$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa File: 38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa (raw, json) Hash identifier: Pa9kmpUWMktuOa/YylVPBheSdDK5zb7R9Df2Id6HWM0= Subject key identifier: C3:18:F6:7C:CB:05:28:5D:E1:C7:72:6A:22:C5:03:6C:12:04:59:05 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F43285848C2B64C1E8839E4913267C374 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 1100 IP address blocks: 45.59.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:4c:1e:88:39:e4:91:32:67:c3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=7a9f5a98-da0d-4922-972d-7757c1efdc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:74:9d:24:84:78:fd:55:82:13:7e:de:af:8b: 62:31:cc:f8:79:5b:c3:fe:c1:8a:6e:95:e8:b8:2d: d7:a1:92:4d:c1:61:b7:dd:9c:74:90:f0:96:98:38: 10:41:80:51:49:cb:88:09:98:ae:07:89:3f:3a:69: 4a:f3:8b:61:aa:80:70:6f:c1:aa:58:a8:06:b4:5e: 6b:d2:bf:2f:3c:c2:69:45:61:d2:ef:91:33:3a:8a: d5:20:ae:62:4f:98:ec:9e:07:2f:3f:4f:51:b3:5f: aa:f6:89:1c:ea:d8:79:86:f6:ca:07:6d:8a:37:a9: 38:b8:25:79:0f:1f:f9:ae:37:0b:37:01:a5:88:af: 42:fb:4e:a1:a9:42:ee:3f:9d:12:b9:99:1d:d5:e7: 4f:4e:ea:cb:db:19:69:70:27:41:c5:ad:e9:a7:de: d2:99:10:95:7d:ca:67:51:b0:ea:e4:e5:6b:19:e9: 5c:0a:0a:0d:b5:27:71:d9:35:61:4f:c2:b8:db:ed: d4:91:59:9c:f4:a1:e6:54:f3:c8:40:96:4c:03:bf: 9b:12:f0:75:75:41:56:bc:70:40:43:00:00:84:b9: 22:d7:44:78:84:57:1d:ab:b8:7c:46:13:a8:aa:17: c0:17:86:fa:14:64:6b:4e:cf:77:9f:23:d7:31:00: 86:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:18:F6:7C:CB:05:28:5D:E1:C7:72:6A:22:C5:03:6C:12:04:59:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a4:3e:da:eb:94:7a:7a:63:87:7f:c8:3e:6a:0f:c6:a5:d1: 1e:f8:c4:0e:b8:91:b6:d4:4c:04:16:2e:98:ea:8e:8d:fe:2b: 50:fb:4c:e7:11:91:2c:de:55:07:de:f7:f6:77:64:c1:7b:d2: f5:52:9b:02:da:46:32:c4:5f:c6:35:5f:16:36:c1:57:08:c8: 4c:6e:da:44:ba:ad:05:ae:51:36:66:31:5d:5f:d2:ee:9b:b5: ee:6d:58:2e:5b:70:46:e6:9e:c5:ce:61:c1:20:2c:a0:b1:aa: 91:1b:5d:fd:40:ed:f4:b8:94:7f:00:e8:13:bd:f5:4c:c2:fa: 59:f8:0f:7b:a3:9a:46:40:21:bb:ff:a6:73:b7:3b:d0:c0:e3: 30:ef:74:18:c4:af:82:3f:ca:d5:f0:af:54:9e:b7:7f:a9:c5: 2a:00:1a:eb:8e:fb:99:17:98:2b:49:1a:6e:20:f2:7a:c5:74: ff:40:27:e0:0a:8e:00:dc:6f:87:f7:0b:49:51:dc:47:6c:a9: f9:d4:c0:a8:5e:77:0d:64:90:fb:85:1a:08:13:71:09:1e:1a: f2:ed:76:5f:e5:ad:f8:00:03:18:01:bb:3d:72:02:8d:65:5b: ef:d8:51:3c:f6:a7:f9:5a:23:1e:f6:24:d4:35:28:45:9e:d7: 68:be:9b:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtkweiDnkkTJnw3QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk N2E5ZjVhOTgtZGEwZC00OTIyLTk3MmQtNzc1N2MxZWZkYzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3SdJIR4/VWCE37er4tiMcz4eVvD/sGKbpXo uC3XoZJNwWG33Zx0kPCWmDgQQYBRScuICZiuB4k/OmlK84thqoBwb8GqWKgGtF5r 0r8vPMJpRWHS75EzOorVIK5iT5jsngcvP09Rs1+q9okc6th5hvbKB22KN6k4uCV5 Dx/5rjcLNwGliK9C+06hqULuP50SuZkd1edPTurL2xlpcCdBxa3pp97SmRCVfcpn UbDq5OVrGelcCgoNtSdx2TVhT8K42+3UkVmc9KHmVPPIQJZMA7+bEvB1dUFWvHBA QwAAhLki10R4hFcdq7h8RhOoqhfAF4b6FGRrTs93nyPXMQCGwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMY9nzLBShd4cdyaiLFA2wSBFkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMzhlMGNkNjItNWI5Yy0z NWY4LWFhNDctZTE0YWFkOTUwZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFakPtrrlHp6Y4d/yD5qD8al0R74xA64kbbUTAQWLpjqjo3+K1D7TOcR kSzeVQfe9/Z3ZMF70vVSmwLaRjLEX8Y1XxY2wVcIyExu2kS6rQWuUTZmMV1f0u6b te5tWC5bcEbmnsXOYcEgLKCxqpEbXf1A7fS4lH8A6BO99UzC+ln4D3ujmkZAIbv/ pnO3O9DA4zDvdBjEr4I/ytXwr1Set3+pxSoAGuuO+5kXmCtJGm4g8nrFdP9AJ+AK jgDcb4f3C0lR3EdsqfnUwKhedw1kkPuFGggTcQkeGvLtdl/lrfgAAxgBuz1yAo1l W+/YUTz2p/laIx72JNQ1KEWe12i+m0U= -----END CERTIFICATE-----Generated at Mon Apr 7 13:10:30 2025 by rpki-client