$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa File: d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa (raw, json) Hash identifier: aQikqNV9QIYChRlzfDclrrN811INA5v6awn9/BxJkR0= Subject key identifier: 42:F3:90:0A:9A:BD:B4:4E:DD:75:90:91:25:DD:E0:A7:16:87:04:02 Certificate issuer: /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Certificate serial: 010D0C9F4328584A3FAAD8D7C66DEC26DF556380 Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 400967 IP address blocks: 45.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:d8:d7:c6:6d:ec:26:df:55:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=a056e0b1-cb61-4e8b-91f5-3915f54ef3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:94:9b:c6:a1:7d:18:75:7f:0b:86:7a:4f:1e: f3:63:6f:5f:8f:76:19:9b:c5:60:f2:83:0a:81:93: 00:35:f3:f4:70:51:95:b9:1d:16:df:b3:60:2f:34: ac:e1:a9:57:44:0b:2a:80:cb:9b:4b:73:1b:f4:3c: d1:80:f3:e1:b6:00:9a:77:15:b5:06:3c:74:b4:50: 17:84:8c:0f:ea:76:a4:48:ea:fe:10:5f:4e:0b:07: e3:5f:76:c3:b6:b3:67:c2:ec:37:9a:5f:ec:48:ed: bb:19:01:54:34:7e:db:d6:27:92:f5:51:fe:97:8c: d0:2c:19:55:82:9a:67:78:d0:5d:15:00:8b:09:8b: 2b:a2:fb:2f:01:ed:44:01:98:86:39:be:dc:28:2d: a2:0d:c5:c7:34:9c:14:ce:98:d6:de:14:4f:97:a6: 02:49:28:08:98:b9:bd:3a:bb:af:ec:8a:6c:e2:a9: 84:ec:f0:df:96:c9:55:67:52:c7:5d:c4:49:e5:e8: 5c:2e:15:b4:23:44:da:8e:c1:5b:69:11:0b:b8:6a: 6c:0a:61:96:50:7e:ce:23:be:6a:1e:88:46:ea:36: a0:42:e2:73:bb:d2:b0:9e:69:6a:01:ed:fc:8b:81: 51:de:5e:50:18:e9:8f:ce:3e:40:09:b1:8a:02:26: 8e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F3:90:0A:9A:BD:B4:4E:DD:75:90:91:25:DD:E0:A7:16:87:04:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl X509v3 Authority Key Identifier: keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer sbgp-ipAddrBlock: critical IPv4: 45.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:70:ab:30:1b:e0:ee:41:dc:24:30:6d:db:6d:96:57:1b:71: 43:50:4f:44:7e:1f:ea:78:67:ac:62:b3:2b:40:bd:c9:95:c0: 33:61:b7:3c:45:6e:9c:41:52:fa:a9:21:41:61:84:43:1d:da: fd:37:00:39:08:0c:33:5e:a6:b5:b1:dd:52:06:13:02:95:50: 0f:36:9a:89:64:75:72:1d:44:7c:92:94:46:a2:b6:61:3e:29: 98:8e:2c:a6:5f:0b:db:4b:7a:c9:78:bc:13:b7:35:fa:a2:66: 0e:e5:0e:6f:a6:6b:8e:91:f4:cb:de:57:53:77:f2:83:b5:f5: a8:c8:dc:30:bc:20:7f:af:63:b7:c5:12:d8:74:75:5c:08:b9: 0f:ba:56:60:4e:94:f0:83:05:e5:18:c0:2d:ba:2c:8b:25:c4: 66:fa:04:97:82:35:21:b2:05:5f:d5:f1:6a:70:36:67:7b:b2: 1e:db:50:d7:63:1b:17:e0:94:dd:c3:e3:d5:ef:a8:f2:43:5e: c8:58:a1:98:62:ce:c0:db:4a:92:52:20:92:72:24:7a:40:7e: 3e:81:ba:4b:e3:58:8a:68:57:8c:bd:99:34:01:52:69:b6:8f: 6f:09:01:50:3f:36:44:38:5f:3a:73:87:b8:04:ca:af:c7:ed: 17:16:4e:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qtjXxm3sJt9VY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU4ZWQ5NTAtNDQ4OC00OWIxLThkMzktYmI4YzcxYTc2 N2QyMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk YTA1NmUwYjEtY2I2MS00ZThiLTkxZjUtMzkxNWY1NGVmM2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZSbxqF9GHV/C4Z6Tx7zY29fj3YZm8Vg8oMK gZMANfP0cFGVuR0W37NgLzSs4alXRAsqgMubS3Mb9DzRgPPhtgCadxW1Bjx0tFAX hIwP6nakSOr+EF9OCwfjX3bDtrNnwuw3ml/sSO27GQFUNH7b1ieS9VH+l4zQLBlV gppneNBdFQCLCYsrovsvAe1EAZiGOb7cKC2iDcXHNJwUzpjW3hRPl6YCSSgImLm9 Oruv7Ips4qmE7PDflslVZ1LHXcRJ5ehcLhW0I0TajsFbaRELuGpsCmGWUH7OI75q HohG6jagQuJzu9KwnmlqAe38i4FR3l5QGOmPzj5ACbGKAiaOLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELzkAqavbRO3XWQkSXd4KcWhwQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThl ZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhjNzFhNzY3ZDIvZDNmZWZmMjQtOWNiMy0z YzdkLTgwYzAtZjRjNzZmZTMwMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWU4ZWQ5NTAtNDQ4OC00OWIxLThk MzktYmI4YzcxYTc2N2QyLzllOGVkOTUwLTQ0ODgtNDliMS04ZDM5LWJiOGM3MWE3 NjdkMi5jcmwwHwYDVR0jBBgwFoAUJhbbhZB9FA+mCJFa84xIt9zz1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThlZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhj NzFhNzY3ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxwqzAb4O5B3CQwbdttllcbcUNQT0R+H+p4Z6xisytAvcmVwDNhtzxF bpxBUvqpIUFhhEMd2v03ADkIDDNeprWx3VIGEwKVUA82molkdXIdRHySlEaitmE+ KZiOLKZfC9tLesl4vBO3NfqiZg7lDm+ma46R9MveV1N38oO19ajI3DC8IH+vY7fF Eth0dVwIuQ+6VmBOlPCDBeUYwC26LIslxGb6BJeCNSGyBV/V8WpwNmd7sh7bUNdj GxfglN3D49XvqPJDXshYoZhizsDbSpJSIJJyJHpAfj6BukvjWIpoV4y9mTQBUmm2 j28JAVA/NkQ4Xzpzh7gEyq/H7RcWTvc= -----END CERTIFICATE-----Generated at Tue Jul 1 08:31:44 2025 by rpki-client