$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/be08aa48-7469-36ba-972a-966b2be43456.roa File: be08aa48-7469-36ba-972a-966b2be43456.roa (raw, json) Hash identifier: ukTBTL6Yv6cmG6U2kmji3lfCyOCULf4yV9in6afEWaU= Subject key identifier: 53:5D:A3:22:B8:27:AC:32:11:B2:A4:93:A3:2B:CB:81:69:03:4D:83 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848FD56BF353006457F9F6B5200 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/be08aa48-7469-36ba-972a-966b2be43456.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 7018 IP address blocks: 45.58.232.0/21 maxlen: 21 69.91.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:bf:35:30:06:45:7f:9f:6b:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=7eab0f90-bd1e-47c9-9d58-7a4510bc2ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:15:dc:11:82:b6:0a:9a:1f:f2:91:64:98:17: 49:a4:2c:80:07:56:eb:90:61:d4:39:8c:16:5a:f6: 0a:f6:8d:94:f1:ab:56:47:89:fc:7f:61:8f:30:21: 6e:ea:2d:27:d8:13:81:54:72:b8:a9:11:8a:be:e2: a9:aa:b9:c8:77:8b:c5:14:e6:e4:2b:cb:2e:17:22: 87:1e:fb:3d:d9:8e:2e:89:c0:51:fe:35:ec:2c:77: 6e:9a:b9:71:0d:c0:c7:76:7f:a5:95:3b:5e:46:ff: c3:a2:ff:17:b3:c0:e6:45:bf:8a:50:8c:a5:8c:b1: 7b:38:f2:e0:d4:d3:c6:1d:4f:b4:95:91:88:3b:2d: e3:c1:6c:3a:ad:31:04:4d:15:c6:43:e4:ec:0f:26: b3:7f:33:5d:e8:09:45:2e:d1:57:1b:1e:ec:76:45: 24:92:b2:4f:96:1c:50:7e:e0:47:35:52:b0:c1:37: b2:36:6b:02:ce:55:bf:d1:73:6a:27:12:c8:32:2d: 83:e7:88:9d:e7:f1:62:94:53:58:d6:b4:3c:15:d1: ae:73:5e:da:06:7b:ed:51:80:0a:79:a7:b8:ca:60: f1:77:5c:16:dc:46:04:fa:e6:fb:63:5a:e4:7c:a7: 58:da:6c:cc:65:ee:b3:c5:e5:36:6a:a9:fd:ab:da: 4f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5D:A3:22:B8:27:AC:32:11:B2:A4:93:A3:2B:CB:81:69:03:4D:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/be08aa48-7469-36ba-972a-966b2be43456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.232.0/21 69.91.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ee:06:cb:b5:28:19:0d:f1:04:96:32:44:71:70:00:ba:b0: 3f:19:1a:30:20:d3:d7:21:b0:91:a3:7b:1a:0d:0e:70:c9:93: 82:ac:a7:53:20:5f:4b:a6:75:e2:7f:49:f8:fc:8a:0d:93:0f: 21:8e:10:d8:e0:2f:3d:49:a8:d6:57:c7:63:17:10:02:8c:d5: 27:98:8e:ba:08:7a:0c:a6:d4:2d:79:7c:dd:a8:05:33:a6:d3: cc:98:7f:f0:1c:e8:f0:cc:b6:a0:05:6d:d1:75:8b:ce:37:ef: 54:cd:de:fd:f9:1a:9f:eb:15:e1:32:b6:1f:cf:ca:ee:6c:ac: eb:46:aa:a6:66:f9:a3:f1:99:32:be:75:9d:75:ed:9d:db:66: 97:b9:cb:b9:90:cf:78:e6:d1:53:62:0e:ea:1b:24:f4:8f:39: 2c:7a:c6:b9:97:cf:5b:bf:ec:bd:76:e7:bb:32:29:7c:2c:74: c1:e0:6b:5b:58:3e:bc:e7:a1:49:51:5f:d2:3e:44:a1:1e:19: 48:0b:3d:77:de:f5:01:9a:5c:5d:42:fb:08:d6:27:93:29:f0: 6e:ec:85:73:ce:be:56:05:a4:22:08:44:28:3d:a4:6f:a6:af: cf:e3:be:7d:22:8d:4e:3e:9b:c6:bd:83:c1:c1:c4:e7:fc:08: 0b:b9:26:90 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj9Vr81MAZFf59rUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk N2VhYjBmOTAtYmQxZS00N2M5LTlkNTgtN2E0NTEwYmMyYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghXcEYK2Cpof8pFkmBdJpCyAB1brkGHUOYwW WvYK9o2U8atWR4n8f2GPMCFu6i0n2BOBVHK4qRGKvuKpqrnId4vFFObkK8suFyKH Hvs92Y4uicBR/jXsLHdumrlxDcDHdn+llTteRv/Dov8Xs8DmRb+KUIyljLF7OPLg 1NPGHU+0lZGIOy3jwWw6rTEETRXGQ+TsDyazfzNd6AlFLtFXGx7sdkUkkrJPlhxQ fuBHNVKwwTeyNmsCzlW/0XNqJxLIMi2D54id5/FilFNY1rQ8FdGuc17aBnvtUYAK eae4ymDxd1wW3EYE+ub7Y1rkfKdY2mzMZe6zxeU2aqn9q9pPrwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFNdoyK4J6wyEbKkk6Mry4FpA02DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYmUwOGFhNDgtNzQ2OS0z NmJhLTk3MmEtOTY2YjJiZTQzNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLTroAwQA RVuSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA7uBsu1KBkN8QSWMkRxcAC6sD8ZGjAg09chsJGjexoNDnDJ k4Ksp1MgX0umdeJ/Sfj8ig2TDyGOENjgLz1JqNZXx2MXEAKM1SeYjroIegym1C15 fN2oBTOm08yYf/Ac6PDMtqAFbdF1i84371TN3v35Gp/rFeEyth/Pyu5srOtGqqZm +aPxmTK+dZ117Z3bZpe5y7mQz3jm0VNiDuobJPSPOSx6xrmXz1u/7L1257syKXws dMHga1tYPrznoUlRX9I+RKEeGUgLPXfe9QGaXF1C+wjWJ5Mp8G7shXPOvlYFpCII RCg9pG+mr8/jvn0ijU4+m8a9g8HBxOf8CAu5JpA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:23:05 2025 by rpki-client