$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/be08aa48-7469-36ba-972a-966b2be43456.roa File: be08aa48-7469-36ba-972a-966b2be43456.roa (raw, json) Hash identifier: K7uukrV5Ap3pdAf7dSJ9F9LdmQEGHqmlwQLqIBTt39k= Subject key identifier: DC:B4:0D:75:03:CB:9D:D6:E9:1B:45:28:00:E3:9C:9C:3D:14:86:26 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858481C9A9162535539B506C5DEC0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/be08aa48-7469-36ba-972a-966b2be43456.roa Signing time: Fri 06 Dec 2024 02:00:39 +0000 ROA not before: Fri 06 Dec 2024 02:00:39 +0000 ROA not after: Thu 06 Mar 2025 02:00:39 +0000 asID: 7018 IP address blocks: 45.58.232.0/21 maxlen: 21 69.91.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1c:9a:91:62:53:55:39:b5:06:c5:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Dec 6 02:00:39 2024 GMT Not After : Mar 6 02:00:39 2025 GMT Subject: CN=82edb846-231d-4c2b-9ab1-0ae537bf0a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:22:ea:b2:d3:e4:bf:ad:58:45:b8:4d:8d:a4: f2:5a:26:0c:5e:57:fc:a0:de:15:13:87:4d:4d:8b: 58:ec:ff:ac:ad:eb:81:2b:27:e7:82:f0:ce:b3:f0: 26:19:e8:6c:f9:55:7b:48:78:5b:74:ed:6e:7e:0c: f0:b5:6d:29:5b:76:b7:50:07:f2:03:ad:2a:0f:23: fe:f7:b7:0d:fe:20:b7:f9:5c:5f:14:b5:94:48:be: a3:de:df:f5:d3:11:c4:01:3f:a1:37:cf:3c:54:22: 81:d0:e4:14:2f:8a:79:ef:26:8d:4a:66:d4:92:e5: 5a:fb:d6:95:c7:a9:68:35:10:72:82:5f:8e:73:aa: 09:64:55:4d:82:1b:d6:17:3e:50:64:99:be:0e:a8: 1f:1b:d1:ad:c2:d4:b5:83:b2:fc:ac:f8:17:0f:e6: 25:86:05:a3:0c:f6:d8:1a:c5:89:ae:ee:bb:ed:49: 0f:5b:a0:7e:7f:08:5c:55:af:05:d7:7d:08:44:f7: 38:12:de:1e:05:8a:c7:da:20:a9:ee:46:8b:24:b2: 1b:43:7e:1a:e6:af:e2:bc:89:fa:c7:40:83:a9:05: 9b:d6:ae:32:25:f4:44:bf:27:a7:01:d6:fe:2c:2c: 3f:54:72:62:df:64:1e:b2:1d:c3:30:19:7f:8d:36: ab:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B4:0D:75:03:CB:9D:D6:E9:1B:45:28:00:E3:9C:9C:3D:14:86:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/be08aa48-7469-36ba-972a-966b2be43456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.232.0/21 69.91.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:93:07:dd:1c:f4:24:a0:ec:9c:a1:b4:0c:b5:45:8c:c8:e5: 85:f7:b3:86:61:ca:26:a5:b8:04:c2:57:b5:3c:66:65:cb:97: 75:97:1b:dd:15:8f:a4:71:b9:79:57:30:cf:e9:7d:56:a4:b4: be:72:b8:3b:10:48:f8:2a:bb:42:ec:5f:f4:30:55:fe:67:ad: 18:c8:32:86:86:d3:79:dd:6d:ec:b9:f6:b7:4a:2e:2f:94:e3: 8a:14:59:67:ff:25:34:2a:84:02:78:66:e2:bb:c1:8e:12:23: 24:0f:cd:dd:37:18:1e:6c:48:fc:83:6c:1f:e7:ae:19:10:92: 5a:e5:9a:9c:ee:0e:a3:74:31:a3:7e:79:30:4d:9d:d0:6e:32: d5:0d:6b:5a:12:23:11:03:60:35:ea:1a:c1:d3:22:5e:1d:54: f1:c7:6c:cd:f7:b0:51:09:de:0e:49:a7:66:56:c2:12:4d:2d: 9c:28:12:6c:de:9f:83:5f:01:c1:16:39:d8:7e:fb:6e:31:8c: 4b:78:96:b3:1a:5d:89:b0:34:67:33:c0:8e:4d:23:2e:51:87: d6:2e:d4:d8:8d:63:0b:df:57:55:80:4f:d3:17:ee:b6:f6:1e: dc:6f:dd:7b:1d:5e:e3:5d:b2:96:bb:e4:bb:ee:4d:7a:53:6a: df:33:f0:5b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgcmpFiU1U5tQbF3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk ODJlZGI4NDYtMjMxZC00YzJiLTlhYjEtMGFlNTM3YmYwYTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniLqstPkv61YRbhNjaTyWiYMXlf8oN4VE4dN TYtY7P+sreuBKyfngvDOs/AmGehs+VV7SHhbdO1ufgzwtW0pW3a3UAfyA60qDyP+ 97cN/iC3+VxfFLWUSL6j3t/10xHEAT+hN888VCKB0OQUL4p57yaNSmbUkuVa+9aV x6loNRBygl+Oc6oJZFVNghvWFz5QZJm+DqgfG9GtwtS1g7L8rPgXD+YlhgWjDPbY GsWJru677UkPW6B+fwhcVa8F130IRPc4Et4eBYrH2iCp7kaLJLIbQ34a5q/ivIn6 x0CDqQWb1q4yJfREvyenAdb+LCw/VHJi32Qesh3DMBl/jTarQwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNy0DXUDy53W6RtFKADjnJw9FIYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYmUwOGFhNDgtNzQ2OS0z NmJhLTk3MmEtOTY2YjJiZTQzNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLTroAwQA RVuSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIGTB90c9CSg7JyhtAy1RYzI5YX3s4ZhyialuATCV7U8ZmXL l3WXG90Vj6RxuXlXMM/pfVaktL5yuDsQSPgqu0LsX/QwVf5nrRjIMoaG03ndbey5 9rdKLi+U44oUWWf/JTQqhAJ4ZuK7wY4SIyQPzd03GB5sSPyDbB/nrhkQklrlmpzu DqN0MaN+eTBNndBuMtUNa1oSIxEDYDXqGsHTIl4dVPHHbM33sFEJ3g5Jp2ZWwhJN LZwoEmzen4NfAcEWOdh++24xjEt4lrMaXYmwNGczwI5NIy5Rh9Yu1NiNYwvfV1WA T9MX7rb2Htxv3XsdXuNdspa75LvuTXpTat8z8Fs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:09 2025 by rpki-client