$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b514e4ac-e068-395d-9028-7ae737863cd7.roa File: b514e4ac-e068-395d-9028-7ae737863cd7.roa (raw, json) Hash identifier: b3yikdwEZK2y4k3bZmCvZ6zg0mjSC+mIz2R0pTL++bc= Subject key identifier: DB:C0:E5:E6:67:0B:5C:52:CD:52:76:6D:0C:DF:DC:08:11:25:FC:04 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F432858491ED6E7605B1C01CAB6D24980 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b514e4ac-e068-395d-9028-7ae737863cd7.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 9009 IP address blocks: 45.59.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e7:60:5b:1c:01:ca:b6:d2:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=8ad9c447-e9bb-426d-a278-04a3ae5c3daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:67:51:2c:10:63:fe:30:9f:ce:09:d5:13: 01:b0:d2:30:d2:0c:ae:95:5f:50:eb:0f:51:cc:b0: b5:35:c8:25:e0:fe:81:f5:dc:de:fe:c8:73:c5:05: b5:20:9f:64:e9:f5:04:fe:6d:65:d0:32:fa:be:52: c3:96:7a:bc:8b:ff:12:0a:60:72:ab:0d:aa:fa:7a: 6c:75:0b:4b:ef:e3:71:e0:88:14:6d:fc:82:83:b6: ec:71:84:b8:53:7a:04:01:15:70:f1:8f:a3:1f:9f: f9:ae:e3:99:fd:97:92:05:36:b2:a9:84:b4:a1:8b: 02:42:56:0e:0e:bd:02:56:bd:64:6b:4b:f5:73:2b: 10:21:1e:d5:54:d0:87:c9:28:a4:09:34:39:0f:f1: a3:ab:b3:5b:be:4c:c0:75:07:4c:f9:a6:05:6c:c1: 0d:c3:12:f5:73:58:56:94:ff:a5:01:e1:1e:1c:79: 43:b9:13:b2:19:d7:76:cd:4c:df:d8:96:c4:9e:f2: 46:8d:83:00:c8:14:4d:b8:bf:fa:29:b8:18:b5:44: cf:45:3d:16:3b:16:0b:fc:d0:09:76:f1:46:bb:d1: 2c:cb:f9:d6:8c:f6:3c:50:fd:51:8f:c8:0e:21:e6: 23:c0:f3:f3:7b:5b:eb:8a:8a:fa:f4:49:e1:b6:75: a6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C0:E5:E6:67:0B:5C:52:CD:52:76:6D:0C:DF:DC:08:11:25:FC:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b514e4ac-e068-395d-9028-7ae737863cd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 45.59.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:be:cc:dc:80:e3:53:98:57:8c:66:6c:b4:35:ad:bd:bd:c3: a3:83:23:d4:b9:b9:97:3d:82:6d:c4:1c:b7:a1:06:62:ae:e3: b2:09:80:dd:29:44:63:9c:fc:c7:69:d7:21:ce:94:f5:f8:a5: a6:0a:95:6b:2b:e4:1c:e7:4a:2a:6a:32:a5:fe:4f:9e:71:b4: 67:74:20:71:54:6f:ab:85:7a:a4:df:6e:d6:65:2f:24:a9:9c: d8:07:ae:89:20:f5:a0:20:24:09:6a:fa:4e:bb:58:c2:7f:cb: 6f:eb:76:e3:82:f7:63:cb:f8:d0:d7:03:36:29:ae:3a:8a:5c: 6b:a3:61:1e:5e:98:2d:ba:66:f0:03:5f:3d:ce:8a:b5:81:e3: 3b:ff:db:ea:99:2f:1f:f7:47:a2:be:eb:b9:ca:1d:fe:b8:81: 90:c6:83:5c:f8:cf:1b:12:0f:56:c6:5b:bd:f3:e5:5c:24:c6: 64:7c:a3:69:46:c3:9b:1d:2d:92:94:16:0d:71:95:8f:f7:10: e7:5b:6b:aa:bb:76:60:ee:a1:2d:0b:8a:31:af:69:65:a8:2c: 0f:70:43:dc:51:8f:3c:ba:d4:f1:65:be:b8:b8:8a:1c:15:d1: e3:3f:de:fc:bf:85:59:a3:cd:93:56:9f:52:86:43:aa:ed:8b: 7d:81:6f:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1udgWxwByrbSSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk OGFkOWM0NDctZTliYi00MjZkLWEyNzgtMDRhM2FlNWMzZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd1nUSwQY/4wn84J1RMBsNIw0gyulV9Q6w9R zLC1Ncgl4P6B9dze/shzxQW1IJ9k6fUE/m1l0DL6vlLDlnq8i/8SCmByqw2q+nps dQtL7+Nx4IgUbfyCg7bscYS4U3oEARVw8Y+jH5/5ruOZ/ZeSBTayqYS0oYsCQlYO Dr0CVr1ka0v1cysQIR7VVNCHySikCTQ5D/Gjq7NbvkzAdQdM+aYFbMENwxL1c1hW lP+lAeEeHHlDuROyGdd2zUzf2JbEnvJGjYMAyBRNuL/6KbgYtUTPRT0WOxYL/NAJ dvFGu9Esy/nWjPY8UP1Rj8gOIeYjwPPze1vrior69EnhtnWmjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvA5eZnC1xSzVJ2bQzf3AgRJfwEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvYjUxNGU0YWMtZTA2OC0z OTVkLTkwMjgtN2FlNzM3ODYzY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACC+zNyA41OYV4xmbLQ1rb29w6ODI9S5uZc9gm3EHLehBmKu47IJgN0p RGOc/Mdp1yHOlPX4paYKlWsr5BznSipqMqX+T55xtGd0IHFUb6uFeqTfbtZlLySp nNgHrokg9aAgJAlq+k67WMJ/y2/rduOC92PL+NDXAzYprjqKXGujYR5emC26ZvAD Xz3OirWB4zv/2+qZLx/3R6K+67nKHf64gZDGg1z4zxsSD1bGW73z5VwkxmR8o2lG w5sdLZKUFg1xlY/3EOdba6q7dmDuoS0LijGvaWWoLA9wQ9xRjzy61PFlvri4ihwV 0eM/3vy/hVmjzZNWn1KGQ6rti32BbzI= -----END CERTIFICATE-----Generated at Mon Apr 7 02:51:48 2025 by rpki-client