$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa File: 9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa (raw, json) Hash identifier: Gc2HVnzrUNs+xDl4h8pTITCxWypK3wC3I9lcS/y1nKg= Subject key identifier: C7:54:9C:9B:4B:12:F8:B2:E0:95:C5:57:28:14:A3:44:51:BF:36:FE Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584AEE26845A743B1D8BE947B000 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 38001 IP address blocks: 45.42.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:84:5a:74:3b:1d:8b:e9:47:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=4ebd7a7d-faf9-4635-bbec-8f3665210df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:65:27:c1:37:c7:a0:b4:5f:a4:06:c4:81:a4: 4d:58:ba:b0:94:5a:ba:c6:7b:db:ee:8a:e2:18:18: 23:d2:0b:82:bc:d4:16:e8:1f:2e:3d:3e:62:47:d8: f6:23:b2:d3:50:0f:6a:7d:ae:f5:45:bf:82:ca:d0: 53:93:5b:2c:e4:72:e3:d3:c3:3e:57:50:20:50:dc: 14:07:0d:a6:e6:e5:eb:2e:f8:d3:91:9b:20:f6:5b: 8f:18:29:c7:7a:b9:3e:43:bc:b5:7a:81:8f:9b:cc: 37:51:0a:a3:96:9c:de:48:f8:23:66:b1:aa:3d:e5: ce:f7:45:ae:e2:b0:42:47:b0:23:fb:37:79:f8:b0: 5e:32:9e:2e:82:7d:f0:98:68:9e:fe:53:96:4b:9b: 52:c2:f7:d2:9a:f6:71:f0:2d:6b:3e:7c:36:c2:4d: 2f:fe:c6:38:0d:26:62:a4:86:43:ac:f1:70:5d:a0: f7:b0:c9:90:00:30:61:ef:bd:48:3d:01:3c:01:d2: 54:24:ac:b8:90:56:16:8c:e4:87:2b:30:ae:dc:93: 2a:1a:52:91:44:0c:3c:62:d7:1f:8b:14:df:7d:49: ec:87:2b:47:ef:0e:ad:ee:ab:84:3a:ce:a1:91:70: 78:cc:1e:93:ff:a0:d6:42:45:c0:51:26:ee:32:35: c9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:54:9C:9B:4B:12:F8:B2:E0:95:C5:57:28:14:A3:44:51:BF:36:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 45.42.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:c9:74:bc:66:91:63:9f:08:d5:a2:da:03:67:16:fb:cd:df: 03:bb:84:42:bc:77:b7:0e:74:35:9c:e7:28:59:34:c5:7c:c8: 97:08:a3:11:02:14:19:d5:05:c2:fb:b3:4b:b9:20:23:03:eb: 44:9c:63:2b:8a:08:20:6f:bc:17:c1:18:10:10:dc:6c:05:f8: 5b:8e:d9:79:dc:38:ea:7e:d4:68:8b:91:ec:af:eb:f2:bd:5e: 25:8b:ea:34:f8:62:ed:40:b7:8d:ec:bf:89:04:11:d6:d6:ea: 2d:2d:a3:61:e9:15:01:65:d3:1f:91:7e:1a:85:17:56:bd:47: d2:63:9b:af:31:1c:8f:09:48:d2:3a:97:de:bd:a4:2f:1a:30: e3:29:98:b8:af:21:b0:9f:e7:9f:5e:c9:93:21:76:2f:f4:75: ec:35:bf:0f:46:06:e7:bc:77:04:59:28:f5:96:dc:21:48:b1: 57:1e:3a:0a:71:1c:9f:89:b8:ce:80:f4:b3:51:bc:8a:ec:6a: 0a:88:a7:1c:44:ff:d2:8e:2f:63:38:47:93:e2:f0:a6:54:c6: 6c:89:6a:1a:18:0c:f6:86:97:27:f9:e9:5f:dd:f0:dd:25:bd: c5:7d:9f:17:94:bf:cc:d0:95:82:65:e7:f6:e0:9d:f1:9e:56: cc:c1:fc:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJoRadDsdi+lHsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk NGViZDdhN2QtZmFmOS00NjM1LWJiZWMtOGYzNjY1MjEwZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GUnwTfHoLRfpAbEgaRNWLqwlFq6xnvb7ori GBgj0guCvNQW6B8uPT5iR9j2I7LTUA9qfa71Rb+CytBTk1ss5HLj08M+V1AgUNwU Bw2m5uXrLvjTkZsg9luPGCnHerk+Q7y1eoGPm8w3UQqjlpzeSPgjZrGqPeXO90Wu 4rBCR7Aj+zd5+LBeMp4ugn3wmGie/lOWS5tSwvfSmvZx8C1rPnw2wk0v/sY4DSZi pIZDrPFwXaD3sMmQADBh771IPQE8AdJUJKy4kFYWjOSHKzCu3JMqGlKRRAw8Ytcf ixTffUnshytH7w6t7quEOs6hkXB4zB6T/6DWQkXAUSbuMjXJ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdUnJtLEviy4JXFVygUo0RRvzb+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvOWRhNzU5MTYtZTQwYi0z ZGJlLWJkYmUtNzdkOTkxYzZmYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSqPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7JdLxmkWOfCNWi2gNnFvvN3wO7hEK8d7cOdDWc5yhZNMV8yJcIoxEC FBnVBcL7s0u5ICMD60ScYyuKCCBvvBfBGBAQ3GwF+FuO2XncOOp+1GiLkeyv6/K9 XiWL6jT4Yu1At43sv4kEEdbW6i0to2HpFQFl0x+RfhqFF1a9R9Jjm68xHI8JSNI6 l969pC8aMOMpmLivIbCf559eyZMhdi/0dew1vw9GBue8dwRZKPWW3CFIsVceOgpx HJ+JuM6A9LNRvIrsagqIpxxE/9KOL2M4R5Pi8KZUxmyJahoYDPaGlyf56V/d8N0l vcV9nxeUv8zQlYJl5/bgnfGeVszB/IQ= -----END CERTIFICATE-----Generated at Sat Aug 23 20:08:56 2025 by rpki-client