$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/c5e7d673-2631-32f8-b9e6-39bb07a293a0.roa File: c5e7d673-2631-32f8-b9e6-39bb07a293a0.roa (raw, json) Hash identifier: oaGEX6FpfQTV0ktmWejYhcdgBP8OTwlxrrh4AK1xyqA= Subject key identifier: 61:B2:3E:67:D1:10:A2:19:8A:D6:4E:0C:C8:2B:31:ED:A1:01:3A:F7 Certificate issuer: /CN=ea05ab9a-d4fc-4641-a614-4f664f460fa5 Certificate serial: 010D0C9F4328584AF0F13951942789E5545F2DC0 Authority key identifier: CE:14:08:DA:A9:44:7B:7A:F9:F3:F4:DE:6E:11:8E:E3:D1:12:82:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/c5e7d673-2631-32f8-b9e6-39bb07a293a0.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 7311 IP address blocks: 45.2.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/ea05ab9a-d4fc-4641-a614-4f664f460fa5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/ea05ab9a-d4fc-4641-a614-4f664f460fa5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:39:51:94:27:89:e5:54:5f:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea05ab9a-d4fc-4641-a614-4f664f460fa5 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=43484f3d-0885-423c-bf47-8f51124d0aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:96:ca:0f:9f:f0:88:46:20:1f:05:87:ce:fe: 77:36:cb:38:bf:f8:76:f0:a3:b4:f1:e9:d9:21:d2: 58:2f:d0:f5:34:c8:e0:21:cd:2b:eb:35:0f:4e:59: 7a:94:0b:29:cb:6b:be:26:8a:74:1d:6a:40:d1:e4: 49:72:b6:c5:e9:fa:c0:d3:08:cc:a9:2e:d9:92:31: f1:02:30:75:be:61:39:7d:e6:81:9b:d0:4b:0f:c0: d2:4f:4c:1d:e1:85:1e:a7:e3:f7:af:4d:de:10:f9: d5:2c:18:9d:f5:8f:73:83:d5:35:f3:8a:90:54:e5: 1f:7d:21:63:eb:d3:d0:eb:2b:9f:74:ac:b5:de:37: 27:b8:e1:91:ae:75:ab:df:3b:5b:68:2b:de:35:39: 95:3f:f1:c6:1a:63:b1:7c:07:77:26:b8:09:5a:51: 30:af:0c:bd:4f:a3:79:4e:d6:84:77:28:22:92:c1: e3:5b:be:9f:62:a8:67:6e:9c:54:81:d6:35:6e:de: ac:ab:5b:6b:78:51:7a:0a:40:9a:2b:e5:b8:8e:7b: 83:4e:87:d4:5e:86:72:f3:5d:fb:c9:c0:7f:2d:f2: d1:be:7b:98:15:84:d7:f3:cd:52:05:6a:85:80:d2: 0a:fe:b6:c3:66:f3:2e:b2:05:d8:a4:f0:70:65:a1: a5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B2:3E:67:D1:10:A2:19:8A:D6:4E:0C:C8:2B:31:ED:A1:01:3A:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/c5e7d673-2631-32f8-b9e6-39bb07a293a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/ea05ab9a-d4fc-4641-a614-4f664f460fa5.crl X509v3 Authority Key Identifier: keyid:CE:14:08:DA:A9:44:7B:7A:F9:F3:F4:DE:6E:11:8E:E3:D1:12:82:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5.cer sbgp-ipAddrBlock: critical IPv4: 45.2.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:82:c6:a8:2e:32:a0:65:ed:63:cb:25:0d:e9:3d:a7:17:00: 79:70:91:7f:73:47:d5:1e:07:43:c3:f8:ee:70:67:91:b6:5e: 37:03:1c:8c:2f:93:0f:0a:46:c2:9d:7a:de:fe:98:29:05:2a: a0:c6:f2:40:f8:d0:14:da:79:81:61:f2:60:8a:0e:fa:45:cc: 72:94:6b:91:8c:5c:61:64:3d:1c:f2:b5:59:ed:8c:06:a3:66: a4:12:2d:b6:46:5c:aa:12:bf:1f:fd:e5:77:f6:7c:b6:6a:f0: e1:0c:80:4e:66:72:5a:c5:a8:9f:9a:4d:7e:ca:e3:4f:b0:57: ac:3b:7f:1f:dd:af:7a:0c:e4:eb:d3:56:3d:40:4d:45:de:55: 03:a1:25:c3:a6:91:e4:fa:27:69:05:b5:25:75:20:61:c9:31: 2e:9f:b5:44:8b:77:57:65:6c:91:00:4b:79:0b:b5:fe:e5:57: 79:1a:73:db:95:84:ca:62:d0:2b:ed:4a:a1:b0:8a:7a:8e:0e: e3:bf:33:25:05:15:ef:55:f0:90:e7:e7:e9:47:56:02:7a:55: 14:34:54:f8:8b:20:f6:2d:2a:04:4d:5d:08:2e:f3:3e:53:a8: 37:a7:fb:49:81:92:f2:62:74:c7:d3:10:31:a2:86:e9:80:8c: e4:69:17:29 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErw8TlRlCeJ5VRfLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWEwNWFiOWEtZDRmYy00NjQxLWE2MTQtNGY2NjRmNDYw ZmE1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NDM0ODRmM2QtMDg4NS00MjNjLWJmNDctOGY1MTEyNGQwYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpbKD5/wiEYgHwWHzv53Nss4v/h28KO08enZ IdJYL9D1NMjgIc0r6zUPTll6lAspy2u+Jop0HWpA0eRJcrbF6frA0wjMqS7ZkjHx AjB1vmE5feaBm9BLD8DST0wd4YUep+P3r03eEPnVLBid9Y9zg9U184qQVOUffSFj 69PQ6yufdKy13jcnuOGRrnWr3ztbaCveNTmVP/HGGmOxfAd3JrgJWlEwrwy9T6N5 TtaEdygiksHjW76fYqhnbpxUgdY1bt6sq1treFF6CkCaK+W4jnuDTofUXoZy8137 ycB/LfLRvnuYFYTX881SBWqFgNIK/rbDZvMusgXYpPBwZaGlRwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGGyPmfREKIZitZODMgrMe2hATr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTA1 YWI5YS1kNGZjLTQ2NDEtYTYxNC00ZjY2NGY0NjBmYTUvYzVlN2Q2NzMtMjYzMS0z MmY4LWI5ZTYtMzliYjA3YTI5M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWEwNWFiOWEtZDRmYy00NjQxLWE2 MTQtNGY2NjRmNDYwZmE1L2VhMDVhYjlhLWQ0ZmMtNDY0MS1hNjE0LTRmNjY0ZjQ2 MGZhNS5jcmwwHwYDVR0jBBgwFoAUzhQI2qlEe3r58/TebhGO49ESgsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTA1YWI5YS1kNGZjLTQ2NDEtYTYxNC00ZjY2 NGY0NjBmYTUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMALQIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAiILGqC4yoGXtY8slDek9pxcAeXCRf3NH1R4HQ8P47nBnkbZeNwMcjC+T DwpGwp163v6YKQUqoMbyQPjQFNp5gWHyYIoO+kXMcpRrkYxcYWQ9HPK1We2MBqNm pBIttkZcqhK/H/3ld/Z8tmrw4QyATmZyWsWon5pNfsrjT7BXrDt/H92vegzk69NW PUBNRd5VA6Elw6aR5PonaQW1JXUgYckxLp+1RIt3V2VskQBLeQu1/uVXeRpz25WE ymLQK+1KobCKeo4O478zJQUV71XwkOfn6UdWAnpVFDRU+Isg9i0qBE1dCC7zPlOo N6f7SYGS8mJ0x9MQMaKG6YCM5GkXKQ== -----END CERTIFICATE-----Generated at Sun Aug 24 01:22:33 2025 by rpki-client