$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0df9c686-d3ed-3828-9767-b750494665b8.roa File: 0df9c686-d3ed-3828-9767-b750494665b8.roa (raw, json) Hash identifier: JmeQ1SYlkwr7n1uYmWkbzhiEz8YbdfmO0kAyjKVnC24= Subject key identifier: 2A:7C:43:B6:4A:25:4C:7B:AB:BC:8F:24:79:21:83:D5:AB:37:9B:89 Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584B79BCBE26A2F71E1D7610B668 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0df9c686-d3ed-3828-9767-b750494665b8.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 5645 IP address blocks: 167.88.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:be:26:a2:f7:1e:1d:76:10:b6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=2894309c-36b0-42c9-8808-a239dabad012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dc:7a:a6:b0:1c:17:46:e1:38:99:c3:bf:c5: f9:13:e1:4d:e7:b6:0f:12:7e:59:40:06:db:02:5b: fd:2e:6e:86:6f:3b:86:62:cd:1e:86:33:74:f0:f3: f7:d4:5d:59:ca:fa:87:91:94:99:9d:b5:d4:de:d7: 1b:56:f6:97:29:d4:0e:d4:09:f6:91:da:a4:c1:7f: 59:6d:43:e6:69:05:28:9a:9d:fc:1d:56:72:c3:ce: de:4e:c8:fe:c6:70:05:92:a9:27:50:d2:e5:a6:5a: 4e:de:41:97:25:85:a7:b9:30:a6:37:fa:a6:9f:a6: b2:5e:2f:35:32:b0:9d:b9:a4:17:36:88:3a:23:47: 32:f9:5b:cb:e6:67:e0:4b:5a:8a:1d:dd:30:8b:7f: 01:00:bf:94:9d:3b:f3:52:77:27:34:38:e3:d4:7e: 0f:98:c7:73:45:11:e9:a4:62:ab:f2:44:b3:21:b6: 38:c9:c9:d1:f9:c5:ae:f6:44:58:8d:b6:c8:70:41: 6a:01:8c:d3:27:57:b8:6a:cb:16:ae:09:6c:0a:ab: 95:b3:f0:9d:89:48:ae:18:fa:f2:8b:42:d1:29:bb: 64:e4:f5:71:2f:17:8c:bd:ec:52:ac:1f:84:b7:2c: a2:68:2b:bd:f4:c8:a9:79:0e:3d:e9:6a:6d:c6:78: 6d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7C:43:B6:4A:25:4C:7B:AB:BC:8F:24:79:21:83:D5:AB:37:9B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0df9c686-d3ed-3828-9767-b750494665b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 167.88.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:42:4f:ec:18:50:68:b8:3a:7c:22:bc:57:dc:4f:e9:87:0a: 15:d0:a5:ac:3e:9d:f3:65:76:de:58:ce:c5:12:73:77:28:87: 25:7b:51:d9:e6:53:4f:16:35:28:03:fb:e5:3f:91:15:92:e7: 2f:55:d5:ea:60:38:32:24:01:9b:50:bd:2c:f9:a4:e6:56:ee: 1c:ef:03:24:61:89:0f:89:fc:ed:75:9d:62:5c:a2:53:80:e4: da:f6:99:1b:33:7b:c9:94:30:73:7b:50:d2:9a:3e:a6:6c:34: 99:a6:40:c0:df:c9:e3:b9:1c:34:5e:c8:38:35:05:d8:aa:7b: b7:e0:41:60:06:c1:5c:4c:d2:98:8b:d4:3c:1e:16:60:07:df: 35:ce:f2:9d:3e:ce:54:a3:f7:8d:c2:90:db:64:af:ea:9c:58: ed:88:0a:f8:72:f5:b2:61:74:0b:79:ca:8c:d1:91:27:bd:a5: 7d:74:06:d6:bb:bf:ce:01:c1:1d:b0:36:45:25:0e:4e:dc:bf: 46:c3:4c:1e:02:15:6c:38:74:53:9c:30:df:11:0b:ac:58:de: 03:56:bc:32:f1:a3:26:24:31:58:25:83:28:a0:15:f4:6e:e0: f1:f6:38:be:f1:8c:d9:d5:e1:14:b2:b7:0f:34:f8:3a:df:6b: 43:08:4d:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vL4movceHXYQtmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk Mjg5NDMwOWMtMzZiMC00MmM5LTg4MDgtYTIzOWRhYmFkMDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktx6prAcF0bhOJnDv8X5E+FN57YPEn5ZQAbb Alv9Lm6GbzuGYs0ehjN08PP31F1ZyvqHkZSZnbXU3tcbVvaXKdQO1An2kdqkwX9Z bUPmaQUomp38HVZyw87eTsj+xnAFkqknUNLlplpO3kGXJYWnuTCmN/qmn6ayXi81 MrCduaQXNog6I0cy+VvL5mfgS1qKHd0wi38BAL+UnTvzUncnNDjj1H4PmMdzRRHp pGKr8kSzIbY4ycnR+cWu9kRYjbbIcEFqAYzTJ1e4assWrglsCquVs/CdiUiuGPry i0LRKbtk5PVxLxeMvexSrB+EtyyiaCu99MipeQ496WptxnhtDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCp8Q7ZKJUx7q7yPJHkhg9WrN5uJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMGRmOWM2ODYtZDNlZC0z ODI4LTk3NjctYjc1MDQ5NDY2NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp1gQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVCT+wYUGi4OnwivFfcT+mHChXQpaw+nfNldt5YzsUSc3cohyV7Udnm U08WNSgD++U/kRWS5y9V1epgODIkAZtQvSz5pOZW7hzvAyRhiQ+J/O11nWJcolOA 5Nr2mRsze8mUMHN7UNKaPqZsNJmmQMDfyeO5HDReyDg1Bdiqe7fgQWAGwVxM0piL 1DweFmAH3zXO8p0+zlSj943CkNtkr+qcWO2ICvhy9bJhdAt5yozRkSe9pX10Bta7 v84BwR2wNkUlDk7cv0bDTB4CFWw4dFOcMN8RC6xY3gNWvDLxoyYkMVglgyigFfRu 4PH2OL7xjNnV4RSytw80+Drfa0MITQY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:10:06 2025 by rpki-client