$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/be08aa48-7469-36ba-972a-966b2be43456.roa File: be08aa48-7469-36ba-972a-966b2be43456.roa (raw, json) Hash identifier: hOuhTMZTkooHx2hnulTugZ3yhWV6msoGr0iqooah7ug= Subject key identifier: 7A:4D:D6:D1:B1:20:D6:6B:0D:6F:F9:EB:7D:75:C7:EF:EC:B5:02:12 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285849DC8FC271F2FC1CC7516EE480 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/be08aa48-7469-36ba-972a-966b2be43456.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 7018 IP address blocks: 45.58.232.0/21 maxlen: 21 69.91.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c2:71:f2:fc:1c:c7:51:6e:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=005fa101-22a6-4002-8765-87150d2a00a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:64:be:b2:4d:fe:39:db:be:62:87:69:59:03: 0a:48:da:f8:8b:2b:e8:ca:5f:21:99:96:bd:43:65: 98:ca:05:70:89:ca:43:43:58:80:63:31:b5:01:a7: d0:ad:c6:4c:4b:2c:91:74:3b:30:6f:bb:e9:38:aa: 01:ac:1f:5a:01:4a:45:6d:35:b8:c8:50:63:d3:81: 2e:67:ab:6d:08:0c:a1:2f:c0:df:4f:4b:be:d0:80: 2b:dc:25:fd:8d:f1:85:ba:90:cb:19:67:f4:b0:63: 27:b5:f4:7b:fb:39:f7:32:8b:5f:89:f4:cf:bc:32: 74:e3:52:26:87:92:7f:02:67:cc:12:59:2c:1e:6f: 9e:1e:c9:7e:98:49:a4:c2:a3:7b:e3:da:be:a9:62: 5f:7e:4b:fb:68:3a:5a:d3:8e:d5:6c:d4:7b:75:43: 61:48:75:6e:55:26:96:b8:90:cb:da:b4:5e:e2:66: 0d:16:17:e8:1a:97:fd:98:3a:0f:52:37:fe:02:84: 57:38:de:ee:79:6f:ed:4a:be:14:26:6a:f0:c2:f4: ac:77:75:89:f2:c8:68:07:c3:14:94:3d:6a:31:36: 6e:7f:a9:13:80:b5:2d:c9:30:4f:05:b5:b8:a5:3b: 08:01:64:02:ab:5e:5d:24:3c:77:ff:c6:c1:7e:f6: 50:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4D:D6:D1:B1:20:D6:6B:0D:6F:F9:EB:7D:75:C7:EF:EC:B5:02:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/be08aa48-7469-36ba-972a-966b2be43456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.232.0/21 69.91.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:74:73:4b:57:4b:3a:2f:ce:93:d4:be:4d:eb:29:1c:3c:a3: 3b:7d:68:d0:a1:ba:e4:cf:56:cf:fe:c0:5f:33:26:8c:8c:36: 1c:93:38:26:32:b3:22:32:d9:ef:7c:9d:6f:15:5d:92:17:7b: ea:68:2a:9d:ee:87:f1:6e:5d:83:2f:19:0e:09:28:43:7d:b1: 9e:f3:c2:d6:b1:8b:43:a8:81:eb:fa:e1:2a:4c:10:5a:00:62: 85:76:75:2f:b2:9b:2b:b4:16:26:cc:21:e0:7e:3d:47:fe:eb: ba:a0:bb:ab:7b:bf:8e:93:50:fa:a5:c0:b4:4d:57:f7:de:d9: a1:c0:b2:52:17:3e:ed:7d:80:0c:92:5d:8a:b5:89:9f:0f:72: 85:1d:0f:a9:bf:76:73:54:2e:9a:de:5a:46:c7:0d:eb:3a:60: 70:a1:76:5f:ee:ea:d4:8e:2d:9e:36:1a:b3:3d:33:62:4c:1e: 79:4d:09:0b:12:00:82:ef:ae:4e:19:a3:b6:34:14:db:0f:e8: 53:10:a9:1e:55:a4:fc:8a:36:29:e7:76:16:c7:3b:08:82:3b: 21:51:25:ba:d8:06:53:e0:ae:9a:3a:8e:81:0a:c9:9d:bf:fd: d9:8c:a3:6f:f9:15:86:cd:db:56:6a:1d:fb:e0:ae:80:41:4b: 9c:72:da:c2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEncj8Jx8vwcx1Fu5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk MDA1ZmExMDEtMjJhNi00MDAyLTg3NjUtODcxNTBkMmEwMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWS+sk3+Odu+YodpWQMKSNr4iyvoyl8hmZa9 Q2WYygVwicpDQ1iAYzG1AafQrcZMSyyRdDswb7vpOKoBrB9aAUpFbTW4yFBj04Eu Z6ttCAyhL8DfT0u+0IAr3CX9jfGFupDLGWf0sGMntfR7+zn3MotfifTPvDJ041Im h5J/AmfMElksHm+eHsl+mEmkwqN749q+qWJffkv7aDpa047VbNR7dUNhSHVuVSaW uJDL2rRe4mYNFhfoGpf9mDoPUjf+AoRXON7ueW/tSr4UJmrwwvSsd3WJ8shoB8MU lD1qMTZuf6kTgLUtyTBPBbW4pTsIAWQCq15dJDx3/8bBfvZQXwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHpN1tGxINZrDW/56311x+/stQISMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYmUwOGFhNDgtNzQ2OS0z NmJhLTk3MmEtOTY2YjJiZTQzNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLTroAwQA RVuSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEZ0c0tXSzovzpPUvk3rKRw8ozt9aNChuuTPVs/+wF8zJoyM NhyTOCYysyIy2e98nW8VXZIXe+poKp3uh/FuXYMvGQ4JKEN9sZ7zwtaxi0Oogev6 4SpMEFoAYoV2dS+ymyu0FibMIeB+PUf+67qgu6t7v46TUPqlwLRNV/fe2aHAslIX Pu19gAySXYq1iZ8PcoUdD6m/dnNULpreWkbHDes6YHChdl/u6tSOLZ42GrM9M2JM HnlNCQsSAILvrk4Zo7Y0FNsP6FMQqR5VpPyKNinndhbHOwiCOyFRJbrYBlPgrpo6 joEKyZ2//dmMo2/5FYbN21ZqHfvgroBBS5xy2sI= -----END CERTIFICATE-----Generated at Tue Jul 1 00:49:57 2025 by rpki-client