$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/db335f49-33b5-3fb9-b874-7f2019b787b7.roa File: db335f49-33b5-3fb9-b874-7f2019b787b7.roa (raw, json) Hash identifier: 46fAZWEBFh9jUhSxAJKUf/g74CAtbo9M2UMDBJnIF4M= Subject key identifier: A7:AD:29:64:F9:5C:F1:EC:DE:40:F5:D3:2F:DB:62:0D:12:9F:37:D6 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584AF0F14C10C8ECEDF17EB38D70 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/db335f49-33b5-3fb9-b874-7f2019b787b7.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 202656 IP address blocks: 209.145.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:4c:10:c8:ec:ed:f1:7e:b3:8d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=dff85efd-6520-4051-b333-6183f1b47c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:11:eb:84:80:c5:73:1c:a3:13:4d:55:57: a8:a1:ca:f5:a9:b3:6a:8a:ea:43:92:a8:11:ac:8d: 7a:18:a5:cd:ac:90:12:a6:6a:ac:33:1e:7c:62:3b: b4:f5:61:db:13:d0:59:56:d2:43:d9:b3:4a:14:57: 0e:cf:b1:ff:48:64:ef:f3:cd:45:fb:8a:3c:4e:e9: ad:62:cf:19:63:2b:9f:5c:a4:f9:31:48:2d:ee:5d: 2b:c5:77:72:fa:6b:50:f1:fc:34:cd:5c:6a:9e:6b: 94:bb:95:ed:1f:03:f0:c9:c8:00:10:2a:41:55:4d: 91:3e:5a:26:76:f0:50:77:09:43:b3:75:7e:94:cf: d1:05:ed:40:1a:96:31:aa:6d:9f:1c:1b:99:b5:39: 74:d2:6a:2b:40:c3:7e:98:ba:a6:9e:34:70:99:a0: d5:5f:3b:13:63:74:23:6c:f5:9e:09:c7:49:dc:32: b6:a8:ec:c2:d7:6d:9c:64:da:f0:16:7f:ae:33:65: f9:26:79:3d:15:12:76:0c:b6:d6:43:2d:45:d9:f3: 3e:c2:de:67:7c:04:64:d8:d1:3e:b7:be:09:d6:c3: d3:5b:fd:56:2e:32:e5:a2:f3:8b:0d:4b:8a:77:61: 0b:30:e8:28:df:9e:8f:28:71:dc:21:f5:af:6f:b2: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AD:29:64:F9:5C:F1:EC:DE:40:F5:D3:2F:DB:62:0D:12:9F:37:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/db335f49-33b5-3fb9-b874-7f2019b787b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.145.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:e9:b1:32:e4:f0:36:14:54:7f:63:d0:21:b6:36:a5:a8:92: 9a:82:76:c3:9d:93:28:eb:e3:05:b9:9d:3d:c7:ae:f3:cb:a3: dd:3f:c9:48:8b:80:6b:7a:e1:06:98:37:ec:1b:b4:84:58:58: 07:04:0f:98:cd:22:17:95:3e:70:88:ca:47:ed:4a:b2:b5:8c: ed:fc:45:98:c2:06:49:9d:4b:f3:39:ea:d1:b5:18:e3:db:00: 7c:31:f6:1a:bb:17:b8:76:f7:34:c1:9a:35:67:f6:d2:64:2a: ca:da:b1:d0:98:52:7b:40:6c:c8:96:7f:68:18:d5:94:f7:f6: 91:04:bb:ac:13:5b:44:d7:47:2d:90:73:12:8d:0b:f8:fc:bd: 0d:7e:59:51:73:5c:66:4c:af:f4:b2:92:64:41:e6:13:c5:89: 37:09:66:2c:ad:1d:bd:ab:e3:39:c0:c2:79:82:b6:de:7f:7e: d6:87:93:83:be:15:cf:39:72:fc:2e:3d:e1:68:2a:6c:07:da: 23:65:36:83:51:49:c9:5b:7f:70:36:82:9a:6f:6b:65:7c:98: 9c:9a:1c:0f:3b:17:cf:2d:ab:69:f3:7f:46:85:0e:7e:66:94: 0a:87:9a:18:1f:e4:dd:6e:28:a0:dc:7b:e4:df:bc:14:3a:88: 8b:0e:bf:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UwQyOzt8X6zjXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZGZmODVlZmQtNjUyMC00MDUxLWIzMzMtNjE4M2YxYjQ3YzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbIR64SAxXMcoxNNVVeoocr1qbNqiupDkqgR rI16GKXNrJASpmqsMx58Yju09WHbE9BZVtJD2bNKFFcOz7H/SGTv881F+4o8Tumt Ys8ZYyufXKT5MUgt7l0rxXdy+mtQ8fw0zVxqnmuUu5XtHwPwycgAECpBVU2RPlom dvBQdwlDs3V+lM/RBe1AGpYxqm2fHBuZtTl00morQMN+mLqmnjRwmaDVXzsTY3Qj bPWeCcdJ3DK2qOzC122cZNrwFn+uM2X5Jnk9FRJ2DLbWQy1F2fM+wt5nfARk2NE+ t74J1sPTW/1WLjLlovOLDUuKd2ELMOgo356PKHHcIfWvb7IZvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKetKWT5XPHs3kD10y/bYg0SnzfWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZGIzMzVmNDktMzNiNS0z ZmI5LWI4NzQtN2YyMDE5Yjc4N2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZEtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXpsTLk8DYUVH9j0CG2NqWokpqCdsOdkyjr4wW5nT3HrvPLo90/yUiL gGt64QaYN+wbtIRYWAcED5jNIheVPnCIykftSrK1jO38RZjCBkmdS/M56tG1GOPb AHwx9hq7F7h29zTBmjVn9tJkKsrasdCYUntAbMiWf2gY1ZT39pEEu6wTW0TXRy2Q cxKNC/j8vQ1+WVFzXGZMr/SykmRB5hPFiTcJZiytHb2r4znAwnmCtt5/ftaHk4O+ Fc85cvwuPeFoKmwH2iNlNoNRSclbf3A2gppva2V8mJyaHA87F88tq2nzf0aFDn5m lAqHmhgf5N1uKKDce+TfvBQ6iIsOvzw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:45:31 2025 by rpki-client