$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/45bc3db8-2544-3298-9050-d905e73ee393.roa File: 45bc3db8-2544-3298-9050-d905e73ee393.roa (raw, json) Hash identifier: 9gZbbrPYJNc3+lO0X+tmgirBuVXJABK0JcIpOYgQ6pI= Subject key identifier: 3E:50:70:F2:09:46:2C:FB:8D:C2:6F:94:78:49:D1:58:7C:BB:D0:AC Certificate issuer: /CN=5265026d-c5df-4885-bafa-081d26466504 Certificate serial: 010D0C9F4328584A29369B98A5BF94047C4C1040 Authority key identifier: D4:10:0A:30:E0:C8:64:0F:80:BE:6F:95:F6:9A:BA:66:08:0E:E4:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/45bc3db8-2544-3298-9050-d905e73ee393.roa Signing time: Wed 11 Jun 2025 23:58:56 +0000 ROA not before: Wed 11 Jun 2025 23:58:56 +0000 ROA not after: Tue 09 Sep 2025 23:58:56 +0000 asID: 400956 IP address blocks: 161.199.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/5265026d-c5df-4885-bafa-081d26466504.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/5265026d-c5df-4885-bafa-081d26466504.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:36:9b:98:a5:bf:94:04:7c:4c:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5265026d-c5df-4885-bafa-081d26466504 Validity Not Before: Jun 11 23:58:56 2025 GMT Not After : Sep 9 23:58:56 2025 GMT Subject: CN=f0c82ee1-4901-4612-b4ef-069532742dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ec:f2:83:b9:2a:29:95:9f:5d:25:27:c0:c5: 1d:40:e9:6d:4d:74:ec:45:19:3d:2f:a9:e9:7d:88: 8c:5d:72:43:3f:7a:00:2a:f4:5b:95:b3:56:47:bc: 20:73:83:eb:02:ed:24:39:70:b6:cd:b5:c2:f3:a5: e7:14:22:24:2f:e0:40:d9:63:31:f3:25:0d:46:45: 0e:22:3a:7b:e2:c4:60:b5:fe:26:12:f4:e8:74:15: 38:67:ed:01:1f:ca:94:c0:c4:9e:e3:3f:c0:f1:2b: 7d:9f:1c:b4:42:28:63:cf:7a:83:8a:68:f8:fa:ac: 39:13:38:dc:df:3e:20:e0:0a:9c:90:7d:1e:52:17: 28:ed:2f:4a:f7:04:58:f6:72:3d:1e:8f:c6:7c:9a: 7c:a6:95:ef:d0:f7:e0:02:2a:d7:2d:dd:72:ca:40: 0f:83:c6:67:f6:f0:aa:26:58:a7:3f:e8:ac:ba:07: 25:75:ce:d5:81:5e:9c:49:33:a3:76:e0:37:66:cd: ad:85:eb:06:f6:79:a2:a8:94:c6:5d:da:7c:5a:68: bb:22:be:b3:68:28:e8:78:c7:47:2b:94:e3:3f:97: 4d:ab:05:b6:c1:17:25:c8:c8:5c:24:1a:b4:a1:61: cf:fc:56:18:47:17:75:28:eb:30:f3:2b:86:95:65: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:50:70:F2:09:46:2C:FB:8D:C2:6F:94:78:49:D1:58:7C:BB:D0:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/45bc3db8-2544-3298-9050-d905e73ee393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/5265026d-c5df-4885-bafa-081d26466504.crl X509v3 Authority Key Identifier: keyid:D4:10:0A:30:E0:C8:64:0F:80:BE:6F:95:F6:9A:BA:66:08:0E:E4:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504.cer sbgp-ipAddrBlock: critical IPv4: 161.199.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:51:07:2a:e1:c9:db:d9:14:35:e1:bb:31:57:db:79:aa:85: 60:19:57:5b:3f:a6:62:df:cc:f7:7b:29:40:cf:1c:6b:a8:84: fc:ad:2b:77:21:92:b3:63:cb:4d:21:43:a3:f2:30:dc:5b:6a: 8e:cd:6b:4f:b3:14:ef:d1:fc:08:bf:1c:46:2b:53:d3:fa:f1: 72:fe:3b:e3:78:f6:be:0e:41:c6:33:68:3a:ad:5d:b1:99:c7: a2:91:c4:27:43:cb:a6:36:d9:f2:f7:ad:cb:e9:8a:1a:dd:45: 74:79:a0:12:0f:4b:64:cf:d1:39:f9:a9:25:18:e1:8a:6e:98: ea:f3:a2:50:21:93:78:c5:25:c8:ef:72:77:ca:53:c9:65:3a: 52:dc:4a:e5:e5:0b:75:f9:de:49:18:25:00:a2:5c:4e:e6:3f: 0f:6d:d6:0e:f8:24:4f:0a:0a:e3:1d:e4:a8:95:bc:a8:45:dd: 1b:bf:ed:83:cd:5f:51:d3:29:b5:ca:43:c8:51:32:d2:bc:7d: eb:06:e8:7c:2d:6b:3b:80:c5:74:fa:cf:9c:56:39:37:50:e3: 76:cb:ca:fb:49:c7:a6:34:a9:d5:74:d6:65:63:83:67:26:dd: 5c:7b:a2:73:b6:d0:ec:a3:4b:80:aa:41:da:00:71:67:20:5e: d5:8c:b6:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopNpuYpb+UBHxMEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI2NTAyNmQtYzVkZi00ODg1LWJhZmEtMDgxZDI2NDY2 NTA0MB4XDTI1MDYxMTIzNTg1NloXDTI1MDkwOTIzNTg1NlowLzEtMCsGA1UEAxMk ZjBjODJlZTEtNDkwMS00NjEyLWI0ZWYtMDY5NTMyNzQyZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqezyg7kqKZWfXSUnwMUdQOltTXTsRRk9L6np fYiMXXJDP3oAKvRblbNWR7wgc4PrAu0kOXC2zbXC86XnFCIkL+BA2WMx8yUNRkUO Ijp74sRgtf4mEvTodBU4Z+0BH8qUwMSe4z/A8St9nxy0Qihjz3qDimj4+qw5Ezjc 3z4g4AqckH0eUhco7S9K9wRY9nI9Ho/GfJp8ppXv0PfgAirXLd1yykAPg8Zn9vCq JlinP+isugcldc7VgV6cSTOjduA3Zs2thesG9nmiqJTGXdp8Wmi7Ir6zaCjoeMdH K5TjP5dNqwW2wRclyMhcJBq0oWHP/FYYRxd1KOsw8yuGlWXANwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5QcPIJRiz7jcJvlHhJ0Vh8u9CsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81MjY1 MDI2ZC1jNWRmLTQ4ODUtYmFmYS0wODFkMjY0NjY1MDQvNDViYzNkYjgtMjU0NC0z Mjk4LTkwNTAtZDkwNWU3M2VlMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTI2NTAyNmQtYzVkZi00ODg1LWJh ZmEtMDgxZDI2NDY2NTA0LzUyNjUwMjZkLWM1ZGYtNDg4NS1iYWZhLTA4MWQyNjQ2 NjUwNC5jcmwwHwYDVR0jBBgwFoAU1BAKMODIZA+Avm+V9pq6ZggO5HYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81MjY1MDI2ZC1jNWRmLTQ4ODUtYmFmYS0wODFk MjY0NjY1MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocedMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENRByrhydvZFDXhuzFX23mqhWAZV1s/pmLfzPd7KUDPHGuohPytK3ch krNjy00hQ6PyMNxbao7Na0+zFO/R/Ai/HEYrU9P68XL+O+N49r4OQcYzaDqtXbGZ x6KRxCdDy6Y22fL3rcvpihrdRXR5oBIPS2TP0Tn5qSUY4YpumOrzolAhk3jFJcjv cnfKU8llOlLcSuXlC3X53kkYJQCiXE7mPw9t1g74JE8KCuMd5KiVvKhF3Ru/7YPN X1HTKbXKQ8hRMtK8fesG6HwtazuAxXT6z5xWOTdQ43bLyvtJx6Y0qdV01mVjg2cm 3Vx7onO20OyjS4CqQdoAcWcgXtWMtlg= -----END CERTIFICATE-----Generated at Wed Jun 18 16:39:23 2025 by rpki-client