$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa File: 0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa (raw, json) Hash identifier: qgvabaQE5yzxXMFB37wEeLryiLsmo+ZEFXTRE/extgY= Subject key identifier: DC:FD:3B:22:F4:3A:5F:DF:C7:10:35:82:35:6F:50:B3:51:A9:E4:BB Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584A14655BE438DD812C8C813F80 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 8987 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:5b:e4:38:dd:81:2c:8c:81:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=97cc0b4d-d8ac-4a54-90d7-392584c0a721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:1e:d9:42:8d:63:98:27:26:97:78:c7:57: 35:9e:ef:3b:0e:aa:e8:f7:a3:a6:d5:ef:50:d8:96: 1b:48:05:d2:68:03:36:b9:04:92:76:68:f1:b3:75: d6:2f:e6:69:4f:11:6d:18:c1:ee:10:e7:f3:d5:32: 80:3f:ab:d3:cf:33:dc:80:d4:b5:e9:b0:5c:90:9b: 7d:7e:87:56:5b:10:0e:5f:66:3b:3e:31:62:02:4f: 97:2c:27:16:25:b5:f5:9c:7a:ed:ae:55:87:0d:b0: 3a:dd:60:80:8c:a4:d4:d5:de:3e:7e:11:7f:b4:85: 50:fb:b4:37:40:bf:19:99:85:f3:88:c7:84:cb:65: aa:33:50:56:5b:a5:01:a4:a8:a4:bd:3e:96:c3:dc: fe:8d:73:24:a3:18:f7:8f:ff:bf:0b:94:28:04:3a: 6d:80:a4:49:7d:8f:08:3a:78:80:9b:3b:59:47:9f: cc:33:6e:7f:1c:d0:aa:bf:4c:4a:c6:94:22:b6:c4: 98:06:8a:c4:d5:86:c0:75:0f:3e:0c:74:8c:21:53: cb:9b:1c:d8:cf:6e:2d:84:96:9f:af:ad:6c:1e:90: 66:36:d2:6a:fe:c1:ab:53:60:ad:34:39:3d:56:56: 84:4e:a8:5d:af:e7:3e:16:a7:64:cd:03:80:d8:f7: 25:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FD:3B:22:F4:3A:5F:DF:C7:10:35:82:35:6F:50:B3:51:A9:E4:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:21:1c:bd:4b:05:6b:2e:5b:8c:bf:bc:f3:1d:12:0c:48:5d: 8d:18:f2:3d:8a:68:0c:ee:96:9f:d8:bd:c9:5d:72:06:33:56: 9a:8c:c3:a6:73:bd:d9:c7:52:bb:eb:3e:05:be:ba:79:4c:e0: 18:cc:9c:1f:3f:7b:18:23:44:4c:9f:a1:75:a6:37:db:90:77: 25:a0:e0:4c:c0:ee:38:0a:1d:c2:de:27:cc:31:18:0e:0d:bb: 70:3a:b3:2e:29:86:eb:27:1b:30:d8:be:8b:6e:04:77:6f:9d: 5f:5a:3b:db:56:1a:cc:e2:4a:eb:02:f3:f8:4f:c2:75:72:e6: 80:66:7d:38:18:ed:5f:99:4f:7e:80:10:62:c5:59:c4:32:76: 8d:c7:1f:af:13:6f:fc:45:a1:4d:0b:1c:31:e0:88:c5:27:72: 52:b8:2a:52:12:7e:a5:8a:be:61:d4:13:c0:51:a3:16:71:4c: e4:06:07:a6:f1:0a:f4:15:a8:56:7a:4b:cc:a9:1e:04:86:f8: e3:8a:a3:de:77:a5:14:30:22:0d:94:4c:f5:7a:5a:79:a6:a0: 2c:8a:15:05:5b:35:44:ee:00:62:00:fc:e5:93:46:fd:df:71: 49:54:59:0c:4b:27:59:f4:bc:c1:d8:0e:19:f4:a2:09:0a:33: e6:a8:21:fb -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEoUZVvkON2BLIyBP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk OTdjYzBiNGQtZDhhYy00YTU0LTkwZDctMzkyNTg0YzBhNzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfse2UKNY5gnJpd4x1c1nu87Dqro96Om1e9Q 2JYbSAXSaAM2uQSSdmjxs3XWL+ZpTxFtGMHuEOfz1TKAP6vTzzPcgNS16bBckJt9 fodWWxAOX2Y7PjFiAk+XLCcWJbX1nHrtrlWHDbA63WCAjKTU1d4+fhF/tIVQ+7Q3 QL8ZmYXziMeEy2WqM1BWW6UBpKikvT6Ww9z+jXMkoxj3j/+/C5QoBDptgKRJfY8I OniAmztZR5/MM25/HNCqv0xKxpQitsSYBorE1YbAdQ8+DHSMIVPLmxzYz24thJaf r61sHpBmNtJq/sGrU2CtNDk9VlaETqhdr+c+FqdkzQOA2PclhQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFNz9OyL0Ol/fxxA1gjVvULNRqeS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvMGNkODc0OWYtZTgzYi0z NGQ4LWEyZWQtMjFhMzgzY2ZlOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFghHL1LBWsuW4y/vPMdEgxIXY0Y 8j2KaAzulp/YvcldcgYzVpqMw6ZzvdnHUrvrPgW+unlM4BjMnB8/exgjREyfoXWm N9uQdyWg4EzA7jgKHcLeJ8wxGA4Nu3A6sy4phusnGzDYvotuBHdvnV9aO9tWGszi SusC8/hPwnVy5oBmfTgY7V+ZT36AEGLFWcQydo3HH68Tb/xFoU0LHDHgiMUnclK4 KlISfqWKvmHUE8BRoxZxTOQGB6bxCvQVqFZ6S8ypHgSG+OOKo953pRQwIg2UTPV6 WnmmoCyKFQVbNUTuAGIA/OWTRv3fcUlUWQxLJ1n0vMHYDhn0ogkKM+aoIfs= -----END CERTIFICATE-----Generated at Mon Jun 16 23:06:55 2025 by rpki-client