$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e7e74186-3342-395c-a0a1-b7458142090f.roa File: e7e74186-3342-395c-a0a1-b7458142090f.roa (raw, json) Hash identifier: c3ptLzxxhoLOUtrG8l+y5OEYFxKF4gefJYiQdLOJM+E= Subject key identifier: 07:FA:B9:22:C3:49:2C:84:C5:C9:BA:44:60:87:6A:C0:AD:F4:08:E0 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584ADA9BC68DE6F4CB732F33B5C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e7e74186-3342-395c-a0a1-b7458142090f.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 7018 IP address blocks: 45.58.244.0/24 maxlen: 24 69.91.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c6:8d:e6:f4:cb:73:2f:33:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=cb7b938d-70e4-4195-824e-534b5616ec70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ab:a4:fa:2f:98:da:5d:19:d7:b3:05:71:26: 96:d1:e6:75:17:f8:ff:8f:b3:9b:e1:13:28:a3:56: 7a:72:76:a6:9e:7f:12:e9:ec:22:1c:a2:b2:9d:c8: 29:b5:38:46:da:f6:75:bf:d6:c3:fd:ac:4a:e8:75: e2:0b:b1:6a:5b:c5:0a:92:b6:a8:71:8a:8d:fb:90: 39:cb:9c:b1:91:a6:ec:ba:9a:3a:41:3d:30:9e:fd: 6a:fe:c5:37:f7:ea:9b:bb:4b:4e:52:01:d2:3c:1d: 2f:0c:11:dc:fd:84:46:a8:44:99:f5:62:c7:36:01: 46:e7:0b:41:21:d5:93:cc:ea:41:3d:15:b7:fa:03: 78:25:c4:5c:82:be:f2:b8:43:af:d1:c2:57:2c:74: 14:fc:f7:8a:61:fa:2b:92:f4:54:20:4a:78:d5:cc: 16:b0:e9:e5:f6:85:ff:92:c8:b4:46:67:df:37:fa: a5:0e:7c:26:cb:55:c4:46:a8:72:72:6d:02:44:96: 1f:46:69:00:9c:05:f3:09:0e:80:5e:46:c3:df:bd: 45:cd:44:f5:9d:f6:9f:54:f7:d3:b3:03:18:3e:f0: 67:0b:d3:5b:92:0d:43:64:d6:91:7f:bd:b5:23:57: e7:0a:ae:93:90:83:75:61:9b:a9:16:43:02:7b:96: 0f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FA:B9:22:C3:49:2C:84:C5:C9:BA:44:60:87:6A:C0:AD:F4:08:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e7e74186-3342-395c-a0a1-b7458142090f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.244.0/24 69.91.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:5e:47:7f:99:5a:bd:5a:d8:eb:d2:34:bc:e1:9e:30:31:20: c6:fd:79:f6:95:91:c4:93:cc:70:3a:33:da:ed:e3:06:0a:53: 26:6d:fa:71:ce:3f:85:5e:5f:f1:71:13:a7:49:8b:59:7d:4d: 68:c6:5c:0c:36:1e:94:eb:a5:90:00:46:4b:f0:f2:b4:2f:da: 44:8b:82:e7:d4:98:ec:05:79:53:76:33:a5:d9:00:c3:80:7a: 43:f5:10:ea:d5:60:b3:48:e4:e2:5a:b1:7b:5c:60:71:5f:15: 97:b3:98:b3:5f:ba:59:d3:c4:92:c7:82:ad:68:38:12:a2:33: 1e:39:e9:b7:73:9b:ce:5e:5d:3a:60:bd:f3:4f:fa:2b:ff:e0: b4:04:1b:5e:d2:ba:f5:51:8e:53:c1:5c:64:c5:82:dc:ed:25: 6a:ec:9e:a4:43:c8:02:53:47:89:67:55:79:fd:4f:95:2e:12: 00:f8:af:78:c6:30:1b:55:d9:1e:29:3d:de:33:a9:1e:e6:40: ac:7a:36:fb:ee:00:ec:91:e0:05:8b:33:fa:88:03:67:57:35: 8c:0c:99:2b:b6:88:e5:99:27:ca:05:2a:c1:0f:f0:f0:a0:5d: e2:d6:35:2c:8b:4b:90:4c:21:d3:d7:3f:3d:d5:78:aa:2f:31: 49:c4:e5:70 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEram8aN5vTLcy8ztcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk Y2I3YjkzOGQtNzBlNC00MTk1LTgyNGUtNTM0YjU2MTZlYzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxquk+i+Y2l0Z17MFcSaW0eZ1F/j/j7Ob4RMo o1Z6cnamnn8S6ewiHKKyncgptThG2vZ1v9bD/axK6HXiC7FqW8UKkraocYqN+5A5 y5yxkabsupo6QT0wnv1q/sU39+qbu0tOUgHSPB0vDBHc/YRGqESZ9WLHNgFG5wtB IdWTzOpBPRW3+gN4JcRcgr7yuEOv0cJXLHQU/PeKYforkvRUIEp41cwWsOnl9oX/ ksi0RmffN/qlDnwmy1XERqhycm0CRJYfRmkAnAXzCQ6AXkbD371FzUT1nfafVPfT swMYPvBnC9Nbkg1DZNaRf721I1fnCq6TkIN1YZupFkMCe5YP0wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAf6uSLDSSyExcm6RGCHasCt9AjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZTdlNzQxODYtMzM0Mi0z OTVjLWEwYTEtYjc0NTgxNDIwOTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALTr0AwQA RVuOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEteR3+ZWr1a2OvSNLzhnjAxIMb9efaVkcSTzHA6M9rt4wYK UyZt+nHOP4VeX/FxE6dJi1l9TWjGXAw2HpTrpZAARkvw8rQv2kSLgufUmOwFeVN2 M6XZAMOAekP1EOrVYLNI5OJasXtcYHFfFZezmLNfulnTxJLHgq1oOBKiMx456bdz m85eXTpgvfNP+iv/4LQEG17SuvVRjlPBXGTFgtztJWrsnqRDyAJTR4lnVXn9T5Uu EgD4r3jGMBtV2R4pPd4zqR7mQKx6NvvuAOyR4AWLM/qIA2dXNYwMmSu2iOWZJ8oF KsEP8PCgXeLWNSyLS5BMIdPXPz3VeKovMUnE5XA= -----END CERTIFICATE-----Generated at Sat Aug 23 08:31:02 2025 by rpki-client