$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/c86d0e17-4d06-3b18-bbf9-7dbfa6d22a4d.roa File: c86d0e17-4d06-3b18-bbf9-7dbfa6d22a4d.roa (raw, json) Hash identifier: wDCYHKa6Z1aKe3LpCr93IYLNEu0xMURR44iFE0OILqQ= Subject key identifier: A2:C4:05:A7:52:2B:57:83:A9:3B:29:C4:D9:28:A5:D7:31:6C:22:E2 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584A0C05457B90A364FD74D2A480 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/c86d0e17-4d06-3b18-bbf9-7dbfa6d22a4d.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 26658 IP address blocks: 45.41.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:45:7b:90:a3:64:fd:74:d2:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=c6c28445-1d98-45cf-a916-b1bcd7508007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:06:81:02:3b:21:b8:e8:15:63:c0:35:b1: e1:3b:5c:ce:64:15:9f:83:de:76:3d:7c:be:00:c2: 3a:81:c0:97:75:1e:35:7a:aa:1e:01:d3:61:fe:12: fd:82:a4:68:a0:27:8d:11:c2:89:c4:b0:e2:12:14: 31:da:4c:c0:75:37:2a:18:3b:00:f3:81:e6:a9:1a: 97:a3:f5:71:f9:c1:4e:95:06:95:8c:15:f1:6a:fd: 73:9e:c8:ba:08:75:41:2a:75:d2:a0:ca:8e:7d:cb: 33:f5:3e:45:db:37:25:bb:9e:bc:6f:b4:8d:70:b3: 31:42:4e:43:8f:b5:e9:90:5b:24:4a:66:90:70:fc: e4:e0:40:2e:71:31:db:be:17:9f:27:62:28:bf:f6: 51:5b:fa:c7:86:ad:5f:69:e9:06:b7:49:91:13:95: 83:b8:4f:11:b4:ec:68:48:58:28:fd:84:cc:57:16: 3c:d2:da:57:82:46:83:cc:a2:d7:63:20:01:07:7e: ae:80:f9:72:00:f9:e8:2a:fb:2a:b5:8d:86:f2:81: 9f:80:cf:f9:c1:3b:d7:4e:c0:0d:20:4a:6d:f2:43: af:d3:00:51:13:ba:f5:dd:89:2d:e9:7c:b2:0e:72: bb:a6:1e:be:d2:d4:d2:e9:d3:8f:b1:f1:5b:de:d1: 42:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C4:05:A7:52:2B:57:83:A9:3B:29:C4:D9:28:A5:D7:31:6C:22:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/c86d0e17-4d06-3b18-bbf9-7dbfa6d22a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 45.41.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:68:4f:ad:83:77:75:5d:de:7c:07:d4:07:21:aa:05:97:3f: b9:47:73:ed:5b:fd:5b:57:3c:d6:59:0c:f7:e3:a0:23:65:bc: 6a:3e:7a:b2:05:7c:b0:bf:90:42:c7:43:36:35:05:32:91:6d: 99:cc:6a:11:a6:b1:57:c0:6f:22:57:d6:4c:e4:3e:e2:e3:37: 85:4c:b9:15:a7:70:2e:fe:af:ce:a2:83:21:87:42:12:2e:f0: 61:0c:bc:84:25:ee:77:53:90:03:4a:5f:5d:a0:88:5e:48:76: 55:2a:24:83:03:d2:f7:b7:85:73:fb:09:dc:f7:dd:56:60:ee: bc:42:ca:f6:51:0a:a0:80:bf:2f:04:79:6f:2e:76:45:01:87: bb:5d:e9:e4:c5:f7:f0:f0:35:93:36:36:b2:83:37:61:1d:2c: 8b:ae:26:6c:7f:0b:e3:bc:6f:d8:7f:d5:59:ea:9e:5e:19:c6: 83:91:41:2f:83:b5:45:85:67:ce:ac:e1:7c:1a:3a:12:d6:b7: f0:c2:33:ae:49:d3:3e:28:29:39:2a:17:22:b3:3d:aa:86:57: 4b:06:ee:5d:99:92:fd:20:61:c8:8f:4f:47:c0:4c:0f:f9:12: 15:85:32:5c:a7:fc:de:11:3f:50:af:a5:fd:64:f8:35:78:88: b0:b8:49:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBUV7kKNk/XTSpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YzZjMjg0NDUtMWQ5OC00NWNmLWE5MTYtYjFiY2Q3NTA4MDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKUGgQI7IbjoFWPANbHhO1zOZBWfg952PXy+ AMI6gcCXdR41eqoeAdNh/hL9gqRooCeNEcKJxLDiEhQx2kzAdTcqGDsA84HmqRqX o/Vx+cFOlQaVjBXxav1znsi6CHVBKnXSoMqOfcsz9T5F2zclu568b7SNcLMxQk5D j7XpkFskSmaQcPzk4EAucTHbvhefJ2Iov/ZRW/rHhq1faekGt0mRE5WDuE8RtOxo SFgo/YTMVxY80tpXgkaDzKLXYyABB36ugPlyAPnoKvsqtY2G8oGfgM/5wTvXTsAN IEpt8kOv0wBRE7r13Ykt6XyyDnK7ph6+0tTS6dOPsfFb3tFCHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLEBadSK1eDqTspxNkopdcxbCLiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvYzg2ZDBlMTctNGQwNi0z YjE4LWJiZjktN2RiZmE2ZDIyYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELSlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFoT62Dd3Vd3nwH1AchqgWXP7lHc+1b/VtXPNZZDPfjoCNlvGo+erIF fLC/kELHQzY1BTKRbZnMahGmsVfAbyJX1kzkPuLjN4VMuRWncC7+r86igyGHQhIu 8GEMvIQl7ndTkANKX12giF5IdlUqJIMD0ve3hXP7Cdz33VZg7rxCyvZRCqCAvy8E eW8udkUBh7td6eTF9/DwNZM2NrKDN2EdLIuuJmx/C+O8b9h/1Vnqnl4ZxoORQS+D tUWFZ86s4XwaOhLWt/DCM65J0z4oKTkqFyKzPaqGV0sG7l2Zkv0gYciPT0fATA/5 EhWFMlyn/N4RP1Cvpf1k+DV4iLC4SeM= -----END CERTIFICATE-----Generated at Mon Jun 16 22:20:15 2025 by rpki-client