$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa File: 04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa (raw, json) Hash identifier: EYicJT3bnmQF9a0IToApEt13F6S0QuPCY2UZcPq+5mg= Subject key identifier: 02:58:DE:59:3C:3E:8D:8D:04:91:3A:48:74:55:34:3F:95:F2:16:C5 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584A7D15E38836953C373FFB0B00 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 31715 IP address blocks: 209.145.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:e3:88:36:95:3c:37:3f:fb:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=c5bb2557-3c80-4bb0-bf55-a6428be52673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:f8:33:6d:11:0c:c7:70:8c:2c:1a:34:34: 61:d5:f2:f9:30:54:31:65:58:ce:d1:94:c3:63:cc: 9f:21:b4:a5:d2:7e:5e:18:53:3a:7a:35:ab:7b:68: 48:b4:c7:b5:91:3a:db:7c:a9:b7:c6:b6:74:f4:45: d0:f0:eb:cc:15:a0:8d:9d:33:44:e7:52:0d:19:ca: 8f:0b:b1:e1:a2:4c:52:07:6a:e2:83:8c:c2:ba:a5: d2:fb:5a:38:81:48:d8:08:d8:f6:63:e7:d5:0c:cd: 62:c6:2e:ac:5e:67:e4:da:cf:5d:b3:df:38:48:b6: 9f:cc:2a:6a:f7:1c:1c:11:c5:00:11:17:58:bf:76: df:e0:06:4e:4c:59:cc:94:da:b4:74:59:3f:9e:87: 0b:6f:46:d8:38:da:af:86:2c:4c:38:14:a2:a6:bf: 5f:9a:ce:ed:c4:df:cb:13:db:35:01:14:bd:23:bc: 93:03:57:fe:71:39:ea:46:d3:1e:30:7f:6b:bf:79: 7b:bc:eb:d7:c6:ae:34:b0:8a:d1:5c:3a:7c:f1:c1: d6:91:74:69:c1:f1:5c:24:2c:e6:11:45:2d:e2:ce: e6:da:35:72:5e:71:6d:3c:c0:53:4d:48:45:04:de: fd:79:69:12:5c:0a:24:14:1f:38:4a:56:f0:25:4f: 72:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:58:DE:59:3C:3E:8D:8D:04:91:3A:48:74:55:34:3F:95:F2:16:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.145.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c8:e1:11:c9:38:0e:93:43:a2:88:08:e5:b5:6b:12:f1:0a: 27:cf:e5:b9:a1:b1:07:7d:07:44:83:dc:67:d4:ae:c6:a8:79: 77:7e:88:91:24:b6:8c:18:70:ee:41:a7:50:10:c9:d3:c0:6c: ad:45:2a:1a:e7:3d:73:98:91:52:03:66:16:5d:5f:de:b9:c6: dc:d6:03:52:00:39:1a:ab:45:06:03:57:55:7c:98:73:67:b7: c1:44:ac:32:23:d8:1b:7b:c9:b7:0d:0c:60:81:fd:0b:be:ba: 56:f7:91:97:01:e1:26:ab:8c:5b:ce:6d:55:8f:01:58:17:09: 51:9b:b4:08:d0:8d:3a:df:ed:d1:17:fb:85:f7:51:4d:76:0f: 36:70:71:8c:42:3c:a0:d6:9c:b4:e9:ae:77:cd:31:1f:02:67: d0:16:51:2a:50:8a:e5:fe:f2:87:da:3d:4b:bc:c8:73:d5:8a: d9:7e:8f:55:dd:02:47:1f:d8:c1:94:be:09:d7:b5:0d:4c:09: 5e:a7:e3:95:40:e1:b3:f2:66:56:aa:57:73:9a:96:86:61:cc: 73:11:e0:48:b5:26:17:11:c8:0e:6b:ff:31:a5:10:d5:08:09: 4b:3e:0b:35:24:18:a7:78:f5:a4:db:80:a1:68:ab:be:b8:b9: 2f:e4:1c:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FeOINpU8Nz/7CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk YzViYjI1NTctM2M4MC00YmIwLWJmNTUtYTY0MjhiZTUyNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEr4M20RDMdwjCwaNDRh1fL5MFQxZVjO0ZTD Y8yfIbSl0n5eGFM6ejWre2hItMe1kTrbfKm3xrZ09EXQ8OvMFaCNnTNE51INGcqP C7HhokxSB2rig4zCuqXS+1o4gUjYCNj2Y+fVDM1ixi6sXmfk2s9ds984SLafzCpq 9xwcEcUAERdYv3bf4AZOTFnMlNq0dFk/nocLb0bYONqvhixMOBSipr9fms7txN/L E9s1ARS9I7yTA1f+cTnqRtMeMH9rv3l7vOvXxq40sIrRXDp88cHWkXRpwfFcJCzm EUUt4s7m2jVyXnFtPMBTTUhFBN79eWkSXAokFB84SlbwJU9y/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJY3lk8Po2NBJE6SHRVND+V8hbFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMDRhMzhkMzItNWMyYS0z NmVmLTk2YzAtY2Y1NGFiZWQ1YTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZEuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLI4RHJOA6TQ6KICOW1axLxCifP5bmhsQd9B0SD3GfUrsaoeXd+iJEk towYcO5Bp1AQydPAbK1FKhrnPXOYkVIDZhZdX965xtzWA1IAORqrRQYDV1V8mHNn t8FErDIj2Bt7ybcNDGCB/Qu+ulb3kZcB4SarjFvObVWPAVgXCVGbtAjQjTrf7dEX +4X3UU12DzZwcYxCPKDWnLTprnfNMR8CZ9AWUSpQiuX+8ofaPUu8yHPVitl+j1Xd Akcf2MGUvgnXtQ1MCV6n45VA4bPyZlaqV3OaloZhzHMR4Ei1JhcRyA5r/zGlENUI CUs+CzUkGKd49aTbgKFoq764uS/kHEs= -----END CERTIFICATE-----Generated at Mon Aug 4 11:16:37 2025 by rpki-client