$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e2967c2e-2806-30f4-a0d3-1c441f02033d.roa File: e2967c2e-2806-30f4-a0d3-1c441f02033d.roa (raw, json) Hash identifier: FsVpRLU/cCt7ZSWRtJC3wGGDnmtkZjSly8+r7tnnt5Y= Subject key identifier: 2D:D2:2F:FD:A8:C2:41:92:FB:73:79:58:C5:3B:CB:75:9C:30:D3:B4 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584930DE77DEC226F8F21BCD4A00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e2967c2e-2806-30f4-a0d3-1c441f02033d.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 9009 IP address blocks: 45.74.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:77:de:c2:26:f8:f2:1b:cd:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=e9b5b6e2-f23e-420f-95e6-1590589ccbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cd:ae:d1:3d:df:ef:01:82:20:81:a3:4b:de: 57:1e:1a:f8:2b:b8:2b:71:3b:c8:ba:87:ab:27:42: 61:42:85:8e:e1:9f:fc:2a:0f:9a:4b:ed:1e:a5:f4: 4c:98:ff:19:b3:a5:80:8d:b1:8b:2b:67:82:f0:2e: b7:8a:b9:de:95:95:9b:41:c3:83:95:bb:c9:de:cf: ed:02:c1:3a:2a:28:02:d8:5b:95:a4:9c:fd:f0:dd: be:51:83:e2:a9:13:1f:ce:69:94:ec:a8:43:44:91: 3e:0e:9c:20:c8:0c:5b:df:54:37:96:f0:ad:28:ed: 42:6b:e8:8e:c1:de:a5:f7:fd:41:41:f1:6c:a7:69: 99:c1:ed:b7:eb:a3:12:6d:41:e3:ff:dc:bf:8b:1a: bf:cf:be:4e:ea:87:04:c0:34:55:cf:e0:81:8e:a4: 07:59:d0:1e:ff:ac:c5:4f:ca:d8:e3:eb:d1:8c:9e: 98:77:cb:ef:db:e2:d4:f3:89:53:3b:f1:09:89:9a: 2c:74:99:42:01:91:a7:a2:da:b7:b1:f2:c5:b6:3d: 67:4b:98:c2:0c:61:c6:ff:5f:4f:4c:c2:56:ac:30: 6d:de:c8:64:49:4f:e5:ea:9a:7f:b6:1c:4e:f1:f2: bc:dd:55:2e:27:73:82:68:cf:06:08:8c:95:6f:b8: a1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D2:2F:FD:A8:C2:41:92:FB:73:79:58:C5:3B:CB:75:9C:30:D3:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e2967c2e-2806-30f4-a0d3-1c441f02033d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:6c:b9:d0:d9:5b:61:16:05:b3:20:cd:87:aa:2a:09:74:39: c8:1a:e6:6a:be:c3:26:50:87:61:40:e7:0f:38:9d:3e:d9:16: c7:a4:2a:3b:35:6a:ab:6d:b8:6f:9f:84:ad:2b:e3:b1:72:88: 8f:0f:98:58:ab:4d:4f:08:b8:0f:92:ed:a1:95:b4:81:7e:dc: 66:05:a0:b3:e0:1a:e0:5b:84:8c:02:c2:e6:f9:79:81:15:15: 3c:2a:60:5a:1c:d6:91:0b:35:6c:79:e6:53:bc:3a:07:1c:01: ea:65:48:39:ec:c5:88:b5:d7:7f:28:6e:b1:9e:00:44:17:c3: be:3a:54:e7:ab:58:6f:85:09:af:3b:6b:4a:46:e9:bb:ec:cb: ce:48:42:c1:30:94:26:af:79:6c:df:bb:bb:e4:0c:f5:c2:05: 13:7a:58:7e:fe:6f:5b:cd:3a:ad:17:5d:dd:c2:15:7f:7e:e7: 50:06:0c:36:05:e5:c5:d3:83:fa:47:78:16:76:e8:22:bb:00: 89:2a:d0:3d:f1:06:ac:33:40:17:be:41:cb:7b:8c:21:ed:06: c6:24:8a:e1:9b:83:cc:10:3f:68:08:2b:9b:58:84:49:0f:e1: 4c:19:5b:50:3e:19:2b:53:cd:4b:ab:fc:70:d5:de:79:1e:65: 82:92:28:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nfewib48hvNSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZTliNWI2ZTItZjIzZS00MjBmLTk1ZTYtMTU5MDU4OWNjYmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh82u0T3f7wGCIIGjS95XHhr4K7grcTvIuoer J0JhQoWO4Z/8Kg+aS+0epfRMmP8Zs6WAjbGLK2eC8C63irnelZWbQcODlbvJ3s/t AsE6KigC2FuVpJz98N2+UYPiqRMfzmmU7KhDRJE+DpwgyAxb31Q3lvCtKO1Ca+iO wd6l9/1BQfFsp2mZwe2366MSbUHj/9y/ixq/z75O6ocEwDRVz+CBjqQHWdAe/6zF T8rY4+vRjJ6Yd8vv2+LU84lTO/EJiZosdJlCAZGnotq3sfLFtj1nS5jCDGHG/19P TMJWrDBt3shkSU/l6pp/thxO8fK83VUuJ3OCaM8GCIyVb7ihnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3SL/2owkGS+3N5WMU7y3WcMNO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTI5NjdjMmUtMjgwNi0z MGY0LWEwZDMtMWM0NDFmMDIwMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChsudDZW2EWBbMgzYeqKgl0Ocga5mq+wyZQh2FA5w84nT7ZFsekKjs1 aqttuG+fhK0r47FyiI8PmFirTU8IuA+S7aGVtIF+3GYFoLPgGuBbhIwCwub5eYEV FTwqYFoc1pELNWx55lO8OgccAeplSDnsxYi1138obrGeAEQXw746VOerWG+FCa87 a0pG6bvsy85IQsEwlCaveWzfu7vkDPXCBRN6WH7+b1vNOq0XXd3CFX9+51AGDDYF 5cXTg/pHeBZ26CK7AIkq0D3xBqwzQBe+Qct7jCHtBsYkiuGbg8wQP2gIK5tYhEkP 4UwZW1A+GStTzUur/HDV3nkeZYKSKD8= -----END CERTIFICATE-----Generated at Fri Apr 11 23:50:10 2025 by rpki-client