$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/1448247e-c449-3147-a2db-a3bca71ec4f6.roa File: 1448247e-c449-3147-a2db-a3bca71ec4f6.roa (raw, json) Hash identifier: fdM6LHpX4WW4LIqWNd/y+o9DJC4NPbgL3YMwrJ8Uoa8= Subject key identifier: 36:F7:03:9F:53:B7:8D:7A:F2:4F:EB:96:E9:08:AA:0D:5B:AB:13:69 Certificate issuer: /CN=09729117-c725-49ca-9a64-f10a055403c3 Certificate serial: 010D0C9F43285848A9963523356D5F40DFF01DF0 Authority key identifier: 22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/1448247e-c449-3147-a2db-a3bca71ec4f6.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 54528 IP address blocks: 45.41.234.0/24 maxlen: 32 2602:80b:b000::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:35:23:35:6d:5f:40:df:f0:1d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09729117-c725-49ca-9a64-f10a055403c3 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=d8b1ec8a-e1d3-4203-a52a-7c54fbda16fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3b:61:8c:35:22:f6:3d:13:8b:1a:c8:63:62: 86:fa:69:12:68:09:7e:57:df:80:ff:11:93:79:9f: 40:bd:3f:8d:7a:dd:7f:13:01:8d:a5:a8:e6:e7:ad: 0d:dc:b6:85:2a:b9:61:f3:69:db:82:4c:68:e4:ad: b2:79:19:17:a6:fb:83:3b:62:85:6a:be:39:83:04: 24:83:9e:8a:7e:70:5b:71:4c:c9:76:c6:ce:c2:4f: 2b:fd:69:46:42:8a:8b:47:33:14:30:f2:5b:5c:78: 90:28:53:46:68:49:3c:54:a2:e0:0f:17:23:52:8d: fb:ee:a1:86:c6:d6:9d:46:bd:ed:a2:e7:07:dc:54: 70:04:8f:e2:58:8a:7f:de:f7:8f:3f:48:6d:da:a9: 1a:84:d8:8e:6b:d2:26:77:09:e5:2e:fa:c2:57:d9: 4f:69:1f:dc:f6:64:1b:2d:b7:b3:ab:ff:19:0b:61: ac:79:81:a0:4b:77:32:94:75:c5:57:a6:0a:c5:7d: 6d:f0:52:74:e0:3a:7b:80:13:cd:1a:42:c2:73:3a: c5:50:99:3c:e5:99:63:0d:5e:1a:26:f5:1e:8a:b8: fe:61:07:61:90:4f:45:3a:4a:8d:17:a0:4d:ed:d4: 06:77:5b:60:23:cc:60:28:03:35:fb:62:85:98:4d: 28:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F7:03:9F:53:B7:8D:7A:F2:4F:EB:96:E9:08:AA:0D:5B:AB:13:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/1448247e-c449-3147-a2db-a3bca71ec4f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.crl X509v3 Authority Key Identifier: keyid:22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer sbgp-ipAddrBlock: critical IPv4: 45.41.234.0/24 IPv6: 2602:80b:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:50:fb:1c:13:9b:88:96:e5:c7:ab:75:93:fd:06:13:f4:0c: 09:a9:6c:04:02:89:7b:7e:00:50:55:f3:8d:90:13:07:22:0b: 16:d9:6f:2a:9f:81:da:cd:8e:82:37:7c:60:8c:8a:93:29:79: e9:ec:c0:0c:41:91:ad:ee:05:d3:ab:1b:99:3a:f9:af:df:be: 25:08:dd:39:13:90:4d:f9:8e:b2:a2:77:c6:61:08:5c:2d:de: 38:7c:17:06:84:be:9c:f9:59:be:3b:be:26:e1:1f:30:f2:67: 36:79:52:07:21:af:fa:3d:2d:8c:1a:b7:19:70:da:06:3f:42: fe:17:00:7b:75:14:3f:49:40:88:ba:ea:29:ad:a5:63:c7:17: 77:9f:b4:e4:bb:c9:71:73:6b:60:ad:4d:11:82:eb:17:34:67: a7:f0:1e:c7:7e:98:d7:a6:af:14:04:04:8e:bd:45:51:bc:a7: eb:4d:a3:14:ae:8d:3c:3a:66:0f:59:72:08:cd:90:8c:3e:ab: ec:66:f2:04:cd:67:9e:2e:20:a3:9b:21:fe:5c:7a:08:e5:53: 16:fe:40:58:f7:3b:a6:5c:56:dd:a0:57:8c:b6:07:96:9c:ea: 83:fd:8d:6c:d1:38:ab:ff:b7:67:ca:b1:7b:5e:d2:70:f5:9f: d0:2e:91:c7 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEipljUjNW1fQN/wHfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk3MjkxMTctYzcyNS00OWNhLTlhNjQtZjEwYTA1NTQw M2MzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDhiMWVjOGEtZTFkMy00MjAzLWE1MmEtN2M1NGZiZGExNmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzthjDUi9j0TixrIY2KG+mkSaAl+V9+A/xGT eZ9AvT+Net1/EwGNpajm560N3LaFKrlh82nbgkxo5K2yeRkXpvuDO2KFar45gwQk g56KfnBbcUzJdsbOwk8r/WlGQoqLRzMUMPJbXHiQKFNGaEk8VKLgDxcjUo377qGG xtadRr3toucH3FRwBI/iWIp/3vePP0ht2qkahNiOa9ImdwnlLvrCV9lPaR/c9mQb Lbezq/8ZC2GseYGgS3cylHXFV6YKxX1t8FJ04Dp7gBPNGkLCczrFUJk85ZljDV4a JvUeirj+YQdhkE9FOkqNF6BN7dQGd1tgI8xgKAM1+2KFmE0oAwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDb3A59Tt4168k/rlukIqg1bqxNpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wOTcy OTExNy1jNzI1LTQ5Y2EtOWE2NC1mMTBhMDU1NDAzYzMvMTQ0ODI0N2UtYzQ0OS0z MTQ3LWEyZGItYTNiY2E3MWVjNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDk3MjkxMTctYzcyNS00OWNhLTlh NjQtZjEwYTA1NTQwM2MzLzA5NzI5MTE3LWM3MjUtNDljYS05YTY0LWYxMGEwNTU0 MDNjMy5jcmwwHwYDVR0jBBgwFoAUIhsZyr33iDxQ2BPzsviveqmKfNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wOTcyOTExNy1jNzI1LTQ5Y2EtOWE2NC1mMTBh MDU1NDAzYzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALSnqMA8E AgACMAkDBwQmAggLsAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQFD7HBObiJblx6t1k/0GE/QMCalsBAKJ e34AUFXzjZATByILFtlvKp+B2s2Ogjd8YIyKkyl56ezADEGRre4F06sbmTr5r9++ JQjdOROQTfmOsqJ3xmEIXC3eOHwXBoS+nPlZvju+JuEfMPJnNnlSByGv+j0tjBq3 GXDaBj9C/hcAe3UUP0lAiLrqKa2lY8cXd5+05LvJcXNrYK1NEYLrFzRnp/Aex36Y 16avFAQEjr1FUbyn602jFK6NPDpmD1lyCM2QjD6r7GbyBM1nni4go5sh/lx6COVT Fv5AWPc7plxW3aBXjLYHlpzqg/2NbNE4q/+3Z8qxe17ScPWf0C6Rxw== -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:13 2025 by rpki-client