$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b514e4ac-e068-395d-9028-7ae737863cd7.roa File: b514e4ac-e068-395d-9028-7ae737863cd7.roa (raw, json) Hash identifier: fJMZCY2C6AvNA2ADIed/BmVzgBxfeEBjQ2gBunlOvLQ= Subject key identifier: 42:0D:74:18:CA:10:BC:52:E4:BC:00:83:F2:B9:BC:A1:B7:5C:54:79 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584ADECBBF73402DCA52EB2F1080 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b514e4ac-e068-395d-9028-7ae737863cd7.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 9009 IP address blocks: 45.59.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:bf:73:40:2d:ca:52:eb:2f:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=36e6ce87-198f-4083-957a-1d2a83f1ed84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:c4:b9:9a:b8:27:75:61:b9:c3:16:37:e1: 27:72:19:30:ae:33:8c:f3:f0:dc:56:88:d7:bf:8a: b0:e1:4d:11:2b:2a:07:7f:4c:17:d8:51:ec:8d:44: 0a:30:ca:e6:14:64:d1:18:25:02:cf:00:d6:86:57: fa:dd:e3:75:98:1b:bd:9d:9d:e9:23:24:a1:f8:6d: a9:48:c7:b5:c0:89:e3:bb:b6:09:40:28:70:d5:e5: 80:be:79:13:ec:59:79:d2:ef:fe:e1:60:6a:e7:0b: c0:e0:35:5e:67:0e:60:d0:92:13:0f:c1:25:48:6d: 23:45:89:93:05:ab:89:2d:92:db:d6:1b:7c:4b:87: 46:82:96:68:d6:c3:a3:14:b3:7a:3f:8d:5d:1a:89: 1b:14:5b:08:21:35:7d:8c:5d:f6:2d:a5:6c:0c:9d: 4f:ce:7f:3e:7f:06:ea:56:3c:d5:50:a5:9e:cc:e5: 43:fc:42:f9:0a:cd:b7:66:c1:94:5f:ca:73:4b:dd: 14:70:69:60:bb:5f:9c:c2:bd:54:f5:6c:61:ea:e8: 54:3b:b3:ad:ad:c4:8e:4d:04:05:05:3b:2c:ba:81: 65:8e:2c:a1:1b:75:75:8f:cf:98:7b:1d:ef:4d:73: 1b:6c:30:da:a1:d7:f4:b5:a9:6d:49:00:7d:14:10: 43:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0D:74:18:CA:10:BC:52:E4:BC:00:83:F2:B9:BC:A1:B7:5C:54:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b514e4ac-e068-395d-9028-7ae737863cd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 45.59.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:14:81:6a:57:b2:45:47:c5:04:1c:19:3e:6d:e7:a8:e9:f5: 3f:8d:d7:54:e6:50:d2:b6:6f:37:6c:06:11:db:71:75:63:ef: 2c:c2:1e:61:90:58:9b:33:c9:c9:24:e6:30:4b:ec:a2:75:84: 9e:7d:37:03:21:16:9e:3b:fd:e6:b1:a5:0b:39:3f:85:db:4b: 94:7a:12:d6:31:47:88:b5:d1:ec:29:71:00:64:9b:bf:16:b7: a7:76:ff:ae:37:c3:d7:88:f3:b8:02:06:18:a9:b4:d1:23:10: 97:ed:95:c0:5b:7e:1e:ca:e3:94:68:90:b1:0b:8a:e3:0a:d0: e2:1c:88:d7:8a:dd:60:86:82:8c:81:0d:c3:c9:4b:0f:7a:ab: 93:26:ed:ba:7c:22:50:39:1a:91:61:f4:d3:8a:93:ac:14:9d: 0c:c9:da:e2:64:cf:1c:a2:ff:bf:a0:86:f0:c4:62:45:43:4a: 65:0e:c8:ee:58:de:f0:b6:b1:81:b2:8d:e7:ad:40:e1:44:2b: c5:a0:9b:59:ba:b5:60:f6:3d:75:3d:51:80:fd:f3:fb:ab:f5: 19:a9:ff:25:25:d7:eb:2f:12:8e:94:65:61:c8:85:24:9d:5b: 8e:73:5b:75:69:80:bf:ab:f6:2e:30:13:82:b8:a7:c1:fc:2d: c3:2c:81:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey79zQC3KUusvEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MzZlNmNlODctMTk4Zi00MDgzLTk1N2EtMWQyYTgzZjFlZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQrEuZq4J3VhucMWN+EnchkwrjOM8/DcVojX v4qw4U0RKyoHf0wX2FHsjUQKMMrmFGTRGCUCzwDWhlf63eN1mBu9nZ3pIySh+G2p SMe1wInju7YJQChw1eWAvnkT7Fl50u/+4WBq5wvA4DVeZw5g0JITD8ElSG0jRYmT BauJLZLb1ht8S4dGgpZo1sOjFLN6P41dGokbFFsIITV9jF32LaVsDJ1Pzn8+fwbq VjzVUKWezOVD/EL5Cs23ZsGUX8pzS90UcGlgu1+cwr1U9Wxh6uhUO7OtrcSOTQQF BTssuoFljiyhG3V1j8+Yex3vTXMbbDDaodf0taltSQB9FBBDMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEINdBjKELxS5LwAg/K5vKG3XFR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvYjUxNGU0YWMtZTA2OC0z OTVkLTkwMjgtN2FlNzM3ODYzY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoUgWpXskVHxQQcGT5t56jp9T+N11TmUNK2bzdsBhHbcXVj7yzCHmGQ WJszyckk5jBL7KJ1hJ59NwMhFp47/eaxpQs5P4XbS5R6EtYxR4i10ewpcQBkm78W t6d2/643w9eI87gCBhiptNEjEJftlcBbfh7K45RokLELiuMK0OIciNeK3WCGgoyB DcPJSw96q5Mm7bp8IlA5GpFh9NOKk6wUnQzJ2uJkzxyi/7+ghvDEYkVDSmUOyO5Y 3vC2sYGyjeetQOFEK8Wgm1m6tWD2PXU9UYD98/ur9Rmp/yUl1+svEo6UZWHIhSSd W45zW3VpgL+r9i4wE4K4p8H8LcMsgd8= -----END CERTIFICATE-----Generated at Sat Aug 23 09:12:12 2025 by rpki-client