$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/b406d167-2ce2-3fa8-862b-3dcec677300a.roa File: b406d167-2ce2-3fa8-862b-3dcec677300a.roa (raw, json) Hash identifier: iz/NCoz+as7jV+kFDWLMQEOIt6d78Qdfh8Q0hdF1XbE= Subject key identifier: E3:B3:9F:30:25:C0:6F:A0:D0:88:AE:BC:C6:94:B3:C7:59:62:5D:84 Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F432858492CAE7D0E48BAD211F9B94600 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/b406d167-2ce2-3fa8-862b-3dcec677300a.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 53828 IP address blocks: 45.61.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:7d:0e:48:ba:d2:11:f9:b9:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=9d72719a-1f7b-4872-b419-9c44431cc5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ab:a7:fd:d6:e9:9e:c3:8c:fb:59:84:49:a0: 53:21:2c:cf:79:51:5f:dc:f8:1b:a1:25:6f:5b:9d: ef:29:26:9f:dd:2e:39:e4:a1:41:a2:5f:0c:4f:1d: 36:2c:18:97:69:4b:64:a8:fa:fd:6c:16:0a:07:41: 89:ff:ae:da:a0:e6:a3:bc:d4:1c:03:7c:c1:72:dc: 29:04:8e:45:30:78:d2:42:b7:94:ce:a8:6c:fd:d7: 85:8c:89:3b:24:b0:69:22:20:40:c6:fc:e1:a9:7b: 46:f5:cf:77:04:c2:b9:a8:57:c9:fe:73:57:6f:a7: 87:81:56:11:63:5a:72:97:9e:30:68:90:7f:c2:6d: de:b0:82:d1:ff:1c:4e:57:51:12:55:84:3a:33:46: e7:63:8d:48:6f:0c:45:14:51:0a:47:6e:cd:bd:64: 9b:10:33:14:ad:da:0a:6a:b7:13:c1:cd:67:a5:5d: 69:45:4f:ac:3c:5c:df:cd:33:28:de:91:ab:d5:80: 59:dd:62:ae:9e:23:ee:0c:3a:15:a8:55:bd:f5:c6: 18:0f:a4:ae:af:47:c1:92:3b:73:60:d1:89:5d:73: 95:6f:c7:c3:6b:f7:77:09:6d:66:df:5b:fe:4c:1f: b9:65:a6:d8:bc:b5:c0:4c:ce:7c:da:43:1f:93:97: 85:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B3:9F:30:25:C0:6F:A0:D0:88:AE:BC:C6:94:B3:C7:59:62:5D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/b406d167-2ce2-3fa8-862b-3dcec677300a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 45.61.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:30:1a:d5:b2:c1:9f:6a:16:06:b3:fb:ea:be:ed:b9:e0:d9: 51:0c:aa:63:e6:f7:f0:e3:99:e6:8b:6f:d2:9b:a9:d2:18:27: 20:a4:4e:7d:8e:92:b8:83:8f:f5:b9:f7:e6:b9:41:4f:b3:b3: 13:2a:81:38:f9:98:52:6e:9a:9b:6d:d0:ac:ed:95:34:c9:7d: b0:9e:8e:eb:d2:1e:00:b9:9f:6f:22:54:6a:32:fc:be:5e:19: b7:64:49:9a:e3:45:9f:96:2e:87:5a:43:4d:70:b7:ec:47:b3: bf:06:ac:0a:be:2f:68:3f:11:f3:b5:54:ed:32:30:18:7b:4a: d4:82:74:cf:58:36:d7:e0:da:e5:8a:4d:76:47:42:70:86:7d: f7:05:c2:ee:14:24:9f:38:2c:32:65:0f:cf:00:55:b7:6c:d3: 48:e7:72:f3:f8:66:94:e2:0e:d1:20:e7:6c:82:57:3b:6e:0b: af:fc:3f:a1:18:ae:57:8f:1b:cd:aa:14:3b:0f:6b:c1:e5:69: 2a:ae:a1:72:f7:87:26:00:74:d2:80:cb:33:a5:68:cf:11:dc: 4b:a1:9d:08:d1:92:3e:55:e2:a7:bb:f3:1c:35:fa:af:f2:8f: aa:a8:e1:65:21:84:3d:28:0e:83:45:1d:3c:27:79:a7:e7:59: 9b:a6:25:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrn0OSLrSEfm5RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OWQ3MjcxOWEtMWY3Yi00ODcyLWI0MTktOWM0NDQzMWNjNWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqun/dbpnsOM+1mESaBTISzPeVFf3PgboSVv W53vKSaf3S455KFBol8MTx02LBiXaUtkqPr9bBYKB0GJ/67aoOajvNQcA3zBctwp BI5FMHjSQreUzqhs/deFjIk7JLBpIiBAxvzhqXtG9c93BMK5qFfJ/nNXb6eHgVYR Y1pyl54waJB/wm3esILR/xxOV1ESVYQ6M0bnY41IbwxFFFEKR27NvWSbEDMUrdoK arcTwc1npV1pRU+sPFzfzTMo3pGr1YBZ3WKuniPuDDoVqFW99cYYD6Sur0fBkjtz YNGJXXOVb8fDa/d3CW1m31v+TB+5ZabYvLXATM582kMfk5eF7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOznzAlwG+g0IiuvMaUs8dZYl2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvYjQwNmQxNjctMmNlMi0z ZmE4LTg2MmItM2RjZWM2NzczMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELT0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIwGtWywZ9qFgaz++q+7bng2VEMqmPm9/DjmeaLb9KbqdIYJyCkTn2O kriDj/W59+a5QU+zsxMqgTj5mFJumptt0KztlTTJfbCejuvSHgC5n28iVGoy/L5e GbdkSZrjRZ+WLodaQ01wt+xHs78GrAq+L2g/EfO1VO0yMBh7StSCdM9YNtfg2uWK TXZHQnCGffcFwu4UJJ84LDJlD88AVbds00jncvP4ZpTiDtEg52yCVztuC6/8P6EY rlePG82qFDsPa8HlaSquoXL3hyYAdNKAyzOlaM8R3EuhnQjRkj5V4qe78xw1+q/y j6qo4WUhhD0oDoNFHTwneafnWZumJfA= -----END CERTIFICATE-----Generated at Sat Apr 12 15:10:38 2025 by rpki-client