$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3e684e54-b84c-32a4-80be-7c47c75a99b6.roa File: 3e684e54-b84c-32a4-80be-7c47c75a99b6.roa (raw, json) Hash identifier: wpICDOesnzQoFm1/C42zSbdOXpPqatwdnMJAs3MeeF4= Subject key identifier: 6C:B9:8E:14:CB:4F:16:2C:F6:8E:1E:76:F1:F5:43:25:4A:43:36:D3 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F43285848854B45D381FF9E6DBCDD2E10 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3e684e54-b84c-32a4-80be-7c47c75a99b6.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 5769 IP address blocks: 45.73.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:45:d3:81:ff:9e:6d:bc:dd:2e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=d2b204af-fc29-45fc-b310-ced83dac8ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:22:9c:db:56:c3:8b:72:2b:ad:27:34:24:b1: ad:47:b8:10:a0:2d:fc:d3:18:1e:53:e3:56:41:44: 43:4b:b2:6a:4e:87:0d:f1:71:28:59:b9:40:47:16: d4:8f:5f:03:05:4e:c3:d0:b0:1c:dc:98:ff:99:34: 37:76:9b:ef:94:8e:95:b0:d3:c7:19:ee:f8:cc:f9: 0d:ef:5f:f0:e0:5e:7c:12:bb:3b:ca:d2:f6:7c:8b: 82:c9:ca:98:7d:de:5f:28:8b:b3:d4:65:50:d8:c5: 0d:6d:5d:1b:af:fa:39:56:8d:bf:7a:94:4b:2c:7c: 70:47:1f:53:c6:57:4d:8b:7c:1e:4a:eb:c7:fd:3c: 8c:52:76:8f:ae:8f:3d:5c:d5:66:3a:38:9a:2c:de: d2:16:a5:8e:16:31:a7:3b:0b:a2:d5:68:c1:58:65: 9d:57:48:38:30:05:8f:35:7b:b5:b7:aa:cb:e1:02: a4:de:3b:1c:88:db:24:d6:78:d9:86:91:37:9a:d6: 79:a9:27:75:b9:d8:03:b6:31:44:f7:9b:c6:45:e7: d4:34:0e:a2:aa:5a:65:b9:58:45:10:09:10:d6:4a: 5d:8b:92:0f:81:d7:9d:50:70:c7:2a:a9:08:79:5a: 64:da:3c:51:44:df:cd:f8:d3:23:2e:3b:56:35:61: 39:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B9:8E:14:CB:4F:16:2C:F6:8E:1E:76:F1:F5:43:25:4A:43:36:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3e684e54-b84c-32a4-80be-7c47c75a99b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 45.73.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:52:20:d1:4d:c2:2d:2b:65:2b:2a:91:93:6c:3d:22:2a:b3: 45:24:c3:9e:b8:86:e4:15:02:fa:94:d1:9c:47:85:40:30:57: e6:5e:ab:ee:d4:c0:58:47:cc:29:d0:00:ff:e0:d0:33:0d:b6: 4a:46:11:8f:f8:5c:3b:b9:42:4b:07:19:ab:9f:fc:b4:ef:d1: 54:c6:97:b7:f0:01:3c:6a:1d:8d:e4:52:4e:af:3c:db:1e:24: dd:ee:30:63:5c:96:c3:c0:7e:f2:5c:e8:77:4b:cc:82:3d:97: 64:05:74:40:7c:e7:cb:b6:94:ca:ad:70:68:76:0a:a1:4f:85: 6f:f3:bc:3c:e7:08:50:33:73:6c:ff:7e:12:46:91:f3:2c:60: 12:02:ba:a7:15:f1:9b:bd:fa:11:b7:90:4a:65:dd:12:aa:e9: e9:79:c7:1c:62:1a:7a:81:fc:af:59:8f:56:fa:9f:4b:c4:78: 13:bd:19:ac:29:99:18:a3:dc:00:8b:03:3f:95:66:a4:ee:de: 87:bd:7a:2f:61:d5:40:6b:0b:42:e8:ec:1f:36:1c:d4:5b:07: 68:e2:ef:67:bc:82:fd:6a:2b:8f:f7:0b:29:5a:a6:a1:d5:16: c0:4e:bb:cf:dd:67:85:07:f1:4a:4e:87:04:8f:fe:27:77:f4: e2:c7:7e:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0XTgf+ebbzdLhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk ZDJiMjA0YWYtZmMyOS00NWZjLWIzMTAtY2VkODNkYWM4YmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSKc21bDi3IrrSc0JLGtR7gQoC380xgeU+NW QURDS7JqTocN8XEoWblARxbUj18DBU7D0LAc3Jj/mTQ3dpvvlI6VsNPHGe74zPkN 71/w4F58Ers7ytL2fIuCycqYfd5fKIuz1GVQ2MUNbV0br/o5Vo2/epRLLHxwRx9T xldNi3weSuvH/TyMUnaPro89XNVmOjiaLN7SFqWOFjGnOwui1WjBWGWdV0g4MAWP NXu1t6rL4QKk3jsciNsk1njZhpE3mtZ5qSd1udgDtjFE95vGRefUNA6iqlpluVhF EAkQ1kpdi5IPgdedUHDHKqkIeVpk2jxRRN/N+NMjLjtWNWE5WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGy5jhTLTxYs9o4edvH1QyVKQzbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvM2U2ODRlNTQtYjg0Yy0z MmE0LTgwYmUtN2M0N2M3NWE5OWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHLUkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpSINFNwi0rZSsqkZNsPSIqs0Ukw564huQVAvqU0ZxHhUAwV+Zeq+7U wFhHzCnQAP/g0DMNtkpGEY/4XDu5QksHGauf/LTv0VTGl7fwATxqHY3kUk6vPNse JN3uMGNclsPAfvJc6HdLzII9l2QFdEB858u2lMqtcGh2CqFPhW/zvDznCFAzc2z/ fhJGkfMsYBICuqcV8Zu9+hG3kEpl3RKq6el5xxxiGnqB/K9Zj1b6n0vEeBO9Gawp mRij3ACLAz+VZqTu3oe9ei9h1UBrC0Lo7B82HNRbB2ji72e8gv1qK4/3CylapqHV FsBOu8/dZ4UH8UpOhwSP/id39OLHfvA= -----END CERTIFICATE-----Generated at Fri Mar 14 08:36:00 2025 by rpki-client