$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa File: 37f97f97-7938-33a2-94e9-584d409d7825.roa (raw, json) Hash identifier: Pmj8WIfRZEaGPgk83n3hLiwMMmW7fgDIOCTZotbO7Xo= Subject key identifier: 6D:42:B6:F8:69:4A:84:00:9D:67:6D:40:62:04:ED:69:BC:BD:CB:BF Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584AF52132A7AC67C76E621CBB00 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:32:a7:ac:67:c7:6e:62:1c:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=a37f97ee-1070-411a-9087-5e21c99e405c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:30:c6:35:bc:df:df:65:80:1f:bd:41:12: 40:f9:25:04:d3:e8:84:a6:31:6f:8a:f7:ff:91:19: a2:6f:14:f5:5d:98:3c:02:c2:20:6a:9f:9c:a3:de: f1:dc:05:e9:7f:ba:4b:50:24:60:dd:58:b4:e8:57: 06:b0:ee:5f:d1:19:53:96:26:f7:7c:d5:88:d9:ec: d4:bf:fd:32:f3:e1:9e:12:66:6b:b1:57:70:38:0e: 67:7f:e8:f1:9d:1a:90:45:a4:ad:43:da:ab:c1:58: ca:96:31:a8:0a:09:98:e6:77:bd:18:59:0e:ab:71: 0e:be:77:d0:9e:db:73:ef:10:99:61:63:da:50:5d: 25:65:6d:90:33:4e:22:1b:33:b2:b6:6f:26:09:81: 99:56:4b:0b:2f:98:2f:e0:64:df:b2:aa:ce:8a:cd: 1c:99:37:bf:97:e9:26:1b:c2:78:61:09:f0:9b:d8: b2:6e:29:c5:c9:41:30:1c:23:7b:28:b2:eb:2d:2d: f4:94:21:cf:19:88:25:ed:42:4d:44:fa:a1:01:c5: 91:64:94:cb:7f:44:f8:c8:fb:7e:eb:22:57:16:6d: 6d:eb:51:d1:b7:c3:2f:04:d7:e3:d2:e1:4f:e7:e2: 2c:86:6a:bb:25:34:82:fb:a3:5c:69:d5:2b:08:74: 36:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:42:B6:F8:69:4A:84:00:9D:67:6D:40:62:04:ED:69:BC:BD:CB:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:13:a0:7e:74:13:81:aa:21:36:32:72:71:4e:94:02:e7:64: 94:71:67:ae:a3:2a:59:1d:21:59:ca:dd:f1:e6:6c:28:9a:4f: 30:89:dc:95:53:80:c0:61:1d:89:b7:57:3f:05:4a:d8:c0:cc: 32:2b:d5:60:18:e5:53:41:53:3e:d7:a9:49:78:cf:c0:4b:41: 5e:44:4d:4b:54:ac:b2:86:67:77:d6:42:9b:6d:d4:e6:2d:5c: cf:f5:a3:b2:d4:bf:10:ad:0d:0a:59:51:03:bd:9e:98:16:31: 97:77:b0:b6:86:3d:1f:27:47:25:3a:2d:27:cd:d6:b9:1d:ab: 49:67:b8:bd:2f:8a:28:0d:0b:87:63:e1:d0:8d:26:be:6e:da: 16:70:56:74:44:46:ce:2e:e3:69:fa:96:64:25:cf:bf:ca:3e: f0:18:f5:38:19:65:ba:17:eb:7d:ea:6c:44:16:24:90:d7:07: 34:d2:16:75:ea:a6:15:8f:1e:7d:09:23:0e:21:6a:d9:cf:3e: 80:71:66:25:65:60:46:15:e9:7a:bb:0b:5c:9e:7a:03:2b:f5: a5:e8:4f:e8:2f:54:e9:4e:f6:48:6f:81:35:18:a3:04:75:e6: 2b:25:0c:08:1c:70:01:25:e3:90:c8:28:65:36:54:d3:34:7c: 9d:bf:ee:f8 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEr1ITKnrGfHbmIcuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTM3Zjk3ZWUtMTA3MC00MTFhLTkwODctNWUyMWM5OWU0MDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkMwxjW8399lgB+9QRJA+SUE0+iEpjFvivf/ kRmibxT1XZg8AsIgap+co97x3AXpf7pLUCRg3Vi06FcGsO5f0RlTlib3fNWI2ezU v/0y8+GeEmZrsVdwOA5nf+jxnRqQRaStQ9qrwVjKljGoCgmY5ne9GFkOq3EOvnfQ nttz7xCZYWPaUF0lZW2QM04iGzOytm8mCYGZVksLL5gv4GTfsqrOis0cmTe/l+km G8J4YQnwm9iybinFyUEwHCN7KLLrLS30lCHPGYgl7UJNRPqhAcWRZJTLf0T4yPt+ 6yJXFm1t61HRt8MvBNfj0uFP5+Ishmq7JTSC+6NcadUrCHQ2rwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFG1CtvhpSoQAnWdtQGIE7Wm8vcu/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvMzdmOTdmOTctNzkzOC0z M2EyLTk0ZTktNTg0ZDQwOWQ3ODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD4ToH50E4GqITYycnFOlALnZJRx Z66jKlkdIVnK3fHmbCiaTzCJ3JVTgMBhHYm3Vz8FStjAzDIr1WAY5VNBUz7XqUl4 z8BLQV5ETUtUrLKGZ3fWQptt1OYtXM/1o7LUvxCtDQpZUQO9npgWMZd3sLaGPR8n RyU6LSfN1rkdq0lnuL0viigNC4dj4dCNJr5u2hZwVnRERs4u42n6lmQlz7/KPvAY 9TgZZboX633qbEQWJJDXBzTSFnXqphWPHn0JIw4hatnPPoBxZiVlYEYV6Xq7C1ye egMr9aXoT+gvVOlO9khvgTUYowR15islDAgccAEl45DIKGU2VNM0fJ2/7vg= -----END CERTIFICATE-----Generated at Tue Aug 26 10:39:33 2025 by rpki-client