$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/24dd3f45-f2ec-33df-805e-c432de68f74d.roa File: 24dd3f45-f2ec-33df-805e-c432de68f74d.roa (raw, json) Hash identifier: kXSuwyR/s6iOjEdBXkGya/YqScdrY+9cnBooqrdqki4= Subject key identifier: DA:B9:21:7B:88:56:42:05:8E:82:1D:00:B8:2D:B0:E5:8C:5D:65:EE Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658 Certificate serial: 010D0C9F43285849E2251FC6B722502E9B5D3C00 Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/24dd3f45-f2ec-33df-805e-c432de68f74d.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 398395 IP address blocks: 45.43.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:1f:c6:b7:22:50:2e:9b:5d:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=e767b15f-97e5-4a6e-8195-22199478b01c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:35:3f:26:ca:58:b3:6d:c6:aa:75:27:83:ba: a4:56:98:b3:50:c9:55:ad:56:c2:e2:1f:b1:4f:5a: 61:71:b7:20:fc:22:51:34:7a:d3:b1:7c:d2:17:16: cf:74:04:04:72:e7:ee:f5:3e:99:b4:8e:76:54:f6: 54:c0:39:30:8e:b8:a5:a1:0f:c3:f2:0d:9e:6b:ba: 11:68:81:a2:0b:eb:c0:6c:a5:4f:eb:65:8e:72:17: 26:27:7d:7e:47:23:98:be:0c:ae:9f:07:e3:5e:80: 3c:35:c0:66:21:eb:d1:68:19:a5:2a:5d:2d:89:dc: a8:c5:09:3b:d4:d0:cd:84:a9:00:58:d6:b2:ca:7f: 70:2e:4d:53:7c:06:9b:cc:16:75:af:21:ff:90:fd: 1b:28:80:56:5c:1d:de:4e:07:75:6b:6c:ea:28:aa: 10:f2:93:7a:6a:dd:1e:ec:bb:5a:3f:89:16:4d:70: 4a:0f:6b:e8:6f:ac:fa:0b:be:2c:3d:c3:0f:a7:36: ea:4d:36:1d:c4:31:b2:b2:bb:b6:85:8f:bb:b8:ec: 0a:a4:dc:8e:33:0d:03:fb:26:bf:ab:28:99:0f:d4: a9:f2:c8:a6:c3:3a:31:e9:18:08:f4:aa:bc:4c:10: 58:ef:61:bd:e9:32:25:7a:b6:b1:c5:9a:a5:93:ce: a4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B9:21:7B:88:56:42:05:8E:82:1D:00:B8:2D:B0:E5:8C:5D:65:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/24dd3f45-f2ec-33df-805e-c432de68f74d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl X509v3 Authority Key Identifier: keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer sbgp-ipAddrBlock: critical IPv4: 45.43.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:80:4a:e9:a2:22:27:a3:00:b1:8e:fe:6c:a9:91:8b:53:db: f4:a8:d7:35:b6:c2:bc:99:45:45:69:ff:04:3a:0a:7a:53:1e: f8:71:b0:ca:cd:7f:61:1d:8f:b8:36:5d:25:3c:c8:48:7c:9f: 7b:d9:2c:12:b3:96:b9:84:40:17:99:c9:fd:6b:d1:28:9d:36: 77:9e:17:df:a5:c7:ab:e0:32:8b:e1:ee:0a:04:ec:33:61:4c: ad:c8:20:63:8a:5a:38:2a:df:25:8e:0e:2e:1f:b2:c6:cc:9a: bb:d4:8d:4d:b7:6c:7c:45:50:34:1d:dd:99:bd:d5:a0:5e:8f: 89:6c:cc:6b:85:d6:3a:02:8d:06:a1:dd:0c:58:51:1f:fd:16: 37:30:5e:d2:db:81:63:6a:f8:fc:6d:20:11:fd:a3:9f:26:f1: 6d:4f:8b:da:e9:53:59:3a:81:18:d0:5a:5c:e4:8e:07:33:8f: 7a:a0:a1:43:d4:8e:aa:4d:11:70:2c:7e:86:81:2e:5e:c5:51: 5b:64:aa:e4:39:26:9b:93:42:df:90:d6:a7:12:84:51:aa:14: 38:a5:c2:4e:a7:c2:9c:d3:da:b1:d3:77:1d:5a:ce:c7:b3:1f: 1f:8c:9e:94:ab:af:fa:f6:8d:c0:34:96:e4:42:38:11:da:64: 6c:6f:55:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJR/GtyJQLptdPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0 NjU4MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk ZTc2N2IxNWYtOTdlNS00YTZlLTgxOTUtMjIxOTk0NzhiMDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTU/JspYs23GqnUng7qkVpizUMlVrVbC4h+x T1phcbcg/CJRNHrTsXzSFxbPdAQEcufu9T6ZtI52VPZUwDkwjriloQ/D8g2ea7oR aIGiC+vAbKVP62WOchcmJ31+RyOYvgyunwfjXoA8NcBmIevRaBmlKl0tidyoxQk7 1NDNhKkAWNayyn9wLk1TfAabzBZ1ryH/kP0bKIBWXB3eTgd1a2zqKKoQ8pN6at0e 7LtaP4kWTXBKD2vob6z6C74sPcMPpzbqTTYdxDGysru2hY+7uOwKpNyOMw0D+ya/ qyiZD9Sp8simwzox6RgI9Kq8TBBY72G96TIleraxxZqlk86kOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNq5IXuIVkIFjoIdALgtsOWMXWXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvMjRkZDNmNDUtZjJlYy0z M2RmLTgwNWUtYzQzMmRlNjhmNzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz NzY1MzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLSsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuASumiIiejALGO/mypkYtT2/So1zW2wryZRUVp/wQ6CnpTHvhxsMrN f2Edj7g2XSU8yEh8n3vZLBKzlrmEQBeZyf1r0SidNneeF9+lx6vgMovh7goE7DNh TK3IIGOKWjgq3yWODi4fssbMmrvUjU23bHxFUDQd3Zm91aBej4lszGuF1joCjQah 3QxYUR/9FjcwXtLbgWNq+PxtIBH9o58m8W1Pi9rpU1k6gRjQWlzkjgczj3qgoUPU jqpNEXAsfoaBLl7FUVtkquQ5JpuTQt+Q1qcShFGqFDilwk6nwpzT2rHTdx1azsez Hx+MnpSrr/r2jcA0luRCOBHaZGxvVY4= -----END CERTIFICATE-----Generated at Tue Jul 1 09:14:15 2025 by rpki-client