$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/825158bb-6443-390b-9fb8-dff6e8c58030.roa File: 825158bb-6443-390b-9fb8-dff6e8c58030.roa (raw, json) Hash identifier: ULOGtkAJcgBVdHpuA7I8UYeCdFkkSCx372H9mo0e5yg= Subject key identifier: 73:9D:75:75:18:35:F8:1C:8C:2E:B6:B7:9F:40:74:3C:6D:08:0F:8E Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F432858484C102385209F7AEA1BBF0000 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/825158bb-6443-390b-9fb8-dff6e8c58030.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 53828 IP address blocks: 45.43.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:23:85:20:9f:7a:ea:1b:bf:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=9a2df0f8-1358-4789-b15b-ce3bbd475c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9a:31:f2:51:88:da:4e:3d:df:76:9f:37:3b: a1:9c:88:81:18:1a:86:dd:72:8d:9c:ea:0f:df:77: 1b:f2:94:41:9c:a4:e7:63:0a:11:4f:31:8c:d6:24: 80:42:37:6a:14:da:ec:b4:3f:4e:ce:9d:15:df:d9: da:21:da:e6:ff:16:c8:31:37:a0:83:a4:9e:0a:30: ee:3e:bf:2a:52:e0:7c:e4:49:b0:5c:b3:4b:6d:a0: 1e:4b:c3:9c:d2:25:9b:8a:79:4c:81:04:a6:46:b4: 85:32:51:e9:40:81:e5:ff:3e:01:d2:22:51:25:ea: f6:f8:89:78:92:93:d8:23:a4:0c:82:d5:c0:aa:3b: da:a1:92:a5:27:15:5a:c8:ee:bc:1d:bd:a3:2c:c3: a3:ec:57:0b:68:5c:5a:c5:49:c9:95:67:2f:ec:e7: 9a:ff:f9:c3:bd:92:ce:84:c5:c8:4b:fc:29:f2:4b: f3:a3:2c:05:f5:cd:05:70:2e:a7:c8:1d:b5:ea:71: 2e:16:9f:2e:a7:f5:ca:59:93:33:ce:38:96:8e:bc: bc:32:30:95:69:17:e1:89:e6:bd:5b:b0:dc:57:7b: 42:d5:78:0e:f6:50:96:54:2c:b8:1d:72:88:0e:c7: 98:c6:fc:ae:da:5a:34:65:06:04:cc:d7:0a:a1:33: f2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9D:75:75:18:35:F8:1C:8C:2E:B6:B7:9F:40:74:3C:6D:08:0F:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/825158bb-6443-390b-9fb8-dff6e8c58030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 45.43.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:81:7e:d2:43:77:d6:cb:90:af:e1:87:f3:b5:b4:b8:17:b3: 6e:c5:a9:d1:51:a8:e2:7a:40:ed:ac:d0:f8:aa:fd:eb:7b:d6: 3c:b4:57:c1:06:26:8d:43:1a:2b:f2:f8:7d:65:07:91:a4:8d: 1d:1e:2b:0b:8e:ba:f2:66:26:ee:0f:d7:4e:91:87:ad:35:d9: 2d:c3:c7:3c:3e:02:59:9c:64:6a:68:ff:2a:62:bb:79:8b:ee: 09:a9:8b:14:b1:86:d1:10:ff:99:a1:b3:f6:42:59:9c:47:c6: e0:f7:3a:c6:b5:96:5f:a6:ec:b4:4c:92:b0:69:2e:b6:bc:f7: 7b:43:8b:58:d3:2f:11:29:96:c2:09:5b:fd:82:f6:ec:99:64: b2:6f:f3:4a:6d:d9:8b:4a:c5:aa:96:dd:0c:68:3b:8e:28:35: e1:0e:3a:58:b4:19:93:e8:d1:87:1e:e6:0e:52:a0:5c:c2:50: d4:82:2d:c6:c0:af:4e:e5:bc:86:58:7a:0e:67:60:a7:b2:f7: 3e:ba:4b:a4:e3:9b:7c:aa:36:49:7a:c4:0f:73:f3:d6:22:41: f9:c2:92:ec:ec:13:70:5d:ee:8f:e0:64:99:64:f8:34:a9:fb: 9c:9e:67:23:8c:51:fa:03:68:3e:aa:5f:0e:d8:90:ac:89:a5: 2a:fa:b7:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMECOFIJ966hu/AAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk OWEyZGYwZjgtMTM1OC00Nzg5LWIxNWItY2UzYmJkNDc1YzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5ox8lGI2k4933afNzuhnIiBGBqG3XKNnOoP 33cb8pRBnKTnYwoRTzGM1iSAQjdqFNrstD9Ozp0V39naIdrm/xbIMTegg6SeCjDu Pr8qUuB85EmwXLNLbaAeS8Oc0iWbinlMgQSmRrSFMlHpQIHl/z4B0iJRJer2+Il4 kpPYI6QMgtXAqjvaoZKlJxVayO68Hb2jLMOj7FcLaFxaxUnJlWcv7Oea//nDvZLO hMXIS/wp8kvzoywF9c0FcC6nyB216nEuFp8up/XKWZMzzjiWjry8MjCVaRfhiea9 W7DcV3tC1XgO9lCWVCy4HXKIDseYxvyu2lo0ZQYEzNcKoTPyEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOddXUYNfgcjC62t59AdDxtCA+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvODI1MTU4YmItNjQ0My0z OTBiLTlmYjgtZGZmNmU4YzU4MDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELSvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECBftJDd9bLkK/hh/O1tLgXs27FqdFRqOJ6QO2s0Piq/et71jy0V8EG Jo1DGivy+H1lB5GkjR0eKwuOuvJmJu4P106Rh6012S3Dxzw+AlmcZGpo/ypiu3mL 7gmpixSxhtEQ/5mhs/ZCWZxHxuD3Osa1ll+m7LRMkrBpLra893tDi1jTLxEplsIJ W/2C9uyZZLJv80pt2YtKxaqW3QxoO44oNeEOOli0GZPo0Yce5g5SoFzCUNSCLcbA r07lvIZYeg5nYKey9z66S6Tjm3yqNkl6xA9z89YiQfnCkuzsE3Bd7o/gZJlk+DSp +5yeZyOMUfoDaD6qXw7YkKyJpSr6txk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:42 2025 by rpki-client