$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/d1ce1a33-08c7-3209-8312-de68c758aa76.roa File: d1ce1a33-08c7-3209-8312-de68c758aa76.roa (raw, json) Hash identifier: nXZqLSfIV4I91dZVZwm2FM5bAipQyDWS70rvB09XosY= Subject key identifier: 62:8E:58:38:3B:D1:57:08:19:94:DD:EA:91:A4:52:55:D1:33:09:56 Certificate issuer: /CN=4a7f2143-6131-414b-81ad-be960f2a78c1 Certificate serial: 010D0C9F4328584A1F9022F564A8FB4AC7C0CB80 Authority key identifier: 6A:C8:C5:11:64:5E:EC:E9:6E:D6:6C:DC:9C:EA:8F:DF:1E:04:F4:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/d1ce1a33-08c7-3209-8312-de68c758aa76.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 398335 IP address blocks: 45.42.156.0/22 maxlen: 22 64.32.52.0/22 maxlen: 22 209.172.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:22:f5:64:a8:fb:4a:c7:c0:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7f2143-6131-414b-81ad-be960f2a78c1 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=3f2fff39-b181-4a28-8389-ff97b82f514e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1e:c4:1d:9e:80:9d:d3:14:ef:00:36:97:54: c2:e3:64:8f:da:d8:05:ab:b1:75:ba:14:a0:b4:ae: 96:d8:5b:96:c6:0e:bb:66:1a:39:aa:dc:d5:39:d0: 56:37:b3:93:d2:e8:d0:00:7b:bb:f7:3e:bd:14:24: 39:4f:ab:57:31:4c:47:34:65:e9:66:23:f1:b5:b7: e9:ca:be:d8:87:9f:e1:8f:4b:6b:77:2c:ec:03:22: c1:08:3f:6e:b3:07:e2:0a:d4:f9:09:c1:a3:8d:89: 76:dd:6f:bc:30:6e:37:b0:67:10:84:d0:26:91:57: e6:97:28:37:71:9a:4a:92:56:db:ac:f6:0d:81:c7: 1f:a0:6a:47:a9:16:df:8d:60:ea:a7:91:35:86:65: b8:5c:7e:9a:d1:44:13:89:d5:0a:d8:76:72:51:92: a5:87:c1:5b:c5:be:3f:07:b3:3a:ce:4e:b9:15:1d: 5e:ce:86:92:9b:59:7d:b7:0b:9e:90:ab:00:84:51: 2a:56:b9:ab:57:c1:43:53:89:82:bb:b8:99:1c:2c: 83:db:c5:5d:da:3c:57:12:50:18:f9:b3:28:32:a8: 92:cd:5f:5a:b4:2f:9c:ca:89:92:8c:e9:f5:52:41: 9e:1e:04:d0:1e:a0:f1:1b:2f:4b:0b:cd:49:49:d4: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8E:58:38:3B:D1:57:08:19:94:DD:EA:91:A4:52:55:D1:33:09:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/d1ce1a33-08c7-3209-8312-de68c758aa76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.crl X509v3 Authority Key Identifier: keyid:6A:C8:C5:11:64:5E:EC:E9:6E:D6:6C:DC:9C:EA:8F:DF:1E:04:F4:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer sbgp-ipAddrBlock: critical IPv4: 45.42.156.0/22 64.32.52.0/22 209.172.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:59:75:1d:c7:97:14:f6:89:ee:f2:d4:6e:c4:d0:0c:56:19: f5:c4:70:ec:b6:b1:bd:89:c3:31:31:7e:eb:8a:d4:39:6d:ab: 14:cd:00:43:60:ed:ae:20:5d:9c:6a:52:e6:67:3a:5b:c3:fd: f5:67:23:59:4a:36:b9:6c:c0:5d:85:72:45:af:40:e9:d1:11: cc:c6:94:1b:e5:3a:1d:01:1a:2b:b4:2c:9c:41:63:b3:92:70: ed:41:8f:ad:a5:1c:8e:0c:b4:4c:7a:41:73:fd:5e:59:9a:4c: 85:fb:4a:37:92:06:69:1c:ea:a7:0b:55:40:df:f1:6a:0c:68: 5b:08:68:12:1d:27:6f:35:f8:82:dc:04:93:9a:db:6b:eb:21: eb:d1:db:a4:a5:33:7d:46:d4:be:f7:ca:9c:ab:ad:38:77:34: a8:42:21:26:2a:35:d3:e1:c9:96:ce:84:53:77:d2:32:27:2c: 47:3a:b1:09:de:1b:0c:ee:4d:ed:00:96:ac:09:01:09:ae:2f: c7:93:13:2b:ce:b3:51:b1:95:6e:d1:90:af:f4:32:24:9f:55: 4a:2d:35:f2:c3:1f:ff:5e:ca:73:7f:e8:20:67:7d:3e:f5:50: 2b:44:bc:46:0d:2d:89:13:9c:b8:db:1f:69:a6:2d:59:5b:55: 72:3d:9f:39 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEofkCL1ZKj7SsfAy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE3ZjIxNDMtNjEzMS00MTRiLTgxYWQtYmU5NjBmMmE3 OGMxMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk M2YyZmZmMzktYjE4MS00YTI4LTgzODktZmY5N2I4MmY1MTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7h7EHZ6AndMU7wA2l1TC42SP2tgFq7F1uhSg tK6W2FuWxg67Zho5qtzVOdBWN7OT0ujQAHu79z69FCQ5T6tXMUxHNGXpZiPxtbfp yr7Yh5/hj0trdyzsAyLBCD9uswfiCtT5CcGjjYl23W+8MG43sGcQhNAmkVfmlyg3 cZpKklbbrPYNgccfoGpHqRbfjWDqp5E1hmW4XH6a0UQTidUK2HZyUZKlh8Fbxb4/ B7M6zk65FR1ezoaSm1l9twuekKsAhFEqVrmrV8FDU4mCu7iZHCyD28Vd2jxXElAY +bMoMqiSzV9atC+cyomSjOn1UkGeHgTQHqDxGy9LC81JSdQY/wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGKOWDg70VcIGZTd6pGkUlXRMwlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YTdm MjE0My02MTMxLTQxNGItODFhZC1iZTk2MGYyYTc4YzEvZDFjZTFhMzMtMDhjNy0z MjA5LTgzMTItZGU2OGM3NThhYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGE3ZjIxNDMtNjEzMS00MTRiLTgx YWQtYmU5NjBmMmE3OGMxLzRhN2YyMTQzLTYxMzEtNDE0Yi04MWFkLWJlOTYwZjJh NzhjMS5jcmwwHwYDVR0jBBgwFoAUasjFEWRe7Olu1mzcnOqP3x4E9OYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YTdmMjE0My02MTMxLTQxNGItODFhZC1iZTk2 MGYyYTc4YzEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLSqcAwQC QCA0AwQD0awYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAENZdR3HlxT2ie7y1G7E0AxWGfXEcOy2sb2JwzEx fuuK1DltqxTNAENg7a4gXZxqUuZnOlvD/fVnI1lKNrlswF2FckWvQOnREczGlBvl Oh0BGiu0LJxBY7OScO1Bj62lHI4MtEx6QXP9XlmaTIX7SjeSBmkc6qcLVUDf8WoM aFsIaBIdJ281+ILcBJOa22vrIevR26SlM31G1L73ypyrrTh3NKhCISYqNdPhyZbO hFN30jInLEc6sQneGwzuTe0AlqwJAQmuL8eTEyvOs1GxlW7RkK/0MiSfVUotNfLD H/9eynN/6CBnfT71UCtEvEYNLYkTnLjbH2mmLVlbVXI9nzk= -----END CERTIFICATE-----Generated at Mon Jun 16 14:59:40 2025 by rpki-client