$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/436d215e-6d6e-30c3-b32d-eedeac625ace.roa File: 436d215e-6d6e-30c3-b32d-eedeac625ace.roa (raw, json) Hash identifier: mOdEFX6CwAgUB/mGPOnesiM9tzoxozgEsP7GGj/lfB8= Subject key identifier: 58:0D:7F:72:66:87:88:0A:7A:F7:7A:91:79:7D:F6:A9:86:6A:34:54 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848BBBB86DD82CEFB0149F94540 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/436d215e-6d6e-30c3-b32d-eedeac625ace.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 9009 IP address blocks: 45.74.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:86:dd:82:ce:fb:01:49:f9:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=6a845edc-01ae-4350-9760-1afbe4771d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:06:03:61:6d:80:b1:3e:ac:40:52:7c:b2:81: d5:28:5a:98:b0:e3:18:d5:5e:09:00:16:27:e9:69: 5d:c4:5a:9c:d4:ab:62:f1:8c:84:54:40:7a:d3:8e: 5b:1f:04:68:c2:29:36:4a:9c:2b:90:77:d4:81:be: 09:32:f7:26:fb:68:42:18:eb:9c:5c:9f:88:f4:4b: 47:e1:e9:c1:ff:af:82:4a:55:9d:a1:5d:bd:a2:53: 12:08:af:25:9f:64:11:cb:42:19:6a:bf:09:c7:46: e0:7d:e9:c4:82:44:56:3c:92:c3:b2:a6:be:33:44: 30:5c:4b:94:b4:5f:cd:66:63:73:d4:67:4a:0b:d9: ae:6c:79:bd:93:4d:33:a1:8b:a5:d6:fa:ca:08:4a: 47:ab:d9:77:80:1b:56:89:ba:48:fa:2e:bf:b5:d0: c9:19:37:eb:b5:d2:84:01:63:73:0f:aa:cf:7a:62: 1d:5d:da:c6:85:d0:fa:78:ad:21:11:56:85:1e:95: f7:15:6b:13:44:c0:3f:c1:57:ca:85:b6:3c:28:95: 37:f9:ab:22:de:8c:02:15:c8:d7:1c:88:6c:46:71: d1:1b:cd:12:18:c6:ba:ea:90:27:88:74:9a:8b:ae: 12:4c:e8:a9:4b:b8:1e:a2:28:47:64:75:b1:4a:7c: 26:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0D:7F:72:66:87:88:0A:7A:F7:7A:91:79:7D:F6:A9:86:6A:34:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/436d215e-6d6e-30c3-b32d-eedeac625ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:49:c5:64:d9:ba:33:26:41:55:80:c7:f5:f0:59:bc:8a:7a: 5d:d8:5f:c7:aa:71:a6:f4:34:48:c4:77:63:5b:92:95:2a:fb: 83:b3:10:8a:8b:c0:e2:7d:77:c6:b6:0d:39:8a:c8:5e:f6:bb: 1a:3e:36:e2:29:d3:36:a5:e3:04:e3:03:67:31:07:15:cc:2b: 12:a2:58:41:38:5e:a7:73:40:f1:89:72:f3:6d:99:8c:9f:93: 7c:8f:ad:c7:68:63:26:27:21:c2:61:70:57:62:82:9a:ba:7b: d2:4a:06:ad:dd:63:ca:06:43:a0:bc:92:43:50:34:ed:20:91: 81:42:d5:29:3a:da:c1:01:3e:02:77:48:f9:5b:4c:ac:e5:86: 2b:80:ac:80:1a:28:c4:41:ec:c9:cd:85:1c:97:09:7a:8f:06: 3e:cb:3e:02:e4:f4:ab:a0:cf:f8:9e:f9:90:5f:fb:ce:e5:8e: db:fe:d2:03:01:20:63:a3:51:cc:c5:b1:f7:2b:12:01:38:04: 1c:0d:8d:4c:5c:3e:95:50:82:ca:1c:5d:ed:f7:ad:ec:54:7c: 78:25:19:f8:0d:b2:70:4a:92:1d:41:d4:d1:86:b3:a1:33:3f: 35:e8:77:a6:75:5b:32:04:df:03:74:43:dd:af:09:cf:d8:4c: 93:c6:2f:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4bdgs77AUn5RUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk NmE4NDVlZGMtMDFhZS00MzUwLTk3NjAtMWFmYmU0NzcxZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQYDYW2AsT6sQFJ8soHVKFqYsOMY1V4JABYn 6WldxFqc1Kti8YyEVEB6045bHwRowik2SpwrkHfUgb4JMvcm+2hCGOucXJ+I9EtH 4enB/6+CSlWdoV29olMSCK8ln2QRy0IZar8Jx0bgfenEgkRWPJLDsqa+M0QwXEuU tF/NZmNz1GdKC9mubHm9k00zoYul1vrKCEpHq9l3gBtWibpI+i6/tdDJGTfrtdKE AWNzD6rPemIdXdrGhdD6eK0hEVaFHpX3FWsTRMA/wVfKhbY8KJU3+asi3owCFcjX HIhsRnHRG80SGMa66pAniHSai64STOipS7geoihHZHWxSnwmDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgNf3Jmh4gKevd6kXl99qmGajRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDM2ZDIxNWUtNmQ2ZS0z MGMzLWIzMmQtZWVkZWFjNjI1YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUodMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBJxWTZujMmQVWAx/XwWbyKel3YX8eqcab0NEjEd2NbkpUq+4OzEIqL wOJ9d8a2DTmKyF72uxo+NuIp0zal4wTjA2cxBxXMKxKiWEE4XqdzQPGJcvNtmYyf k3yPrcdoYyYnIcJhcFdigpq6e9JKBq3dY8oGQ6C8kkNQNO0gkYFC1Sk62sEBPgJ3 SPlbTKzlhiuArIAaKMRB7MnNhRyXCXqPBj7LPgLk9Kugz/ie+ZBf+87ljtv+0gMB IGOjUczFsfcrEgE4BBwNjUxcPpVQgsocXe33rexUfHglGfgNsnBKkh1B1NGGs6Ez PzXod6Z1WzIE3wN0Q92vCc/YTJPGL0M= -----END CERTIFICATE-----Generated at Fri Apr 11 22:47:46 2025 by rpki-client