$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b2e2fe6e-2634-308a-8cb0-f946e1ab0c25.roa File: b2e2fe6e-2634-308a-8cb0-f946e1ab0c25.roa (raw, json) Hash identifier: SKXNX2LOj76sMSHMXOuj1ErfPmggQw+UNALt2QYYENs= Subject key identifier: 92:22:4C:D7:BA:A7:0B:A7:E6:DD:17:94:CC:20:C2:45:6F:AB:D7:E3 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848B35B678B2AD9950E9C800000 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b2e2fe6e-2634-308a-8cb0-f946e1ab0c25.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 400402 IP address blocks: 45.38.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:67:8b:2a:d9:95:0e:9c:80:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=28e71a98-bafd-4d32-ac23-0b25fcdaf200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:1c:1d:54:75:9e:46:22:7e:1d:76:00:73: e1:44:44:c6:b1:04:36:1a:4c:29:41:da:1c:d9:47: 48:7d:ce:9f:90:1d:4a:40:72:70:a1:dd:20:04:2d: 95:01:9f:19:da:f5:13:b8:59:06:64:a9:2c:6d:65: 90:c7:11:d7:b4:db:47:eb:60:03:7e:69:6d:e9:3c: 2f:16:8d:e3:fb:12:5d:a9:62:05:48:dd:d5:8b:d8: d3:b8:69:f7:f6:fb:61:db:77:76:57:1b:b4:7d:b2: 2b:91:6c:06:b4:1d:f3:bf:c1:4a:af:12:f0:e8:65: 15:6a:14:2a:59:c9:40:e5:21:6f:1f:e5:3a:e9:6b: 6f:6e:4b:df:20:5f:3d:e8:c7:c3:89:51:d8:56:b7: 53:c6:91:82:26:f4:a5:54:79:cc:d6:d4:04:8c:b7: b0:cd:7f:cc:25:d4:ec:16:fb:02:94:21:27:50:b0: 05:f4:62:83:b9:7c:fb:8f:53:72:42:f9:98:5a:be: 07:af:f1:fa:e5:39:ca:ef:80:5b:22:90:5c:88:35: 78:89:0d:c3:36:08:be:f9:17:5d:5c:68:72:b3:8d: 7d:a7:b3:1e:03:bf:1d:18:25:44:e6:a6:b7:18:0c: b7:fd:66:f5:f8:44:f2:63:1c:a6:62:8e:66:66:b9: 10:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:22:4C:D7:BA:A7:0B:A7:E6:DD:17:94:CC:20:C2:45:6F:AB:D7:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b2e2fe6e-2634-308a-8cb0-f946e1ab0c25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 45.38.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:e7:90:90:a9:2a:cd:db:f0:0e:69:62:ae:70:06:8d:d0:2d: 3d:2e:59:20:92:40:ac:47:83:2d:53:61:d2:30:c3:99:ac:39: f4:b0:13:1b:aa:e2:4a:64:19:1c:89:a4:88:0f:91:c2:1d:01: c6:b7:b5:fe:7a:11:32:19:f6:1c:c5:0e:84:c4:a5:c4:44:4d: 34:29:44:6f:fd:14:a5:82:49:1c:f5:61:c5:f9:fa:c8:01:2d: 88:3c:15:d3:ff:df:b2:a1:e8:6e:de:20:9d:f8:28:0d:dc:7f: 99:ad:39:99:92:68:07:25:23:37:38:dc:e7:29:0e:2d:5f:68: 54:1a:68:53:dc:9b:77:1c:ec:cd:ba:fb:2d:36:96:a4:cd:83: 4f:7f:44:0e:87:e3:93:b8:55:b8:b3:0d:27:d6:0e:30:33:0e: c1:f3:e4:71:0b:38:a6:3c:29:d4:5d:63:65:91:dc:3d:04:87: e6:00:a9:fd:72:8b:e1:c1:1b:38:6f:8b:51:bb:89:71:7b:10: 41:f1:5d:92:6f:dd:2e:48:50:38:bb:75:cf:57:28:0e:b0:71: 7b:0b:bf:b1:29:cc:41:14:ec:97:e3:39:ca:06:af:44:25:c7: 5a:69:c3:7f:55:0a:2f:11:48:8c:fa:9a:5c:da:97:d3:27:35: e8:e9:41:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2eLKtmVDpyAAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk MjhlNzFhOTgtYmFmZC00ZDMyLWFjMjMtMGIyNWZjZGFmMjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPEcHVR1nkYifh12AHPhRETGsQQ2GkwpQdoc 2UdIfc6fkB1KQHJwod0gBC2VAZ8Z2vUTuFkGZKksbWWQxxHXtNtH62ADfmlt6Twv Fo3j+xJdqWIFSN3Vi9jTuGn39vth23d2Vxu0fbIrkWwGtB3zv8FKrxLw6GUVahQq WclA5SFvH+U66WtvbkvfIF896MfDiVHYVrdTxpGCJvSlVHnM1tQEjLewzX/MJdTs FvsClCEnULAF9GKDuXz7j1NyQvmYWr4Hr/H65TnK74BbIpBciDV4iQ3DNgi++Rdd XGhys419p7MeA78dGCVE5qa3GAy3/Wb1+ETyYxymYo5mZrkQ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIiTNe6pwun5t0XlMwgwkVvq9fjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjJlMmZlNmUtMjYzNC0z MDhhLThjYjAtZjk0NmUxYWIwYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjnkJCpKs3b8A5pYq5wBo3QLT0uWSCSQKxHgy1TYdIww5msOfSwExuq 4kpkGRyJpIgPkcIdAca3tf56ETIZ9hzFDoTEpcRETTQpRG/9FKWCSRz1YcX5+sgB LYg8FdP/37Kh6G7eIJ34KA3cf5mtOZmSaAclIzc43OcpDi1faFQaaFPcm3cc7M26 +y02lqTNg09/RA6H45O4VbizDSfWDjAzDsHz5HELOKY8KdRdY2WR3D0Eh+YAqf1y i+HBGzhvi1G7iXF7EEHxXZJv3S5IUDi7dc9XKA6wcXsLv7EpzEEU7JfjOcoGr0Ql x1ppw39VCi8RSIz6mlzal9MnNejpQVM= -----END CERTIFICATE-----Generated at Thu Apr 10 04:18:25 2025 by rpki-client