$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/75747fad-cd40-3c7f-b59d-56d41477ac8e.roa File: 75747fad-cd40-3c7f-b59d-56d41477ac8e.roa (raw, json) Hash identifier: 1UvHTwIXDgUl2Urfftx+21cCDzAKGhmA2K3LEnCVyJI= Subject key identifier: 54:7B:46:90:2D:9C:27:58:A4:1E:C6:EA:9F:2E:13:01:99:6E:31:AF Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584A85941F2ABD928D6F91C5A940 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/75747fad-cd40-3c7f-b59d-56d41477ac8e.roa Signing time: Tue 15 Jul 2025 02:01:43 +0000 ROA not before: Tue 15 Jul 2025 02:01:43 +0000 ROA not after: Mon 13 Oct 2025 02:01:43 +0000 asID: 138699 IP address blocks: 101.45.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:94:1f:2a:bd:92:8d:6f:91:c5:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Jul 15 02:01:43 2025 GMT Not After : Oct 13 02:01:43 2025 GMT Subject: CN=48e1bb1e-a48b-42bd-af41-a4f8dc56c793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f2:80:64:a8:cd:76:96:84:0d:13:91:e2:84: f8:9c:39:81:04:eb:b6:d1:fe:09:62:54:ec:a3:18: 51:61:e8:7c:4e:d0:3d:cc:6e:4c:71:78:e7:5a:9c: ec:f9:00:a2:29:de:24:5c:e4:bb:db:af:9e:ec:26: 9c:01:81:cf:29:cf:da:b5:81:b6:0b:5c:f4:a1:e7: 9f:2e:a7:1c:3a:6f:0a:24:8e:14:29:01:6d:d1:78: 2a:7b:29:72:cd:ad:b5:96:b6:8f:14:ef:20:f7:a9: a8:ef:33:56:80:40:01:03:37:c2:0e:43:f7:54:97: ff:08:5e:b1:01:17:20:19:ea:65:86:34:65:e5:23: 56:79:fa:bb:e5:ba:a7:09:5e:57:e0:15:7b:75:2e: 6d:6f:2e:44:de:41:ac:2b:f0:cd:82:8d:63:94:b2: 33:69:1d:4f:90:00:dd:5b:9b:69:2b:42:b8:60:ea: 45:e8:87:43:f8:e9:bd:bc:84:8c:e4:c6:bd:1f:5c: bd:e5:b5:2f:25:ea:6c:73:2e:a9:58:fe:2d:0c:58: 37:75:24:fa:af:57:66:3d:34:28:99:9d:3c:50:e3: 0d:46:b5:90:53:eb:23:fb:2c:e4:c6:b3:24:7f:08: eb:4a:db:27:7e:ee:ee:77:96:ac:04:f6:7b:d0:ba: 4b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7B:46:90:2D:9C:27:58:A4:1E:C6:EA:9F:2E:13:01:99:6E:31:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/75747fad-cd40-3c7f-b59d-56d41477ac8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 101.45.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:71:3f:f1:41:d7:a7:ee:ff:c0:20:51:cc:88:1e:15:8d:56: 3a:f4:b2:77:ee:2b:e5:e0:02:c6:89:5d:fd:1e:02:e5:7f:f9: d1:d1:96:6a:15:be:dd:cf:e8:7f:b1:42:37:a7:70:96:e0:75: 0a:51:e0:3e:de:41:44:64:f2:34:d8:87:91:7a:88:b6:14:db: 33:46:d9:04:83:c6:29:31:a0:68:b4:26:7a:6f:70:dd:a9:7d: 48:82:64:41:4b:6e:45:7f:25:9a:96:6f:d5:0b:01:df:85:54: 14:70:35:f7:b0:60:41:f7:74:a1:fc:1e:05:21:ba:b6:03:a1: 9f:11:26:c4:da:c3:8b:ca:96:f3:fb:17:89:6d:2b:80:1e:f9: ee:2c:d7:ee:49:11:c2:0e:e7:f9:a1:4e:ef:27:20:a9:5b:2b: 0f:78:29:95:b8:ab:99:72:82:4c:d4:15:aa:97:75:e3:43:c6: fe:6f:03:38:1f:2c:d7:11:a6:a0:70:93:3b:f1:54:f7:ee:60: 3c:50:07:94:9e:76:a2:a9:5f:2c:4f:ee:77:ad:c5:ff:2d:3d: 71:71:fc:49:2f:6c:9a:43:3a:c0:36:30:db:7b:18:26:bb:00: d0:49:95:1f:54:05:2a:77:78:2c:75:90:6d:b1:a1:3b:20:56: fa:a7:73:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFlB8qvZKNb5HFqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI1MDcxNTAyMDE0M1oXDTI1MTAxMzAyMDE0M1owLzEtMCsGA1UEAxMk NDhlMWJiMWUtYTQ4Yi00MmJkLWFmNDEtYTRmOGRjNTZjNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPKAZKjNdpaEDROR4oT4nDmBBOu20f4JYlTs oxhRYeh8TtA9zG5McXjnWpzs+QCiKd4kXOS726+e7CacAYHPKc/atYG2C1z0oeef LqccOm8KJI4UKQFt0Xgqeylyza21lraPFO8g96mo7zNWgEABAzfCDkP3VJf/CF6x ARcgGeplhjRl5SNWefq75bqnCV5X4BV7dS5tby5E3kGsK/DNgo1jlLIzaR1PkADd W5tpK0K4YOpF6IdD+Om9vISM5Ma9H1y95bUvJepscy6pWP4tDFg3dST6r1dmPTQo mZ08UOMNRrWQU+sj+yzkxrMkfwjrStsnfu7ud5asBPZ70LpLAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFR7RpAtnCdYpB7G6p8uEwGZbjGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvNzU3NDdmYWQtY2Q0MC0z YzdmLWI1OWQtNTZkNDE0NzdhYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZS34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRxP/FB16fu/8AgUcyIHhWNVjr0snfuK+XgAsaJXf0eAuV/+dHRlmoV vt3P6H+xQjencJbgdQpR4D7eQURk8jTYh5F6iLYU2zNG2QSDxikxoGi0JnpvcN2p fUiCZEFLbkV/JZqWb9ULAd+FVBRwNfewYEH3dKH8HgUhurYDoZ8RJsTaw4vKlvP7 F4ltK4Ae+e4s1+5JEcIO5/mhTu8nIKlbKw94KZW4q5lygkzUFaqXdeNDxv5vAzgf LNcRpqBwkzvxVPfuYDxQB5SedqKpXyxP7netxf8tPXFx/EkvbJpDOsA2MNt7GCa7 ANBJlR9UBSp3eCx1kG2xoTsgVvqnc2M= -----END CERTIFICATE-----Generated at Fri Jul 25 00:57:09 2025 by rpki-client