$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8b656623-0982-3599-8d67-ef43bec87f8c.roa File: 8b656623-0982-3599-8d67-ef43bec87f8c.roa (raw, json) Hash identifier: 5Sd6mhtAe0NbFPvZZd0Eka2sUmLptXlQf+SpQihlI00= Subject key identifier: A9:23:CA:65:02:23:29:5C:6A:FB:69:AB:63:FD:9B:22:C5:89:D2:01 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849ED4FCD4BFD2E2BC10DBCD080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8b656623-0982-3599-8d67-ef43bec87f8c.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 9009 IP address blocks: 45.74.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:cd:4b:fd:2e:2b:c1:0d:bc:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=14b4b9b4-93ff-49bb-80ee-6cbfb0286325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:45:8d:28:92:93:a3:a8:fa:c0:62:18:22:4c: aa:35:39:aa:f2:28:68:eb:f6:d7:6a:f6:21:6c:62: 93:24:cd:85:d6:c9:74:a8:68:dd:90:60:fb:af:71: 3b:ff:5e:f3:24:90:9f:09:b7:1b:80:8d:19:95:c7: 4c:f0:8f:f0:fe:db:e6:de:27:5a:0c:f2:a5:33:30: aa:4f:fb:fe:11:cd:a4:1c:33:e5:d4:f7:86:e6:4b: bb:86:e0:63:63:7c:8f:35:d2:ba:e5:94:29:fd:84: d4:e3:11:83:45:cc:f2:32:35:f2:e5:f7:31:67:5e: 72:b5:68:e8:72:a2:94:81:84:e9:ab:b6:4b:6a:9f: 35:52:a0:b4:60:81:76:ec:85:db:c5:c6:18:28:72: 6f:2f:cf:5b:56:8f:22:d9:1e:3b:79:d7:66:b8:c1: 9b:eb:3c:d8:59:26:af:9a:94:9d:cf:b3:0c:8e:97: 36:35:18:22:3e:05:93:5a:65:ba:ae:be:31:e9:ef: 6a:be:f2:e2:40:36:1a:f7:e1:ad:40:3d:c0:13:2e: 93:b4:49:75:ea:c0:3c:2c:d4:5c:7b:04:fc:da:14: 7e:34:df:64:1a:d9:8a:61:6c:2a:79:7f:d3:19:ad: 95:c4:e5:d4:13:8b:86:38:0c:00:02:fe:e9:19:f0: 08:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:23:CA:65:02:23:29:5C:6A:FB:69:AB:63:FD:9B:22:C5:89:D2:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8b656623-0982-3599-8d67-ef43bec87f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:03:ac:4d:52:6e:71:2c:a2:98:c1:24:9f:7f:17:f0:33:3b: 31:cd:25:f3:28:1f:53:74:21:db:40:c6:6d:4a:ce:92:15:aa: 9f:ce:04:27:81:cf:44:2a:2a:13:5b:b8:79:31:e6:7f:51:52: b9:cf:0a:43:9e:93:70:53:f3:92:9c:af:93:43:4b:f1:db:56: ef:2b:ca:9d:b1:47:d9:04:be:3c:b2:5c:28:93:88:13:68:cf: ab:7c:8b:4d:db:70:53:07:56:90:18:dc:ad:16:2f:0f:5b:53: 86:04:f8:53:74:48:23:64:d4:ce:87:9d:53:6c:02:9a:5e:da: b2:dd:61:11:c0:04:56:4c:c0:ed:fa:4c:b1:ed:a2:74:98:01: 42:22:55:37:0f:08:2e:bc:1c:94:cc:9e:63:e8:52:68:db:e9: ca:8f:9d:7e:d1:17:e5:35:c2:51:f8:bf:5d:0b:a6:07:91:f5: 7a:f0:24:39:2e:72:c3:26:61:1c:b3:cf:81:de:83:1e:c7:74: 4a:c6:99:2a:9d:76:6e:b4:92:4e:a2:81:34:ec:1c:02:1b:47: 24:93:c7:46:6e:65:6c:b5:d1:91:dd:9b:92:17:b1:f8:a4:6e: 93:b0:3c:73:ef:fc:12:cb:7e:5f:69:0c:47:b7:02:52:61:12: 70:e1:2d:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT81L/S4rwQ280IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk MTRiNGI5YjQtOTNmZi00OWJiLTgwZWUtNmNiZmIwMjg2MzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkWNKJKTo6j6wGIYIkyqNTmq8iho6/bXavYh bGKTJM2F1sl0qGjdkGD7r3E7/17zJJCfCbcbgI0ZlcdM8I/w/tvm3idaDPKlMzCq T/v+Ec2kHDPl1PeG5ku7huBjY3yPNdK65ZQp/YTU4xGDRczyMjXy5fcxZ15ytWjo cqKUgYTpq7ZLap81UqC0YIF27IXbxcYYKHJvL89bVo8i2R47eddmuMGb6zzYWSav mpSdz7MMjpc2NRgiPgWTWmW6rr4x6e9qvvLiQDYa9+GtQD3AEy6TtEl16sA8LNRc ewT82hR+NN9kGtmKYWwqeX/TGa2VxOXUE4uGOAwAAv7pGfAIGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkjymUCIylcavtpq2P9myLFidIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOGI2NTY2MjMtMDk4Mi0z NTk5LThkNjctZWY0M2JlYzg3ZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkDrE1SbnEsopjBJJ9/F/AzOzHNJfMoH1N0IdtAxm1KzpIVqp/OBCeB z0QqKhNbuHkx5n9RUrnPCkOek3BT85Kcr5NDS/HbVu8ryp2xR9kEvjyyXCiTiBNo z6t8i03bcFMHVpAY3K0WLw9bU4YE+FN0SCNk1M6HnVNsAppe2rLdYRHABFZMwO36 TLHtonSYAUIiVTcPCC68HJTMnmPoUmjb6cqPnX7RF+U1wlH4v10LpgeR9XrwJDku csMmYRyzz4Hegx7HdErGmSqddm60kk6igTTsHAIbRySTx0ZuZWy10ZHdm5IXsfik bpOwPHPv/BLLfl9pDEe3AlJhEnDhLTs= -----END CERTIFICATE-----Generated at Tue Jun 3 10:20:16 2025 by rpki-client