$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/811066dd-ad4f-399c-b871-d8d8739467db.roa File: 811066dd-ad4f-399c-b871-d8d8739467db.roa (raw, json) Hash identifier: MajBvM34E5qDN6udEUNf2DjWbwLxXcv/47wsGqQLXUE= Subject key identifier: F6:63:9D:A3:27:3A:8B:C2:0B:50:10:D8:B7:32:29:23:52:49:76:B8 Certificate issuer: /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538 Certificate serial: 010D0C9F4328584900216EDA89CF4C78E5094B00 Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/811066dd-ad4f-399c-b871-d8d8739467db.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 14315 IP address blocks: 45.59.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:6e:da:89:cf:4c:78:e5:09:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=9bc693d9-2cc5-4675-a7d7-2ccd1606aa33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:51:44:dd:4d:ab:6d:f7:62:1c:35:73:2d:71: 6c:a8:2a:f2:03:30:f4:78:24:e0:23:2b:25:87:ad: 5e:ce:70:3b:13:47:80:13:af:23:4e:79:f5:63:57: 37:01:f7:60:15:50:8a:cc:61:e0:8a:c9:73:9c:2f: 9c:01:2a:e5:d4:b0:19:81:b3:7f:2e:5f:fc:6f:3b: ea:62:4f:40:1b:19:b7:37:fb:ca:b0:ca:7c:c4:98: 7a:bf:d7:69:d9:80:1c:06:06:00:4c:5d:c7:92:04: 67:c0:35:04:33:f2:f7:76:a6:06:42:b6:23:e3:3c: 3e:2d:c3:29:3d:1f:71:06:48:d1:f6:0d:da:60:83: aa:e4:10:aa:f9:fe:b7:97:f9:4c:03:22:5c:aa:88: e4:09:96:89:32:9f:4e:7c:95:e7:9d:8f:0d:d4:5e: 2a:da:47:63:9c:7e:8d:6e:68:c1:af:88:8a:eb:67: 43:da:81:04:2c:26:2b:8d:41:90:a3:26:db:aa:3c: 46:58:f5:a6:4e:e8:00:0d:60:82:70:8d:83:38:ae: 56:45:c6:f5:89:37:66:4e:80:3a:60:d6:6b:00:f4: 92:74:ee:85:d4:cd:24:8c:b1:f6:8e:67:1e:cd:1a: ca:00:d7:50:83:8e:db:36:cb:a9:1f:06:52:35:fd: c0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:63:9D:A3:27:3A:8B:C2:0B:50:10:D8:B7:32:29:23:52:49:76:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/811066dd-ad4f-399c-b871-d8d8739467db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl X509v3 Authority Key Identifier: keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer sbgp-ipAddrBlock: critical IPv4: 45.59.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ed:6e:15:84:9c:05:c9:71:52:55:22:ea:1a:96:fc:1c:23: 04:a8:06:59:73:6c:3f:43:fc:53:57:9b:51:ca:e7:94:8b:30: 74:1f:27:85:c0:42:0f:f0:d4:88:c9:5c:61:05:c9:1e:de:3e: 66:71:32:92:97:9d:84:d3:2b:26:0e:a2:34:a2:cb:bc:66:d0: c0:04:04:ea:4e:54:4b:41:53:04:b7:d9:af:c2:61:35:2d:07: 16:6f:80:c0:94:0d:7c:75:04:97:83:36:d6:3a:85:b1:49:61: 3f:36:88:02:0c:1c:13:71:f5:73:d0:41:7a:72:e0:9b:c1:4d: 11:d6:09:60:d6:27:5c:e8:1e:f1:94:ab:ec:1f:aa:26:48:d5: 17:5e:04:66:c6:58:47:bc:77:2d:22:e4:ae:fd:26:fe:de:56: 31:82:48:07:83:87:24:03:17:e4:0d:4e:52:90:30:9e:74:bc: ac:71:41:32:9a:70:51:40:0b:d6:23:74:4e:ab:fb:40:dc:6b: c1:b6:80:8c:1a:bc:51:6d:ba:ec:b8:21:9c:83:27:ea:85:01: 55:4a:08:b3:3a:c0:3d:ae:95:6a:5c:5c:99:a2:fb:34:d3:36: c3:6e:3b:3c:4a:09:03:7b:9d:ff:ca:5a:f0:ff:29:74:55:27: db:61:13:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIW7aic9MeOUJSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWYwN2M5ZTItNjQ4Yy00Y2EyLTg3ODQtMDJhYzNjMTQ0 NTM4MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk OWJjNjkzZDktMmNjNS00Njc1LWE3ZDctMmNjZDE2MDZhYTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lFE3U2rbfdiHDVzLXFsqCryAzD0eCTgIysl h61eznA7E0eAE68jTnn1Y1c3AfdgFVCKzGHgislznC+cASrl1LAZgbN/Ll/8bzvq Yk9AGxm3N/vKsMp8xJh6v9dp2YAcBgYATF3HkgRnwDUEM/L3dqYGQrYj4zw+LcMp PR9xBkjR9g3aYIOq5BCq+f63l/lMAyJcqojkCZaJMp9OfJXnnY8N1F4q2kdjnH6N bmjBr4iK62dD2oEELCYrjUGQoybbqjxGWPWmTugADWCCcI2DOK5WRcb1iTdmToA6 YNZrAPSSdO6F1M0kjLH2jmcezRrKANdQg47bNsupHwZSNf3AXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZjnaMnOovCC1AQ2LcyKSNSSXa4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85ZjA3 YzllMi02NDhjLTRjYTItODc4NC0wMmFjM2MxNDQ1MzgvODExMDY2ZGQtYWQ0Zi0z OTljLWI4NzEtZDhkODczOTQ2N2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWYwN2M5ZTItNjQ4Yy00Y2EyLTg3 ODQtMDJhYzNjMTQ0NTM4LzlmMDdjOWUyLTY0OGMtNGNhMi04Nzg0LTAyYWMzYzE0 NDUzOC5jcmwwHwYDVR0jBBgwFoAUZHXrfCV7cP95Mb9Xfny6xnTRzpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85ZjA3YzllMi02NDhjLTRjYTItODc4NC0wMmFj M2MxNDQ1MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXtbhWEnAXJcVJVIuoalvwcIwSoBllzbD9D/FNXm1HK55SLMHQfJ4XA Qg/w1IjJXGEFyR7ePmZxMpKXnYTTKyYOojSiy7xm0MAEBOpOVEtBUwS32a/CYTUt BxZvgMCUDXx1BJeDNtY6hbFJYT82iAIMHBNx9XPQQXpy4JvBTRHWCWDWJ1zoHvGU q+wfqiZI1RdeBGbGWEe8dy0i5K79Jv7eVjGCSAeDhyQDF+QNTlKQMJ50vKxxQTKa cFFAC9YjdE6r+0Dca8G2gIwavFFtuuy4IZyDJ+qFAVVKCLM6wD2ulWpcXJmi+zTT NsNuOzxKCQN7nf/KWvD/KXRVJ9thE0A= -----END CERTIFICATE-----Generated at Fri Mar 14 10:21:29 2025 by rpki-client