$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/01a8e0d0-c87f-353d-8382-1d4f0267ccd8.roa File: 01a8e0d0-c87f-353d-8382-1d4f0267ccd8.roa (raw, json) Hash identifier: lUjRIBN+CyZZoe2DEokxNxHGRUdI9Mq/C1wHtBCwv4g= Subject key identifier: 65:6A:B9:49:B9:58:30:1A:55:28:F5:8D:B0:68:C0:F1:47:E0:55:E7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A23C0170B948208BECEC49AE0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/01a8e0d0-c87f-353d-8382-1d4f0267ccd8.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 206264 IP address blocks: 45.74.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:17:0b:94:82:08:be:ce:c4:9a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=fff2fa47-3766-4ce4-acc4-a1a8807a8f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ac:59:77:18:7c:71:de:d1:1d:fc:05:ca:40: 72:b9:d8:7d:8d:cd:c6:b8:12:bf:ce:7d:72:29:24: 94:4e:7e:90:fd:15:ba:2e:34:ea:c9:7f:7b:7a:f6: 1c:c9:ca:42:2d:d7:1b:bf:e8:77:67:2f:2b:a4:54: a7:57:a8:35:ba:07:a1:54:1c:88:31:a1:4b:0a:14: 0f:51:91:fa:6c:ae:bf:d6:03:0a:c0:62:03:96:b9: c4:04:ce:6c:2b:48:89:06:5d:23:4e:d4:8a:51:44: 67:9e:6e:b5:66:3f:60:b2:e4:c7:c9:33:c7:b9:32: c4:49:72:17:4d:79:e2:b6:ab:55:d2:ee:bb:3a:e1: 27:0a:f1:ef:11:4f:db:c7:97:d2:6d:a9:5c:d5:e3: b4:48:4d:ca:b1:a8:38:af:8a:e9:79:e7:3d:d5:cd: 62:99:8d:68:63:07:b2:1e:e3:6e:02:0f:b7:52:45: c0:eb:1f:38:1e:df:23:5e:64:fb:4a:fd:76:f3:c7: 65:bf:75:a1:d1:3c:c6:93:91:ae:06:8e:6e:b6:02: 38:37:70:1b:af:08:a5:da:03:78:e6:cf:03:8d:0c: 55:56:ce:d9:04:23:38:95:09:40:a9:d1:11:5c:50: ba:e7:93:55:27:41:84:fc:50:fe:94:82:6f:44:84: 14:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6A:B9:49:B9:58:30:1A:55:28:F5:8D:B0:68:C0:F1:47:E0:55:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/01a8e0d0-c87f-353d-8382-1d4f0267ccd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e1:a4:1c:0e:fe:3c:94:f1:85:da:2e:c5:51:9c:7c:ed:a9: 8b:fb:7d:f1:84:49:a1:f7:f5:18:1a:43:60:b2:d9:96:01:9e: fd:8d:90:f8:68:35:8e:6b:31:d1:59:bc:e9:19:d6:ba:dd:04: 33:cc:c6:73:53:41:05:b2:9e:ee:4e:cc:78:73:26:7d:c3:ea: 8f:80:58:88:b3:68:a5:82:32:7f:60:38:79:4d:e0:26:b1:11: 9c:4d:3e:e4:e2:21:2d:59:f7:87:d2:a6:c6:f9:e1:0e:f1:39: 5a:80:fe:7a:df:67:f5:2e:fe:7c:bd:e9:49:0d:84:80:e6:a5: 1d:09:9d:87:93:ec:a4:2d:70:9b:6f:86:d2:10:0e:4f:ab:67: b0:ae:09:2b:23:e9:a3:0d:6d:d3:d0:10:79:b2:db:27:e2:36: 71:ce:50:2f:6a:dd:9f:35:f8:db:66:d4:01:ad:51:b1:ba:89: 17:fc:49:ae:e3:ab:25:60:5c:f0:b3:39:86:6a:5c:9a:0e:86: cd:cb:4f:26:27:9d:80:84:e2:31:11:5c:3c:67:b9:f9:59:d8: 24:f5:b2:09:4b:bd:c9:d1:21:5c:da:40:19:c3:b2:1a:e0:dc: 56:e9:7d:1d:39:aa:18:46:69:de:e7:db:53:1e:a6:78:90:78: fa:11:28:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBcLlIIIvs7EmuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ZmZmMmZhNDctMzc2Ni00Y2U0LWFjYzQtYTFhODgwN2E4ZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaxZdxh8cd7RHfwFykByudh9jc3GuBK/zn1y KSSUTn6Q/RW6LjTqyX97evYcycpCLdcbv+h3Zy8rpFSnV6g1ugehVByIMaFLChQP UZH6bK6/1gMKwGIDlrnEBM5sK0iJBl0jTtSKUURnnm61Zj9gsuTHyTPHuTLESXIX TXnitqtV0u67OuEnCvHvEU/bx5fSbalc1eO0SE3Ksag4r4rpeec91c1imY1oYwey HuNuAg+3UkXA6x84Ht8jXmT7Sv1288dlv3Wh0TzGk5GuBo5utgI4N3Abrwil2gN4 5s8DjQxVVs7ZBCM4lQlAqdERXFC655NVJ0GE/FD+lIJvRIQU1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVquUm5WDAaVSj1jbBowPFH4FXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDFhOGUwZDAtYzg3Zi0z NTNkLTgzODItMWQ0ZjAyNjdjY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfhpBwO/jyU8YXaLsVRnHztqYv7ffGESaH39RgaQ2Cy2ZYBnv2NkPho NY5rMdFZvOkZ1rrdBDPMxnNTQQWynu5OzHhzJn3D6o+AWIizaKWCMn9gOHlN4Cax EZxNPuTiIS1Z94fSpsb54Q7xOVqA/nrfZ/Uu/ny96UkNhIDmpR0JnYeT7KQtcJtv htIQDk+rZ7CuCSsj6aMNbdPQEHmy2yfiNnHOUC9q3Z81+Ntm1AGtUbG6iRf8Sa7j qyVgXPCzOYZqXJoOhs3LTyYnnYCE4jERXDxnuflZ2CT1sglLvcnRIVzaQBnDshrg 3FbpfR05qhhGad7n21MepniQePoRKPE= -----END CERTIFICATE-----Generated at Sun Jun 15 05:19:14 2025 by rpki-client