$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/4dd89c0d-6f7d-3dd6-83e9-7e35e9549dff.roa File: 4dd89c0d-6f7d-3dd6-83e9-7e35e9549dff.roa (raw, json) Hash identifier: SkAABwSephpVnntjJhFGY1Cc2rYI58n25yxvE99GZ2U= Subject key identifier: 14:9D:4E:46:EE:EB:84:08:35:40:50:C4:4F:E9:E5:05:25:7E:0E:52 Certificate issuer: /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Certificate serial: 010D0C9F4328584B6797F5AED19CA16F41081E40 Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/4dd89c0d-6f7d-3dd6-83e9-7e35e9549dff.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 273143 IP address blocks: 45.88.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:f5:ae:d1:9c:a1:6f:41:08:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=77bf300e-20af-42bc-b738-715f7b0ba21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:49:33:6e:5e:51:dc:16:aa:c0:f5:ce:36:c4: 18:c1:a2:30:81:d6:fa:bd:d7:7c:a4:d8:b3:2a:77: d6:d3:20:3e:c0:d6:78:00:5c:ef:77:9b:bc:75:e6: 7f:4f:62:15:0e:04:98:8c:c1:57:2d:2c:b7:25:d8: 06:2b:94:55:28:42:99:0b:e4:bd:6c:67:74:35:1a: 45:a3:8b:46:6b:5d:3e:22:66:a9:89:0b:74:b5:f2: 8b:57:5d:02:1d:e1:62:8f:ad:30:23:f6:73:a4:5e: d8:f3:a2:72:95:5c:7f:2e:69:b6:af:21:24:d9:4a: 4a:f1:9a:a2:33:a6:3d:b0:54:5e:d4:b7:8f:ab:c8: ac:df:a2:e3:cc:79:7b:0c:55:2b:66:e5:c6:1b:a2: 90:e9:50:6f:02:ee:0e:be:0a:f6:c8:d7:0c:d6:3f: f2:30:d6:4f:30:30:24:67:9b:38:22:5e:17:15:f3: 5c:b3:f9:e5:b6:34:48:a2:34:1e:4c:74:2e:bd:25: 59:05:45:7a:0b:ba:b2:18:1b:f0:d1:63:4e:a3:24: de:9b:ab:b7:5e:51:34:fa:01:2f:06:5b:9d:e6:cb: a1:28:15:52:ca:38:db:65:20:8e:5d:33:17:cc:46: e8:78:83:df:6a:4c:fd:ac:cf:03:62:8e:21:b3:80: a7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9D:4E:46:EE:EB:84:08:35:40:50:C4:4F:E9:E5:05:25:7E:0E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/4dd89c0d-6f7d-3dd6-83e9-7e35e9549dff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl X509v3 Authority Key Identifier: keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer sbgp-ipAddrBlock: critical IPv4: 45.88.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:c9:6a:c5:6e:96:7c:d4:0a:c7:02:d1:8b:c6:61:79:e5:c0: bc:ba:37:73:a0:00:b6:5c:c0:f3:69:5b:83:68:10:72:fe:ff: 7d:2b:66:a8:93:e8:f6:ea:3a:80:0a:3d:0b:e2:04:1e:9d:32: b0:a1:d2:a5:98:a9:3b:5c:1b:eb:9c:4b:ad:5c:09:d1:49:ea: ee:b7:3f:2e:8c:7c:c5:40:03:64:9d:56:0a:24:bf:c8:61:2e: c7:01:3a:15:4a:35:74:ee:a6:43:d1:15:b9:ed:95:57:92:76: e5:fd:82:af:ef:48:0f:56:97:18:b6:ee:dc:04:40:f6:fc:1d: eb:5a:2c:0d:a2:a7:fc:7c:2b:f4:3a:97:18:21:4d:61:99:c9: 5b:f2:70:4f:dd:a7:5a:c1:c6:f6:2b:2d:80:2f:55:04:89:20: 08:2e:fb:f7:33:21:cc:93:8d:43:c0:d7:1b:ad:d2:cf:86:31: 1d:b9:74:c9:9c:4e:24:57:d7:92:16:85:92:4d:40:75:8b:e2: 5c:83:02:6d:b1:86:80:d2:63:72:16:f3:f1:ee:f8:a3:37:d9: fb:6a:58:fa:b6:5c:0e:c4:ee:90:55:75:a5:fb:f3:dd:44:4e: 22:53:80:65:a5:f7:b0:9f:06:82:48:62:5a:d9:2d:8d:ad:2b: 73:44:38:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/Wu0Zyhb0EIHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4 MWIyMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NzdiZjMwMGUtMjBhZi00MmJjLWI3MzgtNzE1ZjdiMGJhMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0kzbl5R3BaqwPXONsQYwaIwgdb6vdd8pNiz KnfW0yA+wNZ4AFzvd5u8deZ/T2IVDgSYjMFXLSy3JdgGK5RVKEKZC+S9bGd0NRpF o4tGa10+ImapiQt0tfKLV10CHeFij60wI/ZzpF7Y86JylVx/Lmm2ryEk2UpK8Zqi M6Y9sFRe1LePq8is36LjzHl7DFUrZuXGG6KQ6VBvAu4Ovgr2yNcM1j/yMNZPMDAk Z5s4Il4XFfNcs/nltjRIojQeTHQuvSVZBUV6C7qyGBvw0WNOoyTem6u3XlE0+gEv Blud5suhKBVSyjjbZSCOXTMXzEboeIPfakz9rM8DYo4hs4CnowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSdTkbu64QINUBQxE/p5QUlfg5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFl OGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvNGRkODljMGQtNmY3ZC0z ZGQ2LTgzZTktN2UzNWU5NTQ5ZGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDUxZThkOWYtZDllYS00NWNmLThm YjktMjgxMWU4NmI4MWIyLzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04ZmI5LTI4MTFlODZi ODFiMi5jcmwwHwYDVR0jBBgwFoAU8rMonBGkahiZAc+bjSQ+l9AEF8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODEx ZTg2YjgxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVjbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7JasVulnzUCscC0YvGYXnlwLy6N3OgALZcwPNpW4NoEHL+/30rZqiT 6PbqOoAKPQviBB6dMrCh0qWYqTtcG+ucS61cCdFJ6u63Py6MfMVAA2SdVgokv8hh LscBOhVKNXTupkPRFbntlVeSduX9gq/vSA9Wlxi27twEQPb8HetaLA2ip/x8K/Q6 lxghTWGZyVvycE/dp1rBxvYrLYAvVQSJIAgu+/czIcyTjUPA1xut0s+GMR25dMmc TiRX15IWhZJNQHWL4lyDAm2xhoDSY3IW8/Hu+KM32ftqWPq2XA7E7pBVdaX7891E TiJTgGWl97CfBoJIYlrZLY2tK3NEOAc= -----END CERTIFICATE-----Generated at Mon Oct 20 05:55:35 2025 by rpki-client