$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3c45d558-4110-3bb1-a881-a92d5ab92991.roa File: 3c45d558-4110-3bb1-a881-a92d5ab92991.roa (raw, json) Hash identifier: WQWO43xpoTqL3XlcVFwlgKddX09J1HqzuGES7Lo7cNI= Subject key identifier: E9:91:54:0F:6E:23:5B:83:73:51:1A:92:7E:AF:94:9C:DF:DE:F5:59 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A5765D3E7E2BBECBDCE10E068 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3c45d558-4110-3bb1-a881-a92d5ab92991.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 46261 IP address blocks: 45.33.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:d3:e7:e2:bb:ec:bd:ce:10:e0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=43b458f3-48db-418b-9307-cee74d152853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:64:8c:d3:a7:7b:15:2b:15:fb:5c:58:52:e2: 12:cf:d9:2e:a5:d2:34:99:cd:23:5b:37:e0:ab:d8: 01:50:f5:14:3e:57:f1:ae:28:e0:55:5c:11:30:28: 40:7f:f4:61:18:8a:d0:ff:90:9b:a1:0e:95:be:58: 40:8f:6f:ee:99:7e:31:2c:70:24:4f:f1:6a:06:8d: 1f:d2:90:32:ca:50:f4:bf:97:c0:88:67:b8:a8:27: b7:10:fc:b0:2c:3d:ef:b8:07:61:b7:5b:f6:6c:73: 99:7e:a0:68:59:16:3e:94:dd:26:20:dc:fc:08:1b: cc:a0:02:4d:ae:cd:29:59:14:ca:83:78:ab:b2:a0: 47:71:b9:75:a9:53:31:6d:9d:8c:5b:f8:18:a4:62: c8:6e:d3:53:9f:3f:76:87:8b:cd:81:5e:91:57:f1: da:37:4e:ee:86:9f:e7:22:c5:83:f1:49:cf:19:e4: d1:cf:cf:65:bd:c8:2e:26:a5:ad:b9:5f:49:d5:a7: 68:d3:c9:ac:4f:f9:2c:44:af:d1:60:48:08:a9:f9: 5e:95:65:63:2e:dc:33:5c:81:71:7d:0b:e7:3e:30: 5c:7a:d7:85:c4:03:f7:d4:47:0e:2a:b0:8c:e1:c1: 6b:3c:ea:ad:89:27:b7:00:44:2c:a4:d1:ac:9b:28: 15:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:91:54:0F:6E:23:5B:83:73:51:1A:92:7E:AF:94:9C:DF:DE:F5:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3c45d558-4110-3bb1-a881-a92d5ab92991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 45.33.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:6f:5c:ce:7e:88:4e:eb:dd:ed:a6:46:f9:2f:74:89:84:fa: 91:92:2f:65:80:62:0f:0d:51:14:50:c8:83:95:24:68:fd:bb: bd:fb:27:2b:39:d3:7d:52:4c:de:45:08:d4:3d:88:b9:53:1b: 0d:b5:cf:6c:88:81:0c:a6:56:cd:50:0b:84:16:42:0e:5b:7c: 5d:1b:6e:87:52:c0:b6:1e:6c:80:69:e7:df:26:ad:31:67:5f: f8:61:16:09:ba:31:d1:40:d6:5a:7c:41:5c:40:5d:cf:16:77: 0f:5c:a1:6b:8a:6d:b3:84:cc:d7:55:70:78:10:9a:aa:86:da: 60:e0:c3:49:9c:79:45:19:e7:60:9b:c7:7e:d6:1f:ac:cb:fc: 06:e7:a6:c4:a6:73:1d:31:18:ff:e4:10:5c:17:7e:9b:65:12: 7b:1b:56:7d:23:59:55:81:4a:ce:e6:b7:44:66:67:81:a5:d4: af:41:e7:16:de:88:84:df:e2:ff:a8:f7:f3:26:36:01:ce:b3: 3f:0f:bf:13:c9:88:d0:0d:f1:c9:35:4a:a1:17:f2:72:e2:52: 3f:49:f0:14:e8:bb:ec:eb:49:7d:5f:99:c2:a8:63:85:d6:df: 15:67:dc:e9:ad:47:46:54:81:63:5b:15:96:2e:d9:2f:4d:b4: 0c:bf:1d:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZdPn4rvsvc4Q4GgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk NDNiNDU4ZjMtNDhkYi00MThiLTkzMDctY2VlNzRkMTUyODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2SM06d7FSsV+1xYUuISz9kupdI0mc0jWzfg q9gBUPUUPlfxrijgVVwRMChAf/RhGIrQ/5CboQ6VvlhAj2/umX4xLHAkT/FqBo0f 0pAyylD0v5fAiGe4qCe3EPywLD3vuAdht1v2bHOZfqBoWRY+lN0mINz8CBvMoAJN rs0pWRTKg3irsqBHcbl1qVMxbZ2MW/gYpGLIbtNTnz92h4vNgV6RV/HaN07uhp/n IsWD8UnPGeTRz89lvcguJqWtuV9J1ado08msT/ksRK/RYEgIqflelWVjLtwzXIFx fQvnPjBceteFxAP31EcOKrCM4cFrPOqtiSe3AEQspNGsmygV7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmRVA9uI1uDc1Eakn6vlJzf3vVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2M0NWQ1NTgtNDExMC0z YmIxLWE4ODEtYTkyZDVhYjkyOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpvXM5+iE7r3e2mRvkvdImE+pGSL2WAYg8NURRQyIOVJGj9u737Jys5 031STN5FCNQ9iLlTGw21z2yIgQymVs1QC4QWQg5bfF0bbodSwLYebIBp598mrTFn X/hhFgm6MdFA1lp8QVxAXc8Wdw9coWuKbbOEzNdVcHgQmqqG2mDgw0mceUUZ52Cb x37WH6zL/AbnpsSmcx0xGP/kEFwXfptlEnsbVn0jWVWBSs7mt0RmZ4Gl1K9B5xbe iITf4v+o9/MmNgHOsz8PvxPJiNAN8ck1SqEX8nLiUj9J8BTou+zrSX1fmcKoY4XW 3xVn3OmtR0ZUgWNbFZYu2S9NtAy/HfY= -----END CERTIFICATE-----Generated at Sun Jun 29 12:51:45 2025 by rpki-client