$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/4dd89c0d-6f7d-3dd6-83e9-7e35e9549dff.roa File: 4dd89c0d-6f7d-3dd6-83e9-7e35e9549dff.roa (raw, json) Hash identifier: macywUpjTN92800bGDnFEfUgTq5LfTp6I/TtN9JJbsw= Subject key identifier: 77:2E:3E:56:B3:81:58:58:E3:04:E1:05:F1:F8:A2:3F:1E:A7:9C:D7 Certificate issuer: /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Certificate serial: 010D0C9F4328584A8701ED31258E4BC9E3F24D50 Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/4dd89c0d-6f7d-3dd6-83e9-7e35e9549dff.roa Signing time: Tue 15 Jul 2025 14:18:46 +0000 ROA not before: Tue 15 Jul 2025 14:18:46 +0000 ROA not after: Mon 13 Oct 2025 14:18:46 +0000 asID: 273143 IP address blocks: 45.88.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:01:ed:31:25:8e:4b:c9:e3:f2:4d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Validity Not Before: Jul 15 14:18:46 2025 GMT Not After : Oct 13 14:18:46 2025 GMT Subject: CN=e9f8fc95-c9b3-441a-bf4e-2fce07180d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a7:ba:4e:6a:21:59:3e:12:34:be:40:4b:ac: 0b:4f:94:23:15:1a:00:66:88:58:a0:bf:fa:14:62: fc:4b:db:24:4b:96:56:78:c5:d7:09:23:09:47:ff: 90:55:e0:b9:a1:29:e1:5b:55:ad:99:1f:42:83:28: dd:47:f2:12:06:61:5f:53:7d:22:27:a1:89:da:c9: f8:8d:31:d9:39:cd:b1:81:b4:e0:38:a7:00:57:16: 66:92:8b:1c:d9:c1:67:98:3a:d9:3c:c6:0f:2c:b5: 66:6b:6e:8a:7e:7e:f3:65:93:c4:63:f8:0c:17:c2: 45:f5:92:a4:71:14:02:74:1a:85:28:32:12:bb:3d: 30:1b:aa:b8:06:38:7c:c6:ed:b6:d9:3c:4c:c5:75: 73:3e:09:cf:a2:f5:71:65:7b:01:23:58:67:98:8e: 17:4d:cd:5e:8d:3c:bf:aa:ba:08:53:b6:a0:c4:43: af:87:10:56:b0:d1:70:e9:cd:cb:cf:f4:79:80:d8: b1:4a:f8:a7:ab:0f:96:e9:02:85:05:32:8e:ca:24: 27:6c:55:50:d5:ac:f9:47:c4:c0:da:96:10:7a:a3: 98:4a:2f:86:a4:4c:9d:d7:0d:da:f7:ec:e0:fa:68: 5d:2e:de:b4:b8:a7:e4:f4:82:ed:8d:d7:ca:a5:33: 8f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2E:3E:56:B3:81:58:58:E3:04:E1:05:F1:F8:A2:3F:1E:A7:9C:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/4dd89c0d-6f7d-3dd6-83e9-7e35e9549dff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl X509v3 Authority Key Identifier: keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer sbgp-ipAddrBlock: critical IPv4: 45.88.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:bf:25:35:cd:ea:5c:f7:f6:46:0d:14:c3:81:96:e7:1f:b9: 8e:e2:e1:b5:10:88:f9:66:e0:78:d1:80:18:b4:f2:83:3c:ea: 34:4d:c3:cb:54:40:bd:b7:50:7f:47:0e:28:d1:5b:16:43:6c: b3:ff:2e:64:e8:c9:a0:c0:83:2b:9c:69:f3:98:a5:95:f2:7f: 89:32:52:d9:a0:2c:e9:74:ed:b0:57:ea:5c:3a:30:94:65:4a: 8e:71:d8:a8:d0:fd:f4:fe:c4:69:5e:9f:36:d9:c4:54:bb:bc: 90:88:1d:d7:11:d5:8b:ea:07:96:1d:84:c4:c5:d7:b2:30:21: 35:a9:20:03:39:0d:b5:fa:74:58:11:67:ea:b4:1c:fc:94:e5: c4:08:cd:04:0d:c7:b1:02:59:a4:d1:6e:95:09:9a:df:37:4b: 57:43:e5:3c:c0:03:c8:89:32:24:9c:13:1f:d6:56:02:98:05: 8f:b8:40:25:b0:87:a7:b9:a1:69:18:e7:ea:eb:83:6b:f4:05: 5b:fb:48:41:fa:98:2e:66:b6:99:8c:cf:49:24:56:b7:c5:0f: e6:00:b3:71:26:e6:63:f9:61:a0:22:95:76:e2:be:ad:38:a9: 81:7d:1c:9d:eb:38:6a:bf:89:d5:90:61:32:8b:3c:42:3a:18: 52:c0:29:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHAe0xJY5LyePyTVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4 MWIyMB4XDTI1MDcxNTE0MTg0NloXDTI1MTAxMzE0MTg0NlowLzEtMCsGA1UEAxMk ZTlmOGZjOTUtYzliMy00NDFhLWJmNGUtMmZjZTA3MTgwZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26e6TmohWT4SNL5AS6wLT5QjFRoAZohYoL/6 FGL8S9skS5ZWeMXXCSMJR/+QVeC5oSnhW1WtmR9CgyjdR/ISBmFfU30iJ6GJ2sn4 jTHZOc2xgbTgOKcAVxZmkosc2cFnmDrZPMYPLLVma26Kfn7zZZPEY/gMF8JF9ZKk cRQCdBqFKDISuz0wG6q4Bjh8xu222TxMxXVzPgnPovVxZXsBI1hnmI4XTc1ejTy/ qroIU7agxEOvhxBWsNFw6c3Lz/R5gNixSvinqw+W6QKFBTKOyiQnbFVQ1az5R8TA 2pYQeqOYSi+GpEyd1w3a9+zg+mhdLt60uKfk9ILtjdfKpTOPxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcuPlazgVhY4wThBfH4oj8ep5zXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFl OGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvNGRkODljMGQtNmY3ZC0z ZGQ2LTgzZTktN2UzNWU5NTQ5ZGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDUxZThkOWYtZDllYS00NWNmLThm YjktMjgxMWU4NmI4MWIyLzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04ZmI5LTI4MTFlODZi ODFiMi5jcmwwHwYDVR0jBBgwFoAU8rMonBGkahiZAc+bjSQ+l9AEF8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODEx ZTg2YjgxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVjbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEi/JTXN6lz39kYNFMOBlucfuY7i4bUQiPlm4HjRgBi08oM86jRNw8tU QL23UH9HDijRWxZDbLP/LmToyaDAgyucafOYpZXyf4kyUtmgLOl07bBX6lw6MJRl So5x2KjQ/fT+xGlenzbZxFS7vJCIHdcR1YvqB5YdhMTF17IwITWpIAM5DbX6dFgR Z+q0HPyU5cQIzQQNx7ECWaTRbpUJmt83S1dD5TzAA8iJMiScEx/WVgKYBY+4QCWw h6e5oWkY5+rrg2v0BVv7SEH6mC5mtpmMz0kkVrfFD+YAs3Em5mP5YaAilXbivq04 qYF9HJ3rOGq/idWQYTKLPEI6GFLAKd8= -----END CERTIFICATE-----Generated at Wed Jul 23 06:03:08 2025 by rpki-client