$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/be08aa48-7469-36ba-972a-966b2be43456.roa File: be08aa48-7469-36ba-972a-966b2be43456.roa (raw, json) Hash identifier: bYeUIkHhM39h0+pP1w1r/btGbEFYrk6E1P9TKQNI97g= Subject key identifier: 41:D4:D2:D4:83:E4:28:D4:54:64:F5:11:F9:0D:75:E4:18:D9:E6:F3 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584ABD4B96D4A12804BE88896280 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/be08aa48-7469-36ba-972a-966b2be43456.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 7018 IP address blocks: 45.58.232.0/21 maxlen: 21 69.91.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:96:d4:a1:28:04:be:88:89:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=c2cc513f-b24c-44be-a7c0-f793380555c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:65:0b:a3:1f:bb:58:b0:ee:b4:f3:31:80:7f: e0:5d:74:df:56:2e:95:10:90:c3:7e:36:3d:b7:58: a1:55:43:fb:e5:39:d8:72:fd:ff:4a:5e:86:1f:6a: c7:70:c7:6f:2e:e6:be:e3:2b:55:84:ba:0d:8f:13: 6b:92:61:0a:96:4f:50:8f:11:b9:1c:b9:e2:6f:68: cb:34:65:ff:cc:55:93:1b:36:99:39:77:2c:03:a8: bf:29:e1:37:c0:b9:96:1e:56:89:40:b9:37:1e:d6: 2b:36:07:17:fe:c3:56:4d:ba:50:2b:4c:33:c2:0b: f9:9d:33:2e:12:70:30:f3:26:f6:84:2d:62:10:d3: 86:0d:04:66:bb:e7:11:c1:d9:73:c8:f1:bb:7e:23: 8e:a8:82:a7:4a:85:22:30:a4:1e:a9:00:4a:f5:ee: fb:41:b5:1b:c2:68:92:14:0d:08:46:de:c6:e5:73: f3:1c:fd:e6:02:25:8f:17:26:d0:7d:8b:0f:82:c3: 1f:65:af:86:f8:e0:60:d8:97:76:13:a7:d9:a1:20: 93:0a:67:7c:d0:a9:c8:a6:9b:bb:f4:3b:b6:0d:50: 88:fd:78:b6:2d:f8:61:02:a3:cc:1f:a0:0a:53:f5: 94:e9:4e:d6:f0:3e:39:22:40:19:74:3d:10:eb:9d: 63:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D4:D2:D4:83:E4:28:D4:54:64:F5:11:F9:0D:75:E4:18:D9:E6:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/be08aa48-7469-36ba-972a-966b2be43456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.232.0/21 69.91.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:df:17:94:50:7c:81:6f:e3:75:c7:51:86:70:3c:a2:07:d0: 92:be:01:1b:3b:9c:ea:e4:9e:4e:bb:b4:8f:ca:57:23:4f:7d: 14:88:1d:10:31:8c:cf:04:a3:57:f8:6d:0b:79:94:e4:3a:41: 0e:9c:80:fb:6a:aa:32:62:fe:94:93:22:2d:d3:d5:fe:74:90: 90:34:f7:06:1d:7d:51:e6:7b:f4:60:47:0b:23:06:d7:50:c9: 87:cd:e5:d0:c2:99:21:e9:95:02:4b:b9:48:91:6c:57:25:8a: 55:60:36:b1:29:9c:74:7e:29:ff:22:81:f3:b0:b1:70:68:78: 1b:a3:88:33:39:53:95:6e:7b:4e:f9:18:06:11:05:2b:eb:d8: f6:42:d3:42:dd:b7:3f:a8:f9:4b:70:62:1e:3c:70:94:be:2e: a8:94:cf:ca:19:63:ee:06:7c:04:ce:25:8e:57:74:15:c5:db: 74:57:f9:a3:ef:77:d5:24:0f:09:91:26:17:86:53:b4:4f:22: a8:fc:fa:17:55:ae:1a:31:cc:28:c7:ba:04:61:f2:c5:d3:11: 7d:00:8b:ad:24:bb:3d:c8:99:44:4a:8a:56:a8:6d:75:12:81: 6b:19:98:a7:a3:62:ec:ce:05:7b:c3:f3:a2:14:f3:7a:14:8c: 8a:1d:eb:7e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEq9S5bUoSgEvoiJYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk YzJjYzUxM2YtYjI0Yy00NGJlLWE3YzAtZjc5MzM4MDU1NWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2ULox+7WLDutPMxgH/gXXTfVi6VEJDDfjY9 t1ihVUP75TnYcv3/Sl6GH2rHcMdvLua+4ytVhLoNjxNrkmEKlk9QjxG5HLnib2jL NGX/zFWTGzaZOXcsA6i/KeE3wLmWHlaJQLk3HtYrNgcX/sNWTbpQK0wzwgv5nTMu EnAw8yb2hC1iENOGDQRmu+cRwdlzyPG7fiOOqIKnSoUiMKQeqQBK9e77QbUbwmiS FA0IRt7G5XPzHP3mAiWPFybQfYsPgsMfZa+G+OBg2Jd2E6fZoSCTCmd80KnIppu7 9Du2DVCI/Xi2LfhhAqPMH6AKU/WU6U7W8D45IkAZdD0Q651jCQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEHU0tSD5CjUVGT1EfkNdeQY2ebzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYmUwOGFhNDgtNzQ2OS0z NmJhLTk3MmEtOTY2YjJiZTQzNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLTroAwQA RVuSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABrfF5RQfIFv43XHUYZwPKIH0JK+ARs7nOrknk67tI/KVyNP fRSIHRAxjM8Eo1f4bQt5lOQ6QQ6cgPtqqjJi/pSTIi3T1f50kJA09wYdfVHme/Rg RwsjBtdQyYfN5dDCmSHplQJLuUiRbFclilVgNrEpnHR+Kf8igfOwsXBoeBujiDM5 U5Vue075GAYRBSvr2PZC00Ldtz+o+UtwYh48cJS+LqiUz8oZY+4GfATOJY5XdBXF 23RX+aPvd9UkDwmRJheGU7RPIqj8+hdVrhoxzCjHugRh8sXTEX0Ai60kuz3ImURK ilaobXUSgWsZmKejYuzOBXvD86IU83oUjIod634= -----END CERTIFICATE-----Generated at Wed Aug 6 16:13:09 2025 by rpki-client