$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5d00b0dd-9266-3f80-958e-d4f8f72a1a21.roa File: 5d00b0dd-9266-3f80-958e-d4f8f72a1a21.roa (raw, json) Hash identifier: rFbXSwmgUR6nbVV2nD4M1lbx4c+l2ZrpSptZ6F07ccM= Subject key identifier: D4:0C:5C:C5:05:7C:35:6F:88:26:2E:BC:80:70:A9:17:FF:9F:DF:8F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848E8E73AB00D7A1150260EA780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5d00b0dd-9266-3f80-958e-d4f8f72a1a21.roa Signing time: Mon 17 Feb 2025 06:20:19 +0000 ROA not before: Mon 17 Feb 2025 06:20:19 +0000 ROA not after: Sun 18 May 2025 05:20:19 +0000 asID: 213676 IP address blocks: 45.74.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:e7:3a:b0:0d:7a:11:50:26:0e:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 17 06:20:19 2025 GMT Not After : May 18 05:20:19 2025 GMT Subject: CN=42922dd5-c1fb-4dc9-abac-faa8d3a4f929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f2:c7:69:60:a1:ee:fa:52:cc:45:ee:af:5a: 65:c9:dd:61:4e:dd:e5:ec:5c:f0:97:13:f2:39:e6: 77:92:9d:5f:75:28:38:d5:1a:cd:54:89:e3:f1:95: 01:46:b2:f1:79:80:ce:5d:c6:45:8a:ec:57:d0:c3: 35:1e:59:b9:6d:0c:12:6a:a6:0d:47:87:9c:a1:e1: 42:e7:dd:66:42:51:2b:e7:33:68:fa:82:af:e3:0d: 70:2f:19:86:6b:12:40:7d:e7:39:6c:5f:23:8c:ea: d3:84:29:0c:31:f7:74:20:de:f4:15:56:b9:ea:73: b1:11:6a:e8:ec:5e:c8:e9:51:df:ec:2d:cd:0c:6d: 15:dd:ab:da:5a:4f:98:81:34:6f:a4:d3:e2:88:20: d0:c8:52:cf:60:66:01:15:2e:70:85:ea:28:1b:78: 70:f7:b1:08:f4:48:b8:af:d2:ec:c3:97:0c:80:5a: 1c:a4:3b:9b:2a:e9:f0:b1:14:0f:3c:9e:0a:f8:b1: 03:0a:50:8b:60:d2:fd:a3:89:ef:70:a0:6c:97:b8: 6c:b0:86:4f:0f:02:9e:a5:9b:70:09:af:47:66:19: f9:53:15:5a:1b:ab:6e:e5:59:00:72:2a:88:09:f2: b6:23:48:45:bd:51:52:ab:d8:58:77:66:56:36:4c: 63:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0C:5C:C5:05:7C:35:6F:88:26:2E:BC:80:70:A9:17:FF:9F:DF:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5d00b0dd-9266-3f80-958e-d4f8f72a1a21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:38:fa:bb:a1:93:25:c2:1d:0b:5d:68:2e:5c:ea:b1:6f:2e: c3:2c:df:8f:36:ac:44:53:5b:11:f5:71:1c:c4:c0:73:85:ba: fd:b9:83:37:ea:75:4f:03:6b:e1:5f:37:94:0e:56:2a:f9:1d: 51:e7:9d:82:80:2b:40:b0:40:ce:79:3a:a1:6a:86:ae:0d:74: af:50:b6:38:be:92:54:9f:9e:23:61:75:fe:a5:f1:50:67:98: 0c:cd:5a:40:b5:31:cb:24:39:c1:17:c2:e2:e8:f8:e5:a3:6e: 38:3c:ae:b3:4e:92:a8:5c:af:99:4a:f5:b6:58:e1:0d:0b:3e: 57:1a:98:29:33:f8:50:e5:c0:b5:13:27:35:07:6e:f1:ad:a5: a0:49:63:89:aa:a5:2f:fb:60:10:cc:26:2b:eb:a8:39:9a:c3: 42:fc:28:d2:ac:97:ee:56:a0:37:3c:93:cb:51:05:a4:f5:91: 9f:be:49:77:1c:85:5a:89:be:2c:ea:82:f6:34:d1:ce:65:af: 32:c8:55:42:6c:8b:9a:a8:97:6a:21:0c:f9:d2:09:0c:89:5f: 98:35:1f:1b:46:85:82:f5:7c:88:62:8f:f5:33:fa:fd:4f:3a: 17:07:ab:66:b5:53:0c:61:69:34:32:f3:3f:fc:31:80:21:ee: 19:57:0b:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjo5zqwDXoRUCYOp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxNzA2MjAxOVoXDTI1MDUxODA1MjAxOVowLzEtMCsGA1UEAxMk NDI5MjJkZDUtYzFmYi00ZGM5LWFiYWMtZmFhOGQzYTRmOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPLHaWCh7vpSzEXur1plyd1hTt3l7FzwlxPy OeZ3kp1fdSg41RrNVInj8ZUBRrLxeYDOXcZFiuxX0MM1Hlm5bQwSaqYNR4ecoeFC 591mQlEr5zNo+oKv4w1wLxmGaxJAfec5bF8jjOrThCkMMfd0IN70FVa56nOxEWro 7F7I6VHf7C3NDG0V3avaWk+YgTRvpNPiiCDQyFLPYGYBFS5wheooG3hw97EI9Ei4 r9Lsw5cMgFocpDubKunwsRQPPJ4K+LEDClCLYNL9o4nvcKBsl7hssIZPDwKepZtw Ca9HZhn5UxVaG6tu5VkAciqICfK2I0hFvVFSq9hYd2ZWNkxjjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQMXMUFfDVviCYuvIBwqRf/n9+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWQwMGIwZGQtOTI2Ni0z ZjgwLTk1OGUtZDRmOGY3MmExYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY4+ruhkyXCHQtdaC5c6rFvLsMs3482rERTWxH1cRzEwHOFuv25gzfq dU8Da+FfN5QOVir5HVHnnYKAK0CwQM55OqFqhq4NdK9Qtji+klSfniNhdf6l8VBn mAzNWkC1McskOcEXwuLo+OWjbjg8rrNOkqhcr5lK9bZY4Q0LPlcamCkz+FDlwLUT JzUHbvGtpaBJY4mqpS/7YBDMJivrqDmaw0L8KNKsl+5WoDc8k8tRBaT1kZ++SXcc hVqJvizqgvY00c5lrzLIVUJsi5qol2ohDPnSCQyJX5g1HxtGhYL1fIhij/Uz+v1P OhcHq2a1UwxhaTQy8z/8MYAh7hlXC7s= -----END CERTIFICATE-----Generated at Sat Feb 22 04:33:59 2025 by rpki-client