$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/cc72fc23-eab5-35c3-87ca-a93d8e3e825a.roa File: cc72fc23-eab5-35c3-87ca-a93d8e3e825a.roa (raw, json) Hash identifier: zZhFYAGhNJjtudAzneED8EUI1i3gmQq2nmMlXJ6Ly6g= Subject key identifier: AD:68:D5:D0:6B:8D:F0:18:81:4A:F8:09:59:BC:50:F1:CF:61:B9:08 Certificate issuer: /CN=4632e5fd-374e-430f-9af3-308c1ec6c72d Certificate serial: 010D0C9F4328584A51D076E249E111B28DD13440 Authority key identifier: 8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/cc72fc23-eab5-35c3-87ca-a93d8e3e825a.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 395261 IP address blocks: 45.59.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:76:e2:49:e1:11:b2:8d:d1:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4632e5fd-374e-430f-9af3-308c1ec6c72d Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=245d26a7-5882-4d8d-b3fe-657ac5cbd95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f2:c4:9d:4e:73:cd:ac:36:25:a3:16:cc:39: ec:52:52:05:50:74:a6:08:82:a4:87:62:68:82:f9: 33:2c:d5:b7:28:75:c3:6e:64:12:21:57:24:cf:be: a6:aa:6d:f7:0b:04:b1:5b:67:28:62:38:40:06:af: c2:80:87:bb:5e:94:a8:c1:44:d6:e6:78:13:40:20: 4a:a1:de:98:08:63:f5:fd:b8:e0:75:70:5e:84:4a: ff:68:b4:68:ec:8f:c4:cf:8a:eb:07:3a:80:dd:60: 52:04:d0:ca:e8:69:68:82:e6:82:ce:67:98:d1:33: e1:55:53:9c:be:07:c5:e0:7f:31:f3:89:7a:8f:3b: 96:4a:26:4d:36:94:9a:9f:d1:f6:ed:71:e4:4a:da: d5:51:2a:97:58:15:1b:ad:39:e6:56:b6:74:61:e3: bd:07:c6:0a:75:6b:2a:c8:9d:c5:6d:57:67:64:89: 78:8f:8c:f8:2a:55:3c:0c:58:43:c3:6c:bc:14:fb: 47:ad:67:95:95:01:4a:79:43:b0:9b:8f:7f:f9:dc: a2:dd:81:a0:9b:5e:69:4d:ce:86:3f:f3:88:4f:9a: 8e:d3:d7:84:e3:e9:fa:c0:7c:94:ab:25:cc:23:c2: 3d:e3:5c:dd:be:e2:92:3a:84:1a:85:84:52:21:be: b0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:68:D5:D0:6B:8D:F0:18:81:4A:F8:09:59:BC:50:F1:CF:61:B9:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/cc72fc23-eab5-35c3-87ca-a93d8e3e825a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl X509v3 Authority Key Identifier: keyid:8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0c:f1:a8:4a:f2:75:18:99:be:23:65:23:2f:61:db:a7:00: f8:20:ae:29:33:65:b1:86:6e:28:92:34:b9:bd:bb:f4:f9:30: 58:63:d0:16:88:d6:0c:8e:98:40:34:4f:93:34:5e:37:fe:ac: 52:0b:5f:f2:5e:ac:bb:ea:b9:b2:e1:e6:c4:91:35:81:37:bb: c1:b6:db:a5:54:82:a8:40:87:a9:36:c1:52:fb:3b:83:d4:4e: 0b:04:ad:0b:d2:01:22:f3:e9:e6:c6:ae:e8:57:e0:99:57:12: bc:a9:d8:3c:fc:12:4c:71:2c:ce:8f:0e:97:09:71:74:5c:6b: 1f:ae:9f:a8:d3:f2:05:87:b9:dc:6d:ca:40:a8:e5:0c:96:62: 74:5f:ae:9b:b8:85:a8:9a:a1:8a:1d:1d:7c:53:09:e5:64:63: d8:5b:c2:57:a1:6b:9c:f7:49:f2:25:d4:3b:d2:b4:be:a5:42: a0:6e:b3:c8:93:57:7b:be:01:de:83:49:c4:ad:37:20:92:23: 80:47:c0:bf:1e:11:77:65:d5:57:dc:67:81:f0:6c:6d:e0:24: 8f:09:ed:71:da:52:5b:2c:a4:94:e8:bf:8c:d6:33:c7:ce:4a: 7b:0b:30:22:94:f9:4e:f0:c9:f8:d0:e0:61:68:0e:78:a9:41: 0d:e4:ee:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HbiSeERso3RNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDYzMmU1ZmQtMzc0ZS00MzBmLTlhZjMtMzA4YzFlYzZj NzJkMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk MjQ1ZDI2YTctNTg4Mi00ZDhkLWIzZmUtNjU3YWM1Y2JkOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/LEnU5zzaw2JaMWzDnsUlIFUHSmCIKkh2Jo gvkzLNW3KHXDbmQSIVckz76mqm33CwSxW2coYjhABq/CgIe7XpSowUTW5ngTQCBK od6YCGP1/bjgdXBehEr/aLRo7I/Ez4rrBzqA3WBSBNDK6GloguaCzmeY0TPhVVOc vgfF4H8x84l6jzuWSiZNNpSan9H27XHkStrVUSqXWBUbrTnmVrZ0YeO9B8YKdWsq yJ3FbVdnZIl4j4z4KlU8DFhDw2y8FPtHrWeVlQFKeUOwm49/+dyi3YGgm15pTc6G P/OIT5qO09eE4+n6wHyUqyXMI8I941zdvuKSOoQahYRSIb6wGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1o1dBrjfAYgUr4CVm8UPHPYbkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NjMy ZTVmZC0zNzRlLTQzMGYtOWFmMy0zMDhjMWVjNmM3MmQvY2M3MmZjMjMtZWFiNS0z NWMzLTg3Y2EtYTkzZDhlM2U4MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDYzMmU1ZmQtMzc0ZS00MzBmLTlh ZjMtMzA4YzFlYzZjNzJkLzQ2MzJlNWZkLTM3NGUtNDMwZi05YWYzLTMwOGMxZWM2 YzcyZC5jcmwwHwYDVR0jBBgwFoAUjNzpjNBqpO6W666ZAcVHnYuuD+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NjMyZTVmZC0zNzRlLTQzMGYtOWFmMy0zMDhj MWVjNmM3MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLTtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkM8ahK8nUYmb4jZSMvYdunAPggrikzZbGGbiiSNLm9u/T5MFhj0BaI 1gyOmEA0T5M0Xjf+rFILX/JerLvqubLh5sSRNYE3u8G226VUgqhAh6k2wVL7O4PU TgsErQvSASLz6ebGruhX4JlXEryp2Dz8EkxxLM6PDpcJcXRcax+un6jT8gWHudxt ykCo5QyWYnRfrpu4haiaoYodHXxTCeVkY9hbwleha5z3SfIl1DvStL6lQqBus8iT V3u+Ad6DScStNyCSI4BHwL8eEXdl1VfcZ4HwbG3gJI8J7XHaUlsspJTov4zWM8fO SnsLMCKU+U7wyfjQ4GFoDnipQQ3k7mQ= -----END CERTIFICATE-----Generated at Tue Jul 1 23:29:14 2025 by rpki-client