$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/03d6ba40-02b4-3565-a74a-d62126945baf.roa File: 03d6ba40-02b4-3565-a74a-d62126945baf.roa (raw, json) Hash identifier: Ls2ryHpdq3JYtEZ+FstAg5SYj0CGxH6HCQboal00nW8= Subject key identifier: 6B:F6:16:E4:52:43:0D:CA:47:22:8B:E1:53:F3:F3:48:B7:98:7D:96 Certificate issuer: /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Certificate serial: 010D0C9F43285849A1EF6F83273FFD09CDEA2180 Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/03d6ba40-02b4-3565-a74a-d62126945baf.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 399141 IP address blocks: 45.42.172.0/22 maxlen: 24 2602:fcd8::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:6f:83:27:3f:fd:09:cd:ea:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=015ca1d1-ef2d-43c0-9590-414057c89bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:29:89:ea:3c:1e:05:e1:af:79:b8:00:1e:02: f7:9c:74:1d:8a:bc:84:48:49:37:05:40:66:48:8e: 58:82:7e:2b:76:80:d6:e8:ed:cd:8d:f0:bd:99:85: 37:5e:1c:46:b0:c6:0e:a2:db:00:27:ea:d5:13:1f: 20:47:55:fd:84:2e:65:b8:c6:1c:4a:50:e8:da:59: b1:bb:86:c9:84:cd:f0:0c:cd:7f:e4:ea:7c:80:ad: 5a:49:ac:d9:55:e4:8c:74:cd:1e:79:e8:52:6a:33: f2:05:38:36:38:48:03:47:60:42:01:b9:dc:45:b0: 4d:bc:ce:14:81:5e:84:0d:01:3f:90:7c:0c:52:1e: d5:0d:bc:57:8f:74:df:2d:3c:9b:8c:96:70:c8:6c: 5e:f6:7e:3e:f6:be:e7:48:ec:d6:74:84:4d:fb:59: a4:d9:e5:99:44:fb:03:8d:20:7b:50:9c:02:5d:38: fd:7e:50:f3:a0:cd:8f:b1:f6:65:71:6f:f6:94:54: 70:91:4a:30:5b:0a:d6:c3:37:08:94:9e:90:3f:98: 8b:ca:d6:61:67:92:e9:65:9f:0d:92:7f:23:f4:83: 59:f3:50:ec:d2:f9:e2:e7:25:b8:03:33:c2:97:7c: 8b:1a:d4:d4:fb:4b:5f:60:91:b0:b6:f5:fe:2c:af: 3c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F6:16:E4:52:43:0D:CA:47:22:8B:E1:53:F3:F3:48:B7:98:7D:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/03d6ba40-02b4-3565-a74a-d62126945baf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl X509v3 Authority Key Identifier: keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer sbgp-ipAddrBlock: critical IPv4: 45.42.172.0/22 IPv6: 2602:fcd8::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ec:85:a8:ed:aa:7f:c6:dd:c7:30:a8:4f:2d:94:0a:6c:d7: 95:ed:4a:84:d7:51:6d:0b:75:c0:1c:84:ba:a7:1a:1e:a3:9d: a5:5d:14:d1:2e:a1:db:7a:c8:87:11:51:00:e0:1a:ca:9e:c0: f4:ca:44:fa:e0:c0:7b:d0:15:ec:df:da:30:f7:29:f2:75:3b: a3:84:25:5b:8e:8d:85:79:c0:d1:48:aa:94:41:b2:10:5a:ba: 0b:32:40:8f:1b:61:f8:c5:af:08:e3:c2:4e:44:32:ef:c8:29: e5:76:c3:0e:ed:5d:11:90:79:63:4d:42:8f:ec:27:d6:a6:2f: 7d:93:c5:6d:86:49:8e:15:d1:3c:d2:a0:e9:3a:20:24:17:40: 62:38:e9:5f:3b:71:77:03:6e:ac:7b:5b:a4:e7:c1:c9:9b:1e: a5:e2:b8:57:4f:54:d0:7b:49:0a:ac:8e:fb:d3:8b:a4:7e:13: 06:aa:19:1e:32:d2:20:eb:9a:87:ed:62:6c:cf:aa:82:3c:5f: b6:11:16:af:cf:20:8d:a4:78:9b:af:22:02:d5:ed:d1:7b:46: c1:8f:5a:aa:d8:3a:e7:45:4c:d9:99:99:e3:7f:e4:04:21:b6: c9:4f:bd:ce:d5:73:36:34:d5:aa:3b:35:65:42:37:76:42:23: 72:fa:92:31 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmh72+DJz/9Cc3qIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU4ZWQ5NTAtNDQ4OC00OWIxLThkMzktYmI4YzcxYTc2 N2QyMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MDE1Y2ExZDEtZWYyZC00M2MwLTk1OTAtNDE0MDU3Yzg5YmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqimJ6jweBeGvebgAHgL3nHQdiryESEk3BUBm SI5Ygn4rdoDW6O3NjfC9mYU3XhxGsMYOotsAJ+rVEx8gR1X9hC5luMYcSlDo2lmx u4bJhM3wDM1/5Op8gK1aSazZVeSMdM0eeehSajPyBTg2OEgDR2BCAbncRbBNvM4U gV6EDQE/kHwMUh7VDbxXj3TfLTybjJZwyGxe9n4+9r7nSOzWdIRN+1mk2eWZRPsD jSB7UJwCXTj9flDzoM2PsfZlcW/2lFRwkUowWwrWwzcIlJ6QP5iLytZhZ5LpZZ8N kn8j9INZ81Ds0vni5yW4AzPCl3yLGtTU+0tfYJGwtvX+LK88yQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGv2FuRSQw3KRyKL4VPz80i3mH2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThl ZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhjNzFhNzY3ZDIvMDNkNmJhNDAtMDJiNC0z NTY1LWE3NGEtZDYyMTI2OTQ1YmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWU4ZWQ5NTAtNDQ4OC00OWIxLThk MzktYmI4YzcxYTc2N2QyLzllOGVkOTUwLTQ0ODgtNDliMS04ZDM5LWJiOGM3MWE3 NjdkMi5jcmwwHwYDVR0jBBgwFoAUJhbbhZB9FA+mCJFa84xIt9zz1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThlZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhj NzFhNzY3ZDIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCLSqsMA4E AgACMAgDBgQmAvzYADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAV7IWo7ap/xt3HMKhPLZQKbNeV7UqE11Ft C3XAHIS6pxoeo52lXRTRLqHbesiHEVEA4BrKnsD0ykT64MB70BXs39ow9ynydTuj hCVbjo2FecDRSKqUQbIQWroLMkCPG2H4xa8I48JORDLvyCnldsMO7V0RkHljTUKP 7CfWpi99k8VthkmOFdE80qDpOiAkF0BiOOlfO3F3A26se1uk58HJmx6l4rhXT1TQ e0kKrI7704ukfhMGqhkeMtIg65qH7WJsz6qCPF+2ERavzyCNpHibryIC1e3Re0bB j1qq2DrnRUzZmZnjf+QEIbbJT73O1XM2NNWqOzVlQjd2QiNy+pIx -----END CERTIFICATE-----Generated at Sun May 11 06:26:05 2025 by rpki-client