$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/e4d7f4d6-9c79-3afc-8a8a-d0c8ecad7a48.roa File: e4d7f4d6-9c79-3afc-8a8a-d0c8ecad7a48.roa (raw, json) Hash identifier: Bd/yKLjhH0xRVjxCbbTbP+znpIU8oa5k4LwaMf1Emu4= Subject key identifier: F6:14:98:0E:3D:3C:41:8A:E4:98:80:54:AD:6D:09:1F:1E:26:1B:EC Certificate issuer: /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Certificate serial: 010D0C9F4328584B89177786B0223A3C3453A280 Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/e4d7f4d6-9c79-3afc-8a8a-d0c8ecad7a48.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 6206 IP address blocks: 45.91.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:77:86:b0:22:3a:3c:34:53:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=85a7083e-2123-4f69-8dcf-ff1f34a98af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:7c:8e:94:db:7a:24:5e:a7:09:29:35:8c: f9:33:a9:6b:e7:e5:f3:20:75:04:2c:39:50:4c:15: d5:f6:dd:77:a0:8d:ae:c8:80:d2:ad:ee:21:1e:aa: 49:5a:36:d1:ab:79:d6:ae:a0:7f:0c:26:c7:4a:66: 22:06:2a:fa:e8:e7:4e:8a:1b:80:bb:dd:79:00:1d: cf:f3:9b:61:04:c2:14:3a:bc:3f:44:91:a6:ff:01: 5d:f2:f6:ae:22:f9:76:43:97:4c:68:a2:0e:8e:ce: c8:3f:ac:12:d3:3c:e0:f3:b4:cf:7b:ef:e4:d2:10: 15:f4:9b:41:db:dc:90:d8:1a:72:7b:31:c2:9f:17: d9:45:64:3e:df:a1:fd:ed:b8:05:d0:07:5b:79:09: 68:49:40:9c:4d:cd:42:47:b7:87:a7:bf:31:e3:af: e3:3c:2d:6c:8f:4a:8f:9b:86:97:32:41:81:4c:6c: b1:4a:bf:ab:b5:ef:88:36:84:f4:9e:d4:29:f3:fe: 57:89:96:ef:08:03:60:5b:4f:72:2a:bd:0d:2d:a5: 30:36:9d:71:25:79:f9:ac:53:64:69:20:82:53:0a: 46:53:23:c4:c7:42:e7:d2:92:c1:26:27:52:bd:fb: e4:89:a7:7a:66:95:3c:89:6a:fa:9b:c2:12:cf:97: 78:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:14:98:0E:3D:3C:41:8A:E4:98:80:54:AD:6D:09:1F:1E:26:1B:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/e4d7f4d6-9c79-3afc-8a8a-d0c8ecad7a48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl X509v3 Authority Key Identifier: keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer sbgp-ipAddrBlock: critical IPv4: 45.91.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:54:65:45:85:25:7d:0a:90:50:f9:f2:28:f4:d4:ef:07:f4: 74:c0:50:8a:1d:84:8b:95:7b:45:d8:62:d4:33:9a:bd:40:54: 1c:d0:01:cf:c8:74:da:27:8f:dc:17:b7:b1:59:e0:d5:29:0f: 6f:73:66:09:5e:26:39:f3:7e:05:f6:15:6e:30:54:a2:a9:c2: 3c:1d:7c:6a:fe:e9:04:70:42:b5:8a:26:8f:65:e5:1c:2d:88: 11:fa:06:fa:7c:fc:ed:5b:f1:5e:d6:c6:a3:5f:13:62:68:d3: 4c:5b:5f:f7:38:70:14:74:32:9f:2a:64:27:a7:6d:30:f2:01: e8:f3:cd:5c:60:df:0d:87:f2:8e:ef:58:f4:c3:e8:6e:85:8b: d4:ce:76:c7:18:10:f0:13:5b:18:17:57:bd:46:3a:cb:21:66: bc:f4:6d:3b:7f:34:53:d5:ca:aa:ca:7f:e2:4d:66:3a:c9:1d: b7:86:78:28:f5:87:e9:c4:b5:4f:64:39:f1:83:11:68:1d:10: 6a:74:9f:d9:ba:c7:f5:3f:e6:01:8d:b8:c0:e7:16:6a:45:6c: 79:7a:41:49:05:4f:33:69:bb:b0:33:b5:e8:72:d2:08:5b:ba: dc:90:1a:9d:59:61:ca:90:8a:af:ed:e4:4a:02:e4:0f:a3:b3: c8:e2:76:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3eGsCI6PDRTooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4 MWIyMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ODVhNzA4M2UtMjEyMy00ZjY5LThkY2YtZmYxZjM0YTk4YWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjF8jpTbeiRepwkpNYz5M6lr5+XzIHUELDlQ TBXV9t13oI2uyIDSre4hHqpJWjbRq3nWrqB/DCbHSmYiBir66OdOihuAu915AB3P 85thBMIUOrw/RJGm/wFd8vauIvl2Q5dMaKIOjs7IP6wS0zzg87TPe+/k0hAV9JtB 29yQ2BpyezHCnxfZRWQ+36H97bgF0AdbeQloSUCcTc1CR7eHp78x46/jPC1sj0qP m4aXMkGBTGyxSr+rte+INoT0ntQp8/5XiZbvCANgW09yKr0NLaUwNp1xJXn5rFNk aSCCUwpGUyPEx0Ln0pLBJidSvfvkiad6ZpU8iWr6m8ISz5d4zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYUmA49PEGK5JiAVK1tCR8eJhvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFl OGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvZTRkN2Y0ZDYtOWM3OS0z YWZjLThhOGEtZDBjOGVjYWQ3YTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDUxZThkOWYtZDllYS00NWNmLThm YjktMjgxMWU4NmI4MWIyLzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04ZmI5LTI4MTFlODZi ODFiMi5jcmwwHwYDVR0jBBgwFoAU8rMonBGkahiZAc+bjSQ+l9AEF8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODEx ZTg2YjgxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtUZUWFJX0KkFD58ij01O8H9HTAUIodhIuVe0XYYtQzmr1AVBzQAc/I dNonj9wXt7FZ4NUpD29zZgleJjnzfgX2FW4wVKKpwjwdfGr+6QRwQrWKJo9l5Rwt iBH6Bvp8/O1b8V7WxqNfE2Jo00xbX/c4cBR0Mp8qZCenbTDyAejzzVxg3w2H8o7v WPTD6G6Fi9TOdscYEPATWxgXV71GOsshZrz0bTt/NFPVyqrKf+JNZjrJHbeGeCj1 h+nEtU9kOfGDEWgdEGp0n9m6x/U/5gGNuMDnFmpFbHl6QUkFTzNpu7Aztehy0ghb utyQGp1ZYcqQiq/t5EoC5A+js8jidis= -----END CERTIFICATE-----Generated at Sun Oct 19 17:26:59 2025 by rpki-client