$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa File: ddff14cf-541a-3e8a-a9fe-11e036c29959.roa (raw, json) Hash identifier: +Jaf+4vViknJnBFcf117SX+dIj639uuQVbSNZtDjE5s= Subject key identifier: DC:0C:65:8B:E4:A6:F0:8F:FA:C1:74:2A:1B:33:39:DD:C5:4E:6C:26 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F4328584A814647323F22FA1272CDF5C0 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 400304 IP address blocks: 45.59.116.0/24 maxlen: 24 66.23.193.0/24 maxlen: 24 104.36.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:47:32:3f:22:fa:12:72:cd:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=6065b155-3758-4a4c-9bef-16e64415b3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cf:c6:3f:07:b0:a6:95:e0:84:37:f8:b0:2b: 61:c3:3c:58:dd:ad:54:32:c2:23:c5:30:d5:8f:2a: 07:44:50:05:3a:e9:fb:fb:e2:f9:a4:61:f4:0a:f0: e2:49:0b:a5:2e:77:53:3f:f4:d9:39:57:18:6b:fa: fb:26:5c:85:1c:a0:4d:aa:b1:6f:e7:b4:85:16:68: 33:d4:54:ca:0b:be:1b:e8:e9:f3:40:16:7c:4b:3e: a3:9e:b9:52:57:00:bf:fc:47:82:7d:8a:a1:13:27: f9:ea:32:9c:f2:dd:26:d5:a1:3c:4b:4c:b4:ff:6a: 7c:a9:3e:ed:bc:4e:4d:f8:ec:9b:10:ac:cc:16:aa: 7b:d0:9a:27:35:c7:38:c0:42:93:39:43:81:fe:2e: 52:c5:1e:06:05:b1:2d:fe:2e:98:bc:a4:c9:ba:57: 4c:80:1c:74:6f:17:bf:13:06:82:68:f1:81:38:40: db:6f:17:3c:63:be:d8:42:3d:20:23:7a:ae:cf:d0: 2a:d8:2a:d9:e3:ad:01:0a:e7:3d:02:ca:36:44:5e: e9:1e:84:13:0b:19:0e:32:e6:27:7b:53:30:9e:d6: ba:06:1d:1b:51:f6:99:72:0b:6d:70:a3:5b:77:ff: 4a:37:be:15:17:f0:9c:0f:5e:bc:13:70:23:45:dd: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0C:65:8B:E4:A6:F0:8F:FA:C1:74:2A:1B:33:39:DD:C5:4E:6C:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 45.59.116.0/24 66.23.193.0/24 104.36.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:01:44:3d:b8:6c:03:28:18:c2:50:3d:2e:9c:7b:58:7c:b8: 21:9a:20:53:42:a9:78:3d:93:b5:7a:4e:79:28:be:5c:9c:1b: 7c:e0:b3:eb:38:90:e0:3b:53:ce:4e:26:5c:5f:c2:ea:ac:8e: cc:23:d7:bf:00:66:1f:0c:6a:c4:81:6d:f6:b6:18:82:47:99: 95:95:02:bf:61:d1:15:a5:71:f3:1e:ff:06:83:4e:2f:34:bb: 19:f2:e0:d8:d0:72:81:0a:88:1a:9e:3f:f3:91:13:50:de:d6: 3e:f6:13:79:77:21:47:d3:99:b1:05:1e:fa:44:6f:32:5a:34: 99:e9:09:35:65:bb:51:82:16:95:3b:35:93:d3:4c:e8:1f:1f: e7:d8:32:19:cc:36:45:93:86:d3:10:82:c6:90:81:13:d7:f7: 3c:27:27:fb:0c:b4:61:14:88:a6:21:72:23:ed:d0:df:1a:f3: 4f:9d:e2:bb:fa:03:13:04:5e:50:22:e6:e3:b0:e9:ba:b4:69: 56:a0:a2:b9:78:f2:2b:cc:d0:09:90:8c:1f:1b:3f:35:07:97: ed:c9:76:ae:fe:dc:60:01:f4:4e:77:86:44:62:ea:60:f9:38: 27:2f:39:20:01:67:c0:d5:16:5b:78:58:e6:92:e1:42:11:f5: a0:18:bd:69 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEqBRkcyPyL6EnLN9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NjA2NWIxNTUtMzc1OC00YTRjLTliZWYtMTZlNjQ0MTViM2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks/GPwewppXghDf4sCthwzxY3a1UMsIjxTDV jyoHRFAFOun7++L5pGH0CvDiSQulLndTP/TZOVcYa/r7JlyFHKBNqrFv57SFFmgz 1FTKC74b6OnzQBZ8Sz6jnrlSVwC//EeCfYqhEyf56jKc8t0m1aE8S0y0/2p8qT7t vE5N+OybEKzMFqp70JonNcc4wEKTOUOB/i5SxR4GBbEt/i6YvKTJuldMgBx0bxe/ EwaCaPGBOEDbbxc8Y77YQj0gI3quz9Aq2CrZ460BCuc9Aso2RF7pHoQTCxkOMuYn e1Mwnta6Bh0bUfaZcgttcKNbd/9KN74VF/CcD168E3AjRd1TuwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNwMZYvkpvCP+sF0KhszOd3FTmwmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZGRmZjE0Y2YtNTQxYS0z ZThhLWE5ZmUtMTFlMDM2YzI5OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALTt0AwQA QhfBAwQCaCRUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACoBRD24bAMoGMJQPS6ce1h8uCGaIFNCqXg9k7V6 TnkovlycG3zgs+s4kOA7U85OJlxfwuqsjswj178AZh8MasSBbfa2GIJHmZWVAr9h 0RWlcfMe/waDTi80uxny4NjQcoEKiBqeP/ORE1De1j72E3l3IUfTmbEFHvpEbzJa NJnpCTVlu1GCFpU7NZPTTOgfH+fYMhnMNkWThtMQgsaQgRPX9zwnJ/sMtGEUiKYh ciPt0N8a80+d4rv6AxMEXlAi5uOw6bq0aVagorl48ivM0AmQjB8bPzUHl+3Jdq7+ 3GAB9E53hkRi6mD5OCcvOSABZ8DVFlt4WOaS4UIR9aAYvWk= -----END CERTIFICATE-----Generated at Mon Aug 4 15:01:58 2025 by rpki-client