$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/28c552d3-cbde-3f46-a3fd-f2c50b01acd9.roa File: 28c552d3-cbde-3f46-a3fd-f2c50b01acd9.roa (raw, json) Hash identifier: kGWg2JM6b8zViuV8nRVcu3gZzyHJKZkYsmtFj+qUww4= Subject key identifier: 42:CA:19:57:98:B4:22:D6:26:81:52:AB:43:AE:B6:36:37:21:4E:5C Certificate issuer: /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd Certificate serial: 010D0C9F43285848A29B4BEC36625FCB46A84280 Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/28c552d3-cbde-3f46-a3fd-f2c50b01acd9.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 34553 IP address blocks: 45.59.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:4b:ec:36:62:5f:cb:46:a8:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=4278b9f8-73d1-4a17-8f6b-8664fbaf520e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e8:ca:04:81:f9:87:2f:ac:fa:6f:0c:6b:7f: c2:75:1f:57:6d:a9:bf:c5:67:68:d2:42:d5:b2:c6: 15:2a:cf:fe:6d:47:5b:89:2a:23:28:fe:39:9d:cf: 46:9b:22:7a:5e:17:5b:15:3d:a0:c2:59:99:00:a6: 6a:6f:8e:6d:de:2d:5d:13:33:04:94:ea:28:bc:06: 06:b4:9a:5c:31:d2:66:d4:9a:0b:ca:bf:32:9a:e7: f7:4c:87:e0:ec:51:99:cb:5e:3a:85:89:dd:e1:e9: 74:86:84:da:a4:76:01:3d:e3:a8:a8:fb:55:f1:42: 09:13:f8:ee:0a:d9:b0:00:b1:be:26:41:5f:55:44: 30:e0:d3:94:f0:dd:5c:1f:5a:58:89:d6:34:63:31: b3:2e:83:2d:bd:6c:17:3a:63:72:23:c0:d0:38:d5: d2:e7:95:98:91:af:63:42:13:f3:f5:b9:8c:77:ca: fd:e7:ba:93:ee:4a:68:20:28:9c:9c:ac:68:3b:19: 98:8b:24:db:d7:ff:07:9b:9c:f8:fb:73:c7:d1:e9: ab:30:3c:ee:57:ba:d2:4e:fe:f6:da:dd:cb:ce:83: 05:e0:af:83:81:f9:d7:fc:26:7f:f0:fa:3d:88:a7: 9a:76:23:03:65:89:d2:da:bc:cb:ab:77:b5:bb:a8: 38:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CA:19:57:98:B4:22:D6:26:81:52:AB:43:AE:B6:36:37:21:4E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/28c552d3-cbde-3f46-a3fd-f2c50b01acd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl X509v3 Authority Key Identifier: keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer sbgp-ipAddrBlock: critical IPv4: 45.59.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:49:ec:d4:76:16:cf:28:b1:8b:cf:68:53:94:35:8c:14:b5: 8b:13:25:a5:6b:c6:84:18:e4:94:d7:f7:f7:b5:cf:25:5c:0f: db:c0:5f:6a:6e:1f:ad:7d:56:30:e1:7b:95:e4:6d:33:28:e1: 8a:ee:3f:62:99:5a:b3:8c:2a:6a:0c:06:45:39:81:65:c1:44: 5d:64:5a:f6:06:92:f0:eb:22:53:78:0b:8b:56:64:26:10:e4: 5f:56:00:8d:e3:47:30:69:0f:7d:d3:61:48:91:3e:da:a2:f1: dc:fd:ba:b9:81:11:f9:cb:e5:4c:a3:6c:cb:6d:f6:93:c5:d3: 69:c6:82:1a:fe:e0:95:20:ae:aa:a8:38:b2:9f:1d:f0:da:b3: 61:4d:71:35:35:a7:2f:32:ba:fe:1f:f0:dd:44:c1:aa:a5:fc: df:62:69:7c:39:56:b2:95:a3:71:df:27:00:ac:54:19:98:ca: 98:ce:3f:31:a7:12:72:dc:26:14:4e:ec:53:a6:6c:28:1c:7c: c8:70:d1:92:f1:8d:2a:9d:b1:b1:b1:63:f8:1d:d7:ce:34:bb: b4:90:e7:90:51:eb:d0:79:42:2e:dc:6f:9b:d5:2c:19:bc:06: 47:b8:6d:3f:b8:2f:7c:73:a7:55:23:81:ec:63:73:eb:7b:00: f0:98:09:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim0vsNmJfy0aoQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3NzJiNGItMTVmYi00YjM4LWI1MDUtZGZlOTE1ZGFl OWNkMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk NDI3OGI5ZjgtNzNkMS00YTE3LThmNmItODY2NGZiYWY1MjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OjKBIH5hy+s+m8Ma3/CdR9Xbam/xWdo0kLV ssYVKs/+bUdbiSojKP45nc9GmyJ6XhdbFT2gwlmZAKZqb45t3i1dEzMElOoovAYG tJpcMdJm1JoLyr8ymuf3TIfg7FGZy146hYnd4el0hoTapHYBPeOoqPtV8UIJE/ju CtmwALG+JkFfVUQw4NOU8N1cH1pYidY0YzGzLoMtvWwXOmNyI8DQONXS55WYka9j QhPz9bmMd8r957qT7kpoICicnKxoOxmYiyTb1/8Hm5z4+3PH0emrMDzuV7rSTv72 2t3LzoMF4K+DgfnX/CZ/8Po9iKeadiMDZYnS2rzLq3e1u6g41wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELKGVeYtCLWJoFSq0OutjY3IU5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3 MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5MTVkYWU5Y2QvMjhjNTUyZDMtY2JkZS0z ZjQ2LWEzZmQtZjJjNTBiMDFhY2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGM3NzJiNGItMTVmYi00YjM4LWI1 MDUtZGZlOTE1ZGFlOWNkLzBjNzcyYjRiLTE1ZmItNGIzOC1iNTA1LWRmZTkxNWRh ZTljZC5jcmwwHwYDVR0jBBgwFoAU8UVSzOYiTilOFS1c5L3dBToItXIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5 MTVkYWU5Y2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxJ7NR2Fs8osYvPaFOUNYwUtYsTJaVrxoQY5JTX9/e1zyVcD9vAX2pu H619VjDhe5XkbTMo4YruP2KZWrOMKmoMBkU5gWXBRF1kWvYGkvDrIlN4C4tWZCYQ 5F9WAI3jRzBpD33TYUiRPtqi8dz9urmBEfnL5UyjbMtt9pPF02nGghr+4JUgrqqo OLKfHfDas2FNcTU1py8yuv4f8N1Ewaql/N9iaXw5VrKVo3HfJwCsVBmYypjOPzGn EnLcJhRO7FOmbCgcfMhw0ZLxjSqdsbGxY/gd1840u7SQ55BR69B5Qi7cb5vVLBm8 Bke4bT+4L3xzp1Ujgexjc+t7APCYCd0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:12 2025 by rpki-client