$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa File: 5e00859f-bf20-388d-a400-94e4c09e3154.roa (raw, json) Hash identifier: 6fnWd1BWQeBlODkKDKZCATRBbMSYstLbb9Qpfr9/zdE= Subject key identifier: 81:0E:4E:27:70:AE:E4:27:EE:4B:E6:A6:E3:F4:02:66:5A:6B:DD:2B Certificate issuer: /CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Certificate serial: 010D0C9F4328584A03A549EDCD200067C7CBBCD8 Authority key identifier: 21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 399769 IP address blocks: 45.45.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:49:ed:cd:20:00:67:c7:cb:bc:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=a3c143c0-ce1d-4072-9b56-a1249f3836d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3b:ae:4e:fc:ff:3b:58:ae:5a:ee:00:19:5b: ac:86:58:a8:27:c3:d1:e0:16:68:43:81:69:10:ab: 7e:3f:f4:80:bd:31:91:7f:1e:e6:88:b1:68:0d:fa: 33:32:3a:02:ec:c5:63:69:08:fb:25:a8:f7:2e:36: 8f:1e:39:12:7f:16:3e:6f:0b:17:e7:5a:1d:89:89: fd:8d:f1:21:cb:75:5f:85:e0:ee:d0:88:e6:5a:3f: 97:8d:d3:b1:2e:e0:69:ff:80:df:3b:7c:a2:a1:e3: 6f:84:19:54:59:83:fd:37:30:94:94:56:bc:d8:5d: 55:26:40:72:d5:cd:e6:04:e7:1b:73:b2:d8:08:24: 41:69:2c:9b:d7:4f:d1:da:6e:70:cc:7d:e9:00:5f: 61:6b:b4:ae:bb:51:9b:48:c4:94:1d:64:08:c9:f0: a7:e5:42:67:98:71:b4:e7:8f:fd:e9:5b:72:30:7e: 8d:59:e3:71:0e:8c:04:f6:78:a2:0b:bc:e1:d8:2c: d7:c9:51:e8:94:8d:88:82:9a:4f:32:8b:0f:bb:1b: 23:ae:c0:16:93:30:f1:0e:29:78:e8:07:f7:6c:8b: 9d:a6:19:da:b6:0e:82:6f:20:e6:e1:42:f3:10:7e: 6f:b1:60:f5:2e:36:83:22:0f:73:3a:57:28:37:a1: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0E:4E:27:70:AE:E4:27:EE:4B:E6:A6:E3:F4:02:66:5A:6B:DD:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl X509v3 Authority Key Identifier: keyid:21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer sbgp-ipAddrBlock: critical IPv4: 45.45.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:58:a3:12:f8:6b:04:70:e4:df:ae:98:af:a4:7e:36:65:21: 67:32:a7:30:d8:07:5a:0e:52:08:9e:a0:32:23:2d:d2:0e:e2: fe:66:42:a2:9b:7a:8e:87:9e:25:ff:33:3a:01:57:2f:71:f3: c1:87:02:dc:cb:31:2d:5e:e4:e2:87:8e:15:4f:df:bc:15:dc: 4b:0d:81:9d:7f:9c:14:19:72:45:9d:71:07:43:fa:f7:06:55: d2:54:8c:ef:b4:02:d9:c6:6d:46:0e:41:37:d6:54:fb:c8:63: b2:56:59:0d:c1:bb:01:1d:bc:1b:82:76:ab:0e:ab:e3:5f:3c: 5f:d8:93:61:9f:88:fb:18:72:75:8b:9a:50:8c:89:fa:e7:04: 41:30:50:69:be:33:6d:cc:20:35:bc:a7:8c:06:53:4b:e1:9a: cc:9a:54:ca:a8:b5:9f:b8:c3:dd:3b:47:5c:7d:02:7b:be:a9: b5:5c:43:0b:69:ef:61:17:62:38:23:f6:38:ab:eb:fe:6b:85: 5c:a0:8f:86:f9:ee:cf:87:c4:98:ea:34:27:67:3c:b5:14:03: 37:d6:08:8f:d7:9a:da:1a:6c:87:9e:c5:4c:e1:04:59:8d:b5: 55:e8:f4:ca:c3:2c:8e:a8:67:7d:92:90:36:ff:76:2f:e7:6f: 1a:5b:f1:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUntzSAAZ8fLvNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U3MGEyODctYWQ5Ny00YzFlLTk1NjQtOWNhMDY5ZjU3 YjE3MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk YTNjMTQzYzAtY2UxZC00MDcyLTliNTYtYTEyNDlmMzgzNmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzuuTvz/O1iuWu4AGVushlioJ8PR4BZoQ4Fp EKt+P/SAvTGRfx7miLFoDfozMjoC7MVjaQj7Jaj3LjaPHjkSfxY+bwsX51odiYn9 jfEhy3VfheDu0IjmWj+XjdOxLuBp/4DfO3yioeNvhBlUWYP9NzCUlFa82F1VJkBy 1c3mBOcbc7LYCCRBaSyb10/R2m5wzH3pAF9ha7Suu1GbSMSUHWQIyfCn5UJnmHG0 54/96VtyMH6NWeNxDowE9niiC7zh2CzXyVHolI2IgppPMosPuxsjrsAWkzDxDil4 6Af3bIudphnatg6CbyDm4ULzEH5vsWD1LjaDIg9zOlcoN6HVVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEOTidwruQn7kvmpuP0AmZaa90rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcw YTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2EwNjlmNTdiMTcvNWUwMDg1OWYtYmYyMC0z ODhkLWE0MDAtOTRlNGMwOWUzMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U3MGEyODctYWQ5Ny00YzFlLTk1 NjQtOWNhMDY5ZjU3YjE3LzdlNzBhMjg3LWFkOTctNGMxZS05NTY0LTljYTA2OWY1 N2IxNy5jcmwwHwYDVR0jBBgwFoAUIRirvVv0Lhj3Bj0fRT81E1Sa+WAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcwYTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2Ew NjlmNTdiMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLS2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRYoxL4awRw5N+umK+kfjZlIWcypzDYB1oOUgieoDIjLdIO4v5mQqKb eo6HniX/MzoBVy9x88GHAtzLMS1e5OKHjhVP37wV3EsNgZ1/nBQZckWdcQdD+vcG VdJUjO+0AtnGbUYOQTfWVPvIY7JWWQ3BuwEdvBuCdqsOq+NfPF/Yk2GfiPsYcnWL mlCMifrnBEEwUGm+M23MIDW8p4wGU0vhmsyaVMqotZ+4w907R1x9Anu+qbVcQwtp 72EXYjgj9jir6/5rhVygj4b57s+HxJjqNCdnPLUUAzfWCI/XmtoabIeexUzhBFmN tVXo9MrDLI6oZ32SkDb/di/nbxpb8b0= -----END CERTIFICATE-----Generated at Tue Jul 1 15:41:35 2025 by rpki-client