$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/ce5287be-0832-3723-9c79-1059a2079834.roa File: ce5287be-0832-3723-9c79-1059a2079834.roa (raw, json) Hash identifier: qbtvPpgewHvqzp3UsRQtKHcP1xofhA5jX0Ps+FEGDAU= Subject key identifier: F5:FE:60:F8:26:D3:D1:D4:FB:38:9C:05:8F:3D:62:1D:2D:9E:E7:72 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F43285848547022A2A92E72BFC31EB0E0 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/ce5287be-0832-3723-9c79-1059a2079834.roa Signing time: Thu 26 Dec 2024 02:00:40 +0000 ROA not before: Thu 26 Dec 2024 02:00:40 +0000 ROA not after: Wed 26 Mar 2025 01:00:40 +0000 asID: 33208 IP address blocks: 45.42.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:54:70:22:a2:a9:2e:72:bf:c3:1e:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Dec 26 02:00:40 2024 GMT Not After : Mar 26 01:00:40 2025 GMT Subject: CN=ade49e60-3451-4ecb-a660-fef597098034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:f6:7d:9d:22:60:b5:b6:eb:6b:e2:33:82: 9e:04:96:94:59:38:1d:6e:f2:46:3f:2a:52:90:57: 49:63:2e:b2:cd:ae:66:45:a0:95:7d:a0:d3:01:56: fb:4a:a6:ae:44:45:a1:60:09:6a:fd:fb:29:ea:f9: 62:44:ac:c2:19:e8:f1:fa:a5:e1:ea:9c:ed:c2:78: 63:e8:bc:31:cc:9f:60:76:c5:d7:45:d9:3c:73:32: 62:73:16:52:fe:8c:e0:57:e1:a7:d2:59:73:79:71: 2e:ba:2a:a2:5f:99:28:29:35:d3:58:c1:d9:79:5a: e9:cf:05:99:e9:67:31:b7:20:76:21:3d:95:3c:94: cd:36:ca:12:78:74:9c:e1:47:c9:5b:2e:56:ea:c6: bd:2f:7c:11:a0:d6:96:2b:fb:28:46:8b:9f:04:5b: a0:c6:a2:67:cc:c4:93:8e:ef:f7:35:c2:5d:39:99: a8:77:d4:b4:85:af:31:e1:c1:e0:c9:f5:82:2d:84: 89:4f:3d:76:d8:0d:f9:9b:9f:f5:e5:5d:df:4f:86: 42:69:0f:91:ae:1b:54:ff:13:57:84:0b:3a:dd:2a: a2:41:df:99:5e:c3:64:c6:c2:24:eb:02:0e:85:d5: d0:34:a7:eb:20:0d:84:74:56:d9:80:67:d5:b1:1a: 9a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FE:60:F8:26:D3:D1:D4:FB:38:9C:05:8F:3D:62:1D:2D:9E:E7:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/ce5287be-0832-3723-9c79-1059a2079834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 45.42.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b6:92:e9:15:51:30:d8:8a:3b:fe:1d:b9:91:ec:30:58:a0: 51:49:2b:71:c1:e6:28:c9:5e:c9:fe:99:71:d3:d6:c0:1d:4b: f2:65:a6:82:5f:ca:b4:cc:52:f7:0f:24:0c:28:3a:03:d1:ce: 8d:75:7e:19:aa:20:0a:d5:b8:7d:4b:9a:54:34:e5:13:09:5c: bc:39:a0:1f:84:c9:49:92:98:b7:09:38:c5:fd:d3:5a:74:32: d9:2b:c3:26:20:85:cb:63:80:09:e7:e7:a9:e9:e8:8a:d8:d9: 3e:5d:c7:32:54:e1:c6:43:3b:90:75:ff:95:4d:1e:db:98:60: 09:d9:34:d0:97:d2:25:3d:4e:97:a6:8b:dd:a0:df:48:c2:bc: b1:96:10:90:8c:26:ed:9b:16:a8:b5:72:3a:58:23:88:df:31: d4:08:d0:43:ff:ff:2a:6a:29:f1:62:f4:43:ac:b4:41:3e:77: 00:19:42:d3:a2:ea:b3:95:15:43:92:64:4f:5b:9c:22:be:de: fe:58:ae:6c:90:00:3e:98:00:da:2e:f7:04:1b:51:b5:1f:b5: 18:df:c4:97:73:de:ff:82:60:d1:3a:e5:63:37:9a:6c:fc:19: f3:a0:d5:e5:b7:05:2f:b2:50:62:1e:97:55:7d:56:8e:99:fd: f0:3f:2a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcCKiqS5yv8MesOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk YWRlNDllNjAtMzQ1MS00ZWNiLWE2NjAtZmVmNTk3MDk4MDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQv2fZ0iYLW262viM4KeBJaUWTgdbvJGPypS kFdJYy6yza5mRaCVfaDTAVb7SqauREWhYAlq/fsp6vliRKzCGejx+qXh6pztwnhj 6LwxzJ9gdsXXRdk8czJicxZS/ozgV+Gn0llzeXEuuiqiX5koKTXTWMHZeVrpzwWZ 6WcxtyB2IT2VPJTNNsoSeHSc4UfJWy5W6sa9L3wRoNaWK/soRoufBFugxqJnzMST ju/3NcJdOZmod9S0ha8x4cHgyfWCLYSJTz122A35m5/15V3fT4ZCaQ+RrhtU/xNX hAs63SqiQd+ZXsNkxsIk6wIOhdXQNKfrIA2EdFbZgGfVsRqarQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPX+YPgm09HU+zicBY89Yh0tnudyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvY2U1Mjg3YmUtMDgzMi0z NzIzLTljNzktMTA1OWEyMDc5ODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI22kukVUTDYijv+HbmR7DBYoFFJK3HB5ijJXsn+mXHT1sAdS/JlpoJf yrTMUvcPJAwoOgPRzo11fhmqIArVuH1LmlQ05RMJXLw5oB+EyUmSmLcJOMX901p0 MtkrwyYghctjgAnn56np6IrY2T5dxzJU4cZDO5B1/5VNHtuYYAnZNNCX0iU9Tpem i92g30jCvLGWEJCMJu2bFqi1cjpYI4jfMdQI0EP//ypqKfFi9EOstEE+dwAZQtOi 6rOVFUOSZE9bnCK+3v5YrmyQAD6YANou9wQbUbUftRjfxJdz3v+CYNE65WM3mmz8 GfOg1eW3BS+yUGIel1V9Vo6Z/fA/KlM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:03:46 2025 by rpki-client