$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa File: 00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa (raw, json) Hash identifier: vnIG+BB6Z2YyQw2JoD6TOBfqsDMVkEJG1VUM8qyqs/Q= Subject key identifier: C6:CC:67:07:3A:8F:97:14:78:DC:F1:1E:E2:4D:3E:B0:E9:A1:86:34 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F432858487755E25C2CF2F72838C15E00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 11290 IP address blocks: 45.42.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:e2:5c:2c:f2:f7:28:38:c1:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=b6c211fd-c0f9-400d-8fa1-812fd2d39c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b1:9c:f9:a0:0a:12:31:9e:b5:27:b0:3a:9a: be:a2:6a:a4:d4:2f:bc:17:0b:5f:36:bc:d6:2d:d9: 72:c8:3c:14:78:e0:7a:42:d1:fe:34:b1:80:e8:72: 8d:df:36:44:38:63:80:58:79:83:da:8f:58:1d:52: 41:70:0b:f8:23:32:70:59:f8:b8:6f:71:b6:94:ac: 5a:dc:5f:4b:61:3c:6f:c7:75:0c:64:83:ea:d8:29: b0:ae:8e:1e:8d:85:3f:3e:3c:a6:3d:53:31:da:df: d7:65:bc:11:5e:09:e4:29:7f:45:75:ad:b7:3d:38: 1e:c9:11:6b:e2:ea:e5:bd:93:ca:a7:3a:2a:fc:d0: 7c:84:e9:af:eb:b4:c1:d7:28:6e:f4:09:83:f8:4d: f2:6d:c5:98:ee:af:84:d6:50:41:a5:f5:d5:4b:49: 8b:9a:53:73:a8:fb:7c:ec:d1:a4:73:ab:87:4e:97: c7:e2:5f:25:76:37:a2:b8:3b:b5:4e:8d:aa:b8:43: f8:9f:0e:dc:f6:39:ed:f6:6e:8c:59:92:0e:0a:0a: 35:5f:97:6e:85:84:ca:06:3c:3f:56:9c:74:47:bb: d7:13:a9:ec:b1:36:22:0a:d5:b1:de:98:a0:2e:5c: ed:66:95:06:65:13:fb:ce:ab:3b:e9:1f:90:7c:ca: 9e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CC:67:07:3A:8F:97:14:78:DC:F1:1E:E2:4D:3E:B0:E9:A1:86:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 45.42.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ba:12:3d:ec:b8:31:78:51:5c:03:35:55:61:a2:bb:0d:d4: 80:6c:6a:64:b5:88:f9:3b:3f:c8:dc:f0:ae:69:5d:40:50:c9: d4:94:c8:b1:a7:bc:eb:5d:b8:cf:4f:ee:43:63:ea:29:92:9c: 77:68:2a:f0:44:cf:13:ae:cf:9c:b4:c5:59:5e:26:63:5a:b0: 27:cc:2a:26:77:37:c4:d5:4e:1e:be:c6:48:e5:44:6f:4d:2e: 88:b4:ad:ad:f4:a5:24:45:c9:6b:b1:d1:32:94:1e:50:25:d2: bc:f4:e6:85:37:a8:e7:ee:63:3e:8e:e3:de:7f:ba:31:50:9a: 0a:53:d3:e4:06:1e:d4:b0:ef:2b:a7:5f:23:0b:b3:2e:5f:e7: d2:53:6d:bd:26:1b:dc:18:98:06:27:73:bb:8d:87:ce:fc:64: e3:a7:6a:ee:84:a7:91:58:2d:f3:c1:80:31:f1:3f:d9:34:0d: 64:e5:c2:59:fb:af:d3:cb:78:cb:fc:99:94:79:9a:ba:17:a5: b8:eb:ee:dd:ae:81:f7:6d:76:ce:e0:63:8f:66:73:03:4f:eb: df:2a:23:36:8c:08:19:03:aa:80:8a:1b:c4:fc:db:7c:cc:7e: 83:8c:ec:a5:29:0c:95:44:3a:b5:ac:b9:07:9d:93:89:b0:96: cc:7d:36:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VeJcLPL3KDjBXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk YjZjMjExZmQtYzBmOS00MDBkLThmYTEtODEyZmQyZDM5YzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrGc+aAKEjGetSewOpq+omqk1C+8FwtfNrzW LdlyyDwUeOB6QtH+NLGA6HKN3zZEOGOAWHmD2o9YHVJBcAv4IzJwWfi4b3G2lKxa 3F9LYTxvx3UMZIPq2Cmwro4ejYU/PjymPVMx2t/XZbwRXgnkKX9Fda23PTgeyRFr 4urlvZPKpzoq/NB8hOmv67TB1yhu9AmD+E3ybcWY7q+E1lBBpfXVS0mLmlNzqPt8 7NGkc6uHTpfH4l8ldjeiuDu1To2quEP4nw7c9jnt9m6MWZIOCgo1X5duhYTKBjw/ Vpx0R7vXE6nssTYiCtWx3pigLlztZpUGZRP7zqs76R+QfMqedwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbMZwc6j5cUeNzxHuJNPrDpoYY0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMDBmN2E0ZjctYmZlNC0z MGYzLWFmOTktYjRlM2M5ZjkzODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFO6Ej3suDF4UVwDNVVhorsN1IBsamS1iPk7P8jc8K5pXUBQydSUyLGn vOtduM9P7kNj6imSnHdoKvBEzxOuz5y0xVleJmNasCfMKiZ3N8TVTh6+xkjlRG9N Loi0ra30pSRFyWux0TKUHlAl0rz05oU3qOfuYz6O495/ujFQmgpT0+QGHtSw7yun XyMLsy5f59JTbb0mG9wYmAYnc7uNh878ZOOnau6Ep5FYLfPBgDHxP9k0DWTlwln7 r9PLeMv8mZR5mroXpbjr7t2ugfdtds7gY49mcwNP698qIzaMCBkDqoCKG8T823zM foOM7KUpDJVEOrWsuQedk4mwlsx9NoA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:48 2025 by rpki-client