$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/639cc8ac-4937-3f41-868f-e73eeac09322.roa File: 639cc8ac-4937-3f41-868f-e73eeac09322.roa (raw, json) Hash identifier: 63ujKO/Dik7Pwh2nX0xZ1yq+jSW9SbwWYwWRFFwmAek= Subject key identifier: EA:06:08:8E:3C:D2:BE:F8:ED:73:61:5B:43:0A:C0:FA:95:B7:F4:42 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F43285849088157CF02B8B11350F32E80 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/639cc8ac-4937-3f41-868f-e73eeac09322.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 398395 IP address blocks: 45.59.115.0/24 maxlen: 24 45.59.121.0/24 maxlen: 24 66.23.194.0/23 maxlen: 24 216.126.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:57:cf:02:b8:b1:13:50:f3:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=a5786fa5-cfef-47e8-bc48-1e35eeade6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8e:10:e6:34:bd:eb:18:04:58:25:c6:c2:44: b0:d4:80:47:1d:0a:c7:6e:70:e5:f1:e1:1a:b1:7e: 17:b3:48:53:d2:dc:c3:4b:a7:d0:73:08:c6:45:8b: 60:19:38:f2:b3:7a:50:c3:67:9b:0d:09:93:dd:8a: fe:15:9d:7b:8c:4c:30:9b:ef:f8:2e:8c:6a:fa:f3: 06:76:da:80:a7:d8:77:db:06:54:fc:8c:9e:42:d1: 81:3e:f5:a3:cf:52:ee:9b:6b:dc:d6:40:b3:03:5a: bb:61:bd:43:c5:b6:8d:5c:de:12:4b:7f:82:9a:1f: b5:68:f8:a0:da:61:dc:26:9a:72:ba:6c:b4:86:60: dc:dc:7a:b8:7d:1e:b9:9c:b6:14:78:a4:37:44:79: 55:8a:5c:b6:67:36:32:38:4e:0d:98:00:9a:00:7b: c5:0a:2d:2e:e3:a3:59:da:3d:46:f3:a5:e6:92:e9: 2a:e4:80:e9:05:36:5a:36:82:3e:b9:02:a2:f9:90: 34:80:87:5e:fc:f7:5b:93:95:7e:29:c2:49:cc:2e: 49:42:02:49:41:f2:67:b4:4b:8c:d8:ea:c7:13:3e: 07:33:83:e7:d4:08:d5:23:ba:7a:8f:c9:69:63:a5: cc:45:d6:50:13:e8:36:43:82:ec:5e:50:f6:e4:49: 2a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:06:08:8E:3C:D2:BE:F8:ED:73:61:5B:43:0A:C0:FA:95:B7:F4:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/639cc8ac-4937-3f41-868f-e73eeac09322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 45.59.115.0/24 45.59.121.0/24 66.23.194.0/23 216.126.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:85:1a:16:5d:ad:41:32:7c:90:4a:7e:4c:d2:05:8b:c9:f7: 1c:98:90:fe:6d:f7:81:9c:9e:7f:43:ae:10:ee:19:4b:3b:24: a7:18:5b:d0:94:f0:ed:ba:e3:80:14:98:26:fa:8b:a7:75:bd: 6e:8a:70:ed:47:64:a7:ac:a8:7f:d1:5c:ba:92:b5:34:ef:f3: 58:b4:14:1a:4c:ff:3d:15:72:b8:03:eb:f7:5b:99:68:9b:ae: 27:a1:fa:17:50:dc:e6:39:96:66:80:2b:4e:90:f7:d8:bb:59: 89:8a:a6:39:34:3b:59:1a:37:62:5a:c0:1a:9d:2f:ce:6b:50: e1:53:a1:fd:e6:d9:4b:af:2b:31:b8:f7:f5:13:4d:cf:36:5c: f6:51:90:29:9b:09:ec:72:88:c4:95:be:58:e4:2f:79:c8:1c: 35:30:7a:5a:c5:02:ab:6b:7c:b7:83:8f:ef:69:b1:6b:17:e6: 32:ef:1e:7c:ee:0f:84:38:de:68:3c:d5:9a:01:38:5b:16:a1: b5:5b:27:a7:f9:48:c0:0a:65:df:14:3c:32:14:a3:1d:66:29: 18:2b:20:06:66:7b:8d:ff:85:a8:de:bb:ec:30:0e:1a:6a:e2: de:f9:25:36:96:f8:8d:08:39:55:04:79:61:f2:32:33:6f:6a: 24:4c:dd:2a -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEkIgVfPArixE1DzLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YTU3ODZmYTUtY2ZlZi00N2U4LWJjNDgtMWUzNWVlYWRlNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY4Q5jS96xgEWCXGwkSw1IBHHQrHbnDl8eEa sX4Xs0hT0tzDS6fQcwjGRYtgGTjys3pQw2ebDQmT3Yr+FZ17jEwwm+/4Loxq+vMG dtqAp9h32wZU/IyeQtGBPvWjz1Lum2vc1kCzA1q7Yb1DxbaNXN4SS3+Cmh+1aPig 2mHcJppyumy0hmDc3Hq4fR65nLYUeKQ3RHlVily2ZzYyOE4NmACaAHvFCi0u46NZ 2j1G86Xmkukq5IDpBTZaNoI+uQKi+ZA0gIde/Pdbk5V+KcJJzC5JQgJJQfJntEuM 2OrHEz4HM4Pn1AjVI7p6j8lpY6XMRdZQE+g2Q4LsXlD25EkqWwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFOoGCI480r747XNhW0MKwPqVt/RCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvNjM5Y2M4YWMtNDkzNy0z ZjQxLTg2OGYtZTczZWVhYzA5MzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALTtzAwQA LTt5AwQBQhfCAwQA2H7iMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKiFGhZdrUEyfJBKfkzSBYvJ9xyYkP5t 94Gcnn9DrhDuGUs7JKcYW9CU8O2644AUmCb6i6d1vW6KcO1HZKesqH/RXLqStTTv 81i0FBpM/z0VcrgD6/dbmWibrieh+hdQ3OY5lmaAK06Q99i7WYmKpjk0O1kaN2Ja wBqdL85rUOFTof3m2UuvKzG49/UTTc82XPZRkCmbCexyiMSVvljkL3nIHDUwelrF AqtrfLeDj+9psWsX5jLvHnzuD4Q43mg81ZoBOFsWobVbJ6f5SMAKZd8UPDIUox1m KRgrIAZme43/hajeu+wwDhpq4t75JTaW+I0IOVUEeWHyMjNvaiRM3So= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:34 2025 by rpki-client