$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/caded774-cb8f-33b9-aac1-9e93fc48739b.roa File: caded774-cb8f-33b9-aac1-9e93fc48739b.roa (raw, json) Hash identifier: FhOzgtrBfWck08oPNMXIDXzSJbRTlKWVIqz+Kc95bJM= Subject key identifier: AC:AE:A3:5C:DF:D2:91:20:47:F3:AD:5E:DD:B3:9A:66:30:30:7F:16 Certificate issuer: /CN=2a7813c7-65af-4c6b-affc-323cd6e8e909 Certificate serial: 010D0C9F4328584A43DAFF5A8092C377E3E5A000 Authority key identifier: 50:CB:EC:29:C1:E1:EE:E4:2C:53:5D:8A:99:90:53:8E:5B:0A:A9:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/caded774-cb8f-33b9-aac1-9e93fc48739b.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 4172 IP address blocks: 45.41.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:da:ff:5a:80:92:c3:77:e3:e5:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a7813c7-65af-4c6b-affc-323cd6e8e909 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=49e397b6-5b3e-421d-b369-b2aaa9d9b769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3a:44:96:c0:a5:4c:94:55:78:41:8e:8a:80: 78:7a:01:e3:b4:19:83:69:41:b8:b8:10:7e:79:36: 06:68:f9:77:1f:7e:49:59:f9:ff:2a:98:f5:7a:b8: 9f:f5:77:33:6b:18:77:da:be:b8:a3:7a:0d:79:7c: 14:e5:f9:40:c2:5a:58:2e:f0:10:7c:bd:8f:b8:6d: 8e:54:f0:e3:75:3c:93:31:e7:8e:80:b4:1e:1d:a4: cc:17:ad:de:c0:07:5e:40:40:dc:15:3a:e5:f1:19: e2:a9:98:40:74:48:c8:07:79:33:29:32:c8:1b:b6: f6:5f:ee:a7:20:06:9a:4c:8c:4c:c7:d2:c4:d6:05: 9d:7e:c9:c5:e2:66:b7:99:92:aa:3f:18:d3:3c:f5: 7f:cb:22:31:5a:10:4b:bd:f4:94:86:13:c9:e5:ce: b7:a4:3f:b5:94:46:5f:27:48:cf:0b:69:29:fe:55: 92:00:06:22:1e:9f:0a:f8:19:44:37:65:ee:c4:c3: 6f:78:01:42:30:03:09:2b:70:f3:5c:1e:05:5d:69: 7c:43:d4:3b:46:de:e1:46:71:ca:e4:0c:ac:f9:46: 4c:ad:97:8b:05:0b:23:87:a5:76:5a:cf:81:cd:cf: 3e:79:49:b0:23:32:9c:0a:84:7c:f7:e7:66:06:85: ce:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AE:A3:5C:DF:D2:91:20:47:F3:AD:5E:DD:B3:9A:66:30:30:7F:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/caded774-cb8f-33b9-aac1-9e93fc48739b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.crl X509v3 Authority Key Identifier: keyid:50:CB:EC:29:C1:E1:EE:E4:2C:53:5D:8A:99:90:53:8E:5B:0A:A9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909.cer sbgp-ipAddrBlock: critical IPv4: 45.41.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:6c:a6:be:f4:d1:db:49:f6:06:4d:2b:51:2b:80:1d:7e:24: 5a:f1:10:2f:3c:87:94:14:2a:f5:9a:e8:83:0d:20:84:a5:ff: 9f:81:86:30:18:5b:44:d0:46:4d:f6:ec:f7:1b:92:18:28:c2: 94:46:02:4e:68:1d:96:88:a4:05:25:8c:d1:17:44:24:4e:a9: 7a:e9:ad:19:2b:d4:fc:1f:1b:2b:49:07:21:6c:b5:99:58:5f: 68:1b:03:5c:b1:e0:e4:88:2f:8c:ae:cf:02:f1:61:68:1b:d7: 26:e5:2f:fe:8c:f5:32:b3:98:df:9e:4c:a2:e9:ef:5c:72:3c: e2:fd:0d:69:ff:01:52:9f:51:f0:69:f6:76:e9:03:5c:ae:63: b7:a0:9e:c0:38:38:95:1d:ab:03:43:ac:79:7c:6c:17:72:66: cd:45:da:61:30:cb:72:9b:e3:23:28:a3:f4:ce:d1:1c:5a:5a: ca:e8:ff:ac:4f:dc:45:59:78:fb:b1:3b:e3:d4:24:34:49:e7: dd:76:25:ba:04:43:17:a3:9c:4a:e1:b4:c3:75:02:89:dd:56: d4:da:2f:ab:00:66:c5:ed:39:3a:89:24:f0:4e:45:96:1a:1b: 49:9a:73:70:c4:54:6d:db:47:e6:ca:2f:f2:4a:67:88:38:98: 30:d0:13:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2v9agJLDd+PloAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE3ODEzYzctNjVhZi00YzZiLWFmZmMtMzIzY2Q2ZThl OTA5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk NDllMzk3YjYtNWIzZS00MjFkLWIzNjktYjJhYWE5ZDliNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTpElsClTJRVeEGOioB4egHjtBmDaUG4uBB+ eTYGaPl3H35JWfn/Kpj1erif9Xczaxh32r64o3oNeXwU5flAwlpYLvAQfL2PuG2O VPDjdTyTMeeOgLQeHaTMF63ewAdeQEDcFTrl8RniqZhAdEjIB3kzKTLIG7b2X+6n IAaaTIxMx9LE1gWdfsnF4ma3mZKqPxjTPPV/yyIxWhBLvfSUhhPJ5c63pD+1lEZf J0jPC2kp/lWSAAYiHp8K+BlEN2XuxMNveAFCMAMJK3DzXB4FXWl8Q9Q7Rt7hRnHK 5Ays+UZMrZeLBQsjh6V2Ws+Bzc8+eUmwIzKcCoR89+dmBoXONwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyuo1zf0pEgR/OtXt2zmmYwMH8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYTc4 MTNjNy02NWFmLTRjNmItYWZmYy0zMjNjZDZlOGU5MDkvY2FkZWQ3NzQtY2I4Zi0z M2I5LWFhYzEtOWU5M2ZjNDg3MzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmE3ODEzYzctNjVhZi00YzZiLWFm ZmMtMzIzY2Q2ZThlOTA5LzJhNzgxM2M3LTY1YWYtNGM2Yi1hZmZjLTMyM2NkNmU4 ZTkwOS5jcmwwHwYDVR0jBBgwFoAUUMvsKcHh7uQsU12KmZBTjlsKqX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYTc4MTNjNy02NWFmLTRjNmItYWZmYy0zMjNj ZDZlOGU5MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSnLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxspr700dtJ9gZNK1ErgB1+JFrxEC88h5QUKvWa6IMNIISl/5+BhjAY W0TQRk327PcbkhgowpRGAk5oHZaIpAUljNEXRCROqXrprRkr1PwfGytJByFstZlY X2gbA1yx4OSIL4yuzwLxYWgb1yblL/6M9TKzmN+eTKLp71xyPOL9DWn/AVKfUfBp 9nbpA1yuY7egnsA4OJUdqwNDrHl8bBdyZs1F2mEwy3Kb4yMoo/TO0RxaWsro/6xP 3EVZePuxO+PUJDRJ5912JboEQxejnErhtMN1AondVtTaL6sAZsXtOTqJJPBORZYa G0mac3DEVG3bR+bKL/JKZ4g4mDDQEz0= -----END CERTIFICATE-----Generated at Tue Jul 1 16:05:57 2025 by rpki-client