$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa File: 4a1f018a-6442-314f-b3c0-e11651be1890.roa (raw, json) Hash identifier: vs1KoAF8HlZWj162zF3ylzetMg1OzrJlLIkLe691CCQ= Subject key identifier: 04:BE:B1:68:34:BF:90:3E:3E:4B:69:DF:61:F5:E5:E3:04:E1:FA:6E Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584AF52132BBBE37E4AFD7308180 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:32:bb:be:37:e4:af:d7:30:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=a194f699-78cd-4f72-8dd8-8a6d6192e80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:ea:d3:6e:61:58:2a:cd:72:fd:25:dc:25: 74:11:9d:bc:5d:8d:09:a1:1d:e3:45:d8:0d:4d:07: 9c:a4:9a:30:e5:9c:80:d5:21:6a:54:4a:0b:61:76: 6c:78:3d:20:21:89:d1:56:03:25:89:e6:af:d7:a7: a3:ff:35:83:2a:28:6e:80:b1:31:33:4f:ae:75:b9: f2:10:ac:3b:95:80:91:21:fd:25:f9:da:8f:75:53: 8d:e7:3b:e9:d2:25:b5:a7:b9:74:43:67:29:e8:1a: bc:44:f8:db:26:62:a3:19:59:86:79:08:f5:86:34: 09:a4:01:2a:84:1c:f5:7c:77:5f:bb:20:6d:05:9d: 27:2c:fc:97:29:f6:82:2b:14:25:db:b7:7e:60:82: b2:a5:6c:a8:fd:fe:ae:74:fe:36:69:da:12:d5:2c: b5:f1:97:f4:75:2b:ef:07:fe:62:94:22:07:ab:fe: af:b3:3a:54:2d:a4:c0:96:e2:8a:87:83:0d:08:66: c4:c9:83:f2:41:5f:6a:ad:65:74:3e:8d:4a:ae:2d: 67:8f:ec:5f:ba:3c:e4:c9:6d:8f:9b:dc:13:53:0e: 0e:49:0d:fc:df:7c:a8:45:1a:d5:c1:98:ea:5a:91: 5a:f4:d7:b6:b0:e3:83:1e:a1:0d:52:be:50:98:76: a8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BE:B1:68:34:BF:90:3E:3E:4B:69:DF:61:F5:E5:E3:04:E1:FA:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:5e:69:2b:f6:ee:6a:1b:57:af:bc:44:e6:2b:e1:ce:ec:59: 69:79:e9:ee:1c:e2:4c:b1:40:e2:b6:e8:3f:61:e9:7b:93:a0: d3:c8:1c:e4:ea:75:f5:ba:e3:40:ba:14:ab:99:fd:ca:43:cf: ed:9f:0e:18:6a:f9:21:5e:3b:fe:2a:2f:69:31:99:04:93:82: b6:92:f2:84:a3:65:30:42:93:30:05:a1:b8:78:d2:fc:73:81: 4c:e5:73:73:c1:4c:33:37:ec:d8:9e:27:91:92:b4:b6:96:83: f6:e9:d0:b7:e5:08:fd:54:8f:5a:5b:34:1c:18:08:f6:98:6d: f7:7e:9e:7b:0e:1e:66:70:7e:a7:93:14:90:46:e7:3f:e3:b0: c8:53:a5:20:56:1f:8f:de:e9:85:53:fa:cb:3d:d3:4a:47:bb: 95:bd:ba:88:6e:7c:99:87:6c:36:b9:80:16:f8:1b:2c:5f:c2: a6:8e:7b:66:be:b7:67:cf:24:c1:5f:e7:8f:ce:fa:e3:03:6e: 7f:b1:fd:c5:9d:2a:cd:ab:e5:00:5d:e1:06:63:1a:e0:69:c0: f5:d6:1f:bf:02:ba:49:39:60:73:55:79:f0:0d:ad:9f:95:28: 21:08:5d:99:34:2b:15:7c:04:39:ff:60:b5:32:0c:e5:34:3e: dc:73:27:0f -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEr1ITK7vjfkr9cwgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTE5NGY2OTktNzhjZC00ZjcyLThkZDgtOGE2ZDYxOTJlODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6zq025hWCrNcv0l3CV0EZ28XY0JoR3jRdgN TQecpJow5ZyA1SFqVEoLYXZseD0gIYnRVgMlieav16ej/zWDKihugLExM0+udbny EKw7lYCRIf0l+dqPdVON5zvp0iW1p7l0Q2cp6Bq8RPjbJmKjGVmGeQj1hjQJpAEq hBz1fHdfuyBtBZ0nLPyXKfaCKxQl27d+YIKypWyo/f6udP42adoS1Sy18Zf0dSvv B/5ilCIHq/6vszpULaTAluKKh4MNCGbEyYPyQV9qrWV0Po1Kri1nj+xfujzkyW2P m9wTUw4OSQ3833yoRRrVwZjqWpFa9Ne2sOODHqENUr5QmHaoRwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFAS+sWg0v5A+Pktp32H15eME4fpuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvNGExZjAxOGEtNjQ0Mi0z MTRmLWIzYzAtZTExNjUxYmUxODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALVeaSv27mobV6+8ROYr4c7sWWl5 6e4c4kyxQOK26D9h6XuToNPIHOTqdfW640C6FKuZ/cpDz+2fDhhq+SFeO/4qL2kx mQSTgraS8oSjZTBCkzAFobh40vxzgUzlc3PBTDM37NieJ5GStLaWg/bp0LflCP1U j1pbNBwYCPaYbfd+nnsOHmZwfqeTFJBG5z/jsMhTpSBWH4/e6YVT+ss900pHu5W9 uohufJmHbDa5gBb4GyxfwqaOe2a+t2fPJMFf54/O+uMDbn+x/cWdKs2r5QBd4QZj GuBpwPXWH78Cukk5YHNVefANrZ+VKCEIXZk0KxV8BDn/YLUyDOU0PtxzJw8= -----END CERTIFICATE-----Generated at Tue Aug 26 10:47:59 2025 by rpki-client