$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa File: 9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa (raw, json) Hash identifier: E8LjyzBmhEEwjTAcG56F8bcoLnHnYce6byOxND36ZcY= Subject key identifier: 31:E2:AD:63:38:8D:BF:74:26:AF:74:4E:7D:29:66:FC:E0:ED:98:E9 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F43285849FE0FEC7BCED8840147C5F900 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 397423 IP address blocks: 45.59.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:ec:7b:ce:d8:84:01:47:c5:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=b48036d4-5d54-4757-a912-16b7e5f0ec11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:58:0f:83:de:6a:f0:b0:56:38:a6:2e:b1:34: 12:63:83:67:70:46:1e:6b:0f:85:d8:ff:c1:e1:0b: cc:07:fe:be:1a:23:14:14:80:9b:41:05:82:de:73: e0:56:c5:c7:1d:75:ff:d9:e9:68:14:f5:21:d8:13: 59:05:e4:9b:8c:e3:c5:43:4b:9b:9f:7d:80:5f:6e: e1:7f:b0:2f:04:4a:df:38:3c:d0:40:d5:f9:0c:8d: a6:6d:53:7b:f5:b6:10:30:70:ae:23:ce:7f:b0:5c: c8:f4:79:7d:e9:11:83:e1:b4:52:a5:b1:50:f0:09: d5:fb:36:f4:54:42:a2:96:c8:68:ec:db:14:08:64: ec:15:f1:b1:e8:74:46:8d:2e:e6:9a:09:3a:f3:42: 8e:80:00:9c:e2:53:33:af:09:0d:f8:88:cd:91:a0: 7b:b0:80:d7:67:46:f4:bc:2e:b2:d2:82:bb:a0:75: 68:20:d8:c5:df:4c:b2:99:65:f0:b4:a0:a7:68:e5: b9:6a:d0:94:43:d4:f0:24:b6:dc:11:31:27:f0:8d: 71:39:ff:73:0f:6c:52:63:5b:13:bd:62:e6:cb:86: 9f:73:1e:95:3f:ea:43:b3:56:a5:5a:06:d5:60:54: 10:f5:92:87:4b:91:31:0f:16:16:e7:71:4b:3e:cb: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E2:AD:63:38:8D:BF:74:26:AF:74:4E:7D:29:66:FC:E0:ED:98:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 45.59.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:63:79:8e:b8:d4:71:1f:df:ed:0a:82:cf:85:22:61:13:45: c2:43:e2:23:20:66:4e:73:f0:77:f2:d4:ee:9f:1e:50:cb:f3: 02:43:b6:95:ee:a1:2a:f8:a4:dd:47:b9:e9:4e:45:47:92:3b: 65:29:1c:a5:35:01:b7:1b:1a:14:0f:52:cf:50:67:4b:74:83: a0:a2:a4:4d:35:07:ad:02:f1:4d:65:ba:98:65:48:3a:18:7f: 53:d7:d4:35:4d:37:db:72:42:bd:0f:9d:92:22:0c:54:81:2f: f1:36:d8:45:87:80:b7:b0:1f:23:d7:19:5a:62:d1:c2:de:12: c9:7c:75:1e:c0:0f:46:8a:c3:3a:56:4b:77:ce:f7:07:23:e3: ab:7f:42:56:f7:b7:e2:87:53:b7:30:a2:64:93:ba:c6:8c:28: a5:93:59:d5:a2:96:b3:33:ed:c9:25:dd:ef:2f:62:02:94:aa: 02:2e:8b:d3:94:0a:98:7d:3d:84:8a:e7:9f:21:50:94:f7:0e: 13:12:c4:10:3f:2c:0f:01:dd:25:89:cd:48:a3:5a:40:67:0f: 5c:29:2a:ee:f0:b7:11:7c:62:da:70:d4:19:f9:ba:cf:5a:6a: 1b:8d:e3:2c:fe:a7:a3:0a:a3:18:d8:08:08:90:af:9c:2a:54: 3b:a3:be:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D+x7ztiEAUfF+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk YjQ4MDM2ZDQtNWQ1NC00NzU3LWE5MTItMTZiN2U1ZjBlYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVgPg95q8LBWOKYusTQSY4NncEYeaw+F2P/B 4QvMB/6+GiMUFICbQQWC3nPgVsXHHXX/2eloFPUh2BNZBeSbjOPFQ0ubn32AX27h f7AvBErfODzQQNX5DI2mbVN79bYQMHCuI85/sFzI9Hl96RGD4bRSpbFQ8AnV+zb0 VEKilsho7NsUCGTsFfGx6HRGjS7mmgk680KOgACc4lMzrwkN+IjNkaB7sIDXZ0b0 vC6y0oK7oHVoINjF30yymWXwtKCnaOW5atCUQ9TwJLbcETEn8I1xOf9zD2xSY1sT vWLmy4afcx6VP+pDs1alWgbVYFQQ9ZKHS5ExDxYW53FLPsv9FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHirWM4jb90Jq90Tn0pZvzg7ZjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvOTAwM2I4MWQtZDZkYy0z YTMzLWE2YTItOTlhZGUzYTEzM2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLTugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxjeY641HEf3+0Kgs+FImETRcJD4iMgZk5z8Hfy1O6fHlDL8wJDtpXu oSr4pN1HuelORUeSO2UpHKU1AbcbGhQPUs9QZ0t0g6CipE01B60C8U1luphlSDoY f1PX1DVNN9tyQr0PnZIiDFSBL/E22EWHgLewHyPXGVpi0cLeEsl8dR7AD0aKwzpW S3fO9wcj46t/Qlb3t+KHU7cwomSTusaMKKWTWdWilrMz7ckl3e8vYgKUqgIui9OU Cph9PYSK558hUJT3DhMSxBA/LA8B3SWJzUijWkBnD1wpKu7wtxF8Ytpw1Bn5us9a ahuN4yz+p6MKoxjYCAiQr5wqVDujvuw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:57 2025 by rpki-client