$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa File: 00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa (raw, json) Hash identifier: bB3IgSUYEgX3ULW2jQQqAGO2O4lVLhMz+pynUfAMNzk= Subject key identifier: ED:79:19:7C:18:A8:D2:EA:85:55:B7:A9:56:32:4D:82:6A:E4:81:7C Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584A374ADB63BF746747380C5C60 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 11290 IP address blocks: 45.42.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:db:63:bf:74:67:47:38:0c:5c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=2fe7a915-10e8-4e99-ad33-b150caa2256b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7e:58:a2:1c:4c:23:3e:c6:62:dc:1a:61:b8: a5:84:6a:96:56:d1:55:4b:91:b9:37:72:20:6b:5d: 0b:f8:8c:c5:b5:f2:bd:22:10:6e:29:41:93:3a:56: d7:49:78:f6:78:2a:d0:f3:92:c2:cc:0f:a7:18:07: 90:bb:4b:f8:5e:e1:bf:75:ca:cf:87:a5:d0:b4:1c: cd:63:75:2e:c2:5e:7f:4c:29:17:3c:14:5c:05:ec: 3c:a7:ff:b7:26:7f:1b:96:d8:a7:e2:2e:bd:c7:51: 06:f5:58:28:d4:b8:ab:7a:6e:4f:11:4c:80:c7:c4: bb:39:1a:04:f6:16:bf:fc:13:c3:b2:2b:90:fa:a4: bb:d2:5a:e5:32:20:14:7b:1b:0c:bf:bd:48:55:1a: 86:bd:c4:cd:fc:23:11:1d:6f:c8:56:db:73:50:cc: 1e:be:b0:7f:0f:c5:3d:3c:0a:10:60:67:6a:22:77: 39:73:ce:e9:fa:5f:9f:a3:c5:93:f6:e0:cb:8e:bb: 29:d4:08:43:35:81:3a:08:f6:cf:b3:59:be:52:7c: d6:03:c7:d2:50:67:df:ce:5c:63:80:6b:0d:2e:ad: 03:9b:5a:86:c5:cf:e4:30:2f:5b:9b:07:7c:c8:e4: 50:88:23:13:f3:68:36:da:25:d1:ce:cb:0f:33:b5: ca:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:79:19:7C:18:A8:D2:EA:85:55:B7:A9:56:32:4D:82:6A:E4:81:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 45.42.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:75:94:f3:03:c8:73:f3:0f:45:86:08:dc:20:c0:c3:87:d2: 90:a6:76:aa:1f:f7:31:b9:63:78:9a:3f:80:b3:42:58:bd:70: 7c:8f:bb:fa:4c:f2:9e:d3:5b:d3:5e:ec:51:69:81:c2:b9:be: 57:bf:5b:1f:f0:62:be:0b:f4:fa:6f:f5:ab:47:9d:99:a9:fe: a0:92:ec:10:de:9a:46:d1:60:a3:5f:2e:3a:ca:df:7a:ae:f1: cf:2c:3b:7a:0a:18:43:ad:e4:07:d9:99:70:5f:63:d6:d2:42: de:cf:bb:3c:05:61:63:be:bd:be:f1:da:74:8a:18:39:ff:59: f8:f3:42:ac:59:4a:4d:13:49:90:81:81:36:a0:bb:8a:d5:fc: c4:d2:2b:0a:d8:27:bd:98:ca:34:00:70:2f:85:20:04:89:8a: 27:cf:12:7c:6b:a5:b5:cf:45:c0:a2:65:61:5e:9c:eb:23:58: 15:b9:b6:b8:80:0a:71:e2:20:71:01:9f:97:40:1e:ce:ca:0c: e9:2b:bd:c1:fd:bb:9b:e3:a1:d5:c9:5f:b3:6e:78:7c:ee:78: 91:04:18:d2:11:7c:df:a0:45:59:e8:d5:a0:0e:f5:45:8f:e5: f5:84:e1:45:dc:11:b3:57:99:e6:30:51:58:ce:38:36:68:dd: a9:87:8e:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3Sttjv3RnRzgMXGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk MmZlN2E5MTUtMTBlOC00ZTk5LWFkMzMtYjE1MGNhYTIyNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH5YohxMIz7GYtwaYbilhGqWVtFVS5G5N3Ig a10L+IzFtfK9IhBuKUGTOlbXSXj2eCrQ85LCzA+nGAeQu0v4XuG/dcrPh6XQtBzN Y3Uuwl5/TCkXPBRcBew8p/+3Jn8bltin4i69x1EG9Vgo1Lirem5PEUyAx8S7ORoE 9ha//BPDsiuQ+qS70lrlMiAUexsMv71IVRqGvcTN/CMRHW/IVttzUMwevrB/D8U9 PAoQYGdqInc5c87p+l+fo8WT9uDLjrsp1AhDNYE6CPbPs1m+UnzWA8fSUGffzlxj gGsNLq0Dm1qGxc/kMC9bmwd8yORQiCMT82g22iXRzssPM7XKTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO15GXwYqNLqhVW3qVYyTYJq5IF8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMDBmN2E0ZjctYmZlNC0z MGYzLWFmOTktYjRlM2M5ZjkzODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE11lPMDyHPzD0WGCNwgwMOH0pCmdqof9zG5Y3iaP4CzQli9cHyPu/pM 8p7TW9Ne7FFpgcK5vle/Wx/wYr4L9Ppv9atHnZmp/qCS7BDemkbRYKNfLjrK33qu 8c8sO3oKGEOt5AfZmXBfY9bSQt7PuzwFYWO+vb7x2nSKGDn/WfjzQqxZSk0TSZCB gTagu4rV/MTSKwrYJ72YyjQAcC+FIASJiifPEnxrpbXPRcCiZWFenOsjWBW5triA CnHiIHEBn5dAHs7KDOkrvcH9u5vjodXJX7NueHzueJEEGNIRfN+gRVno1aAO9UWP 5fWE4UXcEbNXmeYwUVjOODZo3amHjl0= -----END CERTIFICATE-----Generated at Mon Jun 30 00:40:54 2025 by rpki-client