$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5f4d50f2-be50-305a-8739-6a8bf1882be6.roa File: 5f4d50f2-be50-305a-8739-6a8bf1882be6.roa (raw, json) Hash identifier: 2DMoOe1O1dcKT9iBI1s9F7RCyP+js7d32kX9hKnPzfY= Subject key identifier: 1E:4A:D3:1F:3F:C4:F7:59:F1:82:E7:83:09:ED:4A:84:E0:0A:A3:8B Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Certificate serial: 010D0C9F432858487CEB2B48B33F457A4E94E880 Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5f4d50f2-be50-305a-8739-6a8bf1882be6.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 45.223.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:2b:48:b3:3f:45:7a:4e:94:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=2df4bab5-0944-4b78-adaa-71fef36befb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:5b:1c:5b:be:37:44:17:f6:3f:c0:f8:69: ec:fa:9a:13:9a:66:06:62:47:2d:e8:86:81:41:fa: 11:1e:98:a5:a4:98:b4:8d:8a:29:ba:36:12:06:8c: 9a:37:0d:31:e7:de:83:61:33:10:81:93:ae:6c:57: ca:0e:57:05:80:e7:1e:13:a9:10:f5:e5:f6:ba:88: 0b:4d:25:63:77:ce:4a:8a:58:e4:da:d5:2a:3a:aa: 61:cd:bc:2b:d6:1b:d1:a6:84:35:fa:51:29:ae:87: 82:9e:f9:f0:f6:c7:a2:63:63:cc:35:fa:66:c1:18: 01:d7:ca:e2:b1:21:79:d2:fe:bf:25:a3:c6:e1:21: 50:db:12:1a:f0:3d:32:3d:ce:1a:9c:eb:cf:d6:1f: 68:c1:f3:71:92:39:7b:6d:2a:2d:2e:6e:5e:59:9d: 83:65:60:a5:3d:1c:72:2a:59:50:0a:1e:78:e9:8a: 43:5b:e7:3c:6f:41:b5:6e:8d:23:8f:cf:3b:36:61: 88:db:a0:43:fa:bd:3f:8f:18:50:b1:c0:2f:a6:b8: 50:84:88:72:1e:6d:62:38:29:15:eb:88:9b:1f:7b: 7e:d1:cb:8a:1c:26:0b:87:6c:e4:28:23:a0:a0:4d: b6:49:d6:48:a1:45:05:56:19:b3:be:64:f4:61:0c: 65:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4A:D3:1F:3F:C4:F7:59:F1:82:E7:83:09:ED:4A:84:E0:0A:A3:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5f4d50f2-be50-305a-8739-6a8bf1882be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl X509v3 Authority Key Identifier: keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer sbgp-ipAddrBlock: critical IPv4: 45.223.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:34:b5:15:2f:d7:43:a5:0c:40:4e:79:9b:31:8b:81:77:ab: a2:42:fe:26:bd:52:c0:24:9d:d5:81:b0:53:dd:c5:bf:16:79: 72:ce:60:05:69:06:5b:80:06:eb:5a:fe:bd:b7:2b:6f:f2:11: 6c:32:41:c7:b9:23:46:c4:1a:bf:7d:31:5f:2f:d2:05:03:df: 63:94:ec:d7:cd:7b:a1:08:77:bf:4a:73:ae:4d:da:06:b8:74: a1:b2:9b:71:2e:5a:89:da:2f:a6:38:80:9b:d4:ec:46:a8:ce: cc:c6:ec:4a:56:5d:93:ce:84:f1:74:74:7d:0a:f1:4a:cc:69: 04:1a:0d:16:fa:2e:68:34:e3:86:e2:c7:7a:27:95:2a:47:20: e8:dc:f3:c6:38:71:44:1e:b8:94:54:d6:c7:89:c7:ad:a5:0b: 9d:89:3c:39:3f:d2:b4:62:d3:cb:e6:8c:5a:ac:e5:20:91:8a: 6a:74:d2:78:fb:da:50:81:4c:78:47:75:23:6b:c6:2c:e2:84: fa:c6:e1:98:77:d7:7d:6a:f2:48:dc:d1:95:89:e8:e1:73:7a: 11:c2:8d:68:c0:0c:86:ee:da:5c:77:0b:a5:6c:5c:76:61:3a: 07:07:74:79:73:9c:58:dc:b3:24:32:b7:b9:9d:fa:e1:e7:25: 47:c0:b6:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86ytIsz9Fek6U6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj Yzc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk MmRmNGJhYjUtMDk0NC00Yjc4LWFkYWEtNzFmZWYzNmJlZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDpbHFu+N0QX9j/A+Gns+poTmmYGYkct6IaB QfoRHpilpJi0jYopujYSBoyaNw0x596DYTMQgZOubFfKDlcFgOceE6kQ9eX2uogL TSVjd85Kiljk2tUqOqphzbwr1hvRpoQ1+lEproeCnvnw9seiY2PMNfpmwRgB18ri sSF50v6/JaPG4SFQ2xIa8D0yPc4anOvP1h9owfNxkjl7bSotLm5eWZ2DZWClPRxy KllQCh546YpDW+c8b0G1bo0jj887NmGI26BD+r0/jxhQscAvprhQhIhyHm1iOCkV 64ibH3t+0cuKHCYLh2zkKCOgoE22SdZIoUUFVhmzvmT0YQxlMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5K0x8/xPdZ8YLngwntSoTgCqOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvNWY0ZDUwZjItYmU1MC0z MDVhLTg3MzktNmE4YmYxODgyYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0 ZDZiY2NjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALd8MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEc0tRUv10OlDEBOeZsxi4F3q6JC/ia9UsAkndWBsFPdxb8WeXLOYAVp BluAButa/r23K2/yEWwyQce5I0bEGr99MV8v0gUD32OU7NfNe6EId79Kc65N2ga4 dKGym3EuWonaL6Y4gJvU7EaozszG7EpWXZPOhPF0dH0K8UrMaQQaDRb6Lmg044bi x3onlSpHIOjc88Y4cUQeuJRU1seJx62lC52JPDk/0rRi08vmjFqs5SCRimp00nj7 2lCBTHhHdSNrxizihPrG4Zh3131q8kjc0ZWJ6OFzehHCjWjADIbu2lx3C6VsXHZh OgcHdHlznFjcsyQyt7md+uHnJUfAtrY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:08 2025 by rpki-client