$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/c90933a7-20d1-3f12-9f48-2849455b9cb8.roa File: c90933a7-20d1-3f12-9f48-2849455b9cb8.roa (raw, json) Hash identifier: QrfwT5vlB30ZdT6Wac/vuZwfFKvTsQ5Bt93iyy5+b7E= Subject key identifier: 57:59:6F:C0:C2:CE:77:14:91:BB:98:86:83:0B:B5:1B:1C:4D:FF:0E Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584A9900C8A957EC362A80744780 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/c90933a7-20d1-3f12-9f48-2849455b9cb8.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 5645 IP address blocks: 206.248.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c8:a9:57:ec:36:2a:80:74:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=2e0f4971-e72c-4184-9179-c56d4d3fa7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:53:26:62:ca:16:d4:45:cb:36:58:07:86:d5: 76:ef:af:a0:19:3e:e4:68:7e:37:c9:8e:94:42:69: 5a:72:df:91:66:a1:e2:06:0e:82:df:e9:05:e8:3c: 2c:2d:54:30:ab:96:a6:e2:32:f4:4c:75:bc:f6:d2: 14:20:91:2a:f0:a1:e9:eb:df:0c:39:3d:36:04:7d: 81:ba:01:49:8e:8e:7d:06:06:98:07:d1:7e:b1:2f: 7f:09:03:2c:9b:f8:46:80:90:10:c5:bb:07:f2:2e: 05:da:66:cd:9f:81:41:d5:fb:4d:c9:93:4e:3c:3d: f6:b2:da:98:bf:83:8c:8c:fb:92:92:15:0a:5f:eb: 5b:4e:c0:7e:37:ab:53:06:96:14:a5:3d:82:81:5f: 5d:a0:24:fc:55:ab:d2:f8:3d:21:2c:32:5f:1a:47: 23:20:d8:9c:42:b5:34:e6:7f:0e:ad:25:e2:0f:81: 1f:11:09:1d:77:f1:b7:03:d7:3d:d7:26:47:11:43: 7a:bd:97:02:fb:4a:47:6d:dc:11:e8:bb:f8:b1:96: 0f:e4:64:4b:32:b5:ab:02:da:82:13:62:bf:b4:e4: ef:13:c2:c7:72:16:64:e6:06:33:3c:39:3d:a4:30: d7:87:ee:7c:94:0b:2e:5a:dd:62:93:30:ca:78:c7: ef:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:59:6F:C0:C2:CE:77:14:91:BB:98:86:83:0B:B5:1B:1C:4D:FF:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/c90933a7-20d1-3f12-9f48-2849455b9cb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 206.248.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:a2:5f:53:01:d1:6a:15:aa:1d:a2:99:f5:cb:2a:c4:9c:71: 6d:f0:ca:8a:2d:ec:da:35:c9:2a:85:68:75:21:1a:10:d4:78: fa:42:5e:cb:59:fb:ea:9e:86:2f:c2:b0:68:9a:58:e2:9f:09: ae:a6:5f:9d:fa:0f:e9:42:89:b9:6d:62:ed:07:ff:3a:e2:40: b8:cf:f1:8d:7c:11:a5:b7:bb:66:69:d0:ef:d2:30:48:88:99: ad:a3:12:fa:fb:21:af:ea:d0:5c:f1:be:1b:6c:56:7d:9e:cc: 53:9a:aa:35:04:ad:9a:ac:53:11:75:94:14:ed:f8:04:54:cb: 62:6f:b3:cb:91:2d:e3:10:3a:a6:56:23:d3:05:58:6c:43:ef: 92:df:b8:cf:a7:b8:64:9f:50:01:3e:a2:38:99:6f:ee:2b:fa: 12:87:7a:45:f9:d9:cd:64:48:db:bd:8f:89:5b:88:98:5e:6a: 7a:c5:73:9e:45:69:34:3a:d1:e0:17:76:6e:85:b7:e7:ac:15: cd:ad:cc:66:b3:ab:ed:97:f3:0c:ad:90:bb:53:70:21:32:c0: 82:41:d4:12:8a:ee:b6:cf:b5:98:ed:5d:41:83:6c:04:eb:ec: c9:77:17:b2:0c:b4:c6:15:9e:85:bf:bf:20:3b:cf:be:cb:38: fa:13:02:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMipV+w2KoB0R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MmUwZjQ5NzEtZTcyYy00MTg0LTkxNzktYzU2ZDRkM2ZhN2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFMmYsoW1EXLNlgHhtV276+gGT7kaH43yY6U Qmlact+RZqHiBg6C3+kF6DwsLVQwq5am4jL0THW89tIUIJEq8KHp698MOT02BH2B ugFJjo59BgaYB9F+sS9/CQMsm/hGgJAQxbsH8i4F2mbNn4FB1ftNyZNOPD32stqY v4OMjPuSkhUKX+tbTsB+N6tTBpYUpT2CgV9doCT8VavS+D0hLDJfGkcjINicQrU0 5n8OrSXiD4EfEQkdd/G3A9c91yZHEUN6vZcC+0pHbdwR6Lv4sZYP5GRLMrWrAtqC E2K/tOTvE8LHchZk5gYzPDk9pDDXh+58lAsuWt1ikzDKeMfvawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdZb8DCzncUkbuYhoMLtRscTf8OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvYzkwOTMzYTctMjBkMS0z ZjEyLTlmNDgtMjg0OTQ1NWI5Y2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzviAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM6iX1MB0WoVqh2imfXLKsSccW3wyoot7No1ySqFaHUhGhDUePpCXstZ ++qehi/CsGiaWOKfCa6mX536D+lCibltYu0H/zriQLjP8Y18EaW3u2Zp0O/SMEiI ma2jEvr7Ia/q0FzxvhtsVn2ezFOaqjUErZqsUxF1lBTt+ARUy2Jvs8uRLeMQOqZW I9MFWGxD75LfuM+nuGSfUAE+ojiZb+4r+hKHekX52c1kSNu9j4lbiJheanrFc55F aTQ60eAXdm6Ft+esFc2tzGazq+2X8wytkLtTcCEywIJB1BKK7rbPtZjtXUGDbATr 7Ml3F7IMtMYVnoW/vyA7z77LOPoTApA= -----END CERTIFICATE-----Generated at Mon Jul 28 22:16:30 2025 by rpki-client