$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa File: 408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa (raw, json) Hash identifier: /us8u94GLx57ZBKNtg9X7JbcaELjSVaxlpiWR/2v9pM= Subject key identifier: E9:0A:F2:14:FB:59:DB:8D:FD:32:0B:5F:B0:1D:01:42:F3:90:6D:EE Certificate issuer: /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538 Certificate serial: 010D0C9F43285849C79F634E068EC4DE65AE8098 Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 53356 IP address blocks: 45.59.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:63:4e:06:8e:c4:de:65:ae:80:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=3f02988e-c9de-416d-b50f-132f5ad4d271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a8:d5:d6:97:ca:06:20:65:6f:4a:b4:42:28: 69:4a:94:4a:1f:c4:bb:0a:01:db:02:b2:ac:f6:28: f9:00:9f:0e:dc:0c:3d:7e:d8:d0:27:b9:63:1b:fa: 71:4c:89:2a:96:be:aa:68:e9:9e:f0:6c:d0:fc:c6: fb:fc:46:d5:9e:12:d9:b9:4c:fc:47:0d:d6:7a:d5: 2a:b5:65:2a:25:0e:77:e2:1a:0b:3c:36:ad:a1:59: 36:af:7b:03:e2:f0:4b:f9:6d:6c:a5:ae:26:c5:47: a0:1c:66:7d:c6:2a:bf:0b:f4:91:a4:13:40:35:86: c5:82:42:85:cc:33:85:db:51:8a:7e:36:35:85:16: 44:41:a5:52:30:b0:b5:00:ac:48:5a:e8:77:ca:da: 33:80:5c:71:50:4e:29:57:02:b0:9d:70:61:72:d9: 8a:37:86:b0:a9:33:ee:24:e0:9c:13:a7:21:b8:a7: 9d:20:cd:f0:4a:57:1f:e2:36:bd:ec:f3:de:a8:e1: d4:4a:fd:4a:df:b4:e0:b1:ab:e9:59:85:52:6c:fa: 10:be:35:57:ba:25:25:6b:e8:eb:e9:2a:d5:2e:8a: e2:2c:9c:1a:ac:2d:2e:89:3e:8e:80:f3:71:b2:02: 6b:96:66:ea:1a:fe:58:04:95:76:d1:a8:d3:9c:9d: 5d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0A:F2:14:FB:59:DB:8D:FD:32:0B:5F:B0:1D:01:42:F3:90:6D:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl X509v3 Authority Key Identifier: keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer sbgp-ipAddrBlock: critical IPv4: 45.59.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:09:ca:62:70:cf:31:54:b6:f5:8e:8b:01:4e:f9:25:06:ab: 0e:da:9e:98:c6:b1:85:c1:8d:9c:8b:b9:e6:bc:7f:2a:e0:5b: dd:83:a6:ef:1f:7c:71:f4:4c:7a:f8:ae:80:3c:44:9b:e5:ae: d1:1e:4a:26:1b:34:56:40:fd:77:73:8f:3a:75:78:03:cb:82: 76:4c:f0:02:4f:1a:66:d5:b0:18:f5:bf:e3:34:92:2d:fb:35: b4:70:08:66:dd:b6:a8:4e:5d:d1:96:e3:f6:ff:32:ed:6f:0d: 5b:46:cc:a0:01:00:d9:65:75:cd:49:c5:fd:93:36:58:10:1e: e6:0b:ae:6b:25:da:4c:44:f8:c0:1e:07:51:de:8a:ad:1b:4d: 10:5e:b4:94:86:e3:b2:56:59:4c:4b:79:33:fb:34:f9:55:d2: f8:2b:60:91:62:e8:2a:70:d2:95:40:84:ed:1c:b2:71:ac:39: a4:be:a0:c4:95:d6:1b:07:99:b9:76:b8:c1:f7:9a:95:28:4e: 28:54:83:ea:1f:41:ea:7c:56:94:cd:90:63:c4:7c:06:ad:cb: 2e:c9:eb:22:93:18:4a:06:68:a1:c1:bb:a6:da:68:0d:96:7c: f4:f4:d4:6e:4c:4d:ac:d7:23:9b:8e:e4:ea:b9:28:35:f5:42: 1b:e3:b9:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn2NOBo7E3mWugJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWYwN2M5ZTItNjQ4Yy00Y2EyLTg3ODQtMDJhYzNjMTQ0 NTM4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk M2YwMjk4OGUtYzlkZS00MTZkLWI1MGYtMTMyZjVhZDRkMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6jV1pfKBiBlb0q0QihpSpRKH8S7CgHbArKs 9ij5AJ8O3Aw9ftjQJ7ljG/pxTIkqlr6qaOme8GzQ/Mb7/EbVnhLZuUz8Rw3WetUq tWUqJQ534hoLPDatoVk2r3sD4vBL+W1spa4mxUegHGZ9xiq/C/SRpBNANYbFgkKF zDOF21GKfjY1hRZEQaVSMLC1AKxIWuh3ytozgFxxUE4pVwKwnXBhctmKN4awqTPu JOCcE6chuKedIM3wSlcf4ja97PPeqOHUSv1K37TgsavpWYVSbPoQvjVXuiUla+jr 6SrVLoriLJwarC0uiT6OgPNxsgJrlmbqGv5YBJV20ajTnJ1dnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkK8hT7WduN/TILX7AdAULzkG3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85ZjA3 YzllMi02NDhjLTRjYTItODc4NC0wMmFjM2MxNDQ1MzgvNDA4YTBjMTktMGU3ZC0z Y2Y0LTliOWEtNGQ3MjA4ZTIzMmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWYwN2M5ZTItNjQ4Yy00Y2EyLTg3 ODQtMDJhYzNjMTQ0NTM4LzlmMDdjOWUyLTY0OGMtNGNhMi04Nzg0LTAyYWMzYzE0 NDUzOC5jcmwwHwYDVR0jBBgwFoAUZHXrfCV7cP95Mb9Xfny6xnTRzpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85ZjA3YzllMi02NDhjLTRjYTItODc4NC0wMmFj M2MxNDQ1MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkJymJwzzFUtvWOiwFO+SUGqw7anpjGsYXBjZyLuea8fyrgW92Dpu8f fHH0THr4roA8RJvlrtEeSiYbNFZA/Xdzjzp1eAPLgnZM8AJPGmbVsBj1v+M0ki37 NbRwCGbdtqhOXdGW4/b/Mu1vDVtGzKABANlldc1Jxf2TNlgQHuYLrmsl2kxE+MAe B1Heiq0bTRBetJSG47JWWUxLeTP7NPlV0vgrYJFi6Cpw0pVAhO0csnGsOaS+oMSV 1hsHmbl2uMH3mpUoTihUg+ofQep8VpTNkGPEfAatyy7J6yKTGEoGaKHBu6baaA2W fPT01G5MTazXI5uO5Oq5KDX1QhvjuV8= -----END CERTIFICATE-----Generated at Sat May 10 10:25:39 2025 by rpki-client