$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/79134b34-0f8f-36f6-8fe1-c7f70751b7c7.roa File: 79134b34-0f8f-36f6-8fe1-c7f70751b7c7.roa (raw, json) Hash identifier: 3Kt5PZq51VbzhRiyAeyasYwLCaWEAbnPlkRTbQO2O5c= Subject key identifier: 11:E0:02:6B:29:70:7A:43:B0:FD:88:DC:26:89:9E:32:93:DE:A4:D2 Certificate issuer: /CN=5742dde3-84a3-4488-a01c-525734c4d81b Certificate serial: 010D0C9F43285848D4DB95B0256ED52422054180 Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/79134b34-0f8f-36f6-8fe1-c7f70751b7c7.roa Signing time: Mon 10 Feb 2025 02:00:38 +0000 ROA not before: Mon 10 Feb 2025 02:00:38 +0000 ROA not after: Sun 11 May 2025 01:00:38 +0000 asID: 397384 IP address blocks: 45.41.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d4:db:95:b0:25:6e:d5:24:22:05:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b Validity Not Before: Feb 10 02:00:38 2025 GMT Not After : May 11 01:00:38 2025 GMT Subject: CN=4bfc47fa-d1ff-479b-b4f6-9dc2f2102db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b2:eb:74:88:4b:a0:95:8c:56:19:06:50:a9: 6d:60:8d:63:45:f3:a1:9f:d9:70:2d:eb:08:57:e5: 05:ef:16:c9:74:c7:3f:1e:14:34:1d:f4:7c:7d:2c: 24:c5:4f:ad:cc:88:9b:4d:34:21:2a:b1:73:18:3a: 6c:58:34:ad:c8:65:df:c7:eb:a7:71:40:d0:d5:98: af:c3:1c:2f:8f:f2:fb:2f:e3:97:a4:bc:9e:62:37: 0c:3e:e1:ed:62:30:f2:ad:32:e2:16:b2:95:4c:8e: b0:3e:ea:06:79:f0:ad:aa:ab:32:a6:a2:98:7d:54: 22:c9:19:bc:f5:b9:d8:c5:c7:1b:59:8c:20:b2:37: d0:fd:97:48:6e:b9:64:90:3b:e0:d6:1b:9d:9a:af: 20:fe:68:66:4b:23:f5:ea:4e:26:0a:cb:c7:5c:ce: 69:39:ff:50:2a:43:72:5c:c0:c7:57:37:fd:fb:b2: 9a:36:3d:7a:30:ed:c9:6d:e9:db:09:a1:c3:3c:87: 17:22:de:68:40:0e:ad:25:c6:ee:40:64:c7:24:e8: d0:ed:aa:c6:99:4e:90:8f:f4:f5:bf:74:6e:9b:b1: d0:5a:dd:8e:af:d5:ae:1b:1a:15:21:5f:0d:3b:58: 41:bd:63:b8:2b:23:3e:b4:50:9e:29:e2:e8:28:19: 58:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E0:02:6B:29:70:7A:43:B0:FD:88:DC:26:89:9E:32:93:DE:A4:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/79134b34-0f8f-36f6-8fe1-c7f70751b7c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl X509v3 Authority Key Identifier: keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer sbgp-ipAddrBlock: critical IPv4: 45.41.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:06:db:4f:c3:48:49:c2:79:67:be:0e:31:5d:cb:58:b5:59: 40:5c:b0:f1:23:c8:73:62:25:37:bd:41:98:18:57:e6:2e:37: a5:62:5b:60:e6:7a:88:c4:e7:50:15:b3:d4:a1:12:4c:bb:35: 6a:44:5a:26:38:38:d6:84:76:3d:d3:ba:c6:c5:05:cf:bd:c5: 61:42:94:a9:0d:d0:a3:7b:13:c1:4c:6f:56:ed:7a:09:06:3a: 3d:b7:0c:3b:24:f6:44:70:91:78:ac:b6:dd:d6:eb:53:a1:5f: 6e:16:a0:02:83:84:8d:52:e0:6e:11:bd:12:d6:b3:1f:e4:db: e2:11:bb:ce:92:ac:c5:e0:5d:ee:6e:1e:d6:6b:7a:01:6f:63: 82:64:fe:ed:e5:54:33:ca:cc:a9:b1:17:98:07:c4:df:5e:32: c0:0c:5e:93:e5:b9:77:83:aa:82:2f:36:28:e5:36:9f:9f:68: a0:6b:7d:46:ba:04:56:ec:c1:33:1f:07:f7:e8:07:56:af:ee: 2d:16:6a:c0:18:79:7f:d7:43:7b:6c:80:bc:61:56:93:17:c2: 53:e8:a7:16:03:9f:bb:59:9e:45:0c:ef:4b:67:c1:23:68:c8: b4:de:cc:00:49:6a:5c:22:a0:44:c3:b1:6b:8a:38:76:f9:46: 26:4f:1b:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjU25WwJW7VJCIFQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc0MmRkZTMtODRhMy00NDg4LWEwMWMtNTI1NzM0YzRk ODFiMB4XDTI1MDIxMDAyMDAzOFoXDTI1MDUxMTAxMDAzOFowLzEtMCsGA1UEAxMk NGJmYzQ3ZmEtZDFmZi00NzliLWI0ZjYtOWRjMmYyMTAyZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7LrdIhLoJWMVhkGUKltYI1jRfOhn9lwLesI V+UF7xbJdMc/HhQ0HfR8fSwkxU+tzIibTTQhKrFzGDpsWDStyGXfx+uncUDQ1Ziv wxwvj/L7L+OXpLyeYjcMPuHtYjDyrTLiFrKVTI6wPuoGefCtqqsypqKYfVQiyRm8 9bnYxccbWYwgsjfQ/ZdIbrlkkDvg1hudmq8g/mhmSyP16k4mCsvHXM5pOf9QKkNy XMDHVzf9+7KaNj16MO3JbenbCaHDPIcXIt5oQA6tJcbuQGTHJOjQ7arGmU6Qj/T1 v3Rum7HQWt2Or9WuGxoVIV8NO1hBvWO4KyM+tFCeKeLoKBlYvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHgAmspcHpDsP2I3CaJnjKT3qTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NzQy ZGRlMy04NGEzLTQ0ODgtYTAxYy01MjU3MzRjNGQ4MWIvNzkxMzRiMzQtMGY4Zi0z NmY2LThmZTEtYzdmNzA3NTFiN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTc0MmRkZTMtODRhMy00NDg4LWEw MWMtNTI1NzM0YzRkODFiLzU3NDJkZGUzLTg0YTMtNDQ4OC1hMDFjLTUyNTczNGM0 ZDgxYi5jcmwwHwYDVR0jBBgwFoAUgPSvREXaX/pZzpyoT5aC/zlDxi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NzQyZGRlMy04NGEzLTQ0ODgtYTAxYy01MjU3 MzRjNGQ4MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSkjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYG20/DSEnCeWe+DjFdy1i1WUBcsPEjyHNiJTe9QZgYV+YuN6ViW2Dm eojE51AVs9ShEky7NWpEWiY4ONaEdj3TusbFBc+9xWFClKkN0KN7E8FMb1btegkG Oj23DDsk9kRwkXistt3W61OhX24WoAKDhI1S4G4RvRLWsx/k2+IRu86SrMXgXe5u HtZregFvY4Jk/u3lVDPKzKmxF5gHxN9eMsAMXpPluXeDqoIvNijlNp+faKBrfUa6 BFbswTMfB/foB1av7i0WasAYeX/XQ3tsgLxhVpMXwlPopxYDn7tZnkUM70tnwSNo yLTezABJalwioETDsWuKOHb5RiZPG6U= -----END CERTIFICATE-----Generated at Sat Apr 5 07:48:59 2025 by rpki-client