$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1ef0062-29e1-3f93-b05d-77b703336eeb.roa File: a1ef0062-29e1-3f93-b05d-77b703336eeb.roa (raw, json) Hash identifier: 78FE8bYfj1e21dox8q5fLDKFr2Qh2HxHD5KWJmoh8lc= Subject key identifier: 1C:6C:38:00:9E:E1:1F:3D:B5:83:19:AD:B9:5D:55:55:AC:31:BB:35 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858489A3B42B8161FA82C0666F140 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1ef0062-29e1-3f93-b05d-77b703336eeb.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 7018 IP address blocks: 45.58.216.0/22 maxlen: 22 45.58.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:42:b8:16:1f:a8:2c:06:66:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=a26cfb56-feb3-47bd-8752-99ae3623f1a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:99:5b:10:ea:5d:3e:b0:ac:4a:f4:b9:af:00: a5:1f:95:6b:6e:96:a6:85:af:d0:f8:bf:cb:6a:2a: 4e:55:f1:e1:c6:91:39:62:8b:bf:f1:02:fc:a9:dc: 04:35:10:a3:fa:9e:f3:c5:0d:b0:f4:56:9c:ae:aa: b0:5e:33:1f:74:6c:05:17:5b:52:93:11:29:ee:62: ba:7a:c2:dd:b4:94:4d:0e:19:74:11:03:f1:17:4d: 90:ab:c3:12:33:59:f6:6e:ca:21:79:3b:eb:b1:1e: 98:83:42:4a:93:6f:e9:53:9d:32:be:ac:b4:6c:3b: b0:53:b0:e2:76:21:5a:bf:07:ee:43:33:61:b1:98: 72:0b:fb:99:ef:67:ad:b2:17:b1:bf:76:68:fe:7b: 84:1a:a1:a9:71:76:1c:b1:ec:04:be:5b:3e:8e:11: 51:89:02:b5:6c:6a:1a:04:02:30:09:a0:5d:c3:ce: 0d:96:d5:55:30:7a:0a:56:ad:60:5a:ca:1c:a5:02: f5:16:fb:43:ef:a6:15:16:c9:a8:47:06:82:be:94: c8:8d:7f:cc:7f:0d:07:e6:41:2b:03:21:d4:e6:0f: 89:b5:fa:29:d0:07:0d:34:20:86:c2:b3:82:27:0e: 6f:e3:26:b8:fe:ca:3f:e6:9f:0f:c8:fb:1e:a5:2b: 84:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6C:38:00:9E:E1:1F:3D:B5:83:19:AD:B9:5D:55:55:AC:31:BB:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1ef0062-29e1-3f93-b05d-77b703336eeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ba:8e:dd:9c:1c:1c:02:a7:d6:04:d7:54:3f:8b:3b:c3:f7: 9f:51:33:f0:c7:d4:2d:d1:41:ba:70:0d:73:11:4e:ee:03:ef: 79:e3:f4:52:2d:c7:f2:37:6d:9a:85:62:d6:4d:5b:50:58:6b: 68:2b:f1:80:e1:be:d1:44:19:8d:d1:34:05:fa:3e:04:72:f0: 96:ed:21:f1:74:c9:f0:6c:80:d4:d8:31:f8:bc:02:e8:bc:27: eb:6e:d0:45:86:d4:e4:1e:7f:e3:9e:98:84:00:b8:21:19:43: 6a:72:95:d4:70:2b:5f:38:c0:87:2e:34:ce:8b:f8:c0:a8:7f: 8b:5f:00:af:7d:7a:d2:fd:92:81:f6:d1:9e:4d:05:92:90:ea: af:2c:ac:2f:b6:55:7c:10:b8:65:44:15:fe:7a:87:9e:e1:56: 61:4d:27:fb:4a:02:48:9c:95:47:7a:21:29:ca:b6:0f:3c:10: f1:af:51:ab:ea:c2:63:6e:38:78:e9:6b:e6:7c:1b:92:d3:ae: 83:41:69:3b:12:2a:42:d5:f3:6b:84:ed:f1:37:35:50:38:88: 34:4b:bc:0b:ab:af:82:65:a5:b2:5c:6a:84:c6:a7:d1:6c:18: a0:93:d7:3a:b7:c7:73:91:6b:87:c5:97:81:31:4c:27:d3:68: 71:8f:5a:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0K4Fh+oLAZm8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk YTI2Y2ZiNTYtZmViMy00N2JkLTg3NTItOTlhZTM2MjNmMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkplbEOpdPrCsSvS5rwClH5Vrbpamha/Q+L/L aipOVfHhxpE5You/8QL8qdwENRCj+p7zxQ2w9FacrqqwXjMfdGwFF1tSkxEp7mK6 esLdtJRNDhl0EQPxF02Qq8MSM1n2bsoheTvrsR6Yg0JKk2/pU50yvqy0bDuwU7Di diFavwfuQzNhsZhyC/uZ72etshexv3Zo/nuEGqGpcXYcsewEvls+jhFRiQK1bGoa BAIwCaBdw84NltVVMHoKVq1gWsocpQL1FvtD76YVFsmoRwaCvpTIjX/Mfw0H5kEr AyHU5g+Jtfop0AcNNCCGwrOCJw5v4ya4/so/5p8PyPsepSuEMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxsOACe4R89tYMZrbldVVWsMbs1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTFlZjAwNjItMjllMS0z ZjkzLWIwNWQtNzdiNzAzMzM2ZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLTrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi6jt2cHBwCp9YE11Q/izvD959RM/DH1C3RQbpwDXMRTu4D73nj9FIt x/I3bZqFYtZNW1BYa2gr8YDhvtFEGY3RNAX6PgRy8JbtIfF0yfBsgNTYMfi8Aui8 J+tu0EWG1OQef+OemIQAuCEZQ2pyldRwK184wIcuNM6L+MCof4tfAK99etL9koH2 0Z5NBZKQ6q8srC+2VXwQuGVEFf56h57hVmFNJ/tKAkiclUd6ISnKtg88EPGvUavq wmNuOHjpa+Z8G5LTroNBaTsSKkLV82uE7fE3NVA4iDRLvAurr4JlpbJcaoTGp9Fs GKCT1zq3x3ORa4fFl4ExTCfTaHGPWv0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:16 2025 by rpki-client