$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa File: 0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa (raw, json) Hash identifier: Le3wJICrrmybsk+US8ImPywPk/16GZWsaUojZVLmUFQ= Subject key identifier: F2:AA:1A:30:43:FE:E9:12:8D:C2:3F:33:F4:E8:09:82:6B:68:BE:5D Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584AF5212A2BFE30F191946FB1A0 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 8987 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2a:2b:fe:30:f1:91:94:6f:b1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=7e195f31-4219-48f5-82c0-1c2b311a7800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1a:40:47:f4:4d:26:55:bb:8b:9b:f9:a0:f5: 0f:31:6c:aa:21:ef:3b:5f:20:db:66:7f:da:47:0b: 94:de:19:ee:c8:47:fc:41:ec:15:1b:b7:9c:ac:25: 9a:87:81:6e:10:21:57:28:68:31:93:57:f3:54:33: 92:c3:9a:7f:ec:96:f1:ec:e4:29:b8:c4:fa:a5:2c: 3f:4a:f0:2d:0d:8d:a6:2a:6e:d7:2a:d2:76:73:05: fd:da:08:bd:ba:64:05:15:b2:51:e4:c1:ed:28:d0: 54:76:a7:46:b5:6e:b5:ed:db:e4:bc:a3:cf:d5:af: e0:24:2b:f5:55:bd:d2:30:2f:b7:a0:be:0d:f3:03: 82:ee:8c:b8:af:78:2b:40:c6:f6:40:69:56:44:5d: 81:57:3c:60:45:86:d7:1e:f1:ab:88:1b:de:ac:6e: 23:d9:76:57:eb:85:e8:7a:29:3f:b0:58:cf:c5:16: e5:52:d9:e8:a6:1d:48:3a:97:d8:91:04:ff:b1:cc: eb:f5:35:1f:ae:52:dc:78:a9:14:ee:b3:1c:36:fa: 82:2d:6c:2d:74:8e:a2:8e:e6:bd:1f:9c:00:9f:e2: 59:ea:33:af:50:0f:b0:c5:6b:d1:1a:62:82:1b:7e: 03:fb:85:45:cd:b0:c1:27:34:6d:99:22:09:c6:c2: 66:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AA:1A:30:43:FE:E9:12:8D:C2:3F:33:F4:E8:09:82:6B:68:BE:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:48:58:d7:cb:4d:9a:3a:4c:a9:a0:44:f7:fe:f8:6d:e0:de: d5:a5:05:0c:76:76:7d:47:1a:ca:17:56:66:01:dd:ef:55:54: 5c:49:a8:1e:8d:f6:9d:23:67:aa:b9:02:bc:87:18:99:50:33: 3a:53:e0:2e:f8:3c:f6:8f:7d:4b:06:7e:a9:11:62:83:55:04: 71:64:f1:9c:c8:fc:f9:09:a8:2d:85:80:7a:67:0b:aa:f8:a2: 6e:53:6a:1c:93:34:cb:e6:0a:61:41:85:8f:b4:5f:b1:b7:30: 6e:12:79:46:b0:a2:43:fe:cc:df:c5:13:4c:db:aa:89:11:dd: f7:4c:f4:22:59:65:cf:21:5e:9d:05:70:23:a8:17:4c:5b:c9: fb:bb:86:2d:ef:b4:53:60:46:e5:9f:13:7a:19:f6:e5:98:e7: 4a:be:e4:4f:34:d9:fc:4f:7c:11:f4:13:c0:2e:87:42:0a:14: 9a:96:94:67:51:ac:e2:f7:32:20:52:b5:d6:2b:09:79:e4:69: 9f:44:ea:e0:3b:4d:d7:01:95:e7:08:28:3e:55:ac:19:43:8d: 7d:e9:fb:7e:a7:f5:dd:90:88:1a:bf:3e:8d:f4:c0:e2:1a:db: 3b:56:04:f9:04:24:cb:fe:43:6f:6a:a4:f0:14:6b:ec:dd:1e: c8:a5:65:59 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEr1ISor/jDxkZRvsaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk N2UxOTVmMzEtNDIxOS00OGY1LTgyYzAtMWMyYjMxMWE3ODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xpAR/RNJlW7i5v5oPUPMWyqIe87XyDbZn/a RwuU3hnuyEf8QewVG7ecrCWah4FuECFXKGgxk1fzVDOSw5p/7Jbx7OQpuMT6pSw/ SvAtDY2mKm7XKtJ2cwX92gi9umQFFbJR5MHtKNBUdqdGtW617dvkvKPP1a/gJCv1 Vb3SMC+3oL4N8wOC7oy4r3grQMb2QGlWRF2BVzxgRYbXHvGriBverG4j2XZX64Xo eik/sFjPxRblUtnoph1IOpfYkQT/sczr9TUfrlLceKkU7rMcNvqCLWwtdI6ijua9 H5wAn+JZ6jOvUA+wxWvRGmKCG34D+4VFzbDBJzRtmSIJxsJmKwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFPKqGjBD/ukSjcI/M/ToCYJraL5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvMGNkODc0OWYtZTgzYi0z NGQ4LWEyZWQtMjFhMzgzY2ZlOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABZIWNfLTZo6TKmgRPf++G3g3tWl BQx2dn1HGsoXVmYB3e9VVFxJqB6N9p0jZ6q5AryHGJlQMzpT4C74PPaPfUsGfqkR YoNVBHFk8ZzI/PkJqC2FgHpnC6r4om5TahyTNMvmCmFBhY+0X7G3MG4SeUawokP+ zN/FE0zbqokR3fdM9CJZZc8hXp0FcCOoF0xbyfu7hi3vtFNgRuWfE3oZ9uWY50q+ 5E802fxPfBH0E8Auh0IKFJqWlGdRrOL3MiBStdYrCXnkaZ9E6uA7TdcBlecIKD5V rBlDjX3p+36n9d2QiBq/Po30wOIa2ztWBPkEJMv+Q29qpPAUa+zdHsilZVk= -----END CERTIFICATE-----Generated at Tue Aug 26 10:39:50 2025 by rpki-client