$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa File: 5e00859f-bf20-388d-a400-94e4c09e3154.roa (raw, json) Hash identifier: GQySP7mJ9WZeb+2a6UUNHhFEat4mJjl5KRninAnWQc0= Subject key identifier: AA:33:BE:33:8D:BC:1D:8A:16:98:A9:82:DD:47:77:30:28:EA:8B:03 Certificate issuer: /CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Certificate serial: 010D0C9F43285849244E81833D93AAC7852DF340 Authority key identifier: 21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 399769 IP address blocks: 45.45.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:81:83:3d:93:aa:c7:85:2d:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=1fd1f304-9d28-41ae-868e-8bf33096daaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b6:c5:cf:86:a4:88:33:24:59:d3:7d:b1:e3: 86:c7:fe:60:7b:f9:f7:3b:15:b5:b8:e2:27:03:dd: 43:0a:df:e1:04:dd:0e:42:d6:39:94:91:de:52:b2: 25:f9:55:cd:c4:b2:de:af:e0:00:67:28:7f:52:15: b9:48:3c:fd:04:e6:b1:ef:e6:b3:4b:2d:9a:a0:39: ec:a0:2b:41:6e:22:4c:11:fa:82:fe:f9:a9:e3:ca: bd:0e:bc:88:c1:e9:5a:5e:60:f5:f7:c6:07:45:f7: 29:f6:a0:a0:8f:26:fa:f4:68:9f:14:6c:80:b5:0d: 15:af:53:4d:18:ae:e5:f9:39:c4:09:74:9e:a5:8b: 43:05:11:aa:9f:0c:4f:92:d1:6e:e9:cc:15:91:81: 23:33:ad:60:ad:4a:97:c8:8f:7d:ff:12:d9:70:3d: 63:2b:ce:32:48:4b:59:9a:34:3d:27:01:fa:f5:1d: 06:99:5f:7a:07:49:de:30:5b:0f:ba:65:7f:9a:9c: 2f:dc:c9:88:09:38:51:86:5f:d0:aa:27:80:1c:74: 78:16:99:31:e5:46:da:92:fe:f2:0d:54:c9:50:c1: 5c:2e:06:e6:e3:a1:e2:c5:0e:e2:80:7e:fa:90:1b: 39:ea:cf:05:4b:31:39:e9:be:6a:1b:03:a9:19:bc: 24:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:33:BE:33:8D:BC:1D:8A:16:98:A9:82:DD:47:77:30:28:EA:8B:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl X509v3 Authority Key Identifier: keyid:21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer sbgp-ipAddrBlock: critical IPv4: 45.45.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b4:c0:57:e5:44:a9:36:ad:50:d0:a8:33:55:a1:db:01:cf: 02:75:66:5a:66:f4:fb:62:91:80:30:b9:2a:0b:79:1a:38:5a: a7:a5:88:74:23:cc:b0:32:c6:e9:b9:15:01:b3:2a:35:b3:2f: 2d:1e:40:4c:34:cb:56:54:60:37:29:ec:b4:a2:15:17:94:b0: 19:af:64:5f:ab:e9:c0:a4:8c:a1:b3:89:da:61:d3:0c:42:de: be:50:ff:b9:5e:8e:30:85:73:65:fd:7f:07:c8:48:89:ed:d9: d7:97:bd:2d:39:46:3f:5a:e3:a6:13:3d:76:00:75:a1:a1:23: d3:41:65:bd:09:8d:b1:3a:ab:c7:02:0f:a1:ce:f6:82:9c:0d: f7:2f:4b:8f:ce:18:af:d0:56:84:3c:6b:9c:14:94:7f:71:5a: 74:04:ff:be:9d:34:7a:d2:f3:c8:42:52:fd:65:d1:8b:cb:ff: ca:2d:4f:85:46:b3:5d:42:9d:6d:97:ba:3f:6d:70:0f:00:39: f0:4d:e2:4e:ff:3c:6f:0b:dd:ad:0c:d8:68:bc:78:af:5d:75: 85:9b:e0:90:86:b1:ef:57:6a:4a:23:f9:03:ad:f9:3a:a3:9e: a6:57:d1:ee:57:ea:3f:84:7e:84:8c:00:51:83:3e:b4:12:c8: 10:5e:f1:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkToGDPZOqx4Ut80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U3MGEyODctYWQ5Ny00YzFlLTk1NjQtOWNhMDY5ZjU3 YjE3MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MWZkMWYzMDQtOWQyOC00MWFlLTg2OGUtOGJmMzMwOTZkYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLbFz4akiDMkWdN9seOGx/5ge/n3OxW1uOIn A91DCt/hBN0OQtY5lJHeUrIl+VXNxLLer+AAZyh/UhW5SDz9BOax7+azSy2aoDns oCtBbiJMEfqC/vmp48q9DryIwelaXmD198YHRfcp9qCgjyb69GifFGyAtQ0Vr1NN GK7l+TnECXSepYtDBRGqnwxPktFu6cwVkYEjM61grUqXyI99/xLZcD1jK84ySEtZ mjQ9JwH69R0GmV96B0neMFsPumV/mpwv3MmICThRhl/QqieAHHR4Fpkx5Ubakv7y DVTJUMFcLgbm46HixQ7igH76kBs56s8FSzE56b5qGwOpGbwkkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKozvjONvB2KFpipgt1HdzAo6osDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcw YTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2EwNjlmNTdiMTcvNWUwMDg1OWYtYmYyMC0z ODhkLWE0MDAtOTRlNGMwOWUzMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U3MGEyODctYWQ5Ny00YzFlLTk1 NjQtOWNhMDY5ZjU3YjE3LzdlNzBhMjg3LWFkOTctNGMxZS05NTY0LTljYTA2OWY1 N2IxNy5jcmwwHwYDVR0jBBgwFoAUIRirvVv0Lhj3Bj0fRT81E1Sa+WAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcwYTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2Ew NjlmNTdiMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLS2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+0wFflRKk2rVDQqDNVodsBzwJ1Zlpm9PtikYAwuSoLeRo4WqeliHQj zLAyxum5FQGzKjWzLy0eQEw0y1ZUYDcp7LSiFReUsBmvZF+r6cCkjKGzidph0wxC 3r5Q/7lejjCFc2X9fwfISInt2deXvS05Rj9a46YTPXYAdaGhI9NBZb0JjbE6q8cC D6HO9oKcDfcvS4/OGK/QVoQ8a5wUlH9xWnQE/76dNHrS88hCUv1l0YvL/8otT4VG s11CnW2Xuj9tcA8AOfBN4k7/PG8L3a0M2Gi8eK9ddYWb4JCGse9Xakoj+QOt+Tqj nqZX0e5X6j+EfoSMAFGDPrQSyBBe8ZM= -----END CERTIFICATE-----Generated at Fri Apr 18 23:30:43 2025 by rpki-client