$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2a2a7398-b5f7-35e5-ad00-960cf5bd2d9a.roa File: 2a2a7398-b5f7-35e5-ad00-960cf5bd2d9a.roa (raw, json) Hash identifier: 40INaXyPzQNbh2+Tne+B7EetnoZX4iSNnatVYgJbyjs= Subject key identifier: B8:C1:54:9D:72:D2:1C:11:49:1F:CC:1F:4D:A9:B8:C8:78:27:63:0C Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B89177BF06421EDB1F81EC3B0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2a2a7398-b5f7-35e5-ad00-960cf5bd2d9a.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 16696 IP address blocks: 45.248.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7b:f0:64:21:ed:b1:f8:1e:c3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=168931ef-6972-4da0-893c-05e859d47b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:e9:8c:9b:9a:8a:cd:36:8e:e5:75:04:09: b3:53:b8:60:2e:bc:a0:93:19:d0:d6:06:ad:d5:b0: a5:7d:77:f5:b6:8a:c8:b0:be:38:0a:dd:6b:fb:a6: cf:83:98:cc:fd:a5:ae:02:95:6f:28:44:58:40:3e: 42:4b:9f:a7:3d:fe:11:a0:e5:02:80:a5:12:58:22: 0b:7d:09:30:bd:d4:64:70:25:ea:d7:90:63:d1:3e: 3a:4f:c3:81:99:2b:23:80:78:8d:a5:e9:32:78:4a: 0a:4b:2e:48:66:b9:ac:75:34:94:20:4f:0f:79:4a: 53:26:b2:b4:85:b2:8d:5c:24:de:33:84:9c:88:05: 07:c9:a4:c4:c5:48:57:19:c2:8f:e6:ba:c5:f0:49: 81:24:49:e5:e2:35:4a:6b:49:35:55:ea:82:45:19: dc:ba:4f:ca:cd:5b:e4:1c:70:cb:cd:0f:74:6e:43: 16:c1:3e:24:6b:44:fa:7f:04:4e:75:32:a3:72:10: a3:fd:5a:ce:ba:fc:cf:a8:e3:86:47:8b:60:08:a7: a3:c6:ab:8e:5b:a2:58:f1:d8:61:1c:b8:31:23:39: 48:01:09:60:f4:b5:3c:93:6f:d1:a8:c9:22:40:32: 6d:e6:48:29:b6:73:88:a6:8c:d9:f6:ec:d8:da:07: 5c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C1:54:9D:72:D2:1C:11:49:1F:CC:1F:4D:A9:B8:C8:78:27:63:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2a2a7398-b5f7-35e5-ad00-960cf5bd2d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 45.248.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ba:89:02:25:33:e6:93:81:93:bd:c4:90:62:04:26:dd:88: cf:40:bd:8d:76:26:89:39:db:9a:8c:4e:54:43:71:4b:f0:9b: ff:97:18:78:80:e9:37:d5:da:2f:96:48:d9:20:d1:a9:6d:b9: 70:52:f3:70:9b:c8:90:78:34:48:8f:f1:90:70:bc:00:e6:ac: 05:a2:b9:df:51:ed:8a:48:1b:cb:a5:a3:9e:e9:c7:5a:d8:dd: 0c:42:37:93:de:bf:c7:03:e9:a6:68:34:ce:e2:21:d2:59:d9: 2b:f8:b7:7a:e0:eb:6a:e8:08:6d:e4:96:21:a2:81:5f:75:8b: 9c:4b:33:74:62:02:f6:52:c7:6d:47:3c:08:e6:24:38:97:c1: 90:47:8d:50:9e:55:87:da:2d:59:d2:f6:0f:28:98:9b:c5:3c: 9e:9a:3e:10:0e:f8:ad:7e:40:1b:5e:93:3b:4d:a2:21:75:a9: 76:64:81:be:72:b8:63:7f:00:6f:e7:8c:d3:17:7b:6e:27:d5: 53:c8:62:25:fb:3c:fc:7d:1e:db:43:db:51:59:5c:cb:ff:c4: 88:3f:eb:a4:54:f7:52:a2:a2:cf:d4:e2:36:1c:53:16:d6:a7: 61:04:c1:17:08:f3:72:e9:28:e9:d5:29:85:de:8b:99:4a:ab: 3d:f2:44:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3vwZCHtsfgew7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MTY4OTMxZWYtNjk3Mi00ZGEwLTg5M2MtMDVlODU5ZDQ3YjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxTpjJuais02juV1BAmzU7hgLrygkxnQ1gat 1bClfXf1torIsL44Ct1r+6bPg5jM/aWuApVvKERYQD5CS5+nPf4RoOUCgKUSWCIL fQkwvdRkcCXq15Bj0T46T8OBmSsjgHiNpekyeEoKSy5IZrmsdTSUIE8PeUpTJrK0 hbKNXCTeM4SciAUHyaTExUhXGcKP5rrF8EmBJEnl4jVKa0k1VeqCRRncuk/KzVvk HHDLzQ90bkMWwT4ka0T6fwROdTKjchCj/VrOuvzPqOOGR4tgCKejxquOW6JY8dhh HLgxIzlIAQlg9LU8k2/RqMkiQDJt5kgptnOIpozZ9uzY2gdcrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjBVJ1y0hwRSR/MH02puMh4J2MMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMmEyYTczOTgtYjVmNy0z NWU1LWFkMDAtOTYwY2Y1YmQyZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALfh8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa6iQIlM+aTgZO9xJBiBCbdiM9AvY12Jok525qMTlRDcUvwm/+XGHiA 6TfV2i+WSNkg0altuXBS83CbyJB4NEiP8ZBwvADmrAWiud9R7YpIG8ulo57px1rY 3QxCN5Pev8cD6aZoNM7iIdJZ2Sv4t3rg62roCG3kliGigV91i5xLM3RiAvZSx21H PAjmJDiXwZBHjVCeVYfaLVnS9g8omJvFPJ6aPhAO+K1+QBtekztNoiF1qXZkgb5y uGN/AG/njNMXe24n1VPIYiX7PPx9HttD21FZXMv/xIg/66RU91Kios/U4jYcUxbW p2EEwRcI83LpKOnVKYXei5lKqz3yRDk= -----END CERTIFICATE-----Generated at Wed Oct 22 05:10:06 2025 by rpki-client