$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa File: 408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa (raw, json) Hash identifier: UaGbeMefuJHo3Cfx2lU4k3bJU5fs+6lL9g1hmQsgpo0= Subject key identifier: DD:35:C5:2F:80:E6:A4:25:13:CE:4E:8E:35:80:E1:9D:77:AC:11:1E Certificate issuer: /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538 Certificate serial: 010D0C9F4328584AA6F62BB086420FCB264A1580 Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 53356 IP address blocks: 45.59.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:2b:b0:86:42:0f:cb:26:4a:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=a8381055-52aa-4d94-a0f9-59dd5b58a891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c3:d6:ac:e1:77:c7:1f:e0:fe:75:eb:2c:79: 2f:dc:2e:ed:19:9c:ed:0c:dc:25:94:ef:84:cc:9e: 3c:2e:80:d9:56:2f:76:a3:26:0d:43:91:1a:9e:bc: 60:a8:57:87:43:16:17:a9:e5:7e:65:40:ac:44:3f: aa:3e:e9:00:f8:f2:e6:84:fa:fc:ea:5b:c3:83:1c: cb:55:22:aa:bf:7f:81:f3:4f:24:5e:2e:dd:1c:66: e9:d0:1d:6c:d6:8b:8b:56:27:65:fd:ab:48:5f:8e: 0a:2e:f9:5e:01:05:cf:9e:c5:d6:6a:b5:00:af:1b: ba:d3:c7:9b:e8:d3:70:69:ca:a2:30:f8:a6:b7:83: 73:ad:98:de:49:bf:18:da:ac:30:1e:13:5d:00:16: 05:81:1a:02:49:ca:0d:49:cb:63:e6:41:20:fa:4f: e0:10:30:05:3c:c2:c0:28:5b:63:ad:9a:de:0c:65: d8:9e:c7:8d:26:7d:e3:87:5c:6c:11:94:f7:ff:43: cc:70:84:b2:24:db:36:c8:9e:06:d2:10:2b:20:46: 0b:3f:4a:dc:32:67:9e:2e:6a:91:03:d5:11:53:92: 39:53:dc:92:a0:f2:6c:64:73:87:03:fd:42:37:da: 89:1a:16:20:9e:69:e4:05:f9:59:c7:34:f0:d2:df: e8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:35:C5:2F:80:E6:A4:25:13:CE:4E:8E:35:80:E1:9D:77:AC:11:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/408a0c19-0e7d-3cf4-9b9a-4d7208e232c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl X509v3 Authority Key Identifier: keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer sbgp-ipAddrBlock: critical IPv4: 45.59.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:87:f3:a3:2b:76:6b:f5:ab:27:58:2b:28:f1:0b:ce:9b:74: 18:a1:f8:a6:1b:68:90:e3:c9:b2:4d:08:14:68:98:26:39:75: 38:e0:6a:bf:f9:29:84:e9:9b:45:28:51:67:12:aa:60:3d:e5: 90:9f:e0:00:6c:94:91:6a:3b:fb:ca:11:ef:c9:bf:e0:d2:4b: a2:5f:ac:82:ae:85:18:d0:ea:2f:75:96:92:2f:c2:a3:b9:c3: bc:56:df:39:c1:d9:35:2d:99:18:21:3a:57:09:04:75:cd:2b: 07:6d:31:53:c8:49:b4:ec:6e:da:d8:48:33:26:ab:84:db:d3: 7d:c7:cf:ef:e9:55:a9:9e:d2:b9:e1:ab:14:0e:0a:42:a4:91: f7:43:c9:40:5c:5a:79:75:9d:92:c2:37:fb:94:d9:74:98:21: f5:fe:d6:56:e6:2e:2e:4f:5e:b9:a7:e7:15:de:be:4b:40:69: 88:24:a1:f9:e5:e8:de:b7:f3:9c:52:dd:41:16:a3:a1:af:9b: e7:bf:d7:2c:37:9f:d7:f8:d6:40:11:1c:76:97:d7:27:f6:94: 0f:42:5a:a2:02:f3:7b:0e:df:cd:a4:7f:47:59:d3:eb:79:45: 73:90:a7:14:0b:d1:57:39:a0:83:57:31:c7:c6:eb:fc:bf:4f: 19:55:0f:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9iuwhkIPyyZKFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWYwN2M5ZTItNjQ4Yy00Y2EyLTg3ODQtMDJhYzNjMTQ0 NTM4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk YTgzODEwNTUtNTJhYS00ZDk0LWEwZjktNTlkZDViNThhODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMPWrOF3xx/g/nXrLHkv3C7tGZztDNwllO+E zJ48LoDZVi92oyYNQ5EanrxgqFeHQxYXqeV+ZUCsRD+qPukA+PLmhPr86lvDgxzL VSKqv3+B808kXi7dHGbp0B1s1ouLVidl/atIX44KLvleAQXPnsXWarUArxu608eb 6NNwacqiMPimt4NzrZjeSb8Y2qwwHhNdABYFgRoCScoNSctj5kEg+k/gEDAFPMLA KFtjrZreDGXYnseNJn3jh1xsEZT3/0PMcISyJNs2yJ4G0hArIEYLP0rcMmeeLmqR A9URU5I5U9ySoPJsZHOHA/1CN9qJGhYgnmnkBflZxzTw0t/oWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN01xS+A5qQlE85OjjWA4Z13rBEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85ZjA3 YzllMi02NDhjLTRjYTItODc4NC0wMmFjM2MxNDQ1MzgvNDA4YTBjMTktMGU3ZC0z Y2Y0LTliOWEtNGQ3MjA4ZTIzMmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWYwN2M5ZTItNjQ4Yy00Y2EyLTg3 ODQtMDJhYzNjMTQ0NTM4LzlmMDdjOWUyLTY0OGMtNGNhMi04Nzg0LTAyYWMzYzE0 NDUzOC5jcmwwHwYDVR0jBBgwFoAUZHXrfCV7cP95Mb9Xfny6xnTRzpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85ZjA3YzllMi02NDhjLTRjYTItODc4NC0wMmFj M2MxNDQ1MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACH86Mrdmv1qydYKyjxC86bdBih+KYbaJDjybJNCBRomCY5dTjgar/5 KYTpm0UoUWcSqmA95ZCf4ABslJFqO/vKEe/Jv+DSS6JfrIKuhRjQ6i91lpIvwqO5 w7xW3znB2TUtmRghOlcJBHXNKwdtMVPISbTsbtrYSDMmq4Tb033Hz+/pVame0rnh qxQOCkKkkfdDyUBcWnl1nZLCN/uU2XSYIfX+1lbmLi5PXrmn5xXevktAaYgkofnl 6N6385xS3UEWo6Gvm+e/1yw3n9f41kARHHaX1yf2lA9CWqIC83sO382kf0dZ0+t5 RXOQpxQL0Vc5oINXMcfG6/y/TxlVD4A= -----END CERTIFICATE-----Generated at Wed Aug 6 05:58:17 2025 by rpki-client