$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/7955ed0f-1153-3896-a51e-5d367bf0cc64.roa File: 7955ed0f-1153-3896-a51e-5d367bf0cc64.roa (raw, json) Hash identifier: Ap3t+hX/iswYLlvKxQHjWgwIRJve2DGBhvO9Uao3HOg= Subject key identifier: BA:1D:0A:8C:19:8A:42:1E:12:68:F0:13:A6:7A:B9:A7:B4:20:23:CC Certificate issuer: /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Certificate serial: 010D0C9F4328584940394FA043570D3183DD03A0 Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/7955ed0f-1153-3896-a51e-5d367bf0cc64.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 30204 IP address blocks: 45.45.194.0/24 maxlen: 24 2602:fc39:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4f:a0:43:57:0d:31:83:dd:03:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=5a3a92db-ad7f-4ac3-a5eb-0b11e9cfc9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:88:33:c6:c9:a3:e2:a5:1d:37:6b:59:19:a7: 0e:53:63:31:4a:62:83:fc:90:ec:7a:9e:32:80:e4: 1d:97:6e:1d:c5:a3:31:ac:c5:9e:8b:73:38:05:83: 4e:e9:26:6c:32:c6:8c:ba:84:a6:6b:df:86:28:4d: 02:b4:47:63:28:33:69:41:88:8e:8d:2e:26:4b:39: af:53:b5:2c:86:c6:b8:ec:7d:33:5e:62:40:21:8b: 0d:19:9a:f3:59:60:28:9f:e4:c4:88:e1:23:f5:c5: 26:59:7e:86:b7:74:7f:05:ba:66:4d:4a:fa:f8:87: 3f:52:0a:51:59:a1:d6:b3:6c:89:23:76:15:81:95: 8a:c1:b3:75:86:bc:b1:f3:8f:46:a5:e3:ec:31:ce: 3e:ed:d4:be:9d:b6:5f:e7:dc:15:e5:d0:5b:52:3c: 60:b8:fc:f9:72:52:99:d1:96:a9:3e:43:5d:e0:65: 7f:30:cd:da:dc:cf:56:f0:5b:13:60:5f:57:a0:c2: 87:98:48:47:26:f2:71:7d:41:52:3c:b3:12:a2:c6: f5:de:42:c8:6c:c3:f4:a1:ee:5a:d2:21:b3:f9:c3: d4:c7:64:16:e1:84:ad:7d:fe:43:c0:31:d6:67:d7: 54:10:e6:d6:b4:46:8b:b0:dd:95:e3:de:13:0e:5b: a3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1D:0A:8C:19:8A:42:1E:12:68:F0:13:A6:7A:B9:A7:B4:20:23:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/7955ed0f-1153-3896-a51e-5d367bf0cc64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl X509v3 Authority Key Identifier: keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer sbgp-ipAddrBlock: critical IPv4: 45.45.194.0/24 IPv6: 2602:fc39:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:0f:03:63:46:41:4f:c3:f5:e6:70:ff:e8:a6:67:ac:a6:59: 0e:3b:14:dd:8c:ca:dc:45:f7:f3:fa:18:a7:6f:7e:5b:d1:9d: ae:9a:f4:33:3d:6e:7d:93:9b:25:de:3f:02:ae:df:4c:c0:53: f3:d4:53:bd:72:f3:8e:7e:fc:f2:76:cf:26:75:82:6e:6e:0b: a7:49:a5:57:3a:2b:5c:5d:fd:38:2e:42:3a:9b:e1:da:9d:46: cf:55:6f:62:63:d6:c2:9b:54:cb:2f:db:50:7b:df:2c:9e:6f: b4:cd:ac:dc:29:93:51:eb:32:f9:ad:85:ea:42:ef:7c:08:7c: 3d:1e:a6:39:08:39:e6:41:6c:59:f2:74:ad:d3:d0:4f:2c:77: ba:8c:7d:7f:ab:8e:05:1d:3b:1c:88:01:dd:a1:96:37:05:40: dc:e3:75:bf:7e:87:87:83:62:0a:47:9c:8d:81:a7:2b:a0:64: d2:b4:fe:b5:fc:a0:55:d4:07:26:0f:fe:76:b8:2c:1f:04:b8: 36:22:1f:73:a3:a4:4b:a3:92:e3:05:85:db:69:6f:6c:2c:1c: 39:fa:87:1d:cc:a6:41:fc:8c:cf:46:04:09:8e:a1:86:bc:6a: ae:fa:e2:10:1c:f5:4a:90:3a:ea:fd:eb:50:68:10:96:46:c1: 97:cf:06:25 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWElAOU+gQ1cNMYPdA6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRkNzFkYTktNmZmMS00OWFiLWExZTUtNmM0OGY4ZjBj MWQ2MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NWEzYTkyZGItYWQ3Zi00YWMzLWE1ZWItMGIxMWU5Y2ZjOWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4gzxsmj4qUdN2tZGacOU2MxSmKD/JDsep4y gOQdl24dxaMxrMWei3M4BYNO6SZsMsaMuoSma9+GKE0CtEdjKDNpQYiOjS4mSzmv U7Ushsa47H0zXmJAIYsNGZrzWWAon+TEiOEj9cUmWX6Gt3R/BbpmTUr6+Ic/UgpR WaHWs2yJI3YVgZWKwbN1hryx849GpePsMc4+7dS+nbZf59wV5dBbUjxguPz5clKZ 0ZapPkNd4GV/MM3a3M9W8FsTYF9XoMKHmEhHJvJxfUFSPLMSosb13kLIbMP0oe5a 0iGz+cPUx2QW4YStff5DwDHWZ9dUEObWtEaLsN2V494TDlujiQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLodCowZikIeEmjwE6Z6uae0ICPMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3 MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4ZjhmMGMxZDYvNzk1NWVkMGYtMTE1My0z ODk2LWE1MWUtNWQzNjdiZjBjYzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRkNzFkYTktNmZmMS00OWFiLWEx ZTUtNmM0OGY4ZjBjMWQ2L2I0ZDcxZGE5LTZmZjEtNDlhYi1hMWU1LTZjNDhmOGYw YzFkNi5jcmwwHwYDVR0jBBgwFoAUT4QpIPFqZbJeSMpRP7Uli1CK9fswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4 ZjhmMGMxZDYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALS3CMA8E AgACMAkDBwAmAvw5AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZw8DY0ZBT8P15nD/6KZnrKZZDjsU3YzK 3EX38/oYp29+W9Gdrpr0Mz1ufZObJd4/Aq7fTMBT89RTvXLzjn788nbPJnWCbm4L p0mlVzorXF39OC5COpvh2p1Gz1VvYmPWwptUyy/bUHvfLJ5vtM2s3CmTUesy+a2F 6kLvfAh8PR6mOQg55kFsWfJ0rdPQTyx3uox9f6uOBR07HIgB3aGWNwVA3ON1v36H h4NiCkecjYGnK6Bk0rT+tfygVdQHJg/+drgsHwS4NiIfc6OkS6OS4wWF22lvbCwc OfqHHcymQfyMz0YECY6hhrxqrvriEBz1SpA66v3rUGgQlkbBl88GJQ== -----END CERTIFICATE-----Generated at Sat Apr 12 13:09:28 2025 by rpki-client