$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/51fde72b-c272-3d7a-83d9-5542508c0f35.roa File: 51fde72b-c272-3d7a-83d9-5542508c0f35.roa (raw, json) Hash identifier: f5ihdd3hBV0xfOHMihlRLW5gITNtn3uzr+GYR+FndbI= Subject key identifier: 94:05:44:8A:72:45:E2:FF:49:EE:71:A8:7E:0E:EF:58:4C:14:DE:64 Certificate issuer: /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Certificate serial: 010D0C9F43285849BDDA29CFB7B1B3EF3EDA7900 Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/51fde72b-c272-3d7a-83d9-5542508c0f35.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 1011 IP address blocks: 45.45.248.0/22 maxlen: 22 45.45.248.0/24 maxlen: 24 45.45.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:29:cf:b7:b1:b3:ef:3e:da:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=752a8bf4-b8f2-4458-bf5e-2e3ff14d1301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0a:02:0b:6f:b8:ad:db:c4:a9:fa:4a:b4:a4: 9f:bb:c0:77:8d:f4:5c:a4:ff:ef:0a:42:b6:9e:fd: 13:02:7a:75:ac:77:66:78:a4:e9:c7:48:ee:3f:98: 94:a6:c6:f9:79:f0:d5:c6:93:33:57:d6:38:8e:d8: 42:d8:df:b5:d8:62:99:f7:0e:e1:a5:16:86:80:f9: f6:92:5b:8a:13:6c:ac:20:c9:40:d4:4f:21:10:d5: 47:0f:66:cb:03:2a:9c:87:e3:2c:a7:a4:f0:bf:48: c1:0f:91:e9:98:3e:73:8c:f5:f8:53:7a:4f:77:69: 2c:42:e0:2e:44:95:43:3a:6d:cd:d5:31:9e:7a:b9: b7:10:13:a6:26:ab:f5:7a:68:d2:fa:61:72:f0:59: 22:50:98:10:84:33:b4:5d:48:58:e4:65:90:ac:5d: 6b:cb:36:4a:21:da:0f:6e:23:55:da:15:72:c0:ee: be:b9:f5:d4:6f:d0:71:1c:bf:69:91:62:5e:51:db: f4:25:7c:94:37:f3:b1:f1:c1:44:83:3f:8c:01:5d: 74:31:29:a2:59:6a:70:48:8a:9b:36:b4:f2:2e:fe: 2d:1e:e4:80:49:51:f9:af:65:c1:39:72:c0:56:0e: 8d:df:e3:3d:f0:82:15:5c:0e:fa:41:03:82:05:22: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:05:44:8A:72:45:E2:FF:49:EE:71:A8:7E:0E:EF:58:4C:14:DE:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/51fde72b-c272-3d7a-83d9-5542508c0f35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl X509v3 Authority Key Identifier: keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer sbgp-ipAddrBlock: critical IPv4: 45.45.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:73:60:69:29:bf:36:07:a1:07:1a:3c:49:d3:64:75:0e:91: a0:6b:11:22:3f:8c:18:67:f7:d1:b5:b5:89:6e:65:45:f1:91: 5a:4c:b4:35:c0:e6:82:26:dc:20:15:f9:e5:04:5f:70:f6:d5: dc:8f:39:28:96:24:d2:c1:41:33:9d:22:09:0d:ed:92:11:56: ef:fa:8a:78:5f:88:b7:84:3c:e6:2f:af:57:2a:bd:8a:14:e1: b4:08:32:fb:a9:ec:ac:e8:87:9c:3c:dd:d7:5f:3d:a8:69:b1: e3:9c:5f:15:aa:30:df:73:3a:18:96:fe:5e:30:f0:ca:48:52: 40:2e:10:a5:87:48:7d:dd:06:9f:9a:ea:a4:f5:ac:22:ba:db: 50:e8:0a:0d:66:81:6d:de:cb:b9:26:f2:91:d9:6a:f8:6f:23: 5d:57:50:ea:52:dd:31:b8:45:eb:b3:b8:e7:6f:d7:a9:5b:2e: f7:5f:eb:13:57:3d:41:3f:d3:2e:ff:98:da:db:99:3e:fd:45: db:41:17:8f:a1:d6:a4:97:50:49:f1:dd:7d:ea:ed:e9:4a:f0: 55:e9:e7:6d:8b:35:63:53:f7:fc:4b:43:ed:4a:f2:4b:f0:cc: a2:6a:99:76:88:8b:2e:76:74:36:79:d5:e3:66:88:35:a8:26: 0f:8c:26:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92inPt7Gz7z7aeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YmM1YzMtOWVmNC00ZGEzLTlmY2YtNGVjNmRhYmJm YmMzMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NzUyYThiZjQtYjhmMi00NDU4LWJmNWUtMmUzZmYxNGQxMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgoCC2+4rdvEqfpKtKSfu8B3jfRcpP/vCkK2 nv0TAnp1rHdmeKTpx0juP5iUpsb5efDVxpMzV9Y4jthC2N+12GKZ9w7hpRaGgPn2 kluKE2ysIMlA1E8hENVHD2bLAyqch+Msp6Twv0jBD5HpmD5zjPX4U3pPd2ksQuAu RJVDOm3N1TGeerm3EBOmJqv1emjS+mFy8FkiUJgQhDO0XUhY5GWQrF1ryzZKIdoP biNV2hVywO6+ufXUb9BxHL9pkWJeUdv0JXyUN/Ox8cFEgz+MAV10MSmiWWpwSIqb NrTyLv4tHuSASVH5r2XBOXLAVg6N3+M98IIVXA76QQOCBSLsUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQFRIpyReL/Se5xqH4O71hMFN5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRi YzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2ZGFiYmZiYzMvNTFmZGU3MmItYzI3Mi0z ZDdhLTgzZDktNTU0MjUwOGMwZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWY0YmM1YzMtOWVmNC00ZGEzLTlm Y2YtNGVjNmRhYmJmYmMzL2FmNGJjNWMzLTllZjQtNGRhMy05ZmNmLTRlYzZkYWJi ZmJjMy5jcmwwHwYDVR0jBBgwFoAUsrvXRQKNNtbCM39NSIxDRyFgB78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRiYzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2 ZGFiYmZiYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBzYGkpvzYHoQcaPEnTZHUOkaBrESI/jBhn99G1tYluZUXxkVpMtDXA 5oIm3CAV+eUEX3D21dyPOSiWJNLBQTOdIgkN7ZIRVu/6inhfiLeEPOYvr1cqvYoU 4bQIMvup7Kzoh5w83ddfPahpseOcXxWqMN9zOhiW/l4w8MpIUkAuEKWHSH3dBp+a 6qT1rCK621DoCg1mgW3ey7km8pHZavhvI11XUOpS3TG4ReuzuOdv16lbLvdf6xNX PUE/0y7/mNrbmT79RdtBF4+h1qSXUEnx3X3q7elK8FXp522LNWNT9/xLQ+1K8kvw zKJqmXaIiy52dDZ51eNmiDWoJg+MJlk= -----END CERTIFICATE-----Generated at Mon Jun 16 03:18:25 2025 by rpki-client