$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1faf7ad3-e3f9-3487-b235-101953ee16ec.roa File: 1faf7ad3-e3f9-3487-b235-101953ee16ec.roa (raw, json) Hash identifier: sClhtj/ki/mD+KQFZxQSZpU/kwb7e2vh7BmAA7fQDzs= Subject key identifier: 42:EC:6D:49:EB:D5:9D:8C:42:4A:D9:74:21:85:AD:E2:A6:8C:1B:36 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A30503BCDA2E54CD8B0A5FD00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1faf7ad3-e3f9-3487-b235-101953ee16ec.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 6079 IP address blocks: 45.58.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:3b:cd:a2:e5:4c:d8:b0:a5:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=b7b50cdc-74df-46fc-aecb-7f0e0a90b3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:96:2b:fe:e0:bc:a9:b1:eb:06:30:d2:86:48: cd:6b:2b:14:6d:ef:5d:f3:ff:23:9d:de:7b:1b:91: af:5d:d3:a8:9a:e8:1f:50:53:a2:27:51:89:24:74: d4:15:d6:24:ca:bb:21:f7:8e:02:1b:63:21:ac:98: 01:8f:3b:11:f6:e3:07:b3:25:49:c9:9e:47:f6:b9: d7:d3:89:2c:2e:db:66:9a:93:86:3f:10:92:39:30: 13:29:c9:8b:d1:79:db:1b:37:5a:68:08:ab:63:1e: f0:e0:b0:a6:80:4e:24:03:c8:1e:cc:bc:62:eb:87: 35:d3:67:9f:ff:de:99:c6:3f:0d:b7:a8:6d:5e:07: 46:0a:de:3c:cf:04:01:ba:10:cd:6c:91:15:ce:41: 5b:83:dd:69:28:9e:e2:e3:0a:29:c5:b5:17:f2:b9: d4:21:a9:d1:5c:04:c0:d6:26:64:dd:d0:d4:24:e0: 50:19:9e:26:24:a6:33:4a:2a:73:67:0f:d1:47:83: 21:63:45:36:06:14:c3:e2:9e:09:b8:34:14:6d:83: ec:8b:b2:00:d8:6f:91:63:84:8e:02:87:3f:4d:75: a6:30:58:f0:c6:19:16:66:f7:5a:72:3a:a4:80:d7: 57:eb:0c:67:ec:67:e4:07:ac:b5:fc:1c:51:8e:78: 27:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EC:6D:49:EB:D5:9D:8C:42:4A:D9:74:21:85:AD:E2:A6:8C:1B:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1faf7ad3-e3f9-3487-b235-101953ee16ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:da:32:b4:57:6d:09:97:26:61:65:dd:05:78:ca:9a:04:c1: 70:fc:76:58:e3:7e:3a:55:e3:39:d5:66:3e:95:96:07:64:56: 57:30:e3:b6:cb:e4:9d:4a:45:dc:56:e2:e7:ec:b1:99:a6:76: 15:56:45:05:88:6a:34:f3:bf:7f:91:5c:25:bd:61:1d:13:3f: 6b:18:f8:28:9d:6d:35:22:01:02:06:3b:e7:ff:e4:ca:34:cf: 1e:c8:3a:d3:5b:e2:0f:69:f3:10:3c:8a:f7:ad:56:bd:ae:fc: c5:ca:00:12:62:dd:e1:57:8c:9c:69:1b:32:70:d7:3d:6d:ca: b9:8b:46:59:f3:da:60:23:ae:81:a1:a8:f4:c0:1d:88:5e:18: 6d:6c:32:a8:f8:df:e3:8e:6e:92:81:6c:a8:e1:92:a4:a8:66: 19:e2:99:c4:a7:87:41:dd:cc:06:61:33:57:d4:ad:10:50:73: 64:84:05:78:de:5b:b8:f5:6c:bc:f4:62:ac:bb:b4:43:51:7f: d8:26:14:b0:59:51:0d:ee:40:ed:3a:b3:0b:59:b7:bf:50:45: a5:a2:68:42:89:98:7a:1f:9d:5d:73:43:17:53:a8:52:70:f3: ad:36:a3:19:98:a4:10:cb:be:06:1d:f8:b4:b9:84:29:21:9f: a1:08:5a:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUDvNouVM2LCl/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjdiNTBjZGMtNzRkZi00NmZjLWFlY2ItN2YwZTBhOTBiM2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZYr/uC8qbHrBjDShkjNaysUbe9d8/8jnd57 G5GvXdOomugfUFOiJ1GJJHTUFdYkyrsh944CG2MhrJgBjzsR9uMHsyVJyZ5H9rnX 04ksLttmmpOGPxCSOTATKcmL0XnbGzdaaAirYx7w4LCmgE4kA8gezLxi64c102ef /96Zxj8Nt6htXgdGCt48zwQBuhDNbJEVzkFbg91pKJ7i4wopxbUX8rnUIanRXATA 1iZk3dDUJOBQGZ4mJKYzSipzZw/RR4MhY0U2BhTD4p4JuDQUbYPsi7IA2G+RY4SO Aoc/TXWmMFjwxhkWZvdacjqkgNdX6wxn7GfkB6y1/BxRjngnawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELsbUnr1Z2MQkrZdCGFreKmjBs2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWZhZjdhZDMtZTNmOS0z NDg3LWIyMzUtMTAxOTUzZWUxNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELTrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfaMrRXbQmXJmFl3QV4ypoEwXD8dljjfjpV4znVZj6VlgdkVlcw47bL 5J1KRdxW4ufssZmmdhVWRQWIajTzv3+RXCW9YR0TP2sY+CidbTUiAQIGO+f/5Mo0 zx7IOtNb4g9p8xA8ivetVr2u/MXKABJi3eFXjJxpGzJw1z1tyrmLRlnz2mAjroGh qPTAHYheGG1sMqj43+OObpKBbKjhkqSoZhnimcSnh0HdzAZhM1fUrRBQc2SEBXje W7j1bLz0Yqy7tENRf9gmFLBZUQ3uQO06swtZt79QRaWiaEKJmHofnV1zQxdTqFJw 8602oxmYpBDLvgYd+LS5hCkhn6EIWl0= -----END CERTIFICATE-----Generated at Mon Jun 30 20:32:02 2025 by rpki-client