$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/e87c5f0d-6fc2-38e2-a39a-0cf3ac51ddb6.roa File: e87c5f0d-6fc2-38e2-a39a-0cf3ac51ddb6.roa (raw, json) Hash identifier: 3vArv55q+CT8I4NjON4u6jBQNZSDay0HV+sRZKYUM2M= Subject key identifier: 44:D5:DE:CD:03:8D:97:1C:67:53:6D:C2:44:5F:63:34:19:EE:D7:45 Certificate issuer: /CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8 Certificate serial: 010D0C9F43285849393E775AA1FC2663F88A7C80 Authority key identifier: 63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/e87c5f0d-6fc2-38e2-a39a-0cf3ac51ddb6.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 53587 IP address blocks: 45.61.192.0/18 maxlen: 24 168.235.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:77:5a:a1:fc:26:63:f8:8a:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=f9cb6f36-dc6d-475d-b549-26dba4b8cd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:33:ec:5f:ad:c7:28:08:88:8a:bb:d6:65:b2: de:34:c7:24:25:3b:db:ba:49:7a:8f:eb:b2:8c:30: 79:2f:c7:a5:de:52:c2:f5:7a:b6:b7:50:ab:50:3a: a4:cc:41:51:5c:c0:c4:38:00:88:ff:40:0a:43:69: f6:52:53:c3:c8:41:75:84:99:40:1f:65:a4:cd:b8: a6:a3:23:69:a7:e1:dd:d8:13:6e:5e:22:e8:5b:91: b3:1f:df:c3:4a:ab:97:b3:62:d3:69:6c:ad:4f:73: 4b:a8:87:16:b1:20:0a:cd:08:ae:b7:b7:3f:13:07: 53:4f:72:a4:5f:8f:79:ff:03:ae:f0:e9:49:4b:06: 3e:8b:ec:a8:94:db:6e:65:fb:67:04:4a:6c:bd:01: 12:8f:5f:20:fb:66:3c:f6:ab:80:88:e2:a3:20:ad: 12:b8:39:b1:77:48:98:5e:97:04:50:98:b9:65:4c: d9:5d:53:c6:d2:04:63:37:9b:03:50:75:69:00:e5: 19:66:23:60:e7:16:c0:41:08:41:46:ee:23:58:d3: 4f:bc:bf:9d:bc:4a:c5:cc:24:91:12:2e:fd:08:e7: 84:6c:23:81:05:73:ef:af:3c:40:4f:b3:0f:db:fb: ec:00:3a:84:f7:93:6c:0d:c4:45:6f:81:1c:f5:47: 6a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D5:DE:CD:03:8D:97:1C:67:53:6D:C2:44:5F:63:34:19:EE:D7:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/e87c5f0d-6fc2-38e2-a39a-0cf3ac51ddb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl X509v3 Authority Key Identifier: keyid:63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer sbgp-ipAddrBlock: critical IPv4: 45.61.192.0/18 168.235.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:93:98:cc:b1:8e:c9:6a:8c:4c:a8:7d:bb:5b:64:bd:bf:9c: 2d:c1:c6:da:9a:b6:53:79:d2:e0:a7:00:4a:c0:c0:b1:75:69: 63:9e:ec:39:a5:b7:f6:dc:f6:96:2e:47:b0:61:21:95:2c:b5: b4:fa:49:03:5f:08:fb:81:56:3f:41:98:22:d9:e5:15:4e:ad: c4:87:22:ac:76:73:28:3c:aa:8f:59:cb:da:1b:96:3d:eb:49: 75:f7:65:99:a5:64:7c:cd:5e:b6:4e:3c:e1:2e:18:be:8f:68: b6:ec:1d:a9:c8:78:b7:65:26:ee:34:2e:e8:b9:fe:ae:03:a6: 41:ec:0b:75:da:32:fd:00:9d:70:82:9a:46:df:4a:46:3e:40: d1:33:d7:0e:d5:d8:10:85:3f:1f:21:14:a2:d4:47:54:2b:36: a9:9f:40:ba:1e:50:51:46:0e:a7:95:9d:85:64:16:ac:3a:af: a8:ca:66:9c:80:4c:ba:78:b4:73:c1:8b:bd:b8:88:84:ce:93: bf:ba:62:a3:76:e4:9b:2b:f1:7c:3d:e9:9f:6d:43:e4:84:f8: 30:cf:ca:47:d1:30:a0:af:f7:9c:d5:06:e5:30:37:e8:75:8d: 44:49:e7:0b:10:2f:e2:f9:ac:3e:23:4c:ad:79:13:92:ea:9c: ab:1e:63:f1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEk5PndaofwmY/iKfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNjNTIwZDQtY2I4Yi00MjRlLTg2MmEtM2FiZGZiZWRj ZmM4MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk ZjljYjZmMzYtZGM2ZC00NzVkLWI1NDktMjZkYmE0YjhjZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTPsX63HKAiIirvWZbLeNMckJTvbukl6j+uy jDB5L8el3lLC9Xq2t1CrUDqkzEFRXMDEOACI/0AKQ2n2UlPDyEF1hJlAH2Wkzbim oyNpp+Hd2BNuXiLoW5GzH9/DSquXs2LTaWytT3NLqIcWsSAKzQiut7c/EwdTT3Kk X495/wOu8OlJSwY+i+yolNtuZftnBEpsvQESj18g+2Y89quAiOKjIK0SuDmxd0iY XpcEUJi5ZUzZXVPG0gRjN5sDUHVpAOUZZiNg5xbAQQhBRu4jWNNPvL+dvErFzCSR Ei79COeEbCOBBXPvrzxAT7MP2/vsADqE95NsDcRFb4Ec9UdqJwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFETV3s0DjZccZ1NtwkRfYzQZ7tdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hM2M1 MjBkNC1jYjhiLTQyNGUtODYyYS0zYWJkZmJlZGNmYzgvZTg3YzVmMGQtNmZjMi0z OGUyLWEzOWEtMGNmM2FjNTFkZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTNjNTIwZDQtY2I4Yi00MjRlLTg2 MmEtM2FiZGZiZWRjZmM4L2EzYzUyMGQ0LWNiOGItNDI0ZS04NjJhLTNhYmRmYmVk Y2ZjOC5jcmwwHwYDVR0jBBgwFoAUY5xIHmNNXy4MTNbF1zAEHBLhnLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hM2M1MjBkNC1jYjhiLTQyNGUtODYyYS0zYWJk ZmJlZGNmYzguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGLT3AAwQE qOvwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBANaTmMyxjslqjEyofbtbZL2/nC3BxtqatlN50uCnAErAwLF1 aWOe7Dmlt/bc9pYuR7BhIZUstbT6SQNfCPuBVj9BmCLZ5RVOrcSHIqx2cyg8qo9Z y9oblj3rSXX3ZZmlZHzNXrZOPOEuGL6PaLbsHanIeLdlJu40Lui5/q4DpkHsC3Xa Mv0AnXCCmkbfSkY+QNEz1w7V2BCFPx8hFKLUR1QrNqmfQLoeUFFGDqeVnYVkFqw6 r6jKZpyATLp4tHPBi724iITOk7+6YqN25Jsr8Xw96Z9tQ+SE+DDPykfRMKCv95zV BuUwN+h1jURJ5wsQL+L5rD4jTK15E5LqnKseY/E= -----END CERTIFICATE-----Generated at Sat Apr 5 13:15:09 2025 by rpki-client