$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa File: 1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa (raw, json) Hash identifier: 9tSx6wA3lNwnDZyhQdh32QllVKYXwssxZhKEQjqpQz4= Subject key identifier: 60:74:F0:CE:AC:2A:71:7D:B5:86:20:D8:DF:10:3A:26:92:74:50:5E Certificate issuer: /CN=543031bb-b48b-4efb-ae26-4035688199f7 Certificate serial: 010D0C9F4328584AECC12E3DCE1E844628D3D880 Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3257 IP address blocks: 45.41.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:2e:3d:ce:1e:84:46:28:d3:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b77e7c63-ae4f-4a08-80d2-2e24ab3ea28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2c:3b:e4:54:c0:18:66:30:74:c9:10:88:2d: 6e:e3:85:6a:c5:2c:84:b3:a0:b3:d8:7c:ca:37:af: 8c:f0:97:5e:14:4a:39:7b:31:c8:fd:fc:55:28:3e: f8:56:79:45:fb:d2:b7:06:d6:04:47:41:29:f5:e2: 33:3a:19:f2:02:f8:63:5d:3c:ce:99:2d:01:70:5d: d6:8a:25:88:79:bc:e1:77:0a:59:96:f1:96:45:12: c6:b9:61:78:92:38:d5:89:bd:8e:70:af:4e:08:57: ed:6a:a4:af:3a:ff:32:f0:28:88:06:56:1c:48:55: d8:d5:ac:d4:5f:61:e0:45:26:8c:a0:41:2e:94:81: d2:ba:7e:cb:71:e8:1a:63:d6:e1:97:81:aa:d7:f3: 06:1b:44:34:30:59:20:35:4a:fc:d5:8b:b2:55:14: 36:d0:a0:77:1b:36:8e:ea:7d:4e:f3:75:a2:06:3d: be:a9:d1:37:74:a9:fe:fc:8c:b2:bc:72:c2:24:51: ab:d2:7b:cf:6e:31:3a:a4:aa:3c:5f:32:50:78:95: ac:ce:99:43:6d:70:39:bd:04:54:b1:b0:44:6d:b0: 67:95:ba:1b:76:db:d5:95:a3:aa:14:b9:0a:07:fa: ee:0e:99:cd:e7:b7:68:01:30:cd:27:d0:6f:40:3d: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:74:F0:CE:AC:2A:71:7D:B5:86:20:D8:DF:10:3A:26:92:74:50:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl X509v3 Authority Key Identifier: keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer sbgp-ipAddrBlock: critical IPv4: 45.41.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ba:31:14:40:0a:77:3d:1c:a6:02:5f:1c:bf:7e:67:d1:b7: 8d:14:e4:7e:eb:4c:3e:9c:c3:93:c6:3a:a2:5b:b4:43:bf:30: 12:b9:45:b3:2b:57:8f:07:16:63:49:27:ec:db:9a:31:57:53: cf:35:78:7e:3a:4e:30:85:fd:5d:71:3b:1b:a1:35:ed:dc:07: 4e:6d:85:68:b8:1f:d8:1f:c2:ba:37:a4:6e:ba:7b:44:49:03: af:5d:c9:14:04:3e:95:02:f5:fe:03:23:9d:02:79:4c:be:3e: 4a:05:43:f9:a6:fc:b0:e9:0a:ec:76:8e:22:ac:f2:34:52:a4: 5d:42:1a:18:b4:df:da:36:34:e9:e6:b4:b2:91:9f:d8:8d:3d: 71:18:8c:cb:65:c5:fb:6a:da:48:9e:a2:a2:5f:12:ab:f8:70: 29:74:40:01:6b:7b:70:a5:7f:cb:3a:3a:97:37:c7:a1:3a:19: 6f:32:2b:c1:cd:b9:69:ec:bc:2a:e4:54:96:c0:cf:f7:eb:48: 49:74:0a:3e:3f:63:fc:22:0b:3f:b5:cf:73:43:7b:20:03:52: 06:c2:91:dd:f0:51:38:6a:c7:b7:5f:66:86:76:f2:68:62:c0: 58:0c:e0:fb:0d:d0:4d:be:70:b1:9a:98:eb:ff:9a:8c:b6:fc: 9f:8a:ab:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswS49zh6ERijT2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQzMDMxYmItYjQ4Yi00ZWZiLWFlMjYtNDAzNTY4ODE5 OWY3MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Yjc3ZTdjNjMtYWU0Zi00YTA4LTgwZDItMmUyNGFiM2VhMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCw75FTAGGYwdMkQiC1u44VqxSyEs6Cz2HzK N6+M8JdeFEo5ezHI/fxVKD74VnlF+9K3BtYER0Ep9eIzOhnyAvhjXTzOmS0BcF3W iiWIebzhdwpZlvGWRRLGuWF4kjjVib2OcK9OCFftaqSvOv8y8CiIBlYcSFXY1azU X2HgRSaMoEEulIHSun7LcegaY9bhl4Gq1/MGG0Q0MFkgNUr81YuyVRQ20KB3GzaO 6n1O83WiBj2+qdE3dKn+/IyyvHLCJFGr0nvPbjE6pKo8XzJQeJWszplDbXA5vQRU sbBEbbBnlbobdtvVlaOqFLkKB/ruDpnN57doATDNJ9BvQD3ccwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB08M6sKnF9tYYg2N8QOiaSdFBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NDMw MzFiYi1iNDhiLTRlZmItYWUyNi00MDM1Njg4MTk5ZjcvMWFjYmJiYzItMDJhMi0z ZWEwLTk3MmQtODU3NDJkNGJhNjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTQzMDMxYmItYjQ4Yi00ZWZiLWFl MjYtNDAzNTY4ODE5OWY3LzU0MzAzMWJiLWI0OGItNGVmYi1hZTI2LTQwMzU2ODgx OTlmNy5jcmwwHwYDVR0jBBgwFoAULS998jX/Dvkwd4cgQfSA0j4I2OowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NDMwMzFiYi1iNDhiLTRlZmItYWUyNi00MDM1 Njg4MTk5ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSk8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC6MRRACnc9HKYCXxy/fmfRt40U5H7rTD6cw5PGOqJbtEO/MBK5RbMr V48HFmNJJ+zbmjFXU881eH46TjCF/V1xOxuhNe3cB05thWi4H9gfwro3pG66e0RJ A69dyRQEPpUC9f4DI50CeUy+PkoFQ/mm/LDpCux2jiKs8jRSpF1CGhi039o2NOnm tLKRn9iNPXEYjMtlxftq2kieoqJfEqv4cCl0QAFre3Clf8s6Opc3x6E6GW8yK8HN uWnsvCrkVJbAz/frSEl0Cj4/Y/wiCz+1z3NDeyADUgbCkd3wUThqx7dfZoZ28mhi wFgM4PsN0E2+cLGamOv/moy2/J+Kq0g= -----END CERTIFICATE-----Generated at Sat Aug 23 15:51:58 2025 by rpki-client