$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa File: fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa (raw, json) Hash identifier: SKWzRp5E+xirGi+SvVE4cTk3ZAZhKQKiOfHcuvfg7uo= Subject key identifier: 93:13:5D:47:95:10:5C:FF:B9:E3:0F:94:B2:28:49:47:10:FD:9E:50 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584A9BCB6FADA456C72E20BD8F80 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 53414 IP address blocks: 45.72.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:6f:ad:a4:56:c7:2e:20:bd:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=52f251cc-6d92-4c40-b7a3-8bfebf767927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c6:27:1e:b1:cf:1c:7f:53:52:50:22:f4:f0: 02:a3:72:e6:2c:55:4b:62:ff:3a:0a:c3:5f:e2:f8: 45:ca:63:00:37:06:e2:78:da:5b:9d:63:10:cb:5c: 97:a8:63:58:e0:f3:a5:3f:ed:a7:67:37:4f:5e:9d: df:5d:c4:9e:10:9f:7e:a5:f9:64:30:63:29:8c:c7: ab:f0:d8:2e:42:33:2b:3c:7f:95:b3:d2:be:79:be: b0:ed:30:81:0c:2f:14:83:6f:b3:98:63:c2:47:f1: 4f:99:dd:43:a9:95:fb:48:fe:10:ea:44:10:93:3f: e9:6e:1b:5d:b1:5b:db:71:f9:b7:26:77:f4:84:61: ad:2f:26:61:fe:34:4b:af:df:e1:a5:c1:f2:a8:33: 86:1c:b0:5a:f1:33:83:fe:8d:be:26:a3:32:7c:47: 7e:b1:34:28:ea:48:0f:51:17:2b:df:37:e4:22:98: 1d:cc:80:6b:e5:b8:12:98:df:af:dd:30:e8:c0:b4: 51:e7:31:da:46:da:df:c3:e6:18:57:e0:d2:74:8e: e0:ff:56:91:a3:10:2f:ce:ed:0b:6e:ed:33:85:33: 41:ea:98:7d:9c:ec:f4:41:82:ce:83:17:6b:b9:79: 87:64:e3:d7:a4:aa:48:6a:cd:a0:9a:ec:f4:76:ba: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:13:5D:47:95:10:5C:FF:B9:E3:0F:94:B2:28:49:47:10:FD:9E:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 45.72.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ed:6f:3b:7b:b4:51:65:9e:35:dc:6c:c4:47:bb:52:c1:6c: 57:e1:b9:bf:8b:fe:95:98:a6:e9:b0:bf:3b:b5:52:7d:54:4c: 9b:32:c8:12:4b:7e:e7:8f:3e:97:86:35:ed:35:f2:a9:62:df: 1a:00:ff:ec:1f:3a:de:4e:d5:c4:79:29:27:b9:56:b6:18:d6: f2:7f:86:25:e6:9b:03:b3:63:c1:48:27:61:15:0b:9f:b6:a2: f9:ed:17:7c:a8:3c:a3:b9:bd:db:5c:7f:0a:29:71:0c:51:fa: a7:f4:6f:0d:bd:5a:b5:7f:db:e6:40:1c:29:fd:fa:5e:35:05: c0:69:46:55:be:25:bb:6b:2b:de:36:b7:5a:b2:77:c5:2b:31: 41:d6:bd:23:7e:b2:36:c1:bb:05:15:c5:23:7c:cf:0b:42:97: b8:f8:9b:30:58:5e:ba:7e:d8:3a:fe:41:46:70:0d:f8:29:f9: bb:84:61:82:eb:64:08:c3:90:fb:97:e4:bb:28:e3:39:07:72: 78:ed:15:3c:25:eb:cc:3d:c8:4a:e2:2e:0a:85:31:98:44:58: 2c:af:6c:a0:74:b7:94:cc:a0:a1:4a:e8:6f:a9:1f:bc:5e:73: 5c:04:8c:80:a9:a2:96:cb:67:78:c1:42:28:08:7f:6c:c8:b1: 70:f5:cf:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqby2+tpFbHLiC9j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk NTJmMjUxY2MtNmQ5Mi00YzQwLWI3YTMtOGJmZWJmNzY3OTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicYnHrHPHH9TUlAi9PACo3LmLFVLYv86CsNf 4vhFymMANwbieNpbnWMQy1yXqGNY4POlP+2nZzdPXp3fXcSeEJ9+pflkMGMpjMer 8NguQjMrPH+Vs9K+eb6w7TCBDC8Ug2+zmGPCR/FPmd1DqZX7SP4Q6kQQkz/pbhtd sVvbcfm3Jnf0hGGtLyZh/jRLr9/hpcHyqDOGHLBa8TOD/o2+JqMyfEd+sTQo6kgP URcr3zfkIpgdzIBr5bgSmN+v3TDowLRR5zHaRtrfw+YYV+DSdI7g/1aRoxAvzu0L bu0zhTNB6ph9nOz0QYLOgxdruXmHZOPXpKpIas2gmuz0drqYaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMTXUeVEFz/ueMPlLIoSUcQ/Z5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZmNmNmQwYzMtYjcxMS0z YTVkLThmMDctMDFmN2M2OWE4NGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrtbzt7tFFlnjXcbMRHu1LBbFfhub+L/pWYpumwvzu1Un1UTJsyyBJL fuePPpeGNe018qli3xoA/+wfOt5O1cR5KSe5VrYY1vJ/hiXmmwOzY8FIJ2EVC5+2 ovntF3yoPKO5vdtcfwopcQxR+qf0bw29WrV/2+ZAHCn9+l41BcBpRlW+JbtrK942 t1qyd8UrMUHWvSN+sjbBuwUVxSN8zwtCl7j4mzBYXrp+2Dr+QUZwDfgp+buEYYLr ZAjDkPuX5Lso4zkHcnjtFTwl68w9yEriLgqFMZhEWCyvbKB0t5TMoKFK6G+pH7xe c1wEjICpopbLZ3jBQigIf2zIsXD1z60= -----END CERTIFICATE-----Generated at Tue Jul 29 15:07:53 2025 by rpki-client