$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8302b886-d780-30f6-9ddf-7d0667ecd296.roa File: 8302b886-d780-30f6-9ddf-7d0667ecd296.roa (raw, json) Hash identifier: Rr+T+AsThd36yxLil8fvG/UHzZfkMuifwdQ5tmdru9c= Subject key identifier: 90:2E:49:47:6D:D3:15:92:03:6E:B9:A7:BC:4D:0E:FB:22:4D:13:48 Certificate issuer: /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Certificate serial: 010D0C9F43285849F2E545774C275B910902E660 Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8302b886-d780-30f6-9ddf-7d0667ecd296.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 14956 IP address blocks: 45.61.132.0/24 maxlen: 24 45.61.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:45:77:4c:27:5b:91:09:02:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=5023923e-0998-419d-8ec7-2227b8296c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:25:4f:f7:89:c1:db:87:d7:ca:51:6e:7e: 76:5c:22:9c:45:68:08:c4:ca:43:46:91:91:41:85: 0f:5c:ad:97:77:eb:f1:b6:c4:6f:3d:e8:8a:97:34: f9:b0:5a:50:97:b6:1f:07:52:93:70:1c:d6:53:30: 99:51:fd:e1:03:bc:70:b4:2a:a6:9b:d5:60:ad:a2: 64:69:6c:b5:54:44:29:8e:6c:b3:1e:85:45:fe:c3: 54:a3:66:18:22:59:1d:d6:bc:18:dd:1b:07:ad:94: 9b:7b:70:8d:b9:3f:90:15:5f:1b:31:90:03:02:e5: f1:2b:84:69:e7:60:7e:5d:9e:60:62:dc:f7:2a:f7: c4:31:53:a9:b2:ed:60:29:05:86:55:8d:45:9a:6a: 67:7c:01:0e:ef:fc:4d:51:09:1d:ad:77:5a:6d:0e: 41:e0:3b:3b:b0:c3:86:76:cf:16:5f:b7:11:68:65: 7f:85:87:ff:4e:f3:de:52:f3:09:f2:17:33:ce:e5: a9:c2:36:d1:8e:bc:10:b1:bd:96:ac:8e:be:3b:cb: 4d:77:c9:76:8a:91:ad:b0:7d:2c:ab:4f:18:ef:6d: c6:98:4b:d1:f4:cb:f3:c7:5f:f5:f3:f7:86:56:8f: 96:ca:01:fe:5b:a6:71:93:38:b0:8c:b9:8b:91:b9: 94:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2E:49:47:6D:D3:15:92:03:6E:B9:A7:BC:4D:0E:FB:22:4D:13:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8302b886-d780-30f6-9ddf-7d0667ecd296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl X509v3 Authority Key Identifier: keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer sbgp-ipAddrBlock: critical IPv4: 45.61.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:72:a9:2f:9d:f4:4c:f0:43:8f:7b:c5:26:ba:5f:5b:97:07: c2:9d:48:d1:73:94:25:d3:79:37:8b:d3:56:9c:bc:48:b0:88: 0f:a5:ec:87:f5:f8:1a:e5:1f:0d:43:d9:75:30:ca:b2:a2:c6: 51:84:f4:4c:82:e0:86:8a:28:8a:e7:7e:c6:33:f0:c5:16:02: c4:5c:57:0f:bb:31:26:c5:9a:b0:6a:b6:04:01:c6:da:7e:2c: ff:09:fa:d5:f8:0e:a9:6a:41:03:df:aa:28:99:b3:aa:22:c6: 03:81:a6:49:09:3e:89:08:a2:28:33:50:97:9c:55:2a:8d:49: d4:a4:90:7a:c3:55:a3:db:1b:ef:f1:80:ba:83:7c:6d:bf:09: 24:a2:38:dd:6b:e0:3b:a9:71:44:e0:d5:08:d2:e6:89:43:d0: da:cc:00:53:e0:91:4a:ec:ef:40:c6:19:d3:a8:4c:42:52:04: bc:e3:b6:a9:9c:4d:4d:ff:45:49:e2:00:09:39:ed:82:9a:6f: d4:be:b5:d6:41:ca:c2:a4:e8:8b:82:e2:77:71:f3:1f:cf:ef: 16:82:8b:2a:4d:4c:03:d6:bc:26:0b:22:1e:3b:78:b0:25:60: 5a:c1:8a:bf:1d:79:d9:6e:d1:9f:f9:37:8c:64:aa:21:67:3c: ea:a6:a1:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5UV3TCdbkQkC5mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi OWQ3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NTAyMzkyM2UtMDk5OC00MTlkLThlYzctMjIyN2I4Mjk2YzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM0lT/eJwduH18pRbn52XCKcRWgIxMpDRpGR QYUPXK2Xd+vxtsRvPeiKlzT5sFpQl7YfB1KTcBzWUzCZUf3hA7xwtCqmm9VgraJk aWy1VEQpjmyzHoVF/sNUo2YYIlkd1rwY3RsHrZSbe3CNuT+QFV8bMZADAuXxK4Rp 52B+XZ5gYtz3KvfEMVOpsu1gKQWGVY1FmmpnfAEO7/xNUQkdrXdabQ5B4Ds7sMOG ds8WX7cRaGV/hYf/TvPeUvMJ8hczzuWpwjbRjrwQsb2WrI6+O8tNd8l2ipGtsH0s q08Y723GmEvR9Mvzx1/18/eGVo+WygH+W6ZxkziwjLmLkbmUqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAuSUdt0xWSA265p7xNDvsiTRNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvODMwMmI4ODYtZDc4MC0z MGY2LTlkZGYtN2QwNjY3ZWNkMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLT2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtyqS+d9EzwQ497xSa6X1uXB8KdSNFzlCXTeTeL01acvEiwiA+l7If1 +BrlHw1D2XUwyrKixlGE9EyC4IaKKIrnfsYz8MUWAsRcVw+7MSbFmrBqtgQBxtp+ LP8J+tX4DqlqQQPfqiiZs6oixgOBpkkJPokIoigzUJecVSqNSdSkkHrDVaPbG+/x gLqDfG2/CSSiON1r4DupcUTg1QjS5olD0NrMAFPgkUrs70DGGdOoTEJSBLzjtqmc TU3/RUniAAk57YKab9S+tdZBysKk6IuC4ndx8x/P7xaCiypNTAPWvCYLIh47eLAl YFrBir8dedlu0Z/5N4xkqiFnPOqmoSM= -----END CERTIFICATE-----Generated at Sat Aug 9 12:54:29 2025 by rpki-client