$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/da0440a7-5f70-3959-8f0b-85d69fe69731.roa File: da0440a7-5f70-3959-8f0b-85d69fe69731.roa (raw, json) Hash identifier: 6HvGwZBCcCEAzDmvKEqxxl7VAxW4ftxl7zt5lAJkP98= Subject key identifier: 9A:9E:F2:F2:1D:44:4B:48:9D:8B:E1:BE:3D:5F:C7:4B:6E:66:B9:2F Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285849CBCF9FC0658A2E005C035940 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/da0440a7-5f70-3959-8f0b-85d69fe69731.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 7018 IP address blocks: 45.58.208.0/24 maxlen: 24 45.58.210.0/23 maxlen: 23 45.58.212.0/22 maxlen: 22 45.58.240.0/22 maxlen: 22 45.58.245.0/24 maxlen: 24 45.58.250.0/24 maxlen: 24 45.58.252.0/22 maxlen: 22 69.91.139.0/24 maxlen: 24 69.91.140.0/24 maxlen: 24 69.91.143.0/24 maxlen: 24 69.91.144.0/24 maxlen: 24 69.91.147.0/24 maxlen: 24 69.91.148.0/24 maxlen: 24 69.91.150.0/24 maxlen: 24 69.91.151.0/24 maxlen: 24 69.91.152.0/24 maxlen: 24 69.91.154.0/24 maxlen: 24 69.91.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:9f:c0:65:8a:2e:00:5c:03:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=eead3c67-b8e2-4a1e-b594-c6455d1c5201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e3:ae:42:21:00:64:c5:77:26:be:52:8e:bf: 9b:2d:e6:b8:56:77:e1:e6:b6:0f:e7:1b:8a:80:36: 1e:55:38:e9:7e:2b:07:9b:3d:27:f6:41:90:14:dd: 23:17:fc:fb:3e:b2:8a:e0:5a:a0:d9:1a:5e:17:ff: 84:a1:82:b0:d9:8a:ba:11:21:a2:9a:95:31:57:89: e8:f0:fa:9b:9a:76:e3:8c:21:29:3e:f1:44:f8:2f: 3e:5c:52:74:89:87:91:f7:4e:66:6f:33:04:84:26: 73:47:5d:17:c3:56:04:25:0a:70:01:e7:b1:96:1c: c9:62:9d:e7:56:20:71:54:6e:fd:e7:2c:d8:19:74: e1:5d:0b:df:86:66:81:86:ee:3f:5a:6d:4e:b0:c1: d8:51:5e:2d:4b:57:d4:65:e9:8b:aa:a4:2b:8e:68: 3e:f3:3c:ce:aa:65:06:e8:b9:5d:2d:4a:77:22:34: 44:73:ed:21:56:8a:d9:4b:b2:97:b3:57:df:1f:0b: 7f:9e:e4:93:ef:7c:34:14:2e:6e:25:eb:2b:cd:f7: b8:2c:6a:85:62:71:ac:18:1d:33:fd:23:f1:4a:02: 56:83:2d:32:c5:64:35:c2:e5:e4:87:ed:cb:96:70: db:4e:ef:d7:b1:b6:7e:28:16:50:b0:4e:e9:d5:11: d6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9E:F2:F2:1D:44:4B:48:9D:8B:E1:BE:3D:5F:C7:4B:6E:66:B9:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/da0440a7-5f70-3959-8f0b-85d69fe69731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.208.0/24 45.58.210.0-45.58.215.255 45.58.240.0/22 45.58.245.0/24 45.58.250.0/24 45.58.252.0/22 69.91.139.0-69.91.140.255 69.91.143.0-69.91.144.255 69.91.147.0-69.91.148.255 69.91.150.0-69.91.152.255 69.91.154.0/24 69.91.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:0f:48:ea:ea:8c:b3:40:a9:ef:43:24:1f:8b:68:65:44:28: 68:8a:f5:a1:4d:de:ce:45:17:73:e3:24:15:52:c4:ea:69:bb: 18:c3:e5:a7:76:34:0d:f5:b7:39:04:b1:80:6e:2d:ca:c4:6a: c5:fc:0a:6b:93:55:6e:b0:ee:99:66:92:0a:66:5e:16:d4:4e: 8d:fe:db:11:5d:d2:a8:25:88:2e:b7:4a:6f:c3:63:3f:6f:e6: 87:f2:5b:3d:28:0f:22:3b:81:77:f2:55:90:45:db:91:3b:3c: 3b:66:0d:f2:a9:42:62:00:e3:9e:b8:aa:3f:80:0b:6a:7d:7e: 1d:29:e1:34:de:4f:1c:d8:3a:ae:eb:00:28:da:d4:2e:df:37: 3f:52:ae:29:b8:d8:e1:85:bd:22:39:5f:e0:a3:39:de:1d:96: 02:a7:db:11:78:56:8f:e2:d7:18:04:68:38:97:10:52:d2:ae: 52:55:4e:d4:e3:78:5e:04:86:06:27:7d:1e:2c:54:3c:32:ef: 21:aa:4b:1a:aa:19:99:01:26:52:e0:60:de:5e:42:d9:6a:f3: 7e:6a:92:15:9f:f6:1c:38:f9:bf:5a:d3:61:71:91:64:12:01: a1:c5:8c:d6:75:f2:f9:a0:88:49:ed:c3:f0:a1:c8:08:40:2c: ab:8c:fd:87 -----BEGIN CERTIFICATE----- MIIGrjCCBZagAwIBAgIUAQ0Mn0MoWEnLz5/AZYouAFwDWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZWVhZDNjNjctYjhlMi00YTFlLWI1OTQtYzY0NTVkMWM1MjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleOuQiEAZMV3Jr5Sjr+bLea4Vnfh5rYP5xuK gDYeVTjpfisHmz0n9kGQFN0jF/z7PrKK4Fqg2RpeF/+EoYKw2Yq6ESGimpUxV4no 8PqbmnbjjCEpPvFE+C8+XFJ0iYeR905mbzMEhCZzR10Xw1YEJQpwAeexlhzJYp3n ViBxVG795yzYGXThXQvfhmaBhu4/Wm1OsMHYUV4tS1fUZemLqqQrjmg+8zzOqmUG 6LldLUp3IjREc+0hVorZS7KXs1ffHwt/nuST73w0FC5uJesrzfe4LGqFYnGsGB0z /SPxSgJWgy0yxWQ1wuXkh+3LlnDbTu/XsbZ+KBZQsE7p1RHWUQIDAQABo4IDwDCC A7wwHQYDVR0OBBYEFJqe8vIdREtInYvhvj1fx0tuZrkvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZGEwNDQwYTctNWY3MC0z OTU5LThmMGItODVkNjlmZTY5NzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcAMEAC060DAM AwQBLTrSAwQDLTrQAwQCLTrwAwQALTr1AwQALTr6AwQCLTr8MAwDBABFW4sDBABF W4wwDAMEAEVbjwMEAEVbkDAMAwQARVuTAwQARVuUMAwDBAFFW5YDBABFW5gDBABF W5oDBABFW7AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAUA9I6uqMs0Cp70MkH4toZUQoaIr1oU3ezkUXc+Mk FVLE6mm7GMPlp3Y0DfW3OQSxgG4tysRqxfwKa5NVbrDumWaSCmZeFtROjf7bEV3S qCWILrdKb8NjP2/mh/JbPSgPIjuBd/JVkEXbkTs8O2YN8qlCYgDjnriqP4ALan1+ HSnhNN5PHNg6rusAKNrULt83P1KuKbjY4YW9Ijlf4KM53h2WAqfbEXhWj+LXGARo OJcQUtKuUlVO1ON4XgSGBid9HixUPDLvIapLGqoZmQEmUuBg3l5C2WrzfmqSFZ/2 HDj5v1rTYXGRZBIBocWM1nXy+aCISe3D8KHICEAsq4z9hw== -----END CERTIFICATE-----Generated at Sun May 11 21:13:44 2025 by rpki-client