$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa File: 5e00859f-bf20-388d-a400-94e4c09e3154.roa (raw, json) Hash identifier: T9KDPPzbaJ5praMKQ2NPaZ8OP9As1xjDHZatMiOzRY4= Subject key identifier: 01:00:1D:76:F7:15:AB:AD:C7:2D:75:80:C0:65:47:2C:37:9C:51:DA Certificate issuer: /CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Certificate serial: 010D0C9F4328584AE461163A2F61ADDEEE580600 Authority key identifier: 21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 399769 IP address blocks: 45.45.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:16:3a:2f:61:ad:de:ee:58:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=14678957-672d-4caa-9b29-d297ae9ca70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a5:6e:22:4d:10:6e:fc:ed:c7:43:95:4b:b2: 33:2c:a0:46:92:d6:66:de:e1:a3:48:2d:4c:70:8a: 9b:30:3e:7b:ea:9c:df:75:90:17:a2:b6:73:40:e2: 73:7f:2c:ca:55:a8:99:25:33:66:54:8a:93:1a:5a: a5:c0:ed:76:85:ca:20:e5:7a:11:b8:2b:d3:80:6d: 04:8b:27:e6:8b:94:e4:a4:4f:46:70:41:a5:b9:3e: 18:07:67:91:07:5f:f0:46:4e:f1:be:16:15:65:46: d3:f6:4c:4c:ed:30:b1:8f:d2:24:71:e4:4f:c1:3b: e1:6f:c7:cf:d0:b6:e9:d2:63:d8:55:79:dd:8a:85: 3d:22:f2:a2:c5:78:bf:8d:5f:ef:3e:40:c5:e0:76: ea:5e:6c:35:c0:0c:2c:93:ff:7b:4d:81:05:19:56: de:5a:57:26:e4:37:19:5b:b5:e8:f2:23:4f:7a:63: 22:a7:4a:fe:54:27:6d:32:52:c9:3b:89:29:f9:c0: 29:02:3c:f3:b1:ed:ee:bb:0b:20:0a:89:f2:45:5d: 85:0c:6b:c9:5a:17:09:df:07:c7:fa:ca:4d:16:e3: 02:6f:e9:0e:11:24:89:a5:b0:c9:e4:6b:2e:5a:be: 6a:fc:24:55:03:92:6c:cd:84:1f:62:b9:f6:75:5b: 11:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:00:1D:76:F7:15:AB:AD:C7:2D:75:80:C0:65:47:2C:37:9C:51:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl X509v3 Authority Key Identifier: keyid:21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer sbgp-ipAddrBlock: critical IPv4: 45.45.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:5c:2d:fb:35:48:26:25:a8:ad:74:9f:19:08:87:69:45:5d: 0f:e3:bb:ab:81:ab:70:00:d0:eb:cd:a4:61:49:2f:ba:36:09: 9e:b4:6d:e3:bf:e9:f5:e1:f2:61:79:8b:23:b2:02:dc:56:87: eb:d5:62:c5:76:90:5a:28:cf:c4:9c:3f:d5:98:56:55:16:ba: 93:c0:c0:ed:7e:35:81:f8:0a:4d:57:9d:11:02:30:8a:32:06: 2b:98:c0:0d:8c:23:a7:cb:1a:4f:0f:4e:3c:ae:00:cc:c6:26: 24:13:6c:4a:84:1a:0a:29:56:3a:9d:6c:a2:fc:f0:66:60:13: b3:25:e7:84:45:41:2c:c0:ab:47:0b:e7:18:0c:b8:c9:f0:02: d6:93:ae:c3:44:c0:0a:d9:eb:5a:92:28:86:a7:96:ef:42:2f: 0a:34:ef:03:9b:d5:92:24:0c:c1:4d:37:38:cb:f1:10:8e:79: 34:b5:83:92:ee:bb:0d:49:4d:94:4a:da:16:62:9f:b3:48:93: e3:e5:b9:99:2c:cd:1b:7d:34:89:7e:b2:70:6a:a8:d3:0a:8e: e3:e0:ff:b7:da:6c:3c:66:a4:f2:bc:17:e2:42:d9:76:21:47: 50:94:be:43:62:92:5d:eb:ec:5e:1c:20:85:d0:43:3b:9e:08: 6d:9f:fa:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRY6L2Gt3u5YBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U3MGEyODctYWQ5Ny00YzFlLTk1NjQtOWNhMDY5ZjU3 YjE3MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MTQ2Nzg5NTctNjcyZC00Y2FhLTliMjktZDI5N2FlOWNhNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaVuIk0Qbvztx0OVS7IzLKBGktZm3uGjSC1M cIqbMD576pzfdZAXorZzQOJzfyzKVaiZJTNmVIqTGlqlwO12hcog5XoRuCvTgG0E iyfmi5TkpE9GcEGluT4YB2eRB1/wRk7xvhYVZUbT9kxM7TCxj9IkceRPwTvhb8fP 0Lbp0mPYVXndioU9IvKixXi/jV/vPkDF4HbqXmw1wAwsk/97TYEFGVbeWlcm5DcZ W7Xo8iNPemMip0r+VCdtMlLJO4kp+cApAjzzse3uuwsgConyRV2FDGvJWhcJ3wfH +spNFuMCb+kOESSJpbDJ5GsuWr5q/CRVA5JszYQfYrn2dVsRwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEAHXb3Fautxy11gMBlRyw3nFHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcw YTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2EwNjlmNTdiMTcvNWUwMDg1OWYtYmYyMC0z ODhkLWE0MDAtOTRlNGMwOWUzMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U3MGEyODctYWQ5Ny00YzFlLTk1 NjQtOWNhMDY5ZjU3YjE3LzdlNzBhMjg3LWFkOTctNGMxZS05NTY0LTljYTA2OWY1 N2IxNy5jcmwwHwYDVR0jBBgwFoAUIRirvVv0Lhj3Bj0fRT81E1Sa+WAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcwYTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2Ew NjlmNTdiMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLS2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNcLfs1SCYlqK10nxkIh2lFXQ/ju6uBq3AA0OvNpGFJL7o2CZ60beO/ 6fXh8mF5iyOyAtxWh+vVYsV2kFooz8ScP9WYVlUWupPAwO1+NYH4Ck1XnRECMIoy BiuYwA2MI6fLGk8PTjyuAMzGJiQTbEqEGgopVjqdbKL88GZgE7Ml54RFQSzAq0cL 5xgMuMnwAtaTrsNEwArZ61qSKIanlu9CLwo07wOb1ZIkDMFNNzjL8RCOeTS1g5Lu uw1JTZRK2hZin7NIk+PluZkszRt9NIl+snBqqNMKjuPg/7fabDxmpPK8F+JC2XYh R1CUvkNikl3r7F4cIIXQQzueCG2f+iM= -----END CERTIFICATE-----Generated at Sat Aug 23 22:07:25 2025 by rpki-client