$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/a5f96039-3bf6-3bd6-9754-bdebf9942236.roa File: a5f96039-3bf6-3bd6-9754-bdebf9942236.roa (raw, json) Hash identifier: r8lQ5oSYzF+uItr8A4rxGjag5aqjFI4QUYcGtQHHTz8= Subject key identifier: 3B:7B:14:D0:78:FD:52:A8:FF:B6:95:EB:93:32:EA:59:C7:29:1A:73 Certificate issuer: /CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9 Certificate serial: 010D0C9F43285849350EAA092EB8E75A9C6AE7C0 Authority key identifier: 07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/a5f96039-3bf6-3bd6-9754-bdebf9942236.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 399135 IP address blocks: 45.42.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:aa:09:2e:b8:e7:5a:9c:6a:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=06fcd164-9e77-4d68-a01a-6f7611575034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f4:b2:70:44:69:94:6a:3b:12:93:2a:00:04: 94:a8:b6:45:0c:02:41:2c:09:d1:81:d2:24:97:91: 11:3f:53:ee:da:4e:ed:33:9e:02:78:18:6e:33:84: e2:f4:72:67:85:e8:82:4e:ec:3b:01:e3:0c:99:e2: 1e:e4:49:d6:4a:bc:24:2d:d8:2c:c2:f9:0e:92:45: 15:4f:f0:7f:bf:b9:a4:93:44:90:d3:a9:3f:ad:9e: 12:45:98:b0:b1:b2:3e:97:e5:db:15:22:c8:37:ee: e7:b1:8b:ff:60:78:86:76:64:85:5c:53:02:bb:71: 6b:2c:42:fc:d9:d5:c7:39:11:18:95:6a:6d:1a:56: 4f:5c:b8:a2:91:8e:14:e3:c5:f7:5e:7e:aa:33:30: 6d:3d:46:0b:8f:9c:74:95:8c:8b:ac:91:88:d5:0e: b8:a9:e0:63:97:a4:54:69:c0:f5:0d:59:08:f7:3b: b4:8b:ac:c6:9d:ef:46:e5:a8:cd:60:e4:21:2b:2a: 1d:a1:1b:18:ae:e4:06:0d:04:11:c4:c5:ce:49:30: 63:0f:14:85:6d:0e:ba:60:c0:4a:cd:5c:ba:5d:dc: fe:f5:74:b3:f6:00:b4:1a:61:23:e8:e2:3e:c1:f9: 94:84:ac:0c:ef:d2:f2:93:1d:11:22:43:71:f7:76: 74:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7B:14:D0:78:FD:52:A8:FF:B6:95:EB:93:32:EA:59:C7:29:1A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/a5f96039-3bf6-3bd6-9754-bdebf9942236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.crl X509v3 Authority Key Identifier: keyid:07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer sbgp-ipAddrBlock: critical IPv4: 45.42.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:0f:c3:2c:2c:15:16:60:f9:54:51:2d:ef:bc:dc:15:a3:e3: 7c:58:b0:a9:87:b1:3d:bc:e6:09:b6:b9:47:9f:7d:49:af:ed: 66:e8:c9:95:ad:ec:85:c4:f7:95:b1:54:55:56:49:25:e2:5c: 9f:60:4c:d2:90:92:be:49:9c:96:0a:56:ed:1f:00:4e:6e:d5: 1a:82:af:b7:5e:f2:a4:a2:b9:b6:63:84:a7:a6:00:6a:cb:6b: fa:b2:f9:2f:e0:56:3a:7d:ad:f4:f4:85:1f:aa:29:cf:c1:66: 32:f3:56:1c:47:ef:ed:84:4a:72:ff:fd:ed:15:5a:48:9f:00: 37:bf:85:a0:a9:66:c1:0f:4d:8c:a9:be:aa:cd:b8:b3:1b:ea: 93:e5:ae:60:de:21:d7:45:74:2e:a8:4d:2b:db:6b:cc:73:59: 1a:d9:83:b8:1a:81:b7:46:7f:b0:73:9a:b5:cf:10:93:18:08: 3b:90:b3:da:61:bc:ef:0f:27:58:24:c4:77:42:76:a0:e1:6a: 8b:67:24:d7:a4:1f:d9:89:e4:07:ea:22:ab:36:42:1f:89:84: c9:d1:db:ca:f8:ed:8d:86:1e:5c:90:5c:ee:ce:6d:be:e6:9c: 03:18:fe:03:48:f7:0f:b0:dc:b7:dd:07:ab:df:af:b8:35:f7: db:06:39:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqoJLrjnWpxq58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWY3ZTc4OWYtZWQ0Yi00Y2ExLWE5M2ItNmY1N2M3NzY0 YWE5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk MDZmY2QxNjQtOWU3Ny00ZDY4LWEwMWEtNmY3NjExNTc1MDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPSycERplGo7EpMqAASUqLZFDAJBLAnRgdIk l5ERP1Pu2k7tM54CeBhuM4Ti9HJnheiCTuw7AeMMmeIe5EnWSrwkLdgswvkOkkUV T/B/v7mkk0SQ06k/rZ4SRZiwsbI+l+XbFSLIN+7nsYv/YHiGdmSFXFMCu3FrLEL8 2dXHOREYlWptGlZPXLiikY4U48X3Xn6qMzBtPUYLj5x0lYyLrJGI1Q64qeBjl6RU acD1DVkI9zu0i6zGne9G5ajNYOQhKyodoRsYruQGDQQRxMXOSTBjDxSFbQ66YMBK zVy6Xdz+9XSz9gC0GmEj6OI+wfmUhKwM79Lykx0RIkNx93Z0cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDt7FNB4/VKo/7aV65My6lnHKRpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81Zjdl Nzg5Zi1lZDRiLTRjYTEtYTkzYi02ZjU3Yzc3NjRhYTkvYTVmOTYwMzktM2JmNi0z YmQ2LTk3NTQtYmRlYmY5OTQyMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWY3ZTc4OWYtZWQ0Yi00Y2ExLWE5 M2ItNmY1N2M3NzY0YWE5LzVmN2U3ODlmLWVkNGItNGNhMS1hOTNiLTZmNTdjNzc2 NGFhOS5jcmwwHwYDVR0jBBgwFoAUB8XJkGTph2XNXJHG0F1hNU9pI4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZjdlNzg5Zi1lZDRiLTRjYTEtYTkzYi02ZjU3 Yzc3NjRhYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSr0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsPwywsFRZg+VRRLe+83BWj43xYsKmHsT285gm2uUeffUmv7WboyZWt 7IXE95WxVFVWSSXiXJ9gTNKQkr5JnJYKVu0fAE5u1RqCr7de8qSiubZjhKemAGrL a/qy+S/gVjp9rfT0hR+qKc/BZjLzVhxH7+2ESnL//e0VWkifADe/haCpZsEPTYyp vqrNuLMb6pPlrmDeIddFdC6oTSvba8xzWRrZg7gagbdGf7BzmrXPEJMYCDuQs9ph vO8PJ1gkxHdCdqDhaotnJNekH9mJ5AfqIqs2Qh+JhMnR28r47Y2GHlyQXO7Obb7m nAMY/gNI9w+w3LfdB6vfr7g199sGObg= -----END CERTIFICATE-----Generated at Sat Apr 19 16:30:58 2025 by rpki-client