$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/836c6d6c-b014-3b85-bedd-f5a836704db0.roa File: 836c6d6c-b014-3b85-bedd-f5a836704db0.roa (raw, json) Hash identifier: xSDxtEMc4OlvRh2pAy//vQ+k6atJXORxO3OfjeEZbo4= Subject key identifier: D1:35:4F:5B:EF:78:50:CA:55:50:64:45:4F:B2:7A:8B:E6:8C:71:C2 Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39 Certificate serial: 010D0C9F43285849244E86E53EDD2CCA2DFB3320 Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/836c6d6c-b014-3b85-bedd-f5a836704db0.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 6233 IP address blocks: 45.62.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:86:e5:3e:dd:2c:ca:2d:fb:33:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=e3ae8879-c441-47e2-b9fd-1d59c15ead9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:75:09:9e:f6:71:00:5a:c9:76:3c:46:4c:79: 34:66:e5:36:4f:d7:7f:4c:f4:58:cd:e1:7d:ea:0d: 44:92:3d:1f:47:3f:0c:fb:0d:9d:b2:22:08:aa:2b: 4f:17:66:ad:e7:4b:c9:ed:8e:c2:64:89:80:c0:f8: cc:db:02:68:6e:8b:93:68:75:29:40:61:22:a8:2b: e3:c7:47:a8:c3:f0:95:4e:d8:08:d7:a2:e0:1d:c4: 47:8e:f7:fe:10:fe:03:0b:35:89:a2:86:1d:61:d3: 28:0c:7e:bb:ad:15:e4:1a:f3:fe:60:d1:4a:26:eb: b6:db:01:01:a0:d7:84:04:d0:43:08:39:2c:4a:28: ff:af:dd:12:e5:ee:9b:a1:6a:e5:71:7f:ac:d7:c1: 99:0e:fe:dc:a7:6a:36:88:cc:e7:72:80:ac:f6:54: 04:c2:3e:05:14:6d:83:3f:5f:56:4b:ec:86:af:af: 5a:21:bf:33:c6:c2:66:f3:e5:41:d5:ba:99:c3:c9: 50:5d:7d:f1:a3:d5:b8:cc:1c:62:d4:26:70:25:1a: 96:75:44:f6:5c:fe:53:c0:a8:72:64:c3:17:99:7d: 2a:6e:64:3e:50:91:70:09:32:08:96:da:6f:89:fd: 89:29:10:55:1a:6b:11:4b:12:45:4b:f4:54:c2:d6: b4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:35:4F:5B:EF:78:50:CA:55:50:64:45:4F:B2:7A:8B:E6:8C:71:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/836c6d6c-b014-3b85-bedd-f5a836704db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl X509v3 Authority Key Identifier: keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer sbgp-ipAddrBlock: critical IPv4: 45.62.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:0b:82:55:8c:e2:c5:55:9d:46:98:53:dc:0e:4a:b4:2a:07: 40:c6:5c:b3:a1:8e:79:4e:b8:96:68:84:73:3d:f6:b5:16:2a: a3:79:ff:d6:ac:81:ac:78:53:27:67:30:36:67:c8:cd:d7:53: 06:87:ae:4c:32:82:e1:b5:76:68:af:68:09:ae:ba:de:4a:de: 70:b0:18:01:06:b0:0b:a5:71:61:08:dc:9b:be:6a:89:0f:2c: a6:37:7d:15:e4:37:6a:5f:ae:53:e7:08:f7:47:7e:50:e0:28: ae:a6:29:fb:00:3c:e0:37:46:f4:6c:26:0e:53:3a:58:61:fd: 51:8a:2d:05:c9:e1:76:28:64:f4:c4:01:c2:c0:50:77:a4:b3: 12:a4:9d:29:b5:cb:00:8f:c4:50:11:89:34:a7:fd:07:94:d7: 20:4c:f8:c8:79:01:bf:44:38:74:25:d9:6d:bd:73:85:34:1d: 09:f4:cd:6f:e1:a2:f0:33:8c:ba:12:39:b7:b9:68:62:46:8a: 8e:87:08:6a:01:0a:4e:b4:60:ca:65:f7:f0:d7:ae:37:d5:3d: 34:6d:7e:12:3d:c5:cd:ee:ca:20:cd:02:a6:9a:91:5d:bb:42: 72:6c:aa:3a:dd:17:d3:09:59:51:e0:a3:ac:14:67:09:46:60: 4e:d9:50:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkToblPt0syi37MyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1 ZTM5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZTNhZTg4NzktYzQ0MS00N2UyLWI5ZmQtMWQ1OWMxNWVhZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HUJnvZxAFrJdjxGTHk0ZuU2T9d/TPRYzeF9 6g1Ekj0fRz8M+w2dsiIIqitPF2at50vJ7Y7CZImAwPjM2wJobouTaHUpQGEiqCvj x0eow/CVTtgI16LgHcRHjvf+EP4DCzWJooYdYdMoDH67rRXkGvP+YNFKJuu22wEB oNeEBNBDCDksSij/r90S5e6boWrlcX+s18GZDv7cp2o2iMzncoCs9lQEwj4FFG2D P19WS+yGr69aIb8zxsJm8+VB1bqZw8lQXX3xo9W4zBxi1CZwJRqWdUT2XP5TwKhy ZMMXmX0qbmQ+UJFwCTIIltpvif2JKRBVGmsRSxJFS/RUwta0nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE1T1vveFDKVVBkRU+yeovmjHHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIx ZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvODM2YzZkNmMtYjAxNC0z Yjg1LWJlZGQtZjVhODM2NzA0ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTUyMWY1ZWUtODlkMi00MDg4LWFi YjktZjY5MjkxNjU1ZTM5L2E1MjFmNWVlLTg5ZDItNDA4OC1hYmI5LWY2OTI5MTY1 NWUzOS5jcmwwHwYDVR0jBBgwFoAUFO4NvHhYb0lqT3wuMEpOEan+m3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjky OTE2NTVlMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLT5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYLglWM4sVVnUaYU9wOSrQqB0DGXLOhjnlOuJZohHM99rUWKqN5/9as gax4UydnMDZnyM3XUwaHrkwyguG1dmivaAmuut5K3nCwGAEGsAulcWEI3Ju+aokP LKY3fRXkN2pfrlPnCPdHflDgKK6mKfsAPOA3RvRsJg5TOlhh/VGKLQXJ4XYoZPTE AcLAUHeksxKknSm1ywCPxFARiTSn/QeU1yBM+Mh5Ab9EOHQl2W29c4U0HQn0zW/h ovAzjLoSObe5aGJGio6HCGoBCk60YMpl9/DXrjfVPTRtfhI9xc3uyiDNAqaakV27 QnJsqjrdF9MJWVHgo6wUZwlGYE7ZUPM= -----END CERTIFICATE-----Generated at Sun Apr 6 17:46:32 2025 by rpki-client