$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bea0e2f1-9a59-4dd3-a808-a412bd43f25d/eca87465-94aa-3501-8f92-416ab31da553.roa File: eca87465-94aa-3501-8f92-416ab31da553.roa (raw, json) Hash identifier: klx7Fa8T8RuFODEIsyWlBg/9ZDu1JzUuqEFUIWZgA6U= Subject key identifier: BE:A3:4E:1C:5C:BF:01:0A:54:D6:60:DC:DE:91:BC:01:55:9A:12:2F Certificate issuer: /CN=bea0e2f1-9a59-4dd3-a808-a412bd43f25d Certificate serial: 010D0C9F4328584919417C1BFF99D345CE3A38C0 Authority key identifier: 24:31:2C:7B:4F:6F:15:26:0B:89:1B:9F:10:C2:D2:16:84:B1:01:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bea0e2f1-9a59-4dd3-a808-a412bd43f25d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bea0e2f1-9a59-4dd3-a808-a412bd43f25d/eca87465-94aa-3501-8f92-416ab31da553.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 399287 IP address blocks: 45.42.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bea0e2f1-9a59-4dd3-a808-a412bd43f25d/bea0e2f1-9a59-4dd3-a808-a412bd43f25d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bea0e2f1-9a59-4dd3-a808-a412bd43f25d/bea0e2f1-9a59-4dd3-a808-a412bd43f25d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bea0e2f1-9a59-4dd3-a808-a412bd43f25d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:7c:1b:ff:99:d3:45:ce:3a:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea0e2f1-9a59-4dd3-a808-a412bd43f25d Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=e63cf6c1-ea88-4227-890a-b1f10e7ac8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9b:81:cc:0d:2b:96:66:8a:d1:33:31:60:8f: e2:df:24:fa:a4:18:59:3f:09:6c:98:24:a6:ca:4b: ec:0f:b9:a5:c7:94:07:f4:e8:ee:5c:63:26:0a:2c: ba:cf:9d:f3:8d:d6:59:24:f2:38:0b:ce:3b:20:87: ab:d4:59:72:3e:29:58:81:03:db:76:20:81:5e:61: d9:9d:a7:a9:93:4e:5b:92:87:97:24:ad:0c:37:d2: c0:d9:90:8d:37:cd:d4:2c:50:45:01:74:b5:46:51: 1b:6a:77:e0:d0:c3:e3:29:68:72:d5:b4:18:89:d4: 6b:64:a6:58:cb:df:43:57:ab:da:b3:9e:cf:5b:41: fe:88:c8:e2:a8:f8:01:05:23:fa:b0:2b:ff:d5:35: 12:34:4c:58:58:77:f0:85:e6:d0:06:5a:5e:a2:8d: f9:5b:ff:9f:06:62:4a:cb:5d:92:3f:7b:99:60:90: 6f:52:23:79:f7:c3:e9:63:cb:44:67:45:45:ca:45: 8d:89:42:32:8c:07:5a:2f:0f:87:1a:6a:a9:4d:ef: e2:d2:d4:2e:2c:cd:64:80:c0:0e:db:7f:f9:7e:b3: fa:f4:8a:d9:9d:d6:bf:f0:db:3c:a9:2d:c0:0f:27: 72:f4:69:da:af:aa:30:f1:db:d0:29:80:89:8d:91: ab:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A3:4E:1C:5C:BF:01:0A:54:D6:60:DC:DE:91:BC:01:55:9A:12:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bea0e2f1-9a59-4dd3-a808-a412bd43f25d/eca87465-94aa-3501-8f92-416ab31da553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bea0e2f1-9a59-4dd3-a808-a412bd43f25d/bea0e2f1-9a59-4dd3-a808-a412bd43f25d.crl X509v3 Authority Key Identifier: keyid:24:31:2C:7B:4F:6F:15:26:0B:89:1B:9F:10:C2:D2:16:84:B1:01:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bea0e2f1-9a59-4dd3-a808-a412bd43f25d.cer sbgp-ipAddrBlock: critical IPv4: 45.42.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:9c:e9:df:5f:da:fc:24:1e:e7:b5:f3:96:74:31:05:84:12: d6:77:88:9b:73:a7:be:7f:ad:cf:43:de:36:08:18:1d:8a:1f: df:db:9b:79:07:31:04:b0:06:07:39:55:20:97:6a:61:da:e9: 53:c9:eb:eb:9c:9c:91:99:0e:37:90:03:00:ca:07:8d:49:61: ba:d0:ea:6e:f8:4a:5b:de:16:c3:16:00:b9:f7:26:39:a8:57: b9:fe:50:5c:4b:a2:54:cd:a3:e8:9d:b7:d5:e6:27:23:74:5a: d8:d4:05:e9:8e:c2:48:ea:d4:cd:b6:a7:74:3e:e9:23:9b:7f: 6f:e6:58:fa:4b:04:5e:8d:a3:f2:b4:9f:68:c1:9e:12:d6:8c: 6e:5b:40:42:68:99:13:04:1d:ca:a9:88:ba:66:44:9e:cf:6f: 78:82:56:fe:d9:0d:a5:25:fa:9d:7e:a2:b9:73:85:f1:9a:01: 54:8a:de:33:05:65:65:30:1f:51:bf:00:88:c0:7d:5f:f2:95: 96:00:9b:f0:ac:17:ef:1e:f9:b6:9d:1a:b6:49:86:85:36:ed: 77:d0:1b:df:bd:b1:2c:b4:2f:03:85:f3:6e:b5:ab:44:57:b1: 4f:16:e3:d1:8f:2a:42:49:ba:3b:e2:2f:a7:dc:0a:67:7d:63: a4:d7:cd:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQXwb/5nTRc46OMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmVhMGUyZjEtOWE1OS00ZGQzLWE4MDgtYTQxMmJkNDNm MjVkMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZTYzY2Y2YzEtZWE4OC00MjI3LTg5MGEtYjFmMTBlN2FjOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJuBzA0rlmaK0TMxYI/i3yT6pBhZPwlsmCSm ykvsD7mlx5QH9OjuXGMmCiy6z53zjdZZJPI4C847IIer1FlyPilYgQPbdiCBXmHZ naepk05bkoeXJK0MN9LA2ZCNN83ULFBFAXS1RlEbanfg0MPjKWhy1bQYidRrZKZY y99DV6vas57PW0H+iMjiqPgBBSP6sCv/1TUSNExYWHfwhebQBlpeoo35W/+fBmJK y12SP3uZYJBvUiN598PpY8tEZ0VFykWNiUIyjAdaLw+HGmqpTe/i0tQuLM1kgMAO 23/5frP69IrZnda/8Ns8qS3ADydy9Gnar6ow8dvQKYCJjZGrLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6jThxcvwEKVNZg3N6RvAFVmhIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZWEw ZTJmMS05YTU5LTRkZDMtYTgwOC1hNDEyYmQ0M2YyNWQvZWNhODc0NjUtOTRhYS0z NTAxLThmOTItNDE2YWIzMWRhNTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmVhMGUyZjEtOWE1OS00ZGQzLWE4 MDgtYTQxMmJkNDNmMjVkL2JlYTBlMmYxLTlhNTktNGRkMy1hODA4LWE0MTJiZDQz ZjI1ZC5jcmwwHwYDVR0jBBgwFoAUJDEse09vFSYLiRufEMLSFoSxATUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZWEwZTJmMS05YTU5LTRkZDMtYTgwOC1hNDEy YmQ0M2YyNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSq1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+c6d9f2vwkHue185Z0MQWEEtZ3iJtzp75/rc9D3jYIGB2KH9/bm3kH MQSwBgc5VSCXamHa6VPJ6+ucnJGZDjeQAwDKB41JYbrQ6m74SlveFsMWALn3Jjmo V7n+UFxLolTNo+idt9XmJyN0WtjUBemOwkjq1M22p3Q+6SObf2/mWPpLBF6No/K0 n2jBnhLWjG5bQEJomRMEHcqpiLpmRJ7Pb3iCVv7ZDaUl+p1+orlzhfGaAVSK3jMF ZWUwH1G/AIjAfV/ylZYAm/CsF+8e+badGrZJhoU27XfQG9+9sSy0LwOF8261q0RX sU8W49GPKkJJujviL6fcCmd9Y6TXzXI= -----END CERTIFICATE-----Generated at Fri Apr 11 21:53:09 2025 by rpki-client