$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa File: b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa (raw, json) Hash identifier: iGeKdv7Uf9mIh3k+oBq0i2nsmPRn9lT9+CGEqdXtzkY= Subject key identifier: 0A:03:A3:8B:3C:E7:6F:37:77:43:0A:28:04:2D:FA:43:F8:54:F1:55 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F432858496A19A3F262649E14F19E3660 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 210574 IP address blocks: 45.59.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:a3:f2:62:64:9e:14:f1:9e:36:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=1b727606-aafb-482e-b594-49189cfb4a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b7:1b:fb:52:f3:6e:8f:10:31:75:95:2c:50: 0f:78:e9:81:16:31:61:d1:b7:f3:cd:53:36:23:03: 60:e4:7a:aa:07:e5:23:8e:b4:9f:bb:cf:12:db:a3: 3c:e8:bd:7f:a4:76:01:99:f0:47:6a:2d:37:a6:17: da:ec:f3:f4:36:0d:89:de:69:74:bc:92:d8:ae:10: 2f:ce:a9:51:e7:10:ff:54:34:80:12:6d:a4:11:db: d9:1f:8a:2b:16:ce:f2:e3:78:5d:1c:b6:d4:ca:fa: c5:9b:72:d7:ae:16:c6:ad:37:27:9f:ac:83:4c:03: 93:73:90:25:4b:9c:fa:2e:67:b2:54:09:5a:70:22: 83:89:fe:3b:b2:49:c4:23:17:69:03:51:ca:59:23: 12:01:25:18:e0:04:84:66:0a:db:9f:02:28:cf:72: 83:d3:21:10:e1:34:6e:fd:59:28:1b:de:3f:17:4f: 17:5d:72:dc:f6:be:f9:1c:fc:d6:56:7b:3c:2e:46: 4f:e9:bc:8e:19:69:3d:f7:b9:28:cb:0a:f8:f7:a2: 54:4c:24:0a:9e:43:1f:38:6d:4a:88:7d:01:2f:ac: 1b:ce:94:1e:17:88:1b:64:96:8e:b0:1d:53:27:2f: 99:a2:c5:cb:7d:6d:2d:10:f2:9e:27:85:7e:17:fa: 4b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:03:A3:8B:3C:E7:6F:37:77:43:0A:28:04:2D:FA:43:F8:54:F1:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ea:9c:36:84:8e:10:aa:ab:7a:67:72:7e:77:18:c5:32:e6: af:1c:0a:e2:49:1f:b9:8e:ab:fc:d4:f5:d6:58:10:12:1f:bf: cd:9f:43:0e:d2:25:de:02:89:42:d8:dc:3e:b5:ff:1c:e3:6a: ce:55:b2:8d:3e:d6:4f:02:37:cc:1a:fc:a9:78:29:cc:a9:ed: 62:d2:3e:75:25:3f:85:35:c3:ba:4b:1b:a5:51:d0:90:e5:c0: 5d:fa:c5:5c:b4:0f:07:15:f2:c3:e1:9e:17:5e:bb:b9:01:9d: be:19:6d:38:26:f7:cf:c3:d2:5d:93:83:d9:7e:49:f6:16:2d: ea:88:bd:42:4b:8b:58:0b:c4:51:72:79:4a:74:ec:ea:e7:0b: a6:c6:d3:4b:86:c1:80:e3:91:52:5d:7f:6c:f0:f8:be:5e:81: 28:ff:40:3f:31:13:7a:5b:30:37:b0:89:5e:26:a6:bd:f9:0e: 7d:fd:98:62:1c:26:d9:8d:7e:48:e5:c9:99:e9:62:f2:9a:eb: 38:8e:b7:b3:bc:03:17:07:71:48:e5:6d:2b:22:39:7b:a3:72: 2d:e1:16:11:a2:21:f9:14:42:dc:12:19:dd:cf:a9:61:e3:22: 0e:df:53:22:b9:b2:fc:94:ed:8c:34:d2:23:8b:49:79:a0:99: 28:c6:63:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGaPyYmSeFPGeNmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk MWI3Mjc2MDYtYWFmYi00ODJlLWI1OTQtNDkxODljZmI0YTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rcb+1Lzbo8QMXWVLFAPeOmBFjFh0bfzzVM2 IwNg5HqqB+UjjrSfu88S26M86L1/pHYBmfBHai03phfa7PP0Ng2J3ml0vJLYrhAv zqlR5xD/VDSAEm2kEdvZH4orFs7y43hdHLbUyvrFm3LXrhbGrTcnn6yDTAOTc5Al S5z6LmeyVAlacCKDif47sknEIxdpA1HKWSMSASUY4ASEZgrbnwIoz3KD0yEQ4TRu /VkoG94/F08XXXLc9r75HPzWVns8LkZP6byOGWk997koywr496JUTCQKnkMfOG1K iH0BL6wbzpQeF4gbZJaOsB1TJy+ZosXLfW0tEPKeJ4V+F/pLLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoDo4s85283d0MKKAQt+kP4VPFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvYjUwN2EyZjQtOTdiNi0z MTg5LTg3MGItN2M2M2ZkM2EyM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHqnDaEjhCqq3pncn53GMUy5q8cCuJJH7mOq/zU9dZYEBIfv82fQw7S Jd4CiULY3D61/xzjas5Vso0+1k8CN8wa/Kl4Kcyp7WLSPnUlP4U1w7pLG6VR0JDl wF36xVy0DwcV8sPhnhdeu7kBnb4ZbTgm98/D0l2Tg9l+SfYWLeqIvUJLi1gLxFFy eUp07OrnC6bG00uGwYDjkVJdf2zw+L5egSj/QD8xE3pbMDewiV4mpr35Dn39mGIc JtmNfkjlyZnpYvKa6ziOt7O8AxcHcUjlbSsiOXujci3hFhGiIfkUQtwSGd3PqWHj Ig7fUyK5svyU7Yw00iOLSXmgmSjGY+s= -----END CERTIFICATE-----Generated at Sat Apr 5 23:24:36 2025 by rpki-client