$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/85854aeb-4f2d-3134-a3ea-5b1335ff125f.roa File: 85854aeb-4f2d-3134-a3ea-5b1335ff125f.roa (raw, json) Hash identifier: vZYRkNc85TgnOAsIbNtK40ro9r+TsJR6cPN4ZJQT4U0= Subject key identifier: 05:E5:BE:40:C7:80:2A:98:CA:26:5D:9B:05:1F:38:BE:56:AC:66:25 Certificate issuer: /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Certificate serial: 010D0C9F4328584B6BC74C582F1A7EAAC4722680 Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/85854aeb-4f2d-3134-a3ea-5b1335ff125f.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 206092 IP address blocks: 45.88.217.0/24 maxlen: 24 45.88.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:4c:58:2f:1a:7e:aa:c4:72:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=98ba22e5-dc1f-402e-92bd-6bb4d6ca7b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:d2:95:3f:f7:ae:8d:ff:3c:60:22:d9:96: 68:ae:3b:b9:d7:a8:30:77:01:62:3c:87:b4:ab:f8: 06:58:ad:0e:34:4e:c1:4a:32:4c:b7:59:72:46:d4: 87:40:1b:55:90:92:ad:20:17:da:50:7e:55:1c:b3: 87:51:71:8e:6d:2d:b2:bb:0f:60:e6:6a:f5:9f:d2: 41:32:f3:14:71:f3:63:0a:5a:5c:5e:1b:45:5f:91: e7:13:8b:8b:3a:46:fd:fe:d7:95:04:08:b3:37:a2: 52:ab:e9:d7:ae:ba:a4:93:86:e8:d8:f8:63:03:f5: 08:84:87:af:83:a7:34:87:eb:fc:68:65:32:f6:9f: 3c:df:f7:73:b6:3f:99:aa:78:45:90:1a:2a:83:6f: e4:20:71:01:e0:22:e0:83:99:79:e7:f6:b0:78:d5: c7:cd:e1:56:f4:26:73:49:aa:e1:0f:d5:5b:d3:aa: ed:f4:5e:83:46:70:cc:c1:9f:8b:cc:bd:e6:c8:5f: 87:9f:73:86:36:35:ee:ce:cc:71:42:f2:3b:1f:18: 2c:f4:91:36:07:1e:30:e1:9d:b4:10:e2:1b:45:f7: 88:ed:1f:99:02:d7:48:22:90:dd:51:ca:35:73:c0: bd:47:56:b4:5d:9b:77:3d:ed:40:9e:a9:af:c0:1e: 2a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E5:BE:40:C7:80:2A:98:CA:26:5D:9B:05:1F:38:BE:56:AC:66:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/85854aeb-4f2d-3134-a3ea-5b1335ff125f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl X509v3 Authority Key Identifier: keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer sbgp-ipAddrBlock: critical IPv4: 45.88.217.0-45.88.218.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c3:31:1b:c6:3b:8b:bf:fb:f3:63:e3:13:35:f2:5d:d4:0b: 49:ce:a0:f4:70:38:b5:9e:9d:16:4e:4d:42:33:f2:4e:0f:ad: 92:19:4c:e4:96:3f:27:04:c1:60:da:55:52:8b:61:52:9a:d5: 02:a9:ec:5b:6d:ba:21:f2:ff:1b:61:23:d3:84:35:17:ef:d7: d0:9a:3e:d8:79:6f:c8:a6:be:76:6f:f8:72:42:8d:fc:98:02: f5:55:db:db:b4:45:cf:b1:5b:78:b8:1e:5b:db:90:1c:6b:63: fd:03:48:68:d6:36:4a:bd:8c:8b:72:f7:7c:c1:e2:6a:e4:b7: 5f:35:3f:4d:4b:fb:0d:71:95:6f:a4:9c:6a:6a:0d:58:4e:15: 5c:30:fa:4f:c9:9e:7a:07:8c:4d:ff:1f:45:ad:ed:c9:49:4e: 83:a0:ec:37:b0:39:b3:c0:8d:2f:4d:d8:14:a7:2e:98:59:24: 14:45:82:58:47:0f:71:bb:72:a9:80:3f:3b:4f:df:c2:5e:f9: 7b:9b:a6:86:60:b2:a0:8f:37:a3:5a:94:3e:21:04:d2:dc:52: d5:8c:76:59:69:39:ca:0b:90:37:22:ae:38:61:08:45:e6:ca: cf:75:0b:0a:c9:2d:38:e5:ff:07:65:71:d1:93:d6:89:d8:eb: ad:17:71:e8 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEtrx0xYLxp+qsRyJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4 MWIyMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk OThiYTIyZTUtZGMxZi00MDJlLTkyYmQtNmJiNGQ2Y2E3YjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNbSlT/3ro3/PGAi2ZZorju516gwdwFiPIe0 q/gGWK0ONE7BSjJMt1lyRtSHQBtVkJKtIBfaUH5VHLOHUXGObS2yuw9g5mr1n9JB MvMUcfNjClpcXhtFX5HnE4uLOkb9/teVBAizN6JSq+nXrrqkk4bo2PhjA/UIhIev g6c0h+v8aGUy9p883/dztj+ZqnhFkBoqg2/kIHEB4CLgg5l55/aweNXHzeFW9CZz SarhD9Vb06rt9F6DRnDMwZ+LzL3myF+Hn3OGNjXuzsxxQvI7Hxgs9JE2Bx4w4Z20 EOIbRfeI7R+ZAtdIIpDdUco1c8C9R1a0XZt3Pe1AnqmvwB4qmQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFAXlvkDHgCqYyiZdmwUfOL5WrGYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFl OGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvODU4NTRhZWItNGYyZC0z MTM0LWEzZWEtNWIxMzM1ZmYxMjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDUxZThkOWYtZDllYS00NWNmLThm YjktMjgxMWU4NmI4MWIyLzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04ZmI5LTI4MTFlODZi ODFiMi5jcmwwHwYDVR0jBBgwFoAU8rMonBGkahiZAc+bjSQ+l9AEF8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODEx ZTg2YjgxYjIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtWNkD BAAtWNowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAYMMxG8Y7i7/782PjEzXyXdQLSc6g9HA4tZ6dFk5NQjPy Tg+tkhlM5JY/JwTBYNpVUothUprVAqnsW226IfL/G2Ej04Q1F+/X0Jo+2HlvyKa+ dm/4ckKN/JgC9VXb27RFz7FbeLgeW9uQHGtj/QNIaNY2Sr2Mi3L3fMHiauS3XzU/ TUv7DXGVb6ScamoNWE4VXDD6T8meegeMTf8fRa3tyUlOg6DsN7A5s8CNL03YFKcu mFkkFEWCWEcPcbtyqYA/O0/fwl75e5umhmCyoI83o1qUPiEE0txS1Yx2WWk5yguQ NyKuOGEIRebKz3ULCsktOOX/B2Vx0ZPWidjrrRdx6A== -----END CERTIFICATE-----Generated at Mon Oct 20 08:47:25 2025 by rpki-client