$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/ae8e5861-feb1-320e-9cce-d5154ffe2c08.roa File: ae8e5861-feb1-320e-9cce-d5154ffe2c08.roa (raw, json) Hash identifier: JByAPUiyCTutrybn0HeHUDZBhTMDTOk1egWsNLTX8A4= Subject key identifier: 99:5F:83:E9:11:D2:8A:81:A8:6A:38:55:39:89:6A:B5:D1:00:2D:E0 Certificate issuer: /CN=49aa3661-0fa7-43a8-937b-3dbcc28b39d5 Certificate serial: 010D0C9F4328584A480AEF5ECA34297D4D2F3A00 Authority key identifier: BC:D1:5B:DC:4C:F1:27:56:D4:0E:CF:F0:CE:C6:EC:7A:B5:B1:DD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/ae8e5861-feb1-320e-9cce-d5154ffe2c08.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 396982 IP address blocks: 45.42.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:ef:5e:ca:34:29:7d:4d:2f:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49aa3661-0fa7-43a8-937b-3dbcc28b39d5 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=fb4298a9-9724-4a59-8561-a8a7cda12b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9f:ca:a9:a4:05:97:31:cc:b0:bf:e6:a9:e7: 6d:7a:04:f3:7f:20:29:14:92:be:f4:b6:b3:d8:94: 6a:5f:e9:b9:4c:de:43:fc:23:52:29:70:f3:8d:4a: 94:14:c7:01:80:0d:45:cf:86:47:e1:c2:4c:8b:f5: e8:e3:f5:2a:e1:56:29:16:52:af:35:df:96:dc:de: 5c:ea:b9:be:87:42:d4:03:86:69:db:d8:d2:6e:e4: b9:a6:4d:ed:ce:6b:fe:96:28:37:3a:35:03:ce:1c: b3:74:e9:ed:29:1b:28:8f:8f:66:ff:66:a6:c4:c5: 91:15:23:58:fe:fe:cd:82:52:9d:dd:03:d0:ef:0d: d0:e6:12:90:96:97:70:e4:b1:95:7b:fc:40:22:a4: a4:b8:fa:ee:05:bd:31:08:b7:8b:21:f5:c5:9b:05: d7:b7:5d:1e:d2:8a:03:ec:07:00:12:60:b8:a0:c3: 48:ca:e7:9c:2a:f0:80:25:2c:e1:62:73:8a:ef:22: f9:8f:57:22:1d:cc:8b:7a:94:2a:33:6d:9f:28:cd: 34:d8:e5:0f:db:43:76:c6:44:3a:2e:53:7d:bb:e7: 1c:8e:37:a4:5a:81:6c:a5:53:34:07:a6:80:81:a5: 36:91:21:da:47:eb:2b:f1:a9:16:a1:9f:3d:d9:18: 18:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5F:83:E9:11:D2:8A:81:A8:6A:38:55:39:89:6A:B5:D1:00:2D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/ae8e5861-feb1-320e-9cce-d5154ffe2c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.crl X509v3 Authority Key Identifier: keyid:BC:D1:5B:DC:4C:F1:27:56:D4:0E:CF:F0:CE:C6:EC:7A:B5:B1:DD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer sbgp-ipAddrBlock: critical IPv4: 45.42.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:b8:7b:74:4b:b6:6c:f4:99:42:f5:7a:3b:09:54:bf:f3:a3: 31:f6:eb:b5:b7:69:48:0b:2f:39:0a:b0:98:fd:f3:f7:b0:9e: c2:26:77:ab:34:a4:0c:1b:c1:d8:a0:bf:3d:29:1e:f9:fd:03: 6c:88:88:ad:f4:26:b7:9a:66:b9:50:4c:2c:4f:b1:ee:0d:c8: a0:54:7f:48:a8:e9:5c:7e:1d:58:a6:29:2a:bc:d9:df:74:e5: a2:89:5c:f5:7c:47:61:36:23:90:3b:a2:9b:1b:de:50:2c:40: f8:82:cc:6e:fa:6b:3b:91:2d:79:81:33:6d:3b:91:cc:b1:09: 52:04:2e:71:86:40:b4:1d:91:43:59:71:2a:ec:04:a1:be:83: 68:e7:c7:cf:19:5a:6f:c3:dc:93:a9:bc:aa:a9:c6:82:b1:2f: aa:53:23:01:0d:4d:86:a4:15:9c:bd:0c:f8:ae:56:35:ae:6c: 28:12:2b:9d:27:72:1a:7c:f2:a1:4e:be:cd:68:2a:7c:ea:9c: f4:dd:8f:b2:fb:a9:1d:34:7c:63:95:a5:ac:03:e3:9c:98:a2: 10:77:00:ed:0a:3e:e5:77:75:8b:11:1b:3a:96:48:0a:d0:c6: 45:ad:1f:09:cb:26:2a:f3:e3:75:ca:78:0d:e5:4b:95:9c:72: 05:4a:6d:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICu9eyjQpfU0vOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDlhYTM2NjEtMGZhNy00M2E4LTkzN2ItM2RiY2MyOGIz OWQ1MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZmI0Mjk4YTktOTcyNC00YTU5LTg1NjEtYThhN2NkYTEyYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J/KqaQFlzHMsL/mqedtegTzfyApFJK+9Laz 2JRqX+m5TN5D/CNSKXDzjUqUFMcBgA1Fz4ZH4cJMi/Xo4/Uq4VYpFlKvNd+W3N5c 6rm+h0LUA4Zp29jSbuS5pk3tzmv+lig3OjUDzhyzdOntKRsoj49m/2amxMWRFSNY /v7NglKd3QPQ7w3Q5hKQlpdw5LGVe/xAIqSkuPruBb0xCLeLIfXFmwXXt10e0ooD 7AcAEmC4oMNIyuecKvCAJSzhYnOK7yL5j1ciHcyLepQqM22fKM002OUP20N2xkQ6 LlN9u+ccjjekWoFspVM0B6aAgaU2kSHaR+sr8akWoZ892RgYAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlfg+kR0oqBqGo4VTmJarXRAC3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80OWFh MzY2MS0wZmE3LTQzYTgtOTM3Yi0zZGJjYzI4YjM5ZDUvYWU4ZTU4NjEtZmViMS0z MjBlLTljY2UtZDUxNTRmZmUyYzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDlhYTM2NjEtMGZhNy00M2E4LTkz N2ItM2RiY2MyOGIzOWQ1LzQ5YWEzNjYxLTBmYTctNDNhOC05MzdiLTNkYmNjMjhi MzlkNS5jcmwwHwYDVR0jBBgwFoAUvNFb3EzxJ1bUDs/wzsbserWx3SEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80OWFhMzY2MS0wZmE3LTQzYTgtOTM3Yi0zZGJj YzI4YjM5ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMy4e3RLtmz0mUL1ejsJVL/zozH267W3aUgLLzkKsJj98/ewnsImd6s0 pAwbwdigvz0pHvn9A2yIiK30JreaZrlQTCxPse4NyKBUf0io6Vx+HVimKSq82d90 5aKJXPV8R2E2I5A7opsb3lAsQPiCzG76azuRLXmBM207kcyxCVIELnGGQLQdkUNZ cSrsBKG+g2jnx88ZWm/D3JOpvKqpxoKxL6pTIwENTYakFZy9DPiuVjWubCgSK50n chp88qFOvs1oKnzqnPTdj7L7qR00fGOVpawD45yYohB3AO0KPuV3dYsRGzqWSArQ xkWtHwnLJirz43XKeA3lS5WccgVKbcc= -----END CERTIFICATE-----Generated at Sun Jun 29 16:16:03 2025 by rpki-client