$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/7611bb1f-c4d0-33fa-8a29-1c4abc0a2f7c.roa File: 7611bb1f-c4d0-33fa-8a29-1c4abc0a2f7c.roa (raw, json) Hash identifier: GBkwMFbyIzQqcO0+LGBTL/vn9nGXX6GRMO+/d+zO1ug= Subject key identifier: 55:D3:F0:4F:ED:3E:23:70:CF:C6:83:C0:25:4B:13:D1:1F:02:8C:E3 Certificate issuer: /CN=27b41e1f-1561-4820-9e8b-d00057b5083a Certificate serial: 010D0C9F4328584AE461201F715F843E8D6759C0 Authority key identifier: DD:D8:F6:1A:C3:0D:42:C9:66:D7:E7:D2:76:3F:DF:8D:83:5F:59:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/7611bb1f-c4d0-33fa-8a29-1c4abc0a2f7c.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 45.59.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/27b41e1f-1561-4820-9e8b-d00057b5083a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/27b41e1f-1561-4820-9e8b-d00057b5083a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:20:1f:71:5f:84:3e:8d:67:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b41e1f-1561-4820-9e8b-d00057b5083a Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=41e4d042-4435-4fc2-b2f9-83613cdd03b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:46:a6:23:1b:85:4d:64:cf:a7:f2:77:e9:a8: 28:42:0b:cb:ab:c5:aa:94:cf:26:5f:49:63:ed:dc: 1b:5a:c3:15:55:d9:53:9d:07:24:0e:00:1b:f6:1f: 9b:27:d3:7f:c9:1c:01:cc:18:a1:7c:35:5c:e1:c5: 99:4f:46:c7:5a:d9:84:2a:d7:f6:3f:09:27:74:19: dc:eb:55:37:3e:79:15:82:f1:a7:54:83:5b:c4:4b: d0:71:5f:f1:55:43:ce:68:7a:1b:24:6d:fc:d0:28: b6:4f:8f:e4:e9:be:b1:b2:ed:dd:36:b7:22:9c:b0: f9:07:5d:63:4c:68:1f:e2:77:03:36:74:f6:27:03: c8:9e:65:4d:12:0a:95:0a:fe:66:67:08:4f:3f:24: 8d:5d:f6:ca:2a:ea:78:5a:a8:ae:d7:9c:45:ca:97: e2:83:83:8c:91:a6:eb:d2:00:50:5a:d5:31:02:84: a0:58:95:14:16:89:82:fd:0c:dd:0e:d9:66:b8:46: c9:47:8a:b4:0f:5c:e5:d6:1a:ca:dc:7c:be:4c:63: 3b:fa:de:86:65:6b:a1:a8:05:0f:72:ac:20:d1:87: eb:6e:4c:a6:31:4d:d6:91:d0:0e:1c:3f:c2:ad:4a: de:9d:42:20:17:f2:cf:04:4d:9f:0c:47:37:d3:1d: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D3:F0:4F:ED:3E:23:70:CF:C6:83:C0:25:4B:13:D1:1F:02:8C:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/7611bb1f-c4d0-33fa-8a29-1c4abc0a2f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/27b41e1f-1561-4820-9e8b-d00057b5083a.crl X509v3 Authority Key Identifier: keyid:DD:D8:F6:1A:C3:0D:42:C9:66:D7:E7:D2:76:3F:DF:8D:83:5F:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a.cer sbgp-ipAddrBlock: critical IPv4: 45.59.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:62:b0:6d:62:10:90:42:71:1d:1e:35:21:9e:a3:53:1b:48: 69:45:68:0b:f7:9b:20:6f:fb:b1:56:50:88:8a:44:4a:b7:5c: 58:c5:4a:45:59:a6:c8:1d:d4:49:08:9f:0e:eb:e9:7f:d4:39: dc:48:8e:85:17:6a:51:87:26:92:76:03:53:86:6c:8b:5e:be: 56:0d:5c:de:bd:9b:c8:64:68:10:a8:b6:c8:ab:9d:2a:dd:6a: 3c:1a:30:a0:52:65:23:76:eb:02:ee:0b:a6:06:01:b5:ca:20: ee:23:f0:74:b1:3b:01:b1:8d:91:55:1c:dd:0c:27:4d:c4:de: a0:7c:d3:3a:68:c7:77:b5:48:d1:85:44:32:32:1f:82:93:b4: cb:72:54:e8:aa:12:d4:6b:97:34:95:16:17:31:a7:02:09:6c: 5e:b5:c1:27:27:99:71:ac:5d:42:8f:1b:59:41:ea:db:fb:01: ce:cd:38:c7:84:4a:fe:37:d3:f0:18:8e:d9:9e:29:5e:e0:16: 1c:da:d2:0b:e6:92:a4:f9:55:2d:15:c9:14:4d:71:c7:09:85: 5b:f7:d9:5e:4f:4a:14:f2:46:e3:30:ee:dc:bc:02:f5:64:15: 82:87:eb:1a:e2:7b:6f:60:a0:4f:90:2a:30:a2:62:9d:c5:57: c8:80:19:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSAfcV+EPo1nWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdiNDFlMWYtMTU2MS00ODIwLTllOGItZDAwMDU3YjUw ODNhMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NDFlNGQwNDItNDQzNS00ZmMyLWIyZjktODM2MTNjZGQwM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEamIxuFTWTPp/J36agoQgvLq8WqlM8mX0lj 7dwbWsMVVdlTnQckDgAb9h+bJ9N/yRwBzBihfDVc4cWZT0bHWtmEKtf2PwkndBnc 61U3PnkVgvGnVINbxEvQcV/xVUPOaHobJG380Ci2T4/k6b6xsu3dNrcinLD5B11j TGgf4ncDNnT2JwPInmVNEgqVCv5mZwhPPySNXfbKKup4Wqiu15xFypfig4OMkabr 0gBQWtUxAoSgWJUUFomC/QzdDtlmuEbJR4q0D1zl1hrK3Hy+TGM7+t6GZWuhqAUP cqwg0YfrbkymMU3WkdAOHD/CrUrenUIgF/LPBE2fDEc30x2qVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXT8E/tPiNwz8aDwCVLE9EfAozjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yN2I0 MWUxZi0xNTYxLTQ4MjAtOWU4Yi1kMDAwNTdiNTA4M2EvNzYxMWJiMWYtYzRkMC0z M2ZhLThhMjktMWM0YWJjMGEyZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjdiNDFlMWYtMTU2MS00ODIwLTll OGItZDAwMDU3YjUwODNhLzI3YjQxZTFmLTE1NjEtNDgyMC05ZThiLWQwMDA1N2I1 MDgzYS5jcmwwHwYDVR0jBBgwFoAU3dj2GsMNQslm1+fSdj/fjYNfWdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yN2I0MWUxZi0xNTYxLTQ4MjAtOWU4Yi1kMDAw NTdiNTA4M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTuWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1isG1iEJBCcR0eNSGeo1MbSGlFaAv3myBv+7FWUIiKREq3XFjFSkVZ psgd1EkInw7r6X/UOdxIjoUXalGHJpJ2A1OGbItevlYNXN69m8hkaBCotsirnSrd ajwaMKBSZSN26wLuC6YGAbXKIO4j8HSxOwGxjZFVHN0MJ03E3qB80zpox3e1SNGF RDIyH4KTtMtyVOiqEtRrlzSVFhcxpwIJbF61wScnmXGsXUKPG1lB6tv7Ac7NOMeE Sv430/AYjtmeKV7gFhza0gvmkqT5VS0VyRRNcccJhVv32V5PShTyRuMw7ty8AvVk FYKH6xrie29goE+QKjCiYp3FV8iAGWA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:12:10 2025 by rpki-client