$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0bb6e42d-39c9-3771-b079-96d881d2b624.roa File: 0bb6e42d-39c9-3771-b079-96d881d2b624.roa (raw, json) Hash identifier: 4gYwDNyhzN7Ohw9HYBPeLIEjNwruJgW9bAuCIzv8hAY= Subject key identifier: 19:17:A7:A8:D7:27:DD:B4:41:E6:50:5A:24:A6:3E:71:8D:AF:DF:5F Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584B79BCBDF3B52FA8CFE5CFD100 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0bb6e42d-39c9-3771-b079-96d881d2b624.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 5645 IP address blocks: 108.161.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:bd:f3:b5:2f:a8:cf:e5:cf:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=2e84e526-03ac-48d7-baf5-f12a6e561451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:11:e1:65:8f:12:d0:ca:44:9d:4d:16:95:63: 06:f3:40:3f:21:a3:13:83:32:9b:95:73:ac:01:07: a2:0a:50:09:72:65:aa:ed:f8:40:48:01:32:1c:c6: bd:f0:ee:1c:3a:2f:a5:db:b0:65:4e:42:ca:fb:fe: a9:4b:93:18:f8:1a:79:63:08:f2:e3:43:1f:ca:49: a6:70:94:61:39:63:0f:c6:16:d8:72:88:01:1e:17: 62:63:a2:d9:43:f7:a2:cd:30:c0:f6:25:9d:d5:cb: 4d:5a:ed:8a:e4:c2:e9:16:90:76:78:e3:d7:3f:f8: 3b:d5:62:4a:fa:b1:c3:9e:0c:ce:8f:e3:69:93:de: e4:0d:e0:2c:57:94:a6:e1:74:11:0b:33:69:e1:bd: 74:b1:21:24:0e:68:86:84:16:af:d2:84:68:72:83: b9:43:30:a3:3d:ea:4d:86:e7:b2:f1:b4:42:11:38: 41:a5:55:70:8e:33:0a:aa:b4:d5:82:b2:7c:39:42: a0:85:e7:74:e1:e8:90:c8:86:03:a8:97:e9:cb:d6: df:f2:b1:83:c1:31:8b:9b:d6:cb:8e:2b:2c:e0:96: c2:ab:17:41:10:58:a4:38:f5:93:06:b2:b2:b4:c1: 9b:2e:17:0b:2e:cf:5c:a7:35:d2:b7:e8:f2:81:3f: 6d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:17:A7:A8:D7:27:DD:B4:41:E6:50:5A:24:A6:3E:71:8D:AF:DF:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0bb6e42d-39c9-3771-b079-96d881d2b624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 108.161.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:98:9c:3f:03:18:02:13:47:ab:93:74:72:29:c8:9c:4e:98: 64:b3:e7:9e:8e:16:e6:3c:83:19:20:92:9a:e5:8c:bd:14:b5: a7:cb:76:4a:0b:c3:22:18:35:97:da:ae:74:aa:d4:d7:59:f0: a8:f6:93:73:e8:25:32:f6:c5:5f:f3:5e:ff:c8:e3:b7:63:b2: ad:69:49:2f:67:ae:15:6c:06:93:d2:df:a4:c2:02:57:19:38: f4:fa:26:30:d2:7a:d7:f5:a8:ea:05:a9:4c:ad:79:33:c5:eb: 05:3f:8b:13:a9:b1:7f:c7:52:c2:60:3e:c7:1d:cb:90:a3:1a: 38:c0:42:1e:72:8b:1b:a3:6c:4c:e2:b4:f8:e0:c9:e4:db:e2: ee:41:93:7a:f7:e3:8f:63:03:d7:23:1a:13:3f:2b:32:bc:ce: 42:93:49:4f:f7:a4:37:72:bf:6e:f4:72:5e:30:32:14:53:e0: 4d:45:b3:f8:c7:57:c9:80:49:f7:46:e7:21:35:09:2b:8e:eb: e7:a7:e2:47:88:fd:de:5a:b7:d6:e5:71:c0:a5:0f:fc:27:8f: d1:08:77:06:cf:8a:56:4e:45:60:3e:43:62:a1:e4:11:3a:47: 26:df:16:ba:b9:c8:de:1e:b3:e9:dc:ac:30:b4:8a:7e:72:34: 90:9b:80:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vL3ztS+oz+XP0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MmU4NGU1MjYtMDNhYy00OGQ3LWJhZjUtZjEyYTZlNTYxNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhHhZY8S0MpEnU0WlWMG80A/IaMTgzKblXOs AQeiClAJcmWq7fhASAEyHMa98O4cOi+l27BlTkLK+/6pS5MY+Bp5Ywjy40Mfykmm cJRhOWMPxhbYcogBHhdiY6LZQ/eizTDA9iWd1ctNWu2K5MLpFpB2eOPXP/g71WJK +rHDngzOj+Npk97kDeAsV5Sm4XQRCzNp4b10sSEkDmiGhBav0oRocoO5QzCjPepN huey8bRCEThBpVVwjjMKqrTVgrJ8OUKghed04eiQyIYDqJfpy9bf8rGDwTGLm9bL jiss4JbCqxdBEFikOPWTBrKytMGbLhcLLs9cpzXSt+jygT9tcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkXp6jXJ920QeZQWiSmPnGNr99fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMGJiNmU0MmQtMzljOS0z NzcxLWIwNzktOTZkODgxZDJiNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbKFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6YnD8DGAITR6uTdHIpyJxOmGSz556OFuY8gxkgkprljL0UtafLdkoL wyIYNZfarnSq1NdZ8Kj2k3PoJTL2xV/zXv/I47djsq1pSS9nrhVsBpPS36TCAlcZ OPT6JjDSetf1qOoFqUyteTPF6wU/ixOpsX/HUsJgPscdy5CjGjjAQh5yixujbEzi tPjgyeTb4u5Bk3r3449jA9cjGhM/KzK8zkKTSU/3pDdyv270cl4wMhRT4E1Fs/jH V8mASfdG5yE1CSuO6+en4keI/d5at9blccClD/wnj9EIdwbPilZORWA+Q2Kh5BE6 RybfFrq5yN4es+ncrDC0in5yNJCbgMA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:08:13 2025 by rpki-client