$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa File: b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa (raw, json) Hash identifier: kdq9FoF5WRzWk+Jo/9CIIDicLseriQO7GN1qwPLLCHQ= Subject key identifier: 19:94:54:ED:58:D0:D4:01:6E:3E:0D:84:6F:61:4E:51:AA:3A:AE:C1 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848CB165A73A5B7E4E78D3D58C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 6079 IP address blocks: 45.58.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:5a:73:a5:b7:e4:e7:8d:3d:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=a8a03a85-fc4b-41fa-bb1b-4133bb229391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4c:15:33:d3:ef:30:4a:45:b9:91:3a:36:4e: af:57:8c:91:4e:ee:9f:5a:99:c8:ad:60:49:1d:d9: 9f:c3:06:16:4c:49:2c:e9:25:2b:67:a0:4c:8c:fe: d2:d1:eb:23:6f:8d:5d:81:5c:b9:c9:cf:1b:05:0c: 86:7c:96:56:6c:10:03:ec:d8:3a:35:58:75:65:18: 47:fd:49:2e:77:04:53:68:a3:e6:4a:ad:1d:dd:2e: 87:8c:be:bc:60:d9:d7:26:14:0d:70:c3:a0:e6:84: ed:89:2f:6b:b7:dc:85:6d:97:9e:b2:20:30:85:2d: ce:45:26:fc:8d:d5:2c:8d:fa:4e:8d:40:af:92:1c: 9b:60:3c:35:2b:16:a6:4e:54:9c:e9:66:30:d8:74: 4a:13:72:5a:bc:04:aa:c4:90:c8:9f:c6:b6:4f:07: 29:c4:68:e0:4b:43:c3:12:a4:ea:6d:b3:db:10:9e: c5:fb:54:cc:a6:fa:e6:c4:08:64:9c:71:4d:34:47: 59:3b:ec:96:c6:78:78:3d:07:c7:9f:40:fa:94:21: 70:fb:06:eb:34:71:fd:e0:cc:5a:af:64:54:b5:31: ed:dc:96:4a:5a:95:24:7a:c8:d0:0c:8c:66:32:54: 23:87:90:ff:48:31:dc:88:8f:2e:dc:7f:f2:75:99: 43:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:94:54:ED:58:D0:D4:01:6E:3E:0D:84:6F:61:4E:51:AA:3A:AE:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:93:c9:e9:96:0b:b2:f7:04:ca:ac:63:14:26:2d:1b:1f:b8: 4e:81:29:2f:bd:95:f4:72:73:62:78:9f:a4:94:65:d2:bf:4f: 91:6a:8e:db:4a:3d:10:b3:c4:d7:0b:78:1d:17:93:43:0f:38: 5b:29:1e:0e:59:62:df:bc:ce:b7:95:7e:3e:48:02:4c:33:bc: 64:46:5f:1d:b3:4a:3e:88:45:63:b7:0b:f8:37:45:b4:9c:48: ff:43:d3:56:6a:b8:d4:29:f3:55:d2:c0:d8:34:16:5a:75:fe: c7:28:97:20:95:db:55:19:f0:57:5c:66:50:63:4b:01:9d:ea: 80:b9:08:fc:38:05:07:dc:f2:2e:1f:86:e0:7c:50:55:e5:a5: fa:e8:b9:4c:48:c3:8b:f8:95:7d:68:e1:01:9b:62:60:69:ad: ee:09:8f:e1:df:32:27:fb:71:c5:ef:20:67:be:5f:b2:3d:7f: 5b:05:0b:9c:a8:f4:d1:e0:96:e2:9e:88:26:a4:ca:c3:be:3c: 28:96:66:14:71:f6:4e:7b:67:9f:04:f7:ab:75:5e:48:6d:07: 6c:06:91:86:ba:01:7c:d2:4b:07:81:ca:fb:36:54:a3:cb:81: 4e:00:e1:1b:b7:12:de:e2:bf:92:45:72:5b:ac:32:39:1f:17: 5a:a4:dc:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFlpzpbfk5409WMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk YThhMDNhODUtZmM0Yi00MWZhLWJiMWItNDEzM2JiMjI5MzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUwVM9PvMEpFuZE6Nk6vV4yRTu6fWpnIrWBJ HdmfwwYWTEks6SUrZ6BMjP7S0esjb41dgVy5yc8bBQyGfJZWbBAD7Ng6NVh1ZRhH /UkudwRTaKPmSq0d3S6HjL68YNnXJhQNcMOg5oTtiS9rt9yFbZeesiAwhS3ORSb8 jdUsjfpOjUCvkhybYDw1KxamTlSc6WYw2HRKE3JavASqxJDIn8a2TwcpxGjgS0PD EqTqbbPbEJ7F+1TMpvrmxAhknHFNNEdZO+yWxnh4PQfHn0D6lCFw+wbrNHH94Mxa r2RUtTHt3JZKWpUkesjQDIxmMlQjh5D/SDHciI8u3H/ydZlD5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmUVO1Y0NQBbj4NhG9hTlGqOq7BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYjkxMjBkNjItNTViMC0z MDU3LWJmZTQtMzNjNWNiNzJhNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyTyemWC7L3BMqsYxQmLRsfuE6BKS+9lfRyc2J4n6SUZdK/T5FqjttK PRCzxNcLeB0Xk0MPOFspHg5ZYt+8zreVfj5IAkwzvGRGXx2zSj6IRWO3C/g3RbSc SP9D01ZquNQp81XSwNg0Flp1/scolyCV21UZ8FdcZlBjSwGd6oC5CPw4BQfc8i4f huB8UFXlpfrouUxIw4v4lX1o4QGbYmBpre4Jj+HfMif7ccXvIGe+X7I9f1sFC5yo 9NHgluKeiCakysO+PCiWZhRx9k57Z58E96t1XkhtB2wGkYa6AXzSSweByvs2VKPL gU4A4Ru3Et7iv5JFclusMjkfF1qk3Mk= -----END CERTIFICATE-----Generated at Fri Apr 4 19:37:02 2025 by rpki-client