$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/b1029df9-cad0-32d5-b53f-d2e308d6fff3.roa File: b1029df9-cad0-32d5-b53f-d2e308d6fff3.roa (raw, json) Hash identifier: 9N1eS++pNV8UmVH6oj8DSExv7ZVL54mZ31ueh17xhWY= Subject key identifier: 67:A0:4D:20:3B:B6:7E:21:06:91:2D:0A:FE:92:51:2E:7B:83:C6:98 Certificate issuer: /CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe Certificate serial: 010D0C9F43285849F01A81DF56245FC7AC3EEC80 Authority key identifier: 22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/b1029df9-cad0-32d5-b53f-d2e308d6fff3.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 16509 IP address blocks: 45.45.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:81:df:56:24:5f:c7:ac:3e:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=21bd562f-5a59-4b37-9c7c-8e3f2c9bae89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ca:52:72:36:76:ae:f4:c0:35:93:3c:23:13: 63:ea:4c:96:ee:02:fc:f9:b4:37:65:9f:34:17:86: 0c:c7:9d:24:71:b6:d0:b2:e1:72:73:52:05:e1:92: 0c:ca:cc:d3:b2:e4:45:4c:9a:ee:82:09:56:8a:4f: c7:c5:ef:b9:da:83:b8:e5:c1:c3:39:44:eb:cd:a6: 90:93:0f:37:fb:24:8a:15:63:fe:1e:ef:ed:a3:1e: 1c:bc:3f:88:bf:3f:9c:e5:e9:61:fd:15:a6:ab:5c: 2b:ac:58:80:cc:3f:4c:47:47:c2:b0:27:57:82:86: 19:5e:39:32:88:35:01:24:f4:34:06:b9:a7:e0:0b: 2f:2f:9a:23:23:67:28:4f:34:69:93:9b:ef:1e:5a: ab:ca:c2:c1:cc:94:f8:0d:78:f0:42:1e:d2:d6:7d: ed:96:36:22:e2:d4:f6:07:a1:b0:20:c2:4a:b7:c5: e6:b0:eb:31:cf:d8:49:36:03:47:9f:63:fe:21:c1: ea:74:a5:66:06:3e:f4:13:d5:ea:d4:cc:30:b0:dc: 13:bb:62:dc:28:e4:e2:f1:70:37:92:eb:4c:b0:6d: 0c:1b:e6:1c:eb:f5:dd:78:ca:26:e6:ff:33:98:07: 32:07:94:f4:c6:59:5e:de:59:17:e7:64:ed:10:7a: 16:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A0:4D:20:3B:B6:7E:21:06:91:2D:0A:FE:92:51:2E:7B:83:C6:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/b1029df9-cad0-32d5-b53f-d2e308d6fff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.crl X509v3 Authority Key Identifier: keyid:22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer sbgp-ipAddrBlock: critical IPv4: 45.45.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3f:20:a4:31:47:ef:cd:00:da:10:ab:4d:0d:cb:a1:fb:64: 15:30:50:d5:65:81:4e:b9:e7:7f:e8:0a:a5:f2:00:25:3a:3f: c7:d2:90:d2:54:2e:05:43:bd:10:57:2e:ce:8c:75:fc:4e:c0: 38:9a:03:4c:6a:0f:fc:49:c4:5b:38:67:68:56:6b:b3:f3:ca: 9e:ec:3a:98:94:83:62:f8:bd:42:4b:f5:57:60:d1:ac:a4:d4: 92:a7:08:da:3a:aa:36:09:41:11:82:db:63:45:5c:20:01:09: 17:16:b1:2a:ca:cf:f4:96:e9:5e:2f:6d:fb:1d:9a:1b:f5:9b: ab:5a:fd:43:95:a3:a0:39:e1:de:45:e3:b9:22:30:75:48:ac: b0:3d:91:18:01:a4:ef:c1:3e:2e:e5:91:d3:a0:fa:0b:b2:a7: 4a:42:1c:de:23:73:96:78:a7:b8:67:df:6a:b9:6e:9e:2a:75: aa:d1:5e:b7:20:5f:1f:dc:15:74:5c:9e:14:03:05:d9:8c:9e: 2d:45:f6:b6:56:ed:b2:4d:88:f2:fa:97:ac:04:84:c1:36:92: e3:5e:5f:e2:0f:0a:8f:11:8f:fd:f8:c9:6a:7f:1c:28:1a:74: 89:d3:7b:a6:7e:24:58:d6:6a:92:5c:c7:f4:57:fa:29:cc:2a: 49:0e:e4:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGoHfViRfx6w+7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY2ZDdhOTgtYjAyYS00MDc0LWFmZDItOWVlN2NjYjJi ZGJlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk MjFiZDU2MmYtNWE1OS00YjM3LTljN2MtOGUzZjJjOWJhZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cpScjZ2rvTANZM8IxNj6kyW7gL8+bQ3ZZ80 F4YMx50kcbbQsuFyc1IF4ZIMyszTsuRFTJrugglWik/Hxe+52oO45cHDOUTrzaaQ kw83+ySKFWP+Hu/tox4cvD+Ivz+c5elh/RWmq1wrrFiAzD9MR0fCsCdXgoYZXjky iDUBJPQ0Brmn4AsvL5ojI2coTzRpk5vvHlqrysLBzJT4DXjwQh7S1n3tljYi4tT2 B6GwIMJKt8XmsOsxz9hJNgNHn2P+IcHqdKVmBj70E9Xq1MwwsNwTu2LcKOTi8XA3 kutMsG0MG+Yc6/XdeMom5v8zmAcyB5T0xlle3lkX52TtEHoWmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGegTSA7tn4hBpEtCv6SUS57g8aYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lZjZk N2E5OC1iMDJhLTQwNzQtYWZkMi05ZWU3Y2NiMmJkYmUvYjEwMjlkZjktY2FkMC0z MmQ1LWI1M2YtZDJlMzA4ZDZmZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWY2ZDdhOTgtYjAyYS00MDc0LWFm ZDItOWVlN2NjYjJiZGJlL2VmNmQ3YTk4LWIwMmEtNDA3NC1hZmQyLTllZTdjY2Iy YmRiZS5jcmwwHwYDVR0jBBgwFoAUImFPcPc5a4VdJ1sfD62rAXtVpygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lZjZkN2E5OC1iMDJhLTQwNzQtYWZkMi05ZWU3 Y2NiMmJkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS3UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU/IKQxR+/NANoQq00Ny6H7ZBUwUNVlgU6553/oCqXyACU6P8fSkNJU LgVDvRBXLs6MdfxOwDiaA0xqD/xJxFs4Z2hWa7Pzyp7sOpiUg2L4vUJL9Vdg0ayk 1JKnCNo6qjYJQRGC22NFXCABCRcWsSrKz/SW6V4vbfsdmhv1m6ta/UOVo6A54d5F 47kiMHVIrLA9kRgBpO/BPi7lkdOg+guyp0pCHN4jc5Z4p7hn32q5bp4qdarRXrcg Xx/cFXRcnhQDBdmMni1F9rZW7bJNiPL6l6wEhME2kuNeX+IPCo8Rj/34yWp/HCga dInTe6Z+JFjWapJcx/RX+inMKkkO5EE= -----END CERTIFICATE-----Generated at Sat Jun 7 10:37:26 2025 by rpki-client