$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/c86d0e17-4d06-3b18-bbf9-7dbfa6d22a4d.roa File: c86d0e17-4d06-3b18-bbf9-7dbfa6d22a4d.roa (raw, json) Hash identifier: hkiOsMnwzMr6WX8C+lT2L0FIE3ulNGV8AzbnEPu9tXs= Subject key identifier: C1:79:17:3F:2A:F8:E7:DE:77:D2:7D:9A:14:46:08:F2:13:11:56:83 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F432858492B658FFD773815D484C3FA80 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/c86d0e17-4d06-3b18-bbf9-7dbfa6d22a4d.roa Signing time: Thu 13 Mar 2025 01:58:13 +0000 ROA not before: Thu 13 Mar 2025 01:58:13 +0000 ROA not after: Wed 11 Jun 2025 01:58:13 +0000 asID: 26658 IP address blocks: 45.41.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2b:65:8f:fd:77:38:15:d4:84:c3:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Mar 13 01:58:13 2025 GMT Not After : Jun 11 01:58:13 2025 GMT Subject: CN=76ea45f4-e307-4510-bd4f-f7d0baf4746f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bf:ad:96:47:5d:b2:71:35:9b:db:62:2e:98: 19:5e:7e:fc:11:7a:06:0a:c0:8f:10:d6:b9:ae:23: 7f:fc:b6:53:ac:02:2e:0a:18:18:16:69:c3:e2:2f: 56:41:c1:a5:b2:95:a9:d8:3b:03:1c:c1:1a:92:05: cd:87:fd:58:d7:3b:95:52:74:02:1a:c4:70:b3:db: e4:90:d4:3f:c5:fc:cb:1f:e3:6e:0d:e5:3e:45:8f: 9a:88:51:ff:82:42:fd:dd:90:f0:9d:9e:5e:5a:5a: 8e:bf:e9:1e:3c:15:8f:6f:c5:cf:57:26:cf:87:a8: 3a:47:35:32:cf:b1:c4:2c:4a:9d:ca:bf:5c:3a:92: d5:2b:21:14:d5:e9:69:1f:34:2e:40:b8:c9:18:dd: 08:ba:70:64:ae:21:e9:e5:23:9d:f9:ee:c4:02:d0: cf:5b:2a:bb:fa:6e:fa:fb:a1:64:08:69:82:bd:f3: 08:22:ff:ca:56:86:c8:dc:c7:0e:f9:26:18:b3:bb: 72:19:aa:e6:a8:9d:f2:6e:f7:8a:52:1c:bd:d0:2f: 77:c8:bf:b2:56:b7:5a:1f:b3:7c:52:e3:c5:38:27: 59:1f:25:8d:d6:ad:6d:9f:47:6a:4b:3b:b9:89:fd: 4a:37:58:0b:d2:05:06:79:e7:8c:6d:58:fc:4c:f2: 9d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:79:17:3F:2A:F8:E7:DE:77:D2:7D:9A:14:46:08:F2:13:11:56:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/c86d0e17-4d06-3b18-bbf9-7dbfa6d22a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 45.41.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:54:3a:0d:87:d0:a0:ec:bb:e8:1f:46:82:c8:36:14:3f:e5: 86:94:b4:69:ab:a9:c1:fd:b5:15:68:6a:35:7c:49:d9:9a:57: cc:20:f3:32:7a:ae:10:a3:68:88:ac:1e:cc:f0:80:1e:b0:70: 3d:b6:49:ae:3e:9f:4b:42:db:b6:ff:45:da:f6:8a:14:47:45: ba:67:cb:0b:21:7c:c4:3c:87:b9:44:84:92:7c:e0:ad:4c:b0: ed:dd:ca:21:23:20:2f:6a:0b:cc:95:12:fe:ee:5c:b5:2b:6b: b4:70:3a:ec:ba:68:b9:dc:f8:b8:37:d6:66:36:01:3e:37:4b: 0d:d3:90:be:60:f9:76:96:42:db:7f:97:ab:4e:d1:09:32:5c: e7:96:1d:71:4e:0b:a8:20:f8:6e:d8:fc:32:f7:e2:2a:49:2a: f9:1e:a5:dc:69:ce:ea:d0:f6:02:cf:93:90:98:a9:ab:ef:d3: fa:de:04:39:e3:0c:bf:cc:04:81:76:9c:71:70:16:81:e4:cf: bc:dc:b4:04:d4:1e:9d:92:e7:c7:5b:f3:f4:66:2b:5c:f7:a2: 83:97:00:ac:f4:91:63:8d:d8:c2:bf:dc:04:fa:23:03:b6:9f: 3f:86:b4:53:86:ff:78:f1:90:da:d7:3c:1c:5c:0d:ca:c9:7f: 06:ee:c9:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkrZY/9dzgV1ITD+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDMxMzAxNTgxM1oXDTI1MDYxMTAxNTgxM1owLzEtMCsGA1UEAxMk NzZlYTQ1ZjQtZTMwNy00NTEwLWJkNGYtZjdkMGJhZjQ3NDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL+tlkddsnE1m9tiLpgZXn78EXoGCsCPENa5 riN//LZTrAIuChgYFmnD4i9WQcGlspWp2DsDHMEakgXNh/1Y1zuVUnQCGsRws9vk kNQ/xfzLH+NuDeU+RY+aiFH/gkL93ZDwnZ5eWlqOv+kePBWPb8XPVybPh6g6RzUy z7HELEqdyr9cOpLVKyEU1elpHzQuQLjJGN0IunBkriHp5SOd+e7EAtDPWyq7+m76 +6FkCGmCvfMIIv/KVobI3McO+SYYs7tyGarmqJ3ybveKUhy90C93yL+yVrdaH7N8 UuPFOCdZHyWN1q1tn0dqSzu5if1KN1gL0gUGeeeMbVj8TPKdjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF5Fz8q+Ofed9J9mhRGCPITEVaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvYzg2ZDBlMTctNGQwNi0z YjE4LWJiZjktN2RiZmE2ZDIyYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELSlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpUOg2H0KDsu+gfRoLINhQ/5YaUtGmrqcH9tRVoajV8SdmaV8wg8zJ6 rhCjaIisHszwgB6wcD22Sa4+n0tC27b/Rdr2ihRHRbpnywshfMQ8h7lEhJJ84K1M sO3dyiEjIC9qC8yVEv7uXLUra7RwOuy6aLnc+Lg31mY2AT43Sw3TkL5g+XaWQtt/ l6tO0QkyXOeWHXFOC6gg+G7Y/DL34ipJKvkepdxpzurQ9gLPk5CYqavv0/reBDnj DL/MBIF2nHFwFoHkz7zctATUHp2S58db8/RmK1z3ooOXAKz0kWON2MK/3AT6IwO2 nz+GtFOG/3jxkNrXPBxcDcrJfwbuySU= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:01 2025 by rpki-client