$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/b13f65b2-4803-3d7d-9a4e-fa25a5bc99a5.roa File: b13f65b2-4803-3d7d-9a4e-fa25a5bc99a5.roa (raw, json) Hash identifier: 6Y+vLvWE7IKwE0S1ZaWvIzD1iXkCBgkgD41Qp76XrQI= Subject key identifier: EA:B5:21:26:C5:05:AD:74:35:62:6D:A5:38:EF:69:08:86:C7:8F:D2 Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F43285848DA70F78B610AE208377D1F00 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/b13f65b2-4803-3d7d-9a4e-fa25a5bc99a5.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 36007 IP address blocks: 45.61.51.0/24 maxlen: 24 2604:bc0:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f7:8b:61:0a:e2:08:37:7d:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=ffcd587a-1bfb-44d8-9bf9-8188e81a9f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:a4:7a:74:be:2d:8b:97:7e:ee:5e:fb:35: da:12:a0:d9:67:5f:ea:02:95:44:49:3d:7a:af:53: 91:2e:c9:ed:24:43:dc:17:dc:5f:7c:33:ba:92:a3: 3f:67:f9:10:f6:b6:ab:a6:f8:27:d3:2d:e0:7d:d1: ce:f7:ae:a6:ef:01:99:cd:71:3b:d8:91:09:cf:b9: ea:08:01:5b:79:17:7c:e0:09:b8:b9:fd:1d:3f:2f: 36:ef:1a:26:06:c7:b1:a8:0d:56:ee:a8:dc:51:a5: 2c:d7:9b:fe:6c:1d:59:50:e7:d9:f1:53:8f:14:e1: 83:2d:27:7b:51:10:de:02:bf:bc:cf:80:4e:a3:cb: 66:44:07:b6:25:dc:bf:16:e1:3a:7c:63:8a:d3:17: a5:18:d7:64:2c:3a:14:8d:07:30:9f:69:74:d6:7b: 91:98:f9:d0:fc:5b:fd:b4:54:54:97:7e:ac:90:e7: e7:ac:9e:5b:17:d3:96:99:b7:41:af:61:1b:84:10: 9d:c9:7e:1e:6f:43:01:47:a8:5f:04:5a:78:90:c0: cf:f0:aa:e9:87:97:65:3e:21:70:30:80:4a:a1:9e: 00:1c:06:36:12:d0:c0:56:6a:b3:2c:39:d8:2b:74: b2:02:47:3f:8b:f6:63:12:9b:78:13:4d:96:c6:74: 18:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B5:21:26:C5:05:AD:74:35:62:6D:A5:38:EF:69:08:86:C7:8F:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/b13f65b2-4803-3d7d-9a4e-fa25a5bc99a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 45.61.51.0/24 IPv6: 2604:bc0:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:ea:a9:5f:69:eb:eb:83:71:6d:43:51:ec:ea:66:c0:47:12: 3d:a0:31:97:57:fe:1d:e7:2b:c5:3c:84:c3:4d:7c:cb:db:58: 26:5d:64:24:61:13:fc:18:a2:68:9c:83:d2:a9:bc:5e:53:0f: 4a:e0:69:6c:88:44:49:68:68:6a:ed:49:8f:c2:df:e7:12:e9: 21:80:98:6b:3d:ff:77:20:d4:b2:0c:63:13:30:c3:b2:de:7d: 01:b5:63:7e:6c:3a:89:f7:5f:ce:f8:20:cb:ef:a8:a3:b2:46: 84:27:b4:1d:48:21:a0:d8:b5:31:59:a5:b7:cc:b7:04:0c:80: 40:28:a6:00:f2:b2:eb:c7:5d:02:94:a0:85:aa:0a:c8:38:12: 2b:29:58:6c:69:c8:ec:68:6e:bb:84:7d:4a:b7:64:09:4d:72: f4:f4:13:d6:d6:f7:c1:b8:96:68:d8:50:d3:58:4f:3b:19:5b: 03:99:a9:4c:58:aa:ac:8a:c9:51:8a:07:4d:94:e5:f4:ad:2f: 47:4a:f5:73:98:0f:e2:de:a1:f4:27:d6:96:d9:5b:fe:3c:52: 56:31:db:5e:46:1a:e3:8b:1f:37:e9:a2:53:3a:43:1f:79:8a: 42:f5:58:b7:40:c5:a7:e5:72:8f:66:68:56:94:ef:42:40:ab: 39:f3:c8:e2 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEjacPeLYQriCDd9HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZmZjZDU4N2EtMWJmYi00NGQ4LTliZjktODE4OGU4MWE5ZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC+kenS+LYuXfu5e+zXaEqDZZ1/qApVEST16 r1ORLsntJEPcF9xffDO6kqM/Z/kQ9rarpvgn0y3gfdHO966m7wGZzXE72JEJz7nq CAFbeRd84Am4uf0dPy827xomBsexqA1W7qjcUaUs15v+bB1ZUOfZ8VOPFOGDLSd7 URDeAr+8z4BOo8tmRAe2Jdy/FuE6fGOK0xelGNdkLDoUjQcwn2l01nuRmPnQ/Fv9 tFRUl36skOfnrJ5bF9OWmbdBr2EbhBCdyX4eb0MBR6hfBFp4kMDP8Krph5dlPiFw MIBKoZ4AHAY2EtDAVmqzLDnYK3SyAkc/i/ZjEpt4E02WxnQYRQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFOq1ISbFBa10NWJtpTjvaQiGx4/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvYjEzZjY1YjItNDgwMy0z ZDdkLTlhNGUtZmEyNWE1YmM5OWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALT0zMA8E AgACMAkDBwAmBAvAAAYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAqeqpX2nr64NxbUNR7OpmwEcSPaAxl1f+ HecrxTyEw018y9tYJl1kJGET/BiiaJyD0qm8XlMPSuBpbIhESWhoau1Jj8Lf5xLp IYCYaz3/dyDUsgxjEzDDst59AbVjfmw6ifdfzvggy++oo7JGhCe0HUghoNi1MVml t8y3BAyAQCimAPKy68ddApSghaoKyDgSKylYbGnI7Ghuu4R9SrdkCU1y9PQT1tb3 wbiWaNhQ01hPOxlbA5mpTFiqrIrJUYoHTZTl9K0vR0r1c5gP4t6h9CfWltlb/jxS VjHbXkYa44sfN+miUzpDH3mKQvVYt0DFp+Vyj2ZoVpTvQkCrOfPI4g== -----END CERTIFICATE-----Generated at Wed Apr 16 16:46:43 2025 by rpki-client