$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa File: b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa (raw, json) Hash identifier: A4Oep3Z0GdCLWuQK6U3fxTilCIYHJB3UyVuDL8qHPLU= Subject key identifier: 57:52:26:B5:0C:61:05:CA:68:BD:E2:C1:BC:C3:D1:65:BA:28:2E:5B Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584A497067F9C1F1728A4AE4E680 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 210574 IP address blocks: 45.59.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:67:f9:c1:f1:72:8a:4a:e4:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=7f0de229-ffe0-408a-b411-d42a18651dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0c:87:dd:dd:89:24:84:82:e5:1d:85:2f:bf: 49:c8:80:94:9a:82:11:a0:5b:f8:aa:65:be:84:62: fb:22:22:83:0b:99:32:7b:33:14:f0:08:56:d0:0a: 93:87:a2:bc:f9:23:d4:36:2f:45:6b:4d:ee:8a:ad: 0f:9b:43:84:28:f7:dc:45:36:d8:7d:9c:4e:63:73: c8:76:1a:54:ab:0f:5b:9b:75:ee:1e:26:f0:5b:c1: 18:35:c5:e4:eb:26:0f:54:e2:41:4d:1e:d3:4f:54: aa:14:43:5a:cd:7e:c4:c6:a4:39:2b:15:9b:4f:06: 96:18:ba:29:93:26:8c:b4:1c:ae:f0:ad:41:1d:43: 7e:47:8f:8c:a1:e1:c4:46:93:ed:59:9d:37:68:f4: c0:74:fc:26:e8:19:ff:1b:cb:26:84:4e:af:cd:de: eb:b1:83:2b:b3:ae:fe:2d:df:c7:fa:8f:e6:22:74: 54:16:dd:ff:32:b4:ca:df:47:ca:65:66:07:c3:1f: 9d:b5:71:e2:2f:3a:a2:44:40:be:f6:b3:e3:f2:ea: 0c:06:4e:7c:db:ea:e9:d5:e9:8d:b6:e2:40:2d:4d: ef:dd:ba:e0:45:a3:1d:b1:2b:42:5e:e2:a7:8b:38: c7:2f:ee:e1:c2:1e:a8:1b:21:b1:59:f7:64:30:71: 52:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:52:26:B5:0C:61:05:CA:68:BD:E2:C1:BC:C3:D1:65:BA:28:2E:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:55:94:6d:55:57:2e:e2:50:8a:82:c5:43:f0:cf:1f:4e:4b: 9c:2e:72:14:fe:86:ed:13:91:5e:f6:1c:d9:4b:98:63:db:fc: e3:a4:29:aa:b2:2a:43:5d:63:f0:ec:e8:47:37:18:86:45:0c: dc:90:ce:10:2d:c9:eb:af:2a:6c:d4:01:67:79:63:1c:e1:84: 5a:3d:82:ff:d2:b6:3f:5c:53:48:f6:97:60:50:7c:46:44:b8: 35:58:ef:f0:f4:2f:58:c9:36:52:b1:e7:5a:e0:3b:95:2f:ad: 94:f0:b1:8c:b0:bc:e5:52:6d:6c:88:a2:ce:68:9b:07:85:fd: 50:98:8b:8d:d4:f2:a1:52:20:f5:84:2a:f2:64:e3:ce:25:5e: 6b:68:b1:91:23:61:3d:d3:ae:02:22:41:cf:79:ae:f6:f6:ed: 50:74:16:ed:f7:7d:ca:f9:fa:b2:26:85:b7:a0:cc:34:ad:59: 61:df:fe:7b:63:55:4f:f7:83:77:81:30:c0:8e:10:fe:b4:7b: 33:73:cd:86:2d:7b:2b:df:eb:3a:05:af:6b:d7:54:54:67:d9: ec:0f:0c:e6:03:ed:3e:e3:fd:25:55:04:9a:78:62:9e:ba:54: 03:85:38:e1:bb:83:68:89:02:4d:50:f9:d3:b5:6a:40:8b:99: b0:2d:55:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcGf5wfFyikrk5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk N2YwZGUyMjktZmZlMC00MDhhLWI0MTEtZDQyYTE4NjUxZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwyH3d2JJISC5R2FL79JyICUmoIRoFv4qmW+ hGL7IiKDC5kyezMU8AhW0AqTh6K8+SPUNi9Fa03uiq0Pm0OEKPfcRTbYfZxOY3PI dhpUqw9bm3XuHibwW8EYNcXk6yYPVOJBTR7TT1SqFENazX7ExqQ5KxWbTwaWGLop kyaMtByu8K1BHUN+R4+MoeHERpPtWZ03aPTAdPwm6Bn/G8smhE6vzd7rsYMrs67+ Ld/H+o/mInRUFt3/MrTK30fKZWYHwx+dtXHiLzqiREC+9rPj8uoMBk582+rp1emN tuJALU3v3brgRaMdsStCXuKnizjHL+7hwh6oGyGxWfdkMHFSPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdSJrUMYQXKaL3iwbzD0WW6KC5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvYjUwN2EyZjQtOTdiNi0z MTg5LTg3MGItN2M2M2ZkM2EyM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBVlG1VVy7iUIqCxUPwzx9OS5wuchT+hu0TkV72HNlLmGPb/OOkKaqy KkNdY/Ds6Ec3GIZFDNyQzhAtyeuvKmzUAWd5YxzhhFo9gv/Stj9cU0j2l2BQfEZE uDVY7/D0L1jJNlKx51rgO5UvrZTwsYywvOVSbWyIos5omweF/VCYi43U8qFSIPWE KvJk484lXmtosZEjYT3TrgIiQc95rvb27VB0Fu33fcr5+rImhbegzDStWWHf/ntj VU/3g3eBMMCOEP60ezNzzYYteyvf6zoFr2vXVFRn2ewPDOYD7T7j/SVVBJp4Yp66 VAOFOOG7g2iJAk1Q+dO1akCLmbAtVfQ= -----END CERTIFICATE-----Generated at Tue Jul 1 09:54:16 2025 by rpki-client