$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/fbcb741b-2e1f-3f74-9af9-ce4e12cd70dd.roa File: fbcb741b-2e1f-3f74-9af9-ce4e12cd70dd.roa (raw, json) Hash identifier: gwzRI+fwBDU2uG5FB1wAkMDrUdfvfYKJXGyFYUI+73A= Subject key identifier: ED:0C:74:43:CA:DF:6E:28:BE:64:A3:3E:38:00:37:AA:EF:02:4F:84 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584B4A001E2A294A94DC18D93900 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/fbcb741b-2e1f-3f74-9af9-ce4e12cd70dd.roa Signing time: Tue 23 Sep 2025 10:37:45 +0000 ROA not before: Tue 23 Sep 2025 10:37:45 +0000 ROA not after: Mon 22 Dec 2025 11:37:45 +0000 asID: 150436 IP address blocks: 101.45.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:00:1e:2a:29:4a:94:dc:18:d9:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Sep 23 10:37:45 2025 GMT Not After : Dec 22 11:37:45 2025 GMT Subject: CN=e7de9e94-2786-447a-a1e8-5d699f599f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c0:63:c3:ad:f3:d7:bd:68:6b:18:55:52:8d: e2:f9:b2:a1:03:3a:c8:31:06:e6:74:6b:61:6a:f0: a4:e0:0a:7a:ae:6a:f5:db:e0:f4:96:20:c8:66:b1: a9:84:00:7f:5c:88:c9:2e:25:4c:6d:96:8d:df:54: 1b:48:56:74:6a:44:56:3a:f6:18:b6:91:64:25:43: 4d:1d:41:92:c3:49:b3:8d:bd:69:b0:df:19:c3:44: b7:89:d2:44:03:47:4e:fd:50:d9:a5:f0:e9:ce:72: f8:9c:2b:eb:d5:c7:82:3c:3a:18:3d:0a:43:23:44: cd:31:10:7a:bc:22:a4:ab:2b:61:aa:b0:79:66:74: 46:16:1a:89:6f:b2:b6:da:44:32:f1:5e:1f:25:f0: 06:43:1e:e3:8a:4b:c8:3d:1c:a2:3c:04:34:fe:71: b2:d7:55:17:40:4e:77:8a:63:5c:fc:ae:a7:44:0c: 96:c5:d8:05:50:60:fe:0f:f3:d9:40:c8:71:3d:36: cd:d5:73:b0:d0:15:da:aa:94:a6:6e:72:e4:85:21: 5b:7f:b0:2a:11:98:88:21:a9:eb:70:75:a3:59:3f: 90:ad:cf:9c:35:9a:69:40:b4:0e:33:48:29:cb:9d: 2b:6e:4a:0d:32:84:b3:a6:23:a6:16:53:2a:23:be: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0C:74:43:CA:DF:6E:28:BE:64:A3:3E:38:00:37:AA:EF:02:4F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/fbcb741b-2e1f-3f74-9af9-ce4e12cd70dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 101.45.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:c9:b3:03:82:b1:bf:30:66:e6:51:79:b8:67:75:e7:47:e7: af:a2:d1:cb:82:44:61:ac:75:a8:9d:5c:bd:d0:26:76:2d:27: 91:40:39:8f:48:a6:3d:ae:d2:36:32:eb:c4:a3:66:ef:0f:65: 80:6e:32:d1:12:8c:b2:20:db:c5:34:e4:58:30:62:9c:aa:08: 18:cc:69:01:3b:6e:89:a7:5c:5d:8c:03:80:28:94:ef:2b:f0: 3e:ab:15:e4:19:f7:93:89:02:ad:71:d2:36:9d:03:f1:4a:7d: 2d:30:76:f5:c1:8b:17:c1:08:1c:52:cd:1d:e2:95:82:64:62: 9a:c7:74:6f:c2:a3:0c:de:a5:74:f4:71:11:f5:04:04:27:65: 58:a8:71:ed:fe:ff:d8:a5:86:25:85:5e:61:84:f0:83:f4:d1: ff:18:e4:48:4e:60:05:f9:a3:52:b4:03:13:25:43:1e:93:ba: 76:61:bc:54:2a:d7:f9:4f:b7:79:32:87:c4:80:91:e9:25:1c: dd:d3:30:c6:39:fc:50:f5:7e:c0:a2:a7:9a:5c:b4:a6:25:1b: f6:0b:cb:56:bd:74:ce:03:ab:b4:a7:ea:48:aa:33:81:d1:4d: 45:74:e7:9f:c6:5d:09:a5:15:73:15:7d:f0:0b:ca:24:ff:bb: 2b:77:1f:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKAB4qKUqU3BjZOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI1MDkyMzEwMzc0NVoXDTI1MTIyMjExMzc0NVowLzEtMCsGA1UEAxMk ZTdkZTllOTQtMjc4Ni00NDdhLWExZTgtNWQ2OTlmNTk5ZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8Bjw63z171oaxhVUo3i+bKhAzrIMQbmdGth avCk4Ap6rmr12+D0liDIZrGphAB/XIjJLiVMbZaN31QbSFZ0akRWOvYYtpFkJUNN HUGSw0mzjb1psN8Zw0S3idJEA0dO/VDZpfDpznL4nCvr1ceCPDoYPQpDI0TNMRB6 vCKkqythqrB5ZnRGFhqJb7K22kQy8V4fJfAGQx7jikvIPRyiPAQ0/nGy11UXQE53 imNc/K6nRAyWxdgFUGD+D/PZQMhxPTbN1XOw0BXaqpSmbnLkhSFbf7AqEZiIIanr cHWjWT+Qrc+cNZppQLQOM0gpy50rbkoNMoSzpiOmFlMqI77krQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0MdEPK324ovmSjPjgAN6rvAk+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvZmJjYjc0MWItMmUxZi0z Zjc0LTlhZjktY2U0ZTEyY2Q3MGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZS3/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDJswOCsb8wZuZRebhndedH56+i0cuCRGGsdaidXL3QJnYtJ5FAOY9I pj2u0jYy68SjZu8PZYBuMtESjLIg28U05FgwYpyqCBjMaQE7bomnXF2MA4AolO8r 8D6rFeQZ95OJAq1x0jadA/FKfS0wdvXBixfBCBxSzR3ilYJkYprHdG/CowzepXT0 cRH1BAQnZVioce3+/9ilhiWFXmGE8IP00f8Y5EhOYAX5o1K0AxMlQx6TunZhvFQq 1/lPt3kyh8SAkeklHN3TMMY5/FD1fsCip5pctKYlG/YLy1a9dM4Dq7Sn6kiqM4HR TUV055/GXQmlFXMVffALyiT/uyt3HzU= -----END CERTIFICATE-----Generated at Mon Oct 20 16:19:53 2025 by rpki-client