$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/904a75dc-1812-33c9-a7e9-633ccd62b897.roa File: 904a75dc-1812-33c9-a7e9-633ccd62b897.roa (raw, json) Hash identifier: NbfLAfr1EyRHYbUTJWb9qw6YK1blJnHTTqYB2qCcfts= Subject key identifier: 29:14:6B:A1:F5:CD:C3:8A:8B:3F:DF:04:05:F0:CB:84:C1:25:DF:C9 Certificate issuer: /CN=e6c7f8d7-4c06-4480-bbd8-71cf97b216b6 Certificate serial: 010D0C9F4328584AD9365E34AD71994660ACAA00 Authority key identifier: CF:13:24:EB:7E:8B:4E:D8:7D:25:7D:FB:0E:78:8D:71:59:0C:52:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/904a75dc-1812-33c9-a7e9-633ccd62b897.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 54145 IP address blocks: 45.250.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:5e:34:ad:71:99:46:60:ac:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c7f8d7-4c06-4480-bbd8-71cf97b216b6 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=b7b52b4d-a1bf-4d93-b90e-fe829a383ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:91:0c:52:67:b9:2c:6e:f1:db:23:cc:6c:22: ae:e3:d9:32:85:4f:56:50:83:96:d9:a8:eb:13:76: 69:51:4a:15:13:87:be:d4:b5:b5:c9:8d:18:d0:2e: 4f:52:23:9a:a5:92:61:36:70:78:5c:32:3b:86:4c: d7:54:39:a0:bf:fa:32:53:47:eb:bb:d0:9f:67:16: 90:b1:48:df:08:13:a2:33:4e:14:c0:be:2d:f7:e0: d8:83:64:3b:37:dc:2f:34:b4:6a:78:eb:e1:a8:ff: 70:4f:05:16:bf:63:06:2f:45:6d:4f:22:95:07:fe: e1:f8:e4:da:cc:fa:9e:b9:d1:dd:96:61:0b:32:97: d9:20:f2:1b:42:cd:04:c4:77:21:63:3c:70:af:3a: b5:83:d8:95:d0:35:06:9b:e0:cc:b6:62:05:f0:d4: a8:61:3e:d9:4c:d7:1f:a7:0a:f0:2c:0a:46:61:52: 81:7b:8e:2d:2c:6e:20:4b:eb:9e:ec:91:f7:db:41: 3c:53:00:7f:6e:ae:3a:70:67:3d:5e:5a:41:f8:36: a0:44:80:a8:31:8a:5d:60:0b:8a:97:95:11:85:e1: 76:99:32:5f:de:ce:42:0d:b4:1d:a2:aa:02:9c:3a: c4:15:32:ae:10:39:09:7f:14:24:de:91:72:48:ab: a6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:14:6B:A1:F5:CD:C3:8A:8B:3F:DF:04:05:F0:CB:84:C1:25:DF:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/904a75dc-1812-33c9-a7e9-633ccd62b897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.crl X509v3 Authority Key Identifier: keyid:CF:13:24:EB:7E:8B:4E:D8:7D:25:7D:FB:0E:78:8D:71:59:0C:52:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.cer sbgp-ipAddrBlock: critical IPv4: 45.250.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e0:43:60:53:0f:93:71:73:38:e1:d8:fc:5c:7d:4a:b8:f3: 5c:d8:08:ab:b5:ff:da:69:bc:fc:95:bc:bc:d8:fc:6c:87:0b: e5:05:16:8d:aa:15:95:01:6e:4b:45:50:77:b5:39:e2:fd:eb: c5:ab:2f:45:6e:9f:54:6d:2b:71:97:b0:90:a2:6f:ed:a7:a5: bd:bc:29:bd:b1:a6:0f:00:1c:5d:a5:73:16:8e:27:02:ec:8b: 96:6f:a8:13:6e:f4:50:25:1d:ae:47:b5:ec:24:b2:f1:d7:07: 0d:53:ca:63:3c:82:58:ec:44:c3:f5:c4:3a:98:33:c7:c2:52: a5:8d:06:09:0a:46:61:f6:c5:f7:7c:f8:4c:4d:65:1d:33:c2: 97:47:c0:0f:6a:1f:4d:df:18:e9:8a:28:5a:10:75:d7:e3:cf: c6:c9:a8:1e:50:71:5d:59:60:0d:00:42:c4:6f:ef:4f:1b:38: 0a:00:b0:d5:a8:18:c0:fd:7c:6a:75:83:47:d7:e2:ba:74:b9: a9:9d:a1:a7:ca:c2:47:2d:eb:76:9f:bf:b5:4f:c4:8f:67:d7: 31:9f:31:d8:5a:55:5a:2a:a6:a2:70:97:ca:8d:77:a0:86:5b: 60:f6:9a:e0:a7:fa:7f:43:fc:a2:74:65:68:ad:a5:e0:51:34: 01:e6:3c:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNl40rXGZRmCsqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZjN2Y4ZDctNGMwNi00NDgwLWJiZDgtNzFjZjk3YjIx NmI2MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YjdiNTJiNGQtYTFiZi00ZDkzLWI5MGUtZmU4MjlhMzgzYmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5EMUme5LG7x2yPMbCKu49kyhU9WUIOW2ajr E3ZpUUoVE4e+1LW1yY0Y0C5PUiOapZJhNnB4XDI7hkzXVDmgv/oyU0fru9CfZxaQ sUjfCBOiM04UwL4t9+DYg2Q7N9wvNLRqeOvhqP9wTwUWv2MGL0VtTyKVB/7h+OTa zPqeudHdlmELMpfZIPIbQs0ExHchYzxwrzq1g9iV0DUGm+DMtmIF8NSoYT7ZTNcf pwrwLApGYVKBe44tLG4gS+ue7JH320E8UwB/bq46cGc9XlpB+DagRICoMYpdYAuK l5URheF2mTJf3s5CDbQdoqoCnDrEFTKuEDkJfxQk3pFySKumUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkUa6H1zcOKiz/fBAXwy4TBJd/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNmM3 ZjhkNy00YzA2LTQ0ODAtYmJkOC03MWNmOTdiMjE2YjYvOTA0YTc1ZGMtMTgxMi0z M2M5LWE3ZTktNjMzY2NkNjJiODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTZjN2Y4ZDctNGMwNi00NDgwLWJi ZDgtNzFjZjk3YjIxNmI2L2U2YzdmOGQ3LTRjMDYtNDQ4MC1iYmQ4LTcxY2Y5N2Iy MTZiNi5jcmwwHwYDVR0jBBgwFoAUzxMk636LTth9JX37DniNcVkMUigwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNmM3ZjhkNy00YzA2LTQ0ODAtYmJkOC03MWNm OTdiMjE2YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLfo8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjgQ2BTD5Nxczjh2PxcfUq481zYCKu1/9ppvPyVvLzY/GyHC+UFFo2q FZUBbktFUHe1OeL968WrL0Vun1RtK3GXsJCib+2npb28Kb2xpg8AHF2lcxaOJwLs i5ZvqBNu9FAlHa5HtewksvHXBw1TymM8gljsRMP1xDqYM8fCUqWNBgkKRmH2xfd8 +ExNZR0zwpdHwA9qH03fGOmKKFoQddfjz8bJqB5QcV1ZYA0AQsRv708bOAoAsNWo GMD9fGp1g0fX4rp0uamdoafKwkct63afv7VPxI9n1zGfMdhaVVoqpqJwl8qNd6CG W2D2muCn+n9D/KJ0ZWitpeBRNAHmPNM= -----END CERTIFICATE-----Generated at Sun Aug 24 07:22:22 2025 by rpki-client