$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5920d0d8-3e8a-32e5-a817-4e58b2849624.roa File: 5920d0d8-3e8a-32e5-a817-4e58b2849624.roa (raw, json) Hash identifier: O54bGtIaKsKjrSzc2RAR0oajmjuL6gtqwJqNQYNJKas= Subject key identifier: AE:4A:F8:66:CA:37:12:EA:B5:3C:B1:D9:29:16:2D:6D:E7:94:E6:C6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848A0E1C883EAFF817790C49CF6 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5920d0d8-3e8a-32e5-a817-4e58b2849624.roa Signing time: Wed 22 Jan 2025 11:11:09 +0000 ROA not before: Wed 22 Jan 2025 11:11:09 +0000 ROA not after: Tue 22 Apr 2025 10:11:09 +0000 asID: 9009 IP address blocks: 45.74.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a0:e1:c8:83:ea:ff:81:77:90:c4:9c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 22 11:11:09 2025 GMT Not After : Apr 22 10:11:09 2025 GMT Subject: CN=ae5b596d-f38e-4f1b-9e74-0619b5ef6a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a6:7e:aa:52:06:31:d7:e2:b2:b2:82:d6:3f: a3:55:bf:7c:9a:bb:b1:81:57:65:36:99:01:48:65: d9:23:72:80:7b:2a:fe:71:52:a0:42:b2:4c:14:74: 07:61:d1:c6:a0:53:32:9f:21:2a:cb:9d:03:93:9f: b1:6f:d8:a7:d1:d8:85:a6:2d:f0:2d:19:f8:27:8d: cb:9d:2b:a5:32:ad:12:d9:8c:b6:8a:c7:e9:49:dc: 5d:cc:24:61:ad:74:1a:c7:9f:3b:f0:3f:85:f1:39: 1b:99:a5:b1:d3:d5:2f:15:e7:69:37:21:1e:38:78: c5:02:32:f3:fb:f5:0e:12:31:d1:6b:c6:f2:df:81: 4e:21:53:90:dc:4b:ac:d9:11:37:ae:03:67:06:f4: 86:77:be:c0:bc:fa:1e:07:aa:f0:86:24:75:d4:51: b9:79:63:b9:07:2f:7e:48:87:76:34:39:d7:b7:36: 80:79:61:af:b8:23:8f:3e:a0:38:29:d5:13:14:ea: 9d:34:56:ee:c1:26:bf:2a:b8:5b:16:2e:97:26:6a: d1:d3:dc:26:5e:85:5d:c3:2e:e8:ee:e5:cc:5e:f6: de:0a:e8:d7:de:9b:01:34:1e:83:77:ea:b2:de:ea: ae:ed:7a:74:92:e4:68:e6:b0:f4:6e:f6:67:bd:97: 5e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4A:F8:66:CA:37:12:EA:B5:3C:B1:D9:29:16:2D:6D:E7:94:E6:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5920d0d8-3e8a-32e5-a817-4e58b2849624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:27:32:19:53:df:24:40:86:17:93:2d:a0:91:dd:e4:92:6c: 5b:dd:97:f0:f7:57:4b:a5:90:94:2a:11:41:bc:f9:8f:fe:ce: 00:47:5f:11:71:9e:aa:15:0c:b0:cb:28:e9:ff:2a:64:0c:d2: 06:a6:03:9e:6b:a6:53:e1:3c:7d:f3:9b:23:c0:74:a2:ac:ba: 20:10:4d:19:65:57:cf:41:e6:25:b9:ee:27:7f:0c:87:d4:aa: 50:02:c5:ab:a3:0d:fd:b1:d0:97:2f:0a:b3:39:c4:6a:57:2b: f3:71:c3:06:35:22:fc:97:eb:75:6e:2c:4c:8b:91:b6:19:37: 19:77:ba:85:28:3a:f9:a5:f4:36:40:18:25:7b:dd:48:62:a8: 1c:6a:d2:d1:3b:d9:c5:98:58:d9:04:a4:5e:69:ed:2e:1d:5a: ee:c6:48:29:ea:71:df:c8:cf:3b:a6:f1:97:7b:f6:75:17:82: 49:7a:3e:4c:b8:d7:15:3c:be:13:cd:22:f2:56:ed:7b:70:76: 42:04:fb:63:d8:74:b3:e9:73:b0:69:f4:27:65:31:d0:c7:b2: 15:57:5e:2e:f7:95:a5:5d:80:90:d9:3a:60:fc:77:ef:13:d6: 17:48:66:ee:9f:65:f2:fe:36:24:0d:2c:16:33:f5:67:93:26: 44:90:04:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEig4ciD6v+Bd5DEnPYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDEyMjExMTEwOVoXDTI1MDQyMjEwMTEwOVowLzEtMCsGA1UEAxMk YWU1YjU5NmQtZjM4ZS00ZjFiLTllNzQtMDYxOWI1ZWY2YTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaZ+qlIGMdfisrKC1j+jVb98mruxgVdlNpkB SGXZI3KAeyr+cVKgQrJMFHQHYdHGoFMynyEqy50Dk5+xb9in0diFpi3wLRn4J43L nSulMq0S2Yy2isfpSdxdzCRhrXQax5878D+F8TkbmaWx09UvFedpNyEeOHjFAjLz +/UOEjHRa8by34FOIVOQ3Eus2RE3rgNnBvSGd77AvPoeB6rwhiR11FG5eWO5By9+ SId2NDnXtzaAeWGvuCOPPqA4KdUTFOqdNFbuwSa/KrhbFi6XJmrR09wmXoVdwy7o 7uXMXvbeCujX3psBNB6Dd+qy3uqu7Xp0kuRo5rD0bvZnvZdeZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5K+GbKNxLqtTyx2SkWLW3nlObGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTkyMGQwZDgtM2U4YS0z MmU1LWE4MTctNGU1OGIyODQ5NjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAknMhlT3yRAhheTLaCR3eSSbFvdl/D3V0ulkJQqEUG8+Y/+zgBHXxFx nqoVDLDLKOn/KmQM0gamA55rplPhPH3zmyPAdKKsuiAQTRllV89B5iW57id/DIfU qlACxaujDf2x0JcvCrM5xGpXK/NxwwY1IvyX63VuLEyLkbYZNxl3uoUoOvml9DZA GCV73UhiqBxq0tE72cWYWNkEpF5p7S4dWu7GSCnqcd/Izzum8Zd79nUXgkl6Pky4 1xU8vhPNIvJW7XtwdkIE+2PYdLPpc7Bp9CdlMdDHshVXXi73laVdgJDZOmD8d+8T 1hdIZu6fZfL+NiQNLBYz9WeTJkSQBIg= -----END CERTIFICATE-----Generated at Fri Apr 11 22:32:26 2025 by rpki-client