$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45727758-d36f-3a6f-9fa5-7d673c087a7a.roa File: 45727758-d36f-3a6f-9fa5-7d673c087a7a.roa (raw, json) Hash identifier: 8nWk9FL1iCyzEQL0mMHln8XLkvrZyZdStZxQECd0GBI= Subject key identifier: FB:AE:5F:98:81:D9:4C:EA:C1:60:5B:A9:83:3C:37:49:14:6C:45:EB Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858494733EE7EAA4718C15FCF1780 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45727758-d36f-3a6f-9fa5-7d673c087a7a.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 45102 IP address blocks: 206.54.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:ee:7e:aa:47:18:c1:5f:cf:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=a577ce98-21e4-4670-920a-23a09b5f333e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:50:8c:f8:ed:55:05:fb:a6:1a:db:b0:48:21: 26:c5:f5:45:31:52:3f:c9:1a:99:04:f5:d9:5e:24: d8:8a:7e:8a:2d:bb:3c:d2:7c:4d:31:6a:54:23:48: 23:0d:07:47:15:fe:70:d1:91:94:04:e7:19:eb:5a: 87:28:53:0b:ba:f8:9c:43:89:a2:2d:89:08:93:e1: 17:a5:31:0d:da:23:cf:4c:4e:08:d1:6b:de:12:68: c3:f1:87:0c:f3:0f:66:40:18:c4:2f:7e:76:43:fd: 60:49:6b:c8:f6:e1:e2:e4:5b:d9:83:bb:0c:94:1f: 3f:63:21:71:8a:ce:04:52:2e:f5:5e:35:f2:69:ba: b2:18:e8:b9:6f:91:a5:34:d4:97:bd:74:e3:6a:04: c0:46:9f:aa:4b:0a:39:d3:14:67:81:07:84:0e:8b: f6:6f:e4:81:08:8d:f6:8f:8f:93:55:2e:af:95:67: ee:89:84:4b:8c:c3:68:b7:48:81:20:72:9b:20:4e: 9d:a5:d9:64:df:45:48:2a:dc:12:4b:94:94:6d:a1: 7a:f2:57:0d:f0:14:78:68:ea:5c:cb:e3:8c:a0:1f: 2f:2f:f2:c3:82:01:8d:a1:67:85:df:22:de:d9:55: d5:53:93:39:3b:c7:d8:16:73:3f:44:47:13:ad:67: 43:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AE:5F:98:81:D9:4C:EA:C1:60:5B:A9:83:3C:37:49:14:6C:45:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45727758-d36f-3a6f-9fa5-7d673c087a7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.54.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:42:2e:bd:78:6d:09:4d:0e:7e:f8:d6:df:01:54:2b:ca:16: c6:b5:1d:f9:01:d5:66:a9:cb:e8:d1:a3:8f:60:f0:ba:24:73: 00:9a:20:ab:25:3a:06:57:f9:28:01:09:e8:ff:f3:16:b1:fb: a5:9e:e8:a2:58:4c:4f:b7:dc:4f:8e:1e:f1:96:cc:b0:e8:c4: a8:ce:9a:89:02:ae:42:e7:04:39:6c:6b:24:b1:54:93:2c:98: 78:9b:00:dd:fb:70:c2:7a:e3:50:4d:a8:43:e0:08:bc:20:d5: 76:a9:78:d4:5f:1b:c0:30:aa:67:5c:4f:6e:f9:4c:93:ea:20: 0c:de:04:b5:e5:36:31:c8:d2:4c:b0:76:8f:05:f3:27:92:e0: fd:55:e5:d5:d6:22:83:ad:66:87:53:02:27:f5:08:54:36:cd: 12:58:87:e7:08:cb:e8:3e:36:a0:bd:b1:e2:a4:bf:96:c9:2f: 6d:0f:31:8f:dd:b1:f7:a4:f5:8c:69:fb:7e:ac:6e:8b:89:b1: 15:72:b8:4a:cb:27:8e:56:fe:04:aa:83:0b:78:78:40:17:ea: 00:3d:31:38:6f:56:ff:62:c4:e0:e6:42:38:09:46:0e:25:87: a3:d8:38:92:65:c4:e5:77:9a:6a:96:a1:84:df:90:71:50:1a: c2:0c:ff:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+5+qkcYwV/PF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk YTU3N2NlOTgtMjFlNC00NjcwLTkyMGEtMjNhMDliNWYzMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlCM+O1VBfumGtuwSCEmxfVFMVI/yRqZBPXZ XiTYin6KLbs80nxNMWpUI0gjDQdHFf5w0ZGUBOcZ61qHKFMLuvicQ4miLYkIk+EX pTEN2iPPTE4I0WveEmjD8YcM8w9mQBjEL352Q/1gSWvI9uHi5FvZg7sMlB8/YyFx is4EUi71XjXyabqyGOi5b5GlNNSXvXTjagTARp+qSwo50xRngQeEDov2b+SBCI32 j4+TVS6vlWfuiYRLjMNot0iBIHKbIE6dpdlk30VIKtwSS5SUbaF68lcN8BR4aOpc y+OMoB8vL/LDggGNoWeF3yLe2VXVU5M5O8fYFnM/REcTrWdD6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuuX5iB2UzqwWBbqYM8N0kUbEXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDU3Mjc3NTgtZDM2Zi0z YTZmLTlmYTUtN2Q2NzNjMDg3YTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzjYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9CLr14bQlNDn741t8BVCvKFsa1HfkB1Wapy+jRo49g8LokcwCaIKsl OgZX+SgBCej/8xax+6We6KJYTE+33E+OHvGWzLDoxKjOmokCrkLnBDlsaySxVJMs mHibAN37cMJ641BNqEPgCLwg1XapeNRfG8AwqmdcT275TJPqIAzeBLXlNjHI0kyw do8F8yeS4P1V5dXWIoOtZodTAif1CFQ2zRJYh+cIy+g+NqC9seKkv5bJL20PMY/d sfek9Yxp+36sbouJsRVyuErLJ45W/gSqgwt4eEAX6gA9MThvVv9ixODmQjgJRg4l h6PYOJJlxOV3mmqWoYTfkHFQGsIM/8Y= -----END CERTIFICATE-----Generated at Fri Apr 4 17:29:19 2025 by rpki-client