$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/847b8f62-f3fd-325c-ac1f-ce2c053aca22.roa File: 847b8f62-f3fd-325c-ac1f-ce2c053aca22.roa (raw, json) Hash identifier: MbrCnOAejXLMj92UKj64PyOVzLd+I++czXgstZSORzs= Subject key identifier: 40:B1:91:DD:BF:40:F7:3D:05:2E:30:9E:1E:CE:84:B5:EE:78:F6:12 Certificate issuer: /CN=29dfb106-65b1-4e83-81d9-8b97730bd706 Certificate serial: 010D0C9F432858487755D9D1DBE0AB9F7E976380 Authority key identifier: 34:8B:1E:CC:F6:88:70:10:77:D8:70:1F:E9:00:7A:54:AA:6A:84:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/847b8f62-f3fd-325c-ac1f-ce2c053aca22.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 23372 IP address blocks: 45.45.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:d9:d1:db:e0:ab:9f:7e:97:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29dfb106-65b1-4e83-81d9-8b97730bd706 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=fd13e64d-3d69-460d-a041-fd8b0f44d75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e9:23:55:52:b1:dd:42:68:23:fa:b3:10:12: ab:08:67:6e:c8:9b:58:10:86:de:00:76:3b:5c:53: 53:6d:1b:b0:7b:9b:f7:00:10:19:ae:d0:95:b9:06: 1c:e2:53:1e:3c:8a:f8:a4:57:db:a8:fa:90:a4:b1: 2b:56:34:7b:d7:1a:45:4a:f5:fc:3b:59:51:53:cb: ce:11:20:0a:d3:3d:7a:7d:48:0e:de:eb:d7:92:05: 2b:3a:a7:17:47:d5:3c:6f:92:67:53:dc:74:8e:95: 06:c0:af:4a:89:2e:42:5c:00:35:76:3d:81:17:b8: 4d:42:a7:a7:2b:b6:77:a4:02:39:2d:c7:02:c4:67: 47:d3:fc:d5:4f:dc:04:48:84:fd:05:f7:1d:11:30: f3:3c:3d:16:f7:31:df:1f:e2:08:ec:fa:80:06:f3: 0e:24:97:df:3d:09:16:5d:04:78:d5:cf:56:62:85: a1:7f:a7:45:fc:6c:3f:3f:b3:38:ce:af:7b:9d:46: 58:f1:c7:cb:08:fa:f7:9b:8c:6b:83:6c:fa:3f:87: 50:a6:84:cc:6f:61:a1:a8:61:bc:83:23:8d:8f:8b: 0f:ea:f1:e7:c1:fa:99:42:fe:ee:dc:72:24:6f:ea: 85:69:1c:f6:be:cf:61:99:63:e6:0a:55:9e:36:4e: 11:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B1:91:DD:BF:40:F7:3D:05:2E:30:9E:1E:CE:84:B5:EE:78:F6:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/847b8f62-f3fd-325c-ac1f-ce2c053aca22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.crl X509v3 Authority Key Identifier: keyid:34:8B:1E:CC:F6:88:70:10:77:D8:70:1F:E9:00:7A:54:AA:6A:84:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer sbgp-ipAddrBlock: critical IPv4: 45.45.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9e:9a:8e:25:09:69:47:e8:58:d8:72:6c:c0:33:ac:eb:e6: 47:10:cf:5a:70:d1:e5:28:c1:fb:37:4f:6e:9e:b3:8a:b6:54: 77:13:17:b7:db:88:34:ef:62:0b:2b:36:49:03:8d:4e:a5:f0: ac:b0:50:87:f2:34:44:45:9b:c9:2a:69:61:2d:50:01:fb:21: ed:8e:01:b4:7d:80:cb:11:f2:55:2b:80:be:2d:95:20:1f:c4: 02:3f:8c:60:1d:cf:33:de:13:35:81:9a:08:f1:11:b8:a4:2c: 73:25:a6:81:b1:13:bf:44:5c:d1:8d:0e:cf:c8:8d:6c:43:c1: 26:55:b3:df:ce:24:3d:52:a8:33:35:d5:d7:e7:93:bc:a1:2a: d3:c4:df:31:ec:bc:14:a4:0a:b6:60:6b:5f:b0:86:28:6f:4e: d5:85:18:f4:ac:ab:e2:45:f0:ce:0d:0e:e5:eb:90:36:69:af: c3:52:cf:30:2e:9c:32:a0:3b:aa:e2:19:ad:f5:f0:4c:67:85: 4f:4a:5b:f0:20:15:6a:7b:0b:a5:e5:83:25:b1:59:9b:1a:8a: 36:4d:10:11:9c:64:8d:d5:35:46:6f:cd:a3:c8:3c:03:ec:b3: 49:d8:9e:1e:05:ac:d2:69:a7:5b:a3:63:c5:98:4e:c8:24:6f: 5e:fc:8e:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdnR2+Crn36XY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkZmIxMDYtNjViMS00ZTgzLTgxZDktOGI5NzczMGJk NzA2MB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk ZmQxM2U2NGQtM2Q2OS00NjBkLWEwNDEtZmQ4YjBmNDRkNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjukjVVKx3UJoI/qzEBKrCGduyJtYEIbeAHY7 XFNTbRuwe5v3ABAZrtCVuQYc4lMePIr4pFfbqPqQpLErVjR71xpFSvX8O1lRU8vO ESAK0z16fUgO3uvXkgUrOqcXR9U8b5JnU9x0jpUGwK9KiS5CXAA1dj2BF7hNQqen K7Z3pAI5LccCxGdH0/zVT9wESIT9BfcdETDzPD0W9zHfH+II7PqABvMOJJffPQkW XQR41c9WYoWhf6dF/Gw/P7M4zq97nUZY8cfLCPr3m4xrg2z6P4dQpoTMb2GhqGG8 gyONj4sP6vHnwfqZQv7u3HIkb+qFaRz2vs9hmWPmClWeNk4RRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECxkd2/QPc9BS4wnh7OhLXuePYSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOWRm YjEwNi02NWIxLTRlODMtODFkOS04Yjk3NzMwYmQ3MDYvODQ3YjhmNjItZjNmZC0z MjVjLWFjMWYtY2UyYzA1M2FjYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjlkZmIxMDYtNjViMS00ZTgzLTgx ZDktOGI5NzczMGJkNzA2LzI5ZGZiMTA2LTY1YjEtNGU4My04MWQ5LThiOTc3MzBi ZDcwNi5jcmwwHwYDVR0jBBgwFoAUNIsezPaIcBB32HAf6QB6VKpqhO4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOWRmYjEwNi02NWIxLTRlODMtODFkOS04Yjk3 NzMwYmQ3MDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOemo4lCWlH6FjYcmzAM6zr5kcQz1pw0eUowfs3T26es4q2VHcTF7fb iDTvYgsrNkkDjU6l8KywUIfyNERFm8kqaWEtUAH7Ie2OAbR9gMsR8lUrgL4tlSAf xAI/jGAdzzPeEzWBmgjxEbikLHMlpoGxE79EXNGNDs/IjWxDwSZVs9/OJD1SqDM1 1dfnk7yhKtPE3zHsvBSkCrZga1+whihvTtWFGPSsq+JF8M4NDuXrkDZpr8NSzzAu nDKgO6riGa318ExnhU9KW/AgFWp7C6XlgyWxWZsaijZNEBGcZI3VNUZvzaPIPAPs s0nYnh4FrNJpp1ujY8WYTsgkb178jkk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:19 2025 by rpki-client