$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e610e4a4-c2ea-3ca6-b182-7c15c1b87b9f.roa File: e610e4a4-c2ea-3ca6-b182-7c15c1b87b9f.roa (raw, json) Hash identifier: 9Zf3IaEmWNwor2H2dlMGfe1iFRq5vovgBiYSD2kL5KE= Subject key identifier: AD:F3:3E:F6:F3:07:21:39:29:3D:B9:E7:90:57:58:20:3E:01:10:4D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858488DC6344430B51E4D92C10C40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e610e4a4-c2ea-3ca6-b182-7c15c1b87b9f.roa Signing time: Wed 15 Jan 2025 14:55:13 +0000 ROA not before: Wed 15 Jan 2025 14:55:13 +0000 ROA not after: Tue 15 Apr 2025 13:55:13 +0000 asID: 202015 IP address blocks: 45.38.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:c6:34:44:30:b5:1e:4d:92:c1:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 15 14:55:13 2025 GMT Not After : Apr 15 13:55:13 2025 GMT Subject: CN=4bf01321-770b-4d66-8460-021b0afc7822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d9:22:96:2a:f6:c1:d6:c6:d6:ab:d3:06:91: 3d:ab:49:71:a2:a3:fb:5b:32:60:b1:37:1d:89:86: 45:52:91:49:c4:85:62:0d:46:e8:9e:12:be:c4:62: 69:a2:7e:91:8d:60:ff:70:40:eb:4c:96:01:df:86: bb:08:76:fd:85:2e:39:5d:0e:65:40:82:e6:c8:55: d2:97:36:bb:06:9a:e8:02:f2:26:92:6a:fd:79:bc: b7:e3:e7:ba:9d:21:10:ba:eb:ed:f2:22:8d:8d:f2: d6:d1:12:0a:9d:35:8b:ed:61:ba:0e:44:c5:d9:a3: a0:59:8d:cf:19:ba:e3:4c:a5:8c:00:f3:b5:2f:57: 7a:b3:9a:67:6b:af:a8:07:fa:89:d8:40:e4:fd:e5: 9f:11:61:79:1c:3c:5c:4d:e7:6c:5a:fa:44:58:53: 72:d5:96:11:b9:cd:c3:0f:e0:85:b5:84:58:1e:5d: 67:2e:1b:14:0d:6f:71:42:31:aa:fd:f2:66:1d:52: de:40:a6:8e:85:24:77:f9:19:1c:d8:d9:fe:84:e8: a2:5a:6d:73:15:03:37:22:c1:48:75:42:01:2c:da: 7e:b5:75:9a:09:bc:25:2b:15:e2:8a:e9:1f:21:3c: 55:ea:cc:55:6d:b5:98:ed:d0:5a:f5:3f:ea:07:04: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F3:3E:F6:F3:07:21:39:29:3D:B9:E7:90:57:58:20:3E:01:10:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e610e4a4-c2ea-3ca6-b182-7c15c1b87b9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 45.38.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:71:da:6f:c0:94:cc:5e:59:87:ca:b7:82:a0:13:88:aa:b2: 85:e2:73:90:33:95:b0:20:06:62:93:99:cb:19:18:c9:4b:83: f7:28:15:ec:88:e9:0c:9f:3e:c8:cd:c3:90:d7:94:55:50:e1: fe:62:49:43:c8:d6:64:c4:bd:86:77:90:20:22:a2:8f:41:17: 63:3c:36:01:06:6b:35:cc:0b:17:95:6f:1b:4c:18:bd:9f:c5: 48:ec:03:b3:4a:8f:76:d0:9b:5c:87:3c:9b:2b:89:8a:72:c7: 0f:85:90:6c:42:ef:ed:f2:76:44:31:f7:1b:48:01:5b:0f:2d: 22:98:c6:56:85:6d:98:4f:bd:ed:76:77:68:57:59:ce:b5:0b: 2d:45:fc:8a:e6:31:23:69:6b:a7:69:c0:5b:f3:f5:0a:33:21: 8f:68:0d:6f:33:75:77:d2:81:d6:6c:18:1c:9a:b5:7f:81:d1: 62:82:be:b4:34:b6:5c:3f:1b:a0:1c:01:f0:6e:cc:5f:ce:67: 8c:16:c5:e8:c6:e0:b8:89:27:10:e7:d9:7c:29:6c:42:37:e6: 5e:b9:78:25:1d:11:e5:fc:c3:46:7a:1d:d3:1c:a7:79:fa:d5: f4:ef:b0:5e:23:55:17:f4:a0:16:09:4d:e5:c3:34:dc:ff:3c: 4d:45:ce:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNxjREMLUeTZLBDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDExNTE0NTUxM1oXDTI1MDQxNTEzNTUxM1owLzEtMCsGA1UEAxMk NGJmMDEzMjEtNzcwYi00ZDY2LTg0NjAtMDIxYjBhZmM3ODIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39kilir2wdbG1qvTBpE9q0lxoqP7WzJgsTcd iYZFUpFJxIViDUbonhK+xGJpon6RjWD/cEDrTJYB34a7CHb9hS45XQ5lQILmyFXS lza7BproAvImkmr9eby34+e6nSEQuuvt8iKNjfLW0RIKnTWL7WG6DkTF2aOgWY3P GbrjTKWMAPO1L1d6s5pna6+oB/qJ2EDk/eWfEWF5HDxcTedsWvpEWFNy1ZYRuc3D D+CFtYRYHl1nLhsUDW9xQjGq/fJmHVLeQKaOhSR3+Rkc2Nn+hOiiWm1zFQM3IsFI dUIBLNp+tXWaCbwlKxXiiukfITxV6sxVbbWY7dBa9T/qBwTQgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3zPvbzByE5KT2555BXWCA+ARBNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZTYxMGU0YTQtYzJlYS0z Y2E2LWIxODItN2MxNWMxYjg3YjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSZEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhx2m/AlMxeWYfKt4KgE4iqsoXic5AzlbAgBmKTmcsZGMlLg/coFeyI 6QyfPsjNw5DXlFVQ4f5iSUPI1mTEvYZ3kCAioo9BF2M8NgEGazXMCxeVbxtMGL2f xUjsA7NKj3bQm1yHPJsriYpyxw+FkGxC7+3ydkQx9xtIAVsPLSKYxlaFbZhPve12 d2hXWc61Cy1F/IrmMSNpa6dpwFvz9QozIY9oDW8zdXfSgdZsGByatX+B0WKCvrQ0 tlw/G6AcAfBuzF/OZ4wWxejG4LiJJxDn2XwpbEI35l65eCUdEeX8w0Z6HdMcp3n6 1fTvsF4jVRf0oBYJTeXDNNz/PE1Fzmc= -----END CERTIFICATE-----Generated at Fri Feb 21 13:01:36 2025 by rpki-client