:62:84:A8:2F:2E:80:0F:38:30:04:0A:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.62.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:08:78:7e:87:fa:43:af:45:0e:b3:96:95:3a:e8:18:7b:59: 42:76:c4:72:7c:a7:e6:7c:fa:d0:6a:c2:f1:2a:e9:77:2e:38: aa:17:c6:75:61:25:0a:72:57:42:bf:73:62:e3:9f:d5:a6:84: fb:36:2b:d0:3a:22:a4:2c:87:3d:20:3a:2d:f7:7b:06:82:7d: b7:52:9a:e5:37:f2:5d:20:b8:51:f0:af:db:5b:28:79:b1:fa: cc:cc:87:c7:36:51:0c:01:7a:df:5e:5d:45:23:b7:f9:c3:3d: 39:9f:8b:06:62:4d:24:4e:e2:4c:3c:36:15:18:64:38:d7:79: 2b:c2:53:d0:b9:10:a0:b6:89:48:9f:7d:1d:b6:70:94:30:58: 90:56:cc:02:f6:d6:fa:e1:aa:7d:35:2b:0a:60:6d:c7:3c:ce: b7:52:31:23:ac:bf:75:ce:a2:fd:e1:ac:df:fd:c9:50:7e:a4: de:52:e9:65:4c:e5:18:5f:96:f3:59:fd:a3:0f:8d:03:db:fd: 79:87:e3:b9:e2:4a:ae:ab:d2:fb:66:50:57:cf:b7:c7:2b:09: f8:e4:07:b0:03:81:3c:d0:15:31:f8:f1:65:53:b6:72:83:92: dc:a4:c0:85:8a:84:6f:ed:b1:28:cd:2d:d2:21:0a:af:25:a3: 94:9a:36:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SFzGPJ304bNnNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZjUyNjY5NDAtMDEwZC00OGZlLTkxMDItODY2MDYxMTJiZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lvfPxIddvCvBLCyHTRBbUg3W9z9k++/NuWC plWUMVzxwJ/CNkW0w5aYBwR85cbSjO7Jq3tIZoGAxCZxShVIHv4bL5rVOnej1khk t3rbiWVLgi+4qtcjk7hNN5C65nHh3sxPBGCcbtGWEiSdsBvyr6Iwb+NU+W5zmQD8 Mhj1OMjV2OwnjtNlrKSkUPPd7RiB+eWec6WlP7eB/loOI6AtlMMxdw097JrO5jIW mJMp7i2XHzwAeOZNV4f0TsJQt4RAvm4IbHXWNphQ1KNyNtdxozLYAq3aSNsEcaB/ JtGRR43+RTM9OKAIMz0zXxRCv6rY88YK8Hh36C/NwH7/ZuOQaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzZ/wiD6K8nYoSoLy6ADzgwBAr7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMDY0OTUyNWEtNGY3OC0z OGI1LTk1MDktZjkxYmRmMDBjZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT6rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsIeH6H+kOvRQ6zlpU66Bh7WUJ2xHJ8p+Z8+tBqwvEq6XcuOKoXxnVh JQpyV0K/c2Ljn9WmhPs2K9A6IqQshz0gOi33ewaCfbdSmuU38l0guFHwr9tbKHmx +szMh8c2UQwBet9eXUUjt/nDPTmfiwZiTSRO4kw8NhUYZDjXeSvCU9C5EKC2iUif fR22cJQwWJBWzAL21vrhqn01Kwpgbcc8zrdSMSOsv3XOov3hrN/9yVB+pN5S6WVM 5RhflvNZ/aMPjQPb/XmH47niSq6r0vtmUFfPt8crCfjkB7ADgTzQFTH48WVTtnKD ktykwIWKhG/tsSjNLdIhCq8lo5SaNpg= -----END CERTIFICATE-----Generated at Sat Aug 23 16:42:19 2025 by rpki-client