$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/0c4ff13f-3242-3568-97dc-9a027e3d5659.roa File: 0c4ff13f-3242-3568-97dc-9a027e3d5659.roa (raw, json) Hash identifier: ggO/SJGoiirWAAHzRcyh8FpzXofSJVaPvM5xH+IvAY0= Subject key identifier: 93:0C:CA:94:0A:5C:4B:0F:E9:0A:94:13:24:F4:8E:12:3E:F4:D7:6F Certificate issuer: /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Certificate serial: 010D0C9F4328584986AB602F76BEB55E6DE88080 Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/0c4ff13f-3242-3568-97dc-9a027e3d5659.roa Signing time: Mon 14 Apr 2025 18:37:27 +0000 ROA not before: Mon 14 Apr 2025 18:37:27 +0000 ROA not after: Sun 13 Jul 2025 18:37:27 +0000 asID: 395201 IP address blocks: 45.139.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:ab:60:2f:76:be:b5:5e:6d:e8:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Validity Not Before: Apr 14 18:37:27 2025 GMT Not After : Jul 13 18:37:27 2025 GMT Subject: CN=ad59e5c9-d083-4d59-9dfa-1f27e3551c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:47:dd:cf:08:05:ba:4f:07:60:d8:97:90: d9:e1:90:b1:7d:88:5c:41:9b:83:7c:59:56:65:28: 86:a1:68:d3:cc:2a:0d:de:59:44:cc:02:72:1c:c7: 4a:73:be:96:e4:89:f0:ce:55:54:91:e2:15:b5:27: 60:07:44:39:6f:89:b2:51:56:64:8a:83:47:2c:c7: 37:d5:f6:da:c6:22:94:3e:6b:b7:c1:f2:36:ff:99: 58:99:1d:12:e7:8f:40:84:bd:31:5b:b9:f5:5f:0a: 30:e0:d4:e2:b2:1b:52:cd:44:5e:5f:ef:35:6b:33: cb:18:11:84:a3:86:5d:c0:0f:f2:b7:19:0a:7d:5a: 1f:df:aa:7e:d5:71:bd:59:22:46:7a:a4:66:14:84: 07:b8:79:30:6f:10:af:a6:0a:ed:cb:f4:4e:07:dc: be:8c:35:e5:be:3a:28:97:d0:ec:cc:ca:fa:1e:3f: 00:91:63:8f:fa:7f:76:05:b5:32:86:20:59:9f:d1: 3f:0e:9c:46:37:7e:b4:b1:80:aa:71:c6:89:0d:fc: 8d:bd:10:4a:c2:dc:5f:ae:fe:a4:e4:79:2b:e0:84: 6c:be:6d:03:0e:6f:da:42:27:84:f7:30:39:80:b4: a9:2f:ed:71:41:3d:ba:d8:c7:53:f1:58:1c:4d:49: 9d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0C:CA:94:0A:5C:4B:0F:E9:0A:94:13:24:F4:8E:12:3E:F4:D7:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/0c4ff13f-3242-3568-97dc-9a027e3d5659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl X509v3 Authority Key Identifier: keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer sbgp-ipAddrBlock: critical IPv4: 45.139.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:50:64:ab:04:02:d7:74:2d:2d:fd:e9:c5:3a:5e:c0:ea:c8: 54:96:50:cd:46:df:3c:d0:a8:3a:32:be:8e:ad:c7:45:55:ac: f2:35:2e:d8:1d:27:a6:00:79:3e:92:6f:20:6b:da:4a:51:93: ad:a7:c8:e9:df:04:95:e3:07:71:d7:7d:9b:5b:ba:f7:eb:53: 47:0d:c8:03:28:fe:7f:19:f1:f0:6d:c3:4a:fa:10:0f:98:dd: f4:74:65:a7:47:5c:61:1d:05:85:b1:5f:e4:5f:f0:3c:a5:97: 33:0f:1a:a4:ab:02:7c:b6:fa:10:43:08:34:ec:09:46:95:4b: ba:70:a4:d3:1b:29:00:10:19:7b:e9:d7:f2:28:fe:94:58:3f: f8:b9:f2:f7:32:fa:a4:79:d5:cb:68:51:af:23:74:b5:85:c3: db:18:94:56:43:4b:ce:a0:29:65:31:4d:87:67:82:b2:eb:5d: a3:fe:e2:5f:4f:f2:d8:a1:32:df:e7:e4:96:a7:72:3c:da:53: c3:70:d3:4d:d3:89:e3:ea:93:9e:cc:a4:c0:e7:1b:d4:ae:2e: 5a:3f:09:cd:5c:8b:58:ca:3a:08:51:47:27:32:4d:48:9b:4a: f3:77:14:67:5c:39:65:c1:3d:34:12:c9:0e:32:3d:aa:43:1f: 90:c3:0e:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGq2Avdr61Xm3ogIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkwY2ViMWUtMzhmMC00NjkwLThlMTItZmRlZjBkYzBl ZGRiMB4XDTI1MDQxNDE4MzcyN1oXDTI1MDcxMzE4MzcyN1owLzEtMCsGA1UEAxMk YWQ1OWU1YzktZDA4My00ZDU5LTlkZmEtMWYyN2UzNTUxYzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp1H3c8IBbpPB2DYl5DZ4ZCxfYhcQZuDfFlW ZSiGoWjTzCoN3llEzAJyHMdKc76W5InwzlVUkeIVtSdgB0Q5b4myUVZkioNHLMc3 1fbaxiKUPmu3wfI2/5lYmR0S549AhL0xW7n1Xwow4NTishtSzUReX+81azPLGBGE o4ZdwA/ytxkKfVof36p+1XG9WSJGeqRmFIQHuHkwbxCvpgrty/ROB9y+jDXlvjoo l9DszMr6Hj8AkWOP+n92BbUyhiBZn9E/DpxGN360sYCqccaJDfyNvRBKwtxfrv6k 5Hkr4IRsvm0DDm/aQieE9zA5gLSpL+1xQT262MdT8VgcTUmdswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMMypQKXEsP6QqUEyT0jhI+9NdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBj ZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVmMGRjMGVkZGIvMGM0ZmYxM2YtMzI0Mi0z NTY4LTk3ZGMtOWEwMjdlM2Q1NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwY2ViMWUtMzhmMC00NjkwLThl MTItZmRlZjBkYzBlZGRiLzM5MGNlYjFlLTM4ZjAtNDY5MC04ZTEyLWZkZWYwZGMw ZWRkYi5jcmwwHwYDVR0jBBgwFoAU7IhVYel9//xGKMwSEvEQkth0VUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBjZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVm MGRjMGVkZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9QZKsEAtd0LS396cU6XsDqyFSWUM1G3zzQqDoyvo6tx0VVrPI1Ltgd J6YAeT6SbyBr2kpRk62nyOnfBJXjB3HXfZtbuvfrU0cNyAMo/n8Z8fBtw0r6EA+Y 3fR0ZadHXGEdBYWxX+Rf8DyllzMPGqSrAny2+hBDCDTsCUaVS7pwpNMbKQAQGXvp 1/Io/pRYP/i58vcy+qR51ctoUa8jdLWFw9sYlFZDS86gKWUxTYdngrLrXaP+4l9P 8tihMt/n5JancjzaU8Nw003TiePqk57MpMDnG9SuLlo/Cc1ci1jKOghRRycyTUib SvN3FGdcOWXBPTQSyQ4yPapDH5DDDmo= -----END CERTIFICATE-----Generated at Mon Apr 21 20:32:16 2025 by rpki-client