$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/d1facf3a-0252-3062-bd40-b1752bcaaa35.roa File: d1facf3a-0252-3062-bd40-b1752bcaaa35.roa (raw, json) Hash identifier: uTgmI1gtpUnsiAOggtTbIuQskgFlNge2zBSbmJkzwSw= Subject key identifier: CE:2E:A8:84:04:8A:28:9E:F5:25:84:E0:26:D0:6A:E4:24:E2:5A:C0 Certificate issuer: /CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6 Certificate serial: 010D0C9F4328584A1895456DADE41646637D24C0 Authority key identifier: CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/d1facf3a-0252-3062-bd40-b1752bcaaa35.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 45.45.214.0/24 maxlen: 24 136.175.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:45:6d:ad:e4:16:46:63:7d:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=0f9ee764-87ec-41f5-910c-ee7b7d06b1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:45:e4:68:33:75:e4:46:c4:07:fc:90:3a:26: fa:eb:18:b2:10:8a:be:ee:77:80:8d:9e:d9:12:d0: 97:76:25:cc:16:aa:2d:15:18:79:12:2d:15:56:79: 1b:b5:75:e8:4f:9d:08:d3:4f:72:24:f4:e2:b8:46: 53:d1:30:2a:e9:90:1a:20:e5:16:68:d9:70:f5:b2: 1e:4a:77:ba:31:e2:ba:03:50:60:8b:0f:7e:25:41: 3d:9a:c0:42:31:10:b7:9d:6a:d9:8a:dd:50:72:e5: 3b:b4:24:17:fd:3a:19:67:d3:8f:ab:0f:8b:32:11: 78:26:2c:c5:1b:e2:f4:30:10:09:aa:8f:86:e5:39: b2:05:85:df:c8:51:4a:41:f8:e1:bd:98:81:8f:ea: c7:a4:a4:85:06:15:6e:b3:8e:18:37:b7:c7:b9:d3: 88:7d:3c:0d:e6:e6:b3:8a:de:72:e5:67:4d:02:60: 18:08:66:99:40:bd:ba:5a:32:19:bf:10:9a:e3:1d: 53:02:5c:36:95:28:6d:68:fb:dd:30:aa:bd:48:72: d1:67:17:27:fa:b9:67:93:38:a9:19:dc:8b:85:54: 4b:32:7b:ec:9f:dc:f9:ab:dc:de:59:88:0f:b7:18: 07:e5:79:82:45:48:95:ff:c0:56:a7:eb:5e:bd:7d: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2E:A8:84:04:8A:28:9E:F5:25:84:E0:26:D0:6A:E4:24:E2:5A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/d1facf3a-0252-3062-bd40-b1752bcaaa35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl X509v3 Authority Key Identifier: keyid:CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer sbgp-ipAddrBlock: critical IPv4: 45.45.214.0/24 136.175.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c7:a5:8f:4c:20:42:fa:31:1c:24:8b:1b:ca:01:14:ae:64: 32:11:18:26:a1:51:49:f8:55:e0:24:13:9e:3d:0e:cb:66:09: 83:eb:48:6c:a6:50:5c:5e:a3:7e:11:1a:2c:d0:0b:5d:e6:b1: b7:17:b9:b6:dd:e4:9e:79:50:d5:3c:da:14:a4:bb:4e:49:e0: 95:c8:df:24:ac:6e:11:2c:48:b3:fb:44:82:ca:d5:23:14:89: 8a:e5:05:18:a4:7b:70:ff:24:e0:7f:b1:74:10:70:ce:d1:09: 66:0e:ed:9f:1b:f2:38:7f:4e:a6:b8:75:5d:82:28:ba:8f:a4: 6d:89:a9:76:63:5d:54:f4:af:df:b5:a3:7a:6d:3b:b6:96:2a: b8:24:a0:7f:d0:8f:df:42:fc:cf:fa:d3:73:eb:57:d9:3c:3c: b6:31:ed:bf:e1:46:eb:94:2f:54:f5:32:91:ce:71:e9:d5:f0: 09:ea:6b:02:f3:89:88:d1:34:c5:51:0a:f8:eb:ab:8f:f7:87: ec:18:07:a4:3f:36:0d:e7:c3:13:ff:19:2f:35:da:55:40:f1: 0e:de:e9:79:e2:3f:f0:d7:9f:11:76:42:b2:e0:97:71:b2:12: 49:84:08:16:e3:e1:e1:47:1f:1b:69:65:a7:ef:87:65:2e:66: 8c:ad:25:c9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoYlUVtreQWRmN9JMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU5OGE1ZTEtOWViOS00MDg3LWIyYzEtZDI1YTU4Zjkw MGM2MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk MGY5ZWU3NjQtODdlYy00MWY1LTkxMGMtZWU3YjdkMDZiMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60XkaDN15EbEB/yQOib66xiyEIq+7neAjZ7Z EtCXdiXMFqotFRh5Ei0VVnkbtXXoT50I009yJPTiuEZT0TAq6ZAaIOUWaNlw9bIe Sne6MeK6A1Bgiw9+JUE9msBCMRC3nWrZit1QcuU7tCQX/ToZZ9OPqw+LMhF4JizF G+L0MBAJqo+G5TmyBYXfyFFKQfjhvZiBj+rHpKSFBhVus44YN7fHudOIfTwN5uaz it5y5WdNAmAYCGaZQL26WjIZvxCa4x1TAlw2lShtaPvdMKq9SHLRZxcn+rlnkzip GdyLhVRLMnvsn9z5q9zeWYgPtxgH5XmCRUiV/8BWp+tevX2LyQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFM4uqIQEiiie9SWE4CbQauQk4lrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NTk4 YTVlMS05ZWI5LTQwODctYjJjMS1kMjVhNThmOTAwYzYvZDFmYWNmM2EtMDI1Mi0z MDYyLWJkNDAtYjE3NTJiY2FhYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODU5OGE1ZTEtOWViOS00MDg3LWIy YzEtZDI1YTU4ZjkwMGM2Lzg1OThhNWUxLTllYjktNDA4Ny1iMmMxLWQyNWE1OGY5 MDBjNi5jcmwwHwYDVR0jBBgwFoAUylQfThcBLKrmOgWKbqIyVo6cFSowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NTk4YTVlMS05ZWI5LTQwODctYjJjMS1kMjVh NThmOTAwYzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALS3WAwQA iK+eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGnHpY9MIEL6MRwkixvKARSuZDIRGCahUUn4VeAkE549Dstm CYPrSGymUFxeo34RGizQC13msbcXubbd5J55UNU82hSku05J4JXI3ySsbhEsSLP7 RILK1SMUiYrlBRike3D/JOB/sXQQcM7RCWYO7Z8b8jh/Tqa4dV2CKLqPpG2JqXZj XVT0r9+1o3ptO7aWKrgkoH/Qj99C/M/603PrV9k8PLYx7b/hRuuUL1T1MpHOcenV 8AnqawLziYjRNMVRCvjrq4/3h+wYB6Q/Ng3nwxP/GS812lVA8Q7e6XniP/DXnxF2 QrLgl3GyEkmECBbj4eFHHxtpZafvh2UuZoytJck= -----END CERTIFICATE-----Generated at Sat Jun 14 06:58:22 2025 by rpki-client