$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa File: d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa (raw, json) Hash identifier: Gu+yieujIqVKig5rZeZkrUIXMvMPoSvMvy+G1TunBqs= Subject key identifier: 98:33:68:67:D8:72:F2:6C:EE:E6:2D:FD:A1:F2:48:16:C7:B6:70:63 Certificate issuer: /CN=10c21a82-48fa-4568-908e-8e488e55c411 Certificate serial: 010D0C9F4328584ADD66697576BB11E42330D780 Authority key identifier: 93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 398717 IP address blocks: 45.59.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:69:75:76:bb:11:e4:23:30:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10c21a82-48fa-4568-908e-8e488e55c411 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=d65b62ea-13b4-4f64-8725-e5582f5ff56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:76:ac:4e:7f:68:46:a9:45:9f:89:f9:be:3a: 7c:b3:61:18:61:c1:c6:d1:a5:49:00:d1:05:a4:ae: 06:fe:60:3b:a8:d5:65:df:a3:21:01:90:77:41:f5: af:76:b8:b4:fa:bd:6d:91:c8:e8:8b:62:98:fd:32: 20:6c:95:3c:cd:9d:7a:1c:96:3a:f0:d9:5f:cb:6c: 05:dc:18:e1:7d:43:b1:bb:1a:de:d3:b7:5e:f3:b6: 7e:17:ea:90:69:1d:36:0a:a5:f6:23:b6:e9:9e:6d: 86:60:94:b0:e0:32:43:a9:66:08:50:5a:1a:6a:bb: eb:ff:6b:75:f7:6a:ad:45:ab:22:f5:6c:38:3c:26: 4c:1e:44:cc:dc:b6:5f:db:67:a5:21:77:7b:24:34: c5:1f:42:69:66:6d:c9:45:ad:f4:55:0c:8b:1e:35: ce:85:57:3e:b3:8c:5a:56:50:11:7e:b9:0d:53:81: 00:6f:d2:e2:45:5f:f2:da:a6:d1:44:22:84:9f:74: 50:fa:e3:d9:09:c9:8b:41:4b:73:13:53:54:ed:b1: 00:0f:5d:d9:cd:15:00:f0:d7:e1:96:33:68:a0:8e: ae:2f:34:09:8e:09:d2:c1:e0:65:68:76:bf:6c:80: 2e:74:50:7d:ad:29:8f:00:32:7f:44:d5:35:c6:b8: 0a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:33:68:67:D8:72:F2:6C:EE:E6:2D:FD:A1:F2:48:16:C7:B6:70:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl X509v3 Authority Key Identifier: keyid:93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer sbgp-ipAddrBlock: critical IPv4: 45.59.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f6:b3:5a:7c:60:74:af:f4:96:9a:82:ab:83:c7:91:dd:7c: e5:8d:92:1a:b3:0b:89:af:60:69:d8:cc:61:60:0d:a6:cc:d2: 00:78:e9:22:35:d9:39:26:57:b1:56:70:05:dd:b4:d7:9a:95: cd:cb:22:7b:e1:0e:bd:26:25:1e:63:2c:ee:69:06:e0:8e:d0: ec:f3:32:9f:c1:8d:2a:44:34:ab:27:4d:fb:27:7d:8f:32:88: e9:c7:2b:ae:36:5f:4e:93:84:a1:93:a1:ae:40:02:fa:28:61: da:68:56:ce:a1:df:e0:40:e0:c9:ff:de:23:79:c5:b5:e7:60: 77:d7:06:30:ed:14:4d:79:1e:49:77:c4:fa:a0:f0:4b:b3:98: 51:ed:be:36:58:4f:cd:05:13:6e:24:c9:82:da:ac:0d:92:65: f1:62:66:07:74:ba:a8:a3:c7:2f:98:83:12:8c:25:46:51:11: 5a:9c:f5:77:94:b0:3b:98:0a:90:1a:5a:a2:32:b1:52:09:23: ed:8f:c6:f6:07:23:6d:e8:df:24:4f:c0:9d:e6:0d:fb:b4:77: d4:27:5e:f3:bf:ba:02:4b:a1:60:c3:8a:6a:5b:71:1f:d9:19: 7b:c2:08:2d:e7:95:7b:77:37:0e:ce:4d:e3:dc:4e:45:be:98: 2c:e2:3c:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZml1drsR5CMw14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBjMjFhODItNDhmYS00NTY4LTkwOGUtOGU0ODhlNTVj NDExMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk ZDY1YjYyZWEtMTNiNC00ZjY0LTg3MjUtZTU1ODJmNWZmNTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknasTn9oRqlFn4n5vjp8s2EYYcHG0aVJANEF pK4G/mA7qNVl36MhAZB3QfWvdri0+r1tkcjoi2KY/TIgbJU8zZ16HJY68Nlfy2wF 3BjhfUOxuxre07de87Z+F+qQaR02CqX2I7bpnm2GYJSw4DJDqWYIUFoaarvr/2t1 92qtRasi9Ww4PCZMHkTM3LZf22elIXd7JDTFH0JpZm3JRa30VQyLHjXOhVc+s4xa VlARfrkNU4EAb9LiRV/y2qbRRCKEn3RQ+uPZCcmLQUtzE1NU7bEAD13ZzRUA8Nfh ljNooI6uLzQJjgnSweBlaHa/bIAudFB9rSmPADJ/RNU1xrgK3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgzaGfYcvJs7uYt/aHySBbHtnBjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMGMy MWE4Mi00OGZhLTQ1NjgtOTA4ZS04ZTQ4OGU1NWM0MTEvZDEwYzFiN2EtMWM2OS0z YmU5LWE4YjktM2QyOGEyNzExY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTBjMjFhODItNDhmYS00NTY4LTkw OGUtOGU0ODhlNTVjNDExLzEwYzIxYTgyLTQ4ZmEtNDU2OC05MDhlLThlNDg4ZTU1 YzQxMS5jcmwwHwYDVR0jBBgwFoAUk6UjHkfHssxyd3A5rvrIxv60gK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMGMyMWE4Mi00OGZhLTQ1NjgtOTA4ZS04ZTQ4 OGU1NWM0MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLTu8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL2s1p8YHSv9JaagquDx5HdfOWNkhqzC4mvYGnYzGFgDabM0gB46SI1 2TkmV7FWcAXdtNealc3LInvhDr0mJR5jLO5pBuCO0OzzMp/BjSpENKsnTfsnfY8y iOnHK642X06ThKGToa5AAvooYdpoVs6h3+BA4Mn/3iN5xbXnYHfXBjDtFE15Hkl3 xPqg8EuzmFHtvjZYT80FE24kyYLarA2SZfFiZgd0uqijxy+YgxKMJUZREVqc9XeU sDuYCpAaWqIysVIJI+2PxvYHI23o3yRPwJ3mDfu0d9QnXvO/ugJLoWDDimpbcR/Z GXvCCC3nlXt3Nw7OTePcTkW+mCziPN8= -----END CERTIFICATE-----Generated at Sat Aug 23 17:47:15 2025 by rpki-client