$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/dc128f1c-05ed-377a-8c6f-eb5cf11a3e41.roa File: dc128f1c-05ed-377a-8c6f-eb5cf11a3e41.roa (raw, json) Hash identifier: XLPZ8+KvxuN9pRSkXpX8a+PW4uGoDLlKD8E+X7+OdE4= Subject key identifier: CD:B6:CF:7F:FB:F9:CA:42:63:81:0A:EE:52:CE:0A:B5:55:98:04:24 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F43285849EE99C0ACFEDA1CB376EE4120 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/dc128f1c-05ed-377a-8c6f-eb5cf11a3e41.roa Signing time: Thu 22 May 2025 00:06:00 +0000 ROA not before: Thu 22 May 2025 00:06:00 +0000 ROA not after: Wed 20 Aug 2025 00:06:00 +0000 asID: 2914 IP address blocks: 45.45.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:99:c0:ac:fe:da:1c:b3:76:ee:41:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: May 22 00:06:00 2025 GMT Not After : Aug 20 00:06:00 2025 GMT Subject: CN=0e01eba7-5528-420c-ba33-c9b813d95d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:39:4c:5c:49:28:98:d7:6a:18:34:07:95:4e: 88:82:1a:95:3c:ee:24:fc:86:b4:8e:0f:7b:8d:56: af:52:3b:1b:2e:5b:9e:01:16:49:a5:1f:d3:70:38: c6:5e:41:6d:93:ee:76:48:37:40:58:f3:37:79:3c: 0a:f5:5a:05:e7:10:7e:1b:bc:14:e4:bd:d9:f3:e5: 7e:dc:5a:fc:3f:b2:83:b8:0b:f6:6d:c8:e5:af:bd: 50:56:ad:cd:a7:cc:29:a7:d5:f7:08:6f:b3:97:ab: 7c:44:03:4f:5b:7c:d8:64:9e:de:ec:4a:d1:7f:13: df:cc:0a:6c:1a:5a:19:95:6d:89:bf:d8:1d:88:2c: 48:3e:be:98:67:7c:b6:16:34:92:f8:8b:af:d1:00: c7:c8:2c:6c:12:be:20:8a:37:c6:3e:49:f1:85:28: c2:84:8d:46:6c:08:fc:43:9f:e1:28:32:50:fa:6e: 67:98:a9:54:90:9e:25:11:96:0b:83:09:64:5b:cc: 6f:8a:2e:a8:20:88:13:28:2b:9c:f0:5a:f8:82:b4: f6:29:0d:23:c1:c4:ca:19:ab:a5:6f:03:96:41:1f: 61:2b:b6:6b:a4:b7:4b:ad:78:03:b1:78:29:be:06: 4d:b7:20:b4:dd:2a:45:14:01:d3:c0:bf:5c:24:8f: cb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B6:CF:7F:FB:F9:CA:42:63:81:0A:EE:52:CE:0A:B5:55:98:04:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/dc128f1c-05ed-377a-8c6f-eb5cf11a3e41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 45.45.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:77:a8:d2:8c:53:1e:6c:f3:34:d5:4f:8a:f1:a6:7e:d4:06: 30:15:36:90:80:45:9d:10:b3:72:44:d8:1f:01:68:d1:5a:f9: 50:41:bf:3e:bc:72:95:98:65:33:41:dc:d9:03:65:15:ad:32: f2:ca:4d:3e:5c:6d:33:67:15:d4:dd:c9:5a:65:f4:a0:3e:e7: a3:60:51:d8:19:63:e1:f4:f7:c0:4d:94:3f:5f:a2:ec:7b:49: e2:ba:54:fb:17:8c:ff:91:7e:ad:7c:ff:aa:3f:89:bc:72:56: 1c:f8:c2:94:19:4a:40:61:6b:b5:64:e8:0d:34:41:89:c2:71: b1:cd:68:ba:fa:b1:6d:26:b2:3b:72:b9:67:a9:50:7f:5b:1f: 66:cd:00:c4:f3:1b:af:91:dc:28:28:7d:b3:4a:96:cf:ea:5b: 54:c8:35:72:74:a1:85:85:c0:c2:26:fc:87:2a:5a:a3:9a:82: a4:76:79:54:d4:54:fa:91:80:a9:f9:81:cc:41:26:4c:75:a6: 64:cc:f9:fc:e2:83:fa:f9:b4:87:ae:26:d0:88:6b:0f:75:39: 33:93:8a:b2:d2:ff:8c:7c:08:39:54:75:2f:5a:f3:b7:8c:d6: 15:e8:62:d2:f1:fb:63:f6:80:17:4e:e7:bb:1b:77:86:ab:0d: d3:9a:c4:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnumcCs/tocs3buQSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MDUyMjAwMDYwMFoXDTI1MDgyMDAwMDYwMFowLzEtMCsGA1UEAxMk MGUwMWViYTctNTUyOC00MjBjLWJhMzMtYzliODEzZDk1ZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DlMXEkomNdqGDQHlU6IghqVPO4k/Ia0jg97 jVavUjsbLlueARZJpR/TcDjGXkFtk+52SDdAWPM3eTwK9VoF5xB+G7wU5L3Z8+V+ 3Fr8P7KDuAv2bcjlr71QVq3Np8wpp9X3CG+zl6t8RANPW3zYZJ7e7ErRfxPfzAps GloZlW2Jv9gdiCxIPr6YZ3y2FjSS+Iuv0QDHyCxsEr4gijfGPknxhSjChI1GbAj8 Q5/hKDJQ+m5nmKlUkJ4lEZYLgwlkW8xvii6oIIgTKCuc8Fr4grT2KQ0jwcTKGaul bwOWQR9hK7ZrpLdLrXgDsXgpvgZNtyC03SpFFAHTwL9cJI/LmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM22z3/7+cpCY4EK7lLOCrVVmAQkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvZGMxMjhmMWMtMDVlZC0z NzdhLThjNmYtZWI1Y2YxMWEzZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALd3qNKMUx5s8zTVT4rxpn7UBjAVNpCARZ0Qs3JE2B8BaNFa+VBBvz68 cpWYZTNB3NkDZRWtMvLKTT5cbTNnFdTdyVpl9KA+56NgUdgZY+H098BNlD9foux7 SeK6VPsXjP+Rfq18/6o/ibxyVhz4wpQZSkBha7Vk6A00QYnCcbHNaLr6sW0msjty uWepUH9bH2bNAMTzG6+R3CgofbNKls/qW1TINXJ0oYWFwMIm/IcqWqOagqR2eVTU VPqRgKn5gcxBJkx1pmTM+fzig/r5tIeuJtCIaw91OTOTirLS/4x8CDlUdS9a87eM 1hXoYtLx+2P2gBdO57sbd4arDdOaxF4= -----END CERTIFICATE-----Generated at Sun Jun 15 11:44:44 2025 by rpki-client