$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/886a2b21-bb9a-3eda-bd5a-6fc3faf0479f.roa File: 886a2b21-bb9a-3eda-bd5a-6fc3faf0479f.roa (raw, json) Hash identifier: zLDNZKUUeuJZR6SWuWPCdTEastdOEPGfInWQ56MNAUg= Subject key identifier: 74:81:74:3B:77:0F:D4:D6:83:B8:8F:D3:C5:A1:9C:49:43:06:59:C5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584902EC10354D13370EC2247A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/886a2b21-bb9a-3eda-bd5a-6fc3faf0479f.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 3223 IP address blocks: 45.74.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:10:35:4d:13:37:0e:c2:24:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=6b9277ca-4726-4653-ae0a-c3a13a4502cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:d1:cb:b2:ed:68:47:4e:0c:8f:f2:5a:fa: 9f:f3:3c:d9:3a:a1:bd:d0:10:45:1d:ce:ab:b1:56: 25:0e:21:46:b4:d3:99:c0:4d:7f:bb:9a:fd:f6:e1: 11:54:94:ff:b0:95:40:21:69:5e:ce:96:1b:f8:53: 92:6b:cb:77:ad:f6:5a:9f:f6:dd:ca:d3:d5:0a:04: f9:04:8b:f9:4d:33:b7:45:ec:dc:4d:0d:a2:7d:be: a6:8f:60:b2:06:48:f3:ff:de:84:06:55:84:29:de: 81:c1:8a:3d:80:08:3a:0e:08:02:b3:3b:a4:21:63: 24:51:9d:fb:cb:7b:93:d8:2f:8e:bc:7c:32:2c:ee: c8:cf:9e:04:52:9e:9b:fe:7f:41:1a:0a:73:11:f8: 18:1c:4d:6a:0c:3f:23:46:48:fd:9f:d9:c5:f5:a8: d2:42:19:03:ca:d8:d8:35:c2:0e:7e:b8:d8:46:ad: b0:07:f3:c0:7c:01:a9:74:87:7d:30:00:c3:14:6a: f9:04:af:15:b8:8e:ed:62:94:a3:e6:39:58:06:af: 8e:49:cc:c9:5f:17:be:e4:2b:2c:17:fd:61:63:fb: 26:17:36:8a:20:64:d3:69:23:a9:74:4f:b7:ce:3a: 5a:46:d8:f8:6d:e4:66:2b:f2:16:f1:a5:72:69:21: 01:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:81:74:3B:77:0F:D4:D6:83:B8:8F:D3:C5:A1:9C:49:43:06:59:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/886a2b21-bb9a-3eda-bd5a-6fc3faf0479f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c5:62:7c:f2:1b:96:e3:ae:1e:bf:a3:10:c0:c2:94:24:24: 52:c9:dd:d1:a2:d6:01:54:75:ac:10:ed:11:81:5a:d6:bf:73: 6f:b9:04:c6:fb:a5:0e:12:47:91:00:d0:d3:d7:d7:74:4f:e7: 4f:b7:c6:f8:35:88:3c:b3:c4:b1:eb:8e:bd:fd:3b:51:33:8e: fd:c7:33:7e:ce:dd:58:a3:bc:eb:c0:38:e1:cd:57:95:14:cf: 6e:10:12:f7:48:ab:7f:87:aa:b4:db:a8:55:ab:b5:82:0c:41: 8c:08:7b:46:78:0c:9b:79:0d:ee:61:52:f5:36:ba:43:dd:35: ad:79:60:d4:b4:53:5e:00:4f:4e:56:f7:d6:45:92:06:ed:22: 52:4f:e5:d6:e5:a0:ad:c3:5d:1e:61:c1:fd:54:0a:51:8a:a1: 1a:78:e7:d0:65:76:55:d5:d2:dc:9c:51:61:84:f3:e4:f1:fc: fa:88:c6:58:ce:af:30:53:71:eb:44:ec:81:33:a0:82:07:6c: 87:e9:7d:27:4a:18:4a:e5:a4:49:39:08:35:c5:ef:40:71:d7: 21:6e:10:6e:b9:71:e1:a9:dd:7e:e9:50:4a:ce:0a:9f:bf:b1: cf:3a:c7:55:12:50:e0:01:83:24:49:cd:68:1a:56:c0:aa:74: 89:4f:01:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BA1TRM3DsIkeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NmI5Mjc3Y2EtNDcyNi00NjUzLWFlMGEtYzNhMTNhNDUwMmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQfRy7LtaEdODI/yWvqf8zzZOqG90BBFHc6r sVYlDiFGtNOZwE1/u5r99uERVJT/sJVAIWlezpYb+FOSa8t3rfZan/bdytPVCgT5 BIv5TTO3RezcTQ2ifb6mj2CyBkjz/96EBlWEKd6BwYo9gAg6DggCszukIWMkUZ37 y3uT2C+OvHwyLO7Iz54EUp6b/n9BGgpzEfgYHE1qDD8jRkj9n9nF9ajSQhkDytjY NcIOfrjYRq2wB/PAfAGpdId9MADDFGr5BK8VuI7tYpSj5jlYBq+OSczJXxe+5Css F/1hY/smFzaKIGTTaSOpdE+3zjpaRtj4beRmK/IW8aVyaSEB0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSBdDt3D9TWg7iP08WhnElDBlnFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODg2YTJiMjEtYmI5YS0z ZWRhLWJkNWEtNmZjM2ZhZjA0NzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzFYnzyG5bjrh6/oxDAwpQkJFLJ3dGi1gFUdawQ7RGBWta/c2+5BMb7 pQ4SR5EA0NPX13RP50+3xvg1iDyzxLHrjr39O1Ezjv3HM37O3VijvOvAOOHNV5UU z24QEvdIq3+HqrTbqFWrtYIMQYwIe0Z4DJt5De5hUvU2ukPdNa15YNS0U14AT05W 99ZFkgbtIlJP5dbloK3DXR5hwf1UClGKoRp459BldlXV0tycUWGE8+Tx/PqIxljO rzBTcetE7IEzoIIHbIfpfSdKGErlpEk5CDXF70Bx1yFuEG65ceGp3X7pUErOCp+/ sc86x1USUOABgyRJzWgaVsCqdIlPASk= -----END CERTIFICATE-----Generated at Sat Apr 5 13:22:31 2025 by rpki-client