$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/a8478cd5-6e87-34f0-b54b-e5f2ab41f7cc.roa File: a8478cd5-6e87-34f0-b54b-e5f2ab41f7cc.roa (raw, json) Hash identifier: dy5gJAhYQFLWMHSV1bg0tUNlldnSqistazkG6dbuKdI= Subject key identifier: CE:A5:C5:4D:B0:93:95:31:30:A2:D6:40:1A:CE:A9:18:DB:D1:99:72 Certificate issuer: /CN=d5cea8ba-a1a0-49ac-b5d4-1d207695255c Certificate serial: 010D0C9F432858480D3FC2663091F1C427BB3880 Authority key identifier: 87:BA:96:8A:82:31:42:0D:8E:1C:C4:65:10:67:9B:B3:89:97:3B:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/a8478cd5-6e87-34f0-b54b-e5f2ab41f7cc.roa Signing time: Sat 30 Nov 2024 14:00:50 +0000 ROA not before: Sat 30 Nov 2024 14:00:50 +0000 ROA not after: Fri 28 Feb 2025 14:00:50 +0000 asID: 399856 IP address blocks: 45.45.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0d:3f:c2:66:30:91:f1:c4:27:bb:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5cea8ba-a1a0-49ac-b5d4-1d207695255c Validity Not Before: Nov 30 14:00:50 2024 GMT Not After : Feb 28 14:00:50 2025 GMT Subject: CN=869c4b88-d4bb-4d73-a2d0-b8314061ca16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a3:d1:63:3d:be:a6:06:8e:5b:30:b8:c6:f5: ed:6a:85:2a:b1:87:82:d8:14:a0:d5:f6:84:1f:7e: 2e:6d:b0:ef:30:3b:fe:cd:53:e4:6c:45:c3:4b:1c: 06:af:20:78:da:4c:87:4f:00:8c:9e:b2:59:b1:cc: 54:4f:8c:47:e5:fe:82:40:4b:e8:bd:6e:62:04:1c: 91:73:5c:98:cd:56:e5:d3:90:29:ef:69:5b:22:e9: 37:a0:21:76:32:25:c5:90:59:cf:44:78:22:ef:40: 2d:9d:d9:c6:d4:71:f1:d9:f3:28:8d:96:72:13:1c: 1b:fc:ed:b0:8a:ae:b6:26:49:a3:2a:c1:1a:50:ad: bf:8d:60:58:17:2c:63:06:2c:0b:37:60:e7:83:c6: 77:e4:bd:9d:ac:fd:4c:ec:c7:ae:46:c2:67:a4:42: 3b:1d:94:ad:6d:67:98:be:33:d2:5b:c3:00:8c:5b: 2e:b8:53:f6:9d:61:92:92:0b:76:56:1e:67:96:6f: 0c:e5:d1:5c:e9:73:0e:a1:5f:08:be:77:7c:d2:3a: fc:59:d1:fc:43:6b:62:a7:f5:d3:0c:f1:ec:0a:01: b9:1e:02:c3:4c:bc:8f:8b:a3:96:dc:54:20:1b:dd: b6:40:ce:54:3d:10:40:5f:eb:ec:75:24:e3:60:a1: c0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A5:C5:4D:B0:93:95:31:30:A2:D6:40:1A:CE:A9:18:DB:D1:99:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/a8478cd5-6e87-34f0-b54b-e5f2ab41f7cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.crl X509v3 Authority Key Identifier: keyid:87:BA:96:8A:82:31:42:0D:8E:1C:C4:65:10:67:9B:B3:89:97:3B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d5cea8ba-a1a0-49ac-b5d4-1d207695255c.cer sbgp-ipAddrBlock: critical IPv4: 45.45.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:39:51:eb:fb:f4:36:9b:fe:6d:78:2e:84:3d:a9:b9:27:6a: 8a:df:38:4a:74:58:c7:bc:6a:2a:79:9e:36:c5:09:1f:af:73: d1:e1:4f:0f:38:b2:25:93:f5:53:a9:11:31:3f:a6:0f:6d:f4: 7e:8d:c5:2a:62:8d:69:7a:e4:b0:33:fa:fd:d8:f9:3e:24:ed: 6a:89:a8:00:95:a2:de:38:cb:18:54:dc:69:38:36:74:bc:41: 0f:d4:d8:dd:fb:63:45:50:0a:57:14:f1:a1:ac:bc:59:99:a7: 92:61:d1:ab:d9:85:e4:20:ff:c3:f1:22:22:b0:78:f3:72:19: 80:72:00:de:48:b7:60:7d:1e:d3:c8:ac:0f:ec:87:35:00:a7: 72:89:4e:22:a7:24:5d:2a:b9:43:e4:f3:02:23:c2:a2:21:7d: f2:43:8a:d4:0f:79:08:0b:16:18:4c:20:ff:aa:0d:d0:ab:6d: 3f:bb:dc:22:f4:03:7c:bc:27:d9:47:91:a9:f9:90:71:a7:f9: d3:a7:7d:32:1f:81:11:65:d6:c0:6a:3a:30:73:04:23:b6:0e: 69:66:d4:bd:c4:98:5f:2c:5e:1e:24:32:63:77:48:9f:6d:0b: 6d:11:65:b3:d9:3a:73:94:19:e5:72:4a:3d:47:f9:3d:cf:6d: 96:65:d1:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgNP8JmMJHxxCe7OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVjZWE4YmEtYTFhMC00OWFjLWI1ZDQtMWQyMDc2OTUy NTVjMB4XDTI0MTEzMDE0MDA1MFoXDTI1MDIyODE0MDA1MFowLzEtMCsGA1UEAxMk ODY5YzRiODgtZDRiYi00ZDczLWEyZDAtYjgzMTQwNjFjYTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6PRYz2+pgaOWzC4xvXtaoUqsYeC2BSg1faE H34ubbDvMDv+zVPkbEXDSxwGryB42kyHTwCMnrJZscxUT4xH5f6CQEvovW5iBByR c1yYzVbl05Ap72lbIuk3oCF2MiXFkFnPRHgi70AtndnG1HHx2fMojZZyExwb/O2w iq62JkmjKsEaUK2/jWBYFyxjBiwLN2Dng8Z35L2drP1M7MeuRsJnpEI7HZStbWeY vjPSW8MAjFsuuFP2nWGSkgt2Vh5nlm8M5dFc6XMOoV8Ivnd80jr8WdH8Q2tip/XT DPHsCgG5HgLDTLyPi6OW3FQgG922QM5UPRBAX+vsdSTjYKHAOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6lxU2wk5UxMKLWQBrOqRjb0ZlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNWNl YThiYS1hMWEwLTQ5YWMtYjVkNC0xZDIwNzY5NTI1NWMvYTg0NzhjZDUtNmU4Ny0z NGYwLWI1NGItZTVmMmFiNDFmN2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDVjZWE4YmEtYTFhMC00OWFjLWI1 ZDQtMWQyMDc2OTUyNTVjL2Q1Y2VhOGJhLWExYTAtNDlhYy1iNWQ0LTFkMjA3Njk1 MjU1Yy5jcmwwHwYDVR0jBBgwFoAUh7qWioIxQg2OHMRlEGebs4mXO/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNWNlYThiYS1hMWEwLTQ5YWMtYjVkNC0xZDIw NzY5NTI1NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA5Uev79Dab/m14LoQ9qbknaorfOEp0WMe8aip5njbFCR+vc9HhTw84 siWT9VOpETE/pg9t9H6NxSpijWl65LAz+v3Y+T4k7WqJqACVot44yxhU3Gk4NnS8 QQ/U2N37Y0VQClcU8aGsvFmZp5Jh0avZheQg/8PxIiKwePNyGYByAN5It2B9HtPI rA/shzUAp3KJTiKnJF0quUPk8wIjwqIhffJDitQPeQgLFhhMIP+qDdCrbT+73CL0 A3y8J9lHkan5kHGn+dOnfTIfgRFl1sBqOjBzBCO2Dmlm1L3EmF8sXh4kMmN3SJ9t C20RZbPZOnOUGeVySj1H+T3PbZZl0WA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:03 2025 by rpki-client