$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/139f5a3b-b399-314b-af0a-388b3799f659.roa File: 139f5a3b-b399-314b-af0a-388b3799f659.roa (raw, json) Hash identifier: YtNYVeRDhYZ6Fk0sajSAi/zgyKyOsedmLo2mGM9bkhg= Subject key identifier: B2:E6:B5:50:39:2F:8E:03:73:41:D0:91:4F:8B:2D:95:37:9D:E3:E5 Certificate issuer: /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538 Certificate serial: 010D0C9F4328584900216EE789DA945E290BF720 Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/139f5a3b-b399-314b-af0a-388b3799f659.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 834 IP address blocks: 45.59.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:6e:e7:89:da:94:5e:29:0b:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=1e00c577-6c36-4e2b-a258-dbea4c327245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5d:5e:32:e7:48:f9:bc:24:03:05:9e:72:2f: c5:df:39:4e:88:15:94:b2:0b:31:e2:2b:13:a9:64: 9a:28:af:9f:b5:03:f8:18:69:e0:4e:a3:3b:66:e0: a1:ab:e3:69:ca:98:39:35:c7:0b:51:c3:17:de:1e: 5d:cb:e0:18:7f:d9:e2:00:69:04:d1:08:2e:6d:cb: 29:87:b2:7c:b2:e6:33:da:fa:e6:60:71:c9:25:5e: 23:c7:93:59:8b:d3:9e:ad:fb:c8:8f:2e:5f:13:9c: de:0a:71:1b:be:07:d8:28:a7:5d:e6:ca:55:39:40: ee:d4:4b:e1:3b:e6:3f:23:d1:7d:72:8a:fb:13:e0: a8:ba:7a:09:e3:14:64:cf:75:8c:e9:74:d7:31:a9: 95:c1:4b:c5:2b:d3:8b:24:9a:de:0c:c5:9c:fe:45: 4b:d3:4b:24:c5:f0:a5:9c:b6:82:31:c9:5a:2a:4e: e1:6e:41:99:78:42:00:c3:15:88:dc:f3:1d:b9:7d: e1:a5:07:34:f6:61:05:6f:d5:e0:bf:8e:b5:68:4d: 12:ee:d5:9e:42:b1:75:1a:b8:21:6e:cb:3f:16:e6: 78:bb:46:77:21:51:71:ac:0f:cd:44:43:d0:91:22: 89:17:7e:0d:8d:fc:cb:99:f0:73:6c:f8:c6:35:c3: 99:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E6:B5:50:39:2F:8E:03:73:41:D0:91:4F:8B:2D:95:37:9D:E3:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/139f5a3b-b399-314b-af0a-388b3799f659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl X509v3 Authority Key Identifier: keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer sbgp-ipAddrBlock: critical IPv4: 45.59.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:64:b7:0c:6c:b6:01:75:13:e7:23:58:94:df:b9:08:8a:64: 77:38:3b:30:db:c0:18:2f:53:13:a9:52:f4:8a:28:f9:9c:0b: 0a:e9:9b:17:7b:63:fd:62:83:50:af:1c:65:c9:a3:5e:66:53: ca:f6:3f:df:b1:9e:84:74:c7:e4:c6:f1:9f:65:ff:8b:82:f5: b0:95:75:c2:77:db:33:ee:0f:ea:7c:e2:3f:40:7a:6a:fd:b1: 5b:cf:f2:1f:e2:8b:b4:4e:54:1c:a4:ac:72:34:73:cc:d5:24: 45:c6:c7:e3:49:39:f9:c3:a5:a6:f6:3d:1a:3e:f6:79:c6:d3: d0:fe:e6:dc:cf:5e:ae:2f:ee:4a:b5:9a:69:f6:e5:d1:08:63: bb:e9:19:ff:af:57:18:43:60:29:6b:a4:c6:35:81:b1:ae:97: 86:c4:29:cb:96:f7:40:d9:e8:d7:29:7c:7d:43:f0:a7:f8:84: 55:82:6a:71:b6:24:0c:c6:ab:b9:50:bb:36:b6:90:9d:17:8d: 89:93:11:06:96:63:93:23:67:0f:a5:34:50:2c:94:0f:12:a8: 9e:a9:d9:2a:c9:c7:30:da:91:1b:57:d2:3e:d1:84:bb:e3:8a: 5d:d2:dd:9c:d0:bd:1d:d7:5a:97:62:d3:1a:82:57:47:69:d2: ca:0b:c9:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIW7nidqUXikL9yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWYwN2M5ZTItNjQ4Yy00Y2EyLTg3ODQtMDJhYzNjMTQ0 NTM4MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MWUwMGM1NzctNmMzNi00ZTJiLWEyNTgtZGJlYTRjMzI3MjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml1eMudI+bwkAwWeci/F3zlOiBWUsgsx4isT qWSaKK+ftQP4GGngTqM7ZuChq+Npypg5NccLUcMX3h5dy+AYf9niAGkE0Qgubcsp h7J8suYz2vrmYHHJJV4jx5NZi9OerfvIjy5fE5zeCnEbvgfYKKdd5spVOUDu1Evh O+Y/I9F9cor7E+CounoJ4xRkz3WM6XTXMamVwUvFK9OLJJreDMWc/kVL00skxfCl nLaCMclaKk7hbkGZeEIAwxWI3PMduX3hpQc09mEFb9Xgv461aE0S7tWeQrF1Grgh bss/FuZ4u0Z3IVFxrA/NREPQkSKJF34NjfzLmfBzbPjGNcOZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLmtVA5L44Dc0HQkU+LLZU3nePlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85ZjA3 YzllMi02NDhjLTRjYTItODc4NC0wMmFjM2MxNDQ1MzgvMTM5ZjVhM2ItYjM5OS0z MTRiLWFmMGEtMzg4YjM3OTlmNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWYwN2M5ZTItNjQ4Yy00Y2EyLTg3 ODQtMDJhYzNjMTQ0NTM4LzlmMDdjOWUyLTY0OGMtNGNhMi04Nzg0LTAyYWMzYzE0 NDUzOC5jcmwwHwYDVR0jBBgwFoAUZHXrfCV7cP95Mb9Xfny6xnTRzpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85ZjA3YzllMi02NDhjLTRjYTItODc4NC0wMmFj M2MxNDQ1MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1ktwxstgF1E+cjWJTfuQiKZHc4OzDbwBgvUxOpUvSKKPmcCwrpmxd7 Y/1ig1CvHGXJo15mU8r2P9+xnoR0x+TG8Z9l/4uC9bCVdcJ32zPuD+p84j9Aemr9 sVvP8h/ii7ROVBykrHI0c8zVJEXGx+NJOfnDpab2PRo+9nnG09D+5tzPXq4v7kq1 mmn25dEIY7vpGf+vVxhDYClrpMY1gbGul4bEKcuW90DZ6NcpfH1D8Kf4hFWCanG2 JAzGq7lQuza2kJ0XjYmTEQaWY5MjZw+lNFAslA8SqJ6p2SrJxzDakRtX0j7RhLvj il3S3ZzQvR3XWpdi0xqCV0dp0soLyUI= -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:25 2025 by rpki-client