$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/1542f51d-2157-31f8-91cd-a013c591d66f.roa File: 1542f51d-2157-31f8-91cd-a013c591d66f.roa (raw, json) Hash identifier: PQcjHaWb8UufRw3jOSCdyO3eQKl/lawwJLX5tB6SduM= Subject key identifier: 91:B6:77:F0:B8:71:E9:70:77:33:82:75:83:9C:57:D0:4A:4B:BB:60 Certificate issuer: /CN=35c42a25-42c3-46fe-9914-5b8394eae9b1 Certificate serial: 010D0C9F43285848A1361DC35C4F518F7FFE0440 Authority key identifier: 03:BA:AD:1D:6A:A5:E8:52:56:17:AE:8D:E4:EB:87:44:65:38:E6:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/1542f51d-2157-31f8-91cd-a013c591d66f.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 26658 IP address blocks: 45.42.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:1d:c3:5c:4f:51:8f:7f:fe:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35c42a25-42c3-46fe-9914-5b8394eae9b1 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=411f8ff5-c03f-43c1-b744-a2c1f701d77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:66:28:79:ed:dc:44:81:d7:66:e9:39:d5:a4: 1c:6d:28:34:e8:c5:80:ad:ab:83:27:a4:ca:c3:72: 5e:59:20:6b:f9:1c:ad:89:19:5a:56:d4:41:b2:2a: 37:56:4b:1a:1a:59:f9:f5:6b:d5:25:94:69:58:61: b3:a0:d6:a8:c0:f8:4e:bc:f5:5e:c4:0d:4c:82:a6: 8a:cc:a2:26:ad:9d:91:d5:63:4d:49:90:87:fe:01: 3c:79:0e:bd:5f:a4:39:14:eb:09:ca:49:38:f4:97: 51:0d:d8:eb:7c:79:70:04:7c:c8:54:ae:6d:23:13: 3b:a0:f3:7c:f9:7d:06:9f:e6:4a:19:bd:02:76:60: e8:fa:de:bc:1b:c1:23:5d:b4:1e:20:55:46:89:5b: 66:63:1d:91:2d:49:08:79:87:40:b4:bc:2c:50:ac: 92:1c:5a:df:08:9f:13:6c:c8:b5:89:2b:eb:66:e0: 51:da:54:03:88:2c:da:93:9f:1a:b2:6e:2f:8a:ff: f1:32:06:93:07:64:14:8c:2c:f7:d9:fd:b3:ae:b5: fd:5a:46:21:57:c0:94:75:4e:1b:41:fa:ef:93:c6: 03:b7:92:d6:e3:f5:b0:b5:64:6b:22:ed:84:a8:f4: ac:41:9d:0e:6a:51:33:c5:2e:c9:ec:d4:33:0e:ae: eb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B6:77:F0:B8:71:E9:70:77:33:82:75:83:9C:57:D0:4A:4B:BB:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/1542f51d-2157-31f8-91cd-a013c591d66f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.crl X509v3 Authority Key Identifier: keyid:03:BA:AD:1D:6A:A5:E8:52:56:17:AE:8D:E4:EB:87:44:65:38:E6:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer sbgp-ipAddrBlock: critical IPv4: 45.42.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:fe:43:5b:10:a9:f4:c9:d5:44:c0:6d:f0:ac:44:76:54:c7: 50:35:77:31:ae:71:72:f8:2c:55:99:84:32:ea:c8:29:4f:b7: 70:ea:a1:c1:26:ed:47:cf:67:d7:49:25:22:46:f5:cb:e9:72: 4f:95:0e:ca:c4:07:ac:2f:90:7b:8c:aa:e7:53:55:83:77:7a: 3e:91:b1:44:ae:8b:9e:77:a6:90:23:22:86:63:01:06:b3:b1: 18:2b:ed:f8:57:6d:25:bc:4e:30:ed:12:cb:6d:18:70:f7:94: da:e8:87:cf:db:01:f5:c5:15:59:28:ad:f6:3b:6c:bd:da:7c: ed:12:c0:15:77:de:23:a2:3c:06:bc:f3:3e:22:45:6b:6f:10: 0f:e4:3a:3a:ee:42:29:59:b9:b8:0d:fe:28:d7:fd:ac:1e:e0: 70:c0:f8:39:21:1a:d2:41:8f:5a:2a:9a:35:d1:aa:2e:4c:7b: e8:a2:90:f7:a2:ef:0e:ca:b6:de:9f:fa:6e:82:2b:73:03:fc: 46:c4:0d:e3:59:03:36:fe:72:01:ef:fe:92:bf:9b:e1:04:f1: 9a:0e:a4:22:5d:fd:ad:78:29:d1:e7:84:a4:88:e3:70:88:98: 87:bd:87:bc:04:07:f5:57:c5:df:a6:64:49:e1:ac:36:89:a8: 2d:9b:fa:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNh3DXE9Rj3/+BEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjNDJhMjUtNDJjMy00NmZlLTk5MTQtNWI4Mzk0ZWFl OWIxMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NDExZjhmZjUtYzAzZi00M2MxLWI3NDQtYTJjMWY3MDFkNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGYoee3cRIHXZuk51aQcbSg06MWArauDJ6TK w3JeWSBr+RytiRlaVtRBsio3VksaGln59WvVJZRpWGGzoNaowPhOvPVexA1MgqaK zKImrZ2R1WNNSZCH/gE8eQ69X6Q5FOsJykk49JdRDdjrfHlwBHzIVK5tIxM7oPN8 +X0Gn+ZKGb0CdmDo+t68G8EjXbQeIFVGiVtmYx2RLUkIeYdAtLwsUKySHFrfCJ8T bMi1iSvrZuBR2lQDiCzak58asm4viv/xMgaTB2QUjCz32f2zrrX9WkYhV8CUdU4b Qfrvk8YDt5LW4/WwtWRrIu2EqPSsQZ0OalEzxS7J7NQzDq7rWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG2d/C4celwdzOCdYOcV9BKS7tgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNWM0 MmEyNS00MmMzLTQ2ZmUtOTkxNC01YjgzOTRlYWU5YjEvMTU0MmY1MWQtMjE1Ny0z MWY4LTkxY2QtYTAxM2M1OTFkNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzVjNDJhMjUtNDJjMy00NmZlLTk5 MTQtNWI4Mzk0ZWFlOWIxLzM1YzQyYTI1LTQyYzMtNDZmZS05OTE0LTViODM5NGVh ZTliMS5jcmwwHwYDVR0jBBgwFoAUA7qtHWql6FJWF66N5OuHRGU45vswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNWM0MmEyNS00MmMzLTQ2ZmUtOTkxNC01Yjgz OTRlYWU5YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELSpQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf+Q1sQqfTJ1UTAbfCsRHZUx1A1dzGucXL4LFWZhDLqyClPt3DqocEm 7UfPZ9dJJSJG9cvpck+VDsrEB6wvkHuMqudTVYN3ej6RsUSui553ppAjIoZjAQaz sRgr7fhXbSW8TjDtEsttGHD3lNroh8/bAfXFFVkorfY7bL3afO0SwBV33iOiPAa8 8z4iRWtvEA/kOjruQilZubgN/ijX/awe4HDA+DkhGtJBj1oqmjXRqi5Me+iikPei 7w7Ktt6f+m6CK3MD/EbEDeNZAzb+cgHv/pK/m+EE8ZoOpCJd/a14KdHnhKSI43CI mIe9h7wEB/VXxd+mZEnhrDaJqC2b+qU= -----END CERTIFICATE-----Generated at Fri Mar 14 11:29:15 2025 by rpki-client