$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/240f9d0d-a17f-35e3-8ade-de3e78530574.roa File: 240f9d0d-a17f-35e3-8ade-de3e78530574.roa (raw, json) Hash identifier: iPu9a6eo0II2xjj3V4IdcBFYBTAlPzE9KVPp0xArGQw= Subject key identifier: E5:EA:8A:86:B5:31:B4:F6:11:7C:5C:9C:25:E3:68:05:85:7A:5F:88 Certificate issuer: /CN=146a096d-134a-4c52-9243-da3981810107 Certificate serial: 010D0C9F432858489E6B6FECF5A92161B97CFA80 Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/240f9d0d-a17f-35e3-8ade-de3e78530574.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 26658 IP address blocks: 45.43.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:6f:ec:f5:a9:21:61:b9:7c:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146a096d-134a-4c52-9243-da3981810107 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=42452a6d-6b45-4187-9093-5e2ef08726eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:40:2f:fe:1a:ad:8f:4a:55:8d:a4:48:01: d4:4b:63:29:b3:e3:92:9f:82:25:4b:03:7a:d0:9f: 12:b2:c0:c2:58:58:3d:26:a8:e7:e9:b5:b5:05:a7: 07:03:3f:88:5e:0d:e2:1e:87:ec:8e:32:6d:15:9d: 5b:e5:d5:a1:70:bd:89:36:3b:fc:80:fd:ef:ce:ce: fc:a3:49:9b:a2:dc:a7:81:37:19:d5:35:af:b1:32: 94:96:d0:57:d8:b4:8d:0d:e5:03:76:7b:2f:7c:ae: 4a:8d:1a:55:df:a4:6c:97:54:d9:b2:26:91:d7:2f: 2a:c7:e8:1a:c5:9d:be:a3:16:34:d4:23:fa:38:5a: 8e:fb:00:a5:41:fa:33:c0:75:a0:6c:10:73:46:da: e1:3e:40:35:1a:f0:47:9d:3c:d0:b8:67:35:65:fb: 0e:f6:8b:5d:45:fe:a7:5d:69:d6:07:ab:36:d3:72: 7f:2b:19:1d:ee:93:81:4b:a4:8e:21:1d:89:14:80: ae:1f:52:c1:75:78:46:87:38:9c:ff:7d:50:aa:ee: af:5f:3d:a0:18:b4:7f:dc:08:9c:cd:89:27:dc:58: 9a:8f:1b:87:9b:af:7e:83:d5:e9:65:ca:ef:13:3e: 9d:b3:bd:b3:10:5d:de:09:50:9d:81:28:a8:09:05: fe:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EA:8A:86:B5:31:B4:F6:11:7C:5C:9C:25:E3:68:05:85:7A:5F:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/240f9d0d-a17f-35e3-8ade-de3e78530574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl X509v3 Authority Key Identifier: keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer sbgp-ipAddrBlock: critical IPv4: 45.43.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:0a:1f:91:7b:e8:90:3b:b9:ec:7e:a4:a6:b1:3a:0e:3f:6a: c3:85:26:3f:f8:3d:14:1c:12:7f:6a:74:9d:17:b4:40:77:78: 31:ee:cd:cf:cb:14:f3:45:66:71:04:86:1c:97:a8:63:6b:d6: 4c:d5:56:af:56:32:50:48:e4:12:5f:e1:59:fa:01:0c:26:c2: 5f:7a:e1:54:23:8d:8e:1b:0f:49:25:e5:4c:ee:85:f1:71:0b: 69:fd:54:3d:15:84:d5:32:8e:96:a3:f4:84:6c:e6:be:a5:54: fb:ff:12:2c:19:d6:da:bc:6d:d9:dd:92:a0:1b:8c:94:47:29: 4e:76:f9:88:4f:f0:ab:35:ec:b2:22:0e:9b:87:84:56:19:c7: fe:a6:44:82:f4:b9:b5:ef:5b:64:cb:eb:9a:e0:48:09:c4:c7: e1:35:12:fa:86:5c:aa:be:57:64:4c:00:5e:c5:ea:23:bc:c8: 0d:da:0f:42:67:16:f4:65:65:0b:25:23:22:f0:c0:76:b7:fa: 6a:00:1d:3c:43:5a:1c:cf:a4:d8:f0:01:48:c3:2b:02:72:e9: 1f:2e:5d:e8:c4:b3:b3:b8:f8:97:a8:45:bc:1b:6e:fd:fc:82: 34:a7:f6:31:12:bf:f7:bc:7c:ba:86:8b:5f:f9:a1:dc:ee:b5: 98:b8:9d:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2/s9akhYbl8+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ2YTA5NmQtMTM0YS00YzUyLTkyNDMtZGEzOTgxODEw MTA3MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NDI0NTJhNmQtNmI0NS00MTg3LTkwOTMtNWUyZWYwODcyNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9JAL/4arY9KVY2kSAHUS2Mps+OSn4IlSwN6 0J8SssDCWFg9Jqjn6bW1BacHAz+IXg3iHofsjjJtFZ1b5dWhcL2JNjv8gP3vzs78 o0mbotyngTcZ1TWvsTKUltBX2LSNDeUDdnsvfK5KjRpV36Rsl1TZsiaR1y8qx+ga xZ2+oxY01CP6OFqO+wClQfozwHWgbBBzRtrhPkA1GvBHnTzQuGc1ZfsO9otdRf6n XWnWB6s203J/Kxkd7pOBS6SOIR2JFICuH1LBdXhGhzic/31Qqu6vXz2gGLR/3Aic zYkn3FiajxuHm69+g9XpZcrvEz6ds72zEF3eCVCdgSioCQX+qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXqioa1MbT2EXxcnCXjaAWFel+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZh MDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5ODE4MTAxMDcvMjQwZjlkMGQtYTE3Zi0z NWUzLThhZGUtZGUzZTc4NTMwNTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTQ2YTA5NmQtMTM0YS00YzUyLTky NDMtZGEzOTgxODEwMTA3LzE0NmEwOTZkLTEzNGEtNGM1Mi05MjQzLWRhMzk4MTgx MDEwNy5jcmwwHwYDVR0jBBgwFoAUjxFRuzwlQGrHT+tlydg8NNKjo5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZhMDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5 ODE4MTAxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELSvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsKH5F76JA7uex+pKaxOg4/asOFJj/4PRQcEn9qdJ0XtEB3eDHuzc/L FPNFZnEEhhyXqGNr1kzVVq9WMlBI5BJf4Vn6AQwmwl964VQjjY4bD0kl5UzuhfFx C2n9VD0VhNUyjpaj9IRs5r6lVPv/EiwZ1tq8bdndkqAbjJRHKU52+YhP8Ks17LIi DpuHhFYZx/6mRIL0ubXvW2TL65rgSAnEx+E1EvqGXKq+V2RMAF7F6iO8yA3aD0Jn FvRlZQslIyLwwHa3+moAHTxDWhzPpNjwAUjDKwJy6R8uXejEs7O4+JeoRbwbbv38 gjSn9jESv/e8fLqGi1/5odzutZi4nV8= -----END CERTIFICATE-----Generated at Sat Apr 5 16:53:41 2025 by rpki-client