$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9a249e6e-47df-3766-a58c-3846de9693e3.roa File: 9a249e6e-47df-3766-a58c-3846de9693e3.roa (raw, json) Hash identifier: pDbTFD/5D7VViNPw6vOR8Scyxs2PgDLuFIPLzcExu5A= Subject key identifier: 12:87:6B:B2:7F:00:C0:8A:EE:8C:04:CB:3D:EF:55:FB:7B:D8:09:66 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584957F3FC6ABCC8670479BDEC00 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9a249e6e-47df-3766-a58c-3846de9693e3.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 12212 IP address blocks: 45.59.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:fc:6a:bc:c8:67:04:79:bd:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=92b31553-9fb5-4899-9212-47f7136f7af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:e5:60:f7:6a:c9:d3:97:b1:03:82:c5:98: 60:18:82:f5:68:6c:55:8d:e5:47:01:a0:83:96:c4: d6:ca:c7:37:70:57:bd:c3:f6:27:aa:23:ac:e0:d2: 26:1c:df:ca:8d:2c:8d:97:a6:61:51:15:5d:45:eb: f4:31:7f:ec:65:69:4d:af:29:f7:92:f4:0f:de:51: 11:4c:b9:44:6e:3e:e5:2c:42:36:d9:0c:ec:8f:88: f3:15:53:dd:97:c6:e6:21:b6:ed:6c:02:2b:c5:28: ba:0a:76:1f:d6:32:59:a0:d5:b1:93:18:a8:49:3c: b4:9c:cf:2d:9b:77:49:8f:8a:e6:33:90:04:99:5a: b4:67:58:b9:b0:69:4e:eb:c7:40:ae:38:8e:6f:88: bb:33:56:28:a3:c8:3b:e9:66:4a:63:a4:8d:99:b7: 07:b6:43:2f:22:bb:32:d0:48:0e:9a:61:8b:de:a1: ee:68:b7:c2:28:3e:7b:63:e7:f6:1d:25:e2:ae:aa: 70:37:05:92:b4:76:04:55:ac:76:57:cf:1d:00:96: 73:f1:7d:90:18:ec:e9:14:65:d6:17:7f:f1:2a:bb: de:ee:b4:41:e6:e9:6a:27:31:45:b6:e0:af:18:2e: 35:11:01:ff:2a:2d:44:9d:9a:57:c1:9c:ff:e3:fd: 47:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:87:6B:B2:7F:00:C0:8A:EE:8C:04:CB:3D:EF:55:FB:7B:D8:09:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9a249e6e-47df-3766-a58c-3846de9693e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e0:a3:7d:95:f2:db:3e:87:90:19:9a:08:4a:db:e3:21:c4: c4:e6:64:ca:3c:32:77:76:ac:e6:76:fd:98:c8:3f:f6:f9:b5: a8:38:2f:95:33:bf:a9:56:e4:b8:88:10:92:03:7b:0d:85:4d: e5:1c:3a:0a:8a:b1:de:9a:d4:6e:15:9c:66:ba:c0:b5:ae:81: 8a:1d:a0:90:30:b2:05:79:97:ab:01:a5:9d:cd:72:21:39:ef: cb:50:36:5b:e5:ee:1d:0d:cd:a0:26:f3:3c:81:54:27:54:4d: a8:15:56:fe:82:aa:91:21:8d:cd:ca:3d:54:ae:77:d9:a6:0b: 51:f1:27:7e:c9:b7:b6:64:ff:a0:d9:9e:01:fa:43:48:f3:65: e8:41:49:e7:bf:59:8f:14:ec:6a:7c:82:d6:90:43:f7:95:b2: 57:49:7a:2b:72:03:f8:73:b9:18:78:3b:05:ce:f9:a2:e9:c1: 52:eb:32:84:88:10:01:d1:ec:c0:fa:54:6d:3b:85:89:61:94: d8:3b:f8:00:4b:79:96:dc:b5:29:35:de:30:d9:ec:ba:ef:17: d5:fd:16:09:11:94:3b:b5:7f:c5:de:a9:1f:79:c9:d8:85:d9: d5:94:0c:3c:23:d4:d0:ce:02:8f:d8:6c:9f:08:08:44:68:0f: 12:4a:64:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/xqvMhnBHm97AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk OTJiMzE1NTMtOWZiNS00ODk5LTkyMTItNDdmNzEzNmY3YWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOvlYPdqydOXsQOCxZhgGIL1aGxVjeVHAaCD lsTWysc3cFe9w/YnqiOs4NImHN/KjSyNl6ZhURVdRev0MX/sZWlNryn3kvQP3lER TLlEbj7lLEI22Qzsj4jzFVPdl8bmIbbtbAIrxSi6CnYf1jJZoNWxkxioSTy0nM8t m3dJj4rmM5AEmVq0Z1i5sGlO68dArjiOb4i7M1Yoo8g76WZKY6SNmbcHtkMvIrsy 0EgOmmGL3qHuaLfCKD57Y+f2HSXirqpwNwWStHYEVax2V88dAJZz8X2QGOzpFGXW F3/xKrve7rRB5ulqJzFFtuCvGC41EQH/Ki1EnZpXwZz/4/1HjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKHa7J/AMCK7owEyz3vVft72AlmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvOWEyNDllNmUtNDdkZi0z NzY2LWE1OGMtMzg0NmRlOTY5M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADgo32V8ts+h5AZmghK2+MhxMTmZMo8Mnd2rOZ2/ZjIP/b5tag4L5Uz v6lW5LiIEJIDew2FTeUcOgqKsd6a1G4VnGa6wLWugYodoJAwsgV5l6sBpZ3NciE5 78tQNlvl7h0NzaAm8zyBVCdUTagVVv6CqpEhjc3KPVSud9mmC1HxJ37Jt7Zk/6DZ ngH6Q0jzZehBSee/WY8U7Gp8gtaQQ/eVsldJeityA/hzuRh4OwXO+aLpwVLrMoSI EAHR7MD6VG07hYlhlNg7+ABLeZbctSk13jDZ7LrvF9X9FgkRlDu1f8XeqR95ydiF 2dWUDDwj1NDOAo/YbJ8ICERoDxJKZJY= -----END CERTIFICATE-----Generated at Mon Apr 7 13:10:28 2025 by rpki-client