$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/0a45b49e-d288-3014-be4e-fccbc92bd3b0.roa File: 0a45b49e-d288-3014-be4e-fccbc92bd3b0.roa (raw, json) Hash identifier: thk2m71ScqPitiKecW2I1cnyLmS51QVkMO795J8dpp4= Subject key identifier: A4:FB:AE:29:03:AB:2E:F6:8D:AB:EC:FC:7B:15:90:45:31:79:74:07 Certificate issuer: /CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2 Certificate serial: 010D0C9F43285848F4F9728DA2A51D26C6C2DF40 Authority key identifier: 09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/0a45b49e-d288-3014-be4e-fccbc92bd3b0.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 834 IP address blocks: 45.41.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:72:8d:a2:a5:1d:26:c6:c2:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=aff8a03e-9133-42ff-bc0e-5dce7ce18253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:30:0c:14:bd:70:99:b3:9a:9a:c7:87:f7:8f: cc:85:b8:86:5b:44:e2:b5:26:94:4d:13:dd:7a:41: d1:64:51:1c:f3:83:3d:8f:46:6e:6d:62:c4:41:79: 26:ce:45:43:04:1d:48:56:66:55:cf:14:1f:92:5a: 7a:cf:02:47:52:d3:f8:13:1d:30:61:a9:58:7a:cc: 60:24:19:e8:2a:8d:5f:76:59:9e:df:3d:46:52:94: c0:d0:c8:c1:e0:3f:85:6d:d0:2a:e6:f1:2b:0d:77: 20:a6:99:d2:53:7f:c7:77:df:cf:eb:b5:7f:a0:c6: 71:21:05:76:a5:36:f2:82:87:d3:60:e5:11:88:ac: 9e:70:7f:e0:62:2a:7f:58:d0:12:54:4f:d6:5e:9b: 38:8a:0b:69:f4:cb:f8:e4:14:25:e4:29:a6:48:03: 4d:f3:c9:a0:5d:0f:06:ab:19:32:97:56:05:25:90: 52:aa:4a:b2:89:b0:60:6a:ba:28:01:24:88:1a:6b: 98:ac:ce:76:1f:51:0a:62:2b:f5:4c:96:f8:f4:c4: cf:1f:32:05:05:99:36:5a:be:f8:b5:c0:22:ea:be: 38:2d:37:ba:98:10:d8:60:3e:b5:cb:7c:de:e4:e6: 67:48:45:09:06:15:2b:be:ac:99:71:ad:00:f9:e9: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FB:AE:29:03:AB:2E:F6:8D:AB:EC:FC:7B:15:90:45:31:79:74:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/0a45b49e-d288-3014-be4e-fccbc92bd3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl X509v3 Authority Key Identifier: keyid:09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer sbgp-ipAddrBlock: critical IPv4: 45.41.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:10:a0:d6:0b:f7:0c:35:c7:10:7e:4f:f8:7e:f9:68:53:d6: f2:15:f2:da:f9:26:58:ac:13:f3:a5:dc:3f:be:66:47:0d:a2: a1:ed:3c:3f:1e:64:e8:58:23:37:92:57:0d:9a:5f:98:76:dd: 3a:2f:54:c7:da:20:09:54:1b:61:6a:a1:5d:90:ea:3d:ea:c3: 54:cc:8f:73:dd:93:93:da:da:99:a6:4b:e6:99:15:32:0c:f7: 7e:16:e3:93:52:82:bc:52:6f:9a:78:0a:98:17:aa:df:35:6b: 4b:6f:9d:af:42:11:91:c1:c1:9a:26:60:72:42:04:04:57:03: 63:89:56:d8:20:ca:53:08:28:d7:8a:b4:cf:ae:0d:d6:c6:ea: c3:b6:81:63:70:ce:f2:6d:dd:3f:36:9c:8f:fa:9a:d5:5c:73: ba:00:ec:2f:e5:76:3d:29:2a:62:e1:e5:5e:90:56:18:7f:97: d8:59:dc:11:79:c6:5a:1b:f7:7e:50:8a:b4:29:1f:c5:f0:c2: 2e:86:70:70:48:ac:ed:94:56:0a:47:77:6d:92:ca:49:b2:82: 3f:a9:45:a5:92:4b:f1:6f:f8:bf:0c:d9:c3:f6:4e:49:65:2a: e6:45:78:76:2f:1a:12:02:f7:71:d5:55:ca:55:57:05:e6:9e: b1:9e:b5:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+XKNoqUdJsbC30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRkMThkNTMtNTljOC00MjdmLTljMmYtMWY2MmVhYjk3 Y2IyMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YWZmOGEwM2UtOTEzMy00MmZmLWJjMGUtNWRjZTdjZTE4MjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDAMFL1wmbOamseH94/MhbiGW0TitSaUTRPd ekHRZFEc84M9j0ZubWLEQXkmzkVDBB1IVmZVzxQfklp6zwJHUtP4Ex0wYalYesxg JBnoKo1fdlme3z1GUpTA0MjB4D+FbdAq5vErDXcgppnSU3/Hd9/P67V/oMZxIQV2 pTbygofTYOURiKyecH/gYip/WNASVE/WXps4igtp9Mv45BQl5CmmSANN88mgXQ8G qxkyl1YFJZBSqkqyibBgarooASSIGmuYrM52H1EKYiv1TJb49MTPHzIFBZk2Wr74 tcAi6r44LTe6mBDYYD61y3ze5OZnSEUJBhUrvqyZca0A+ekklQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT7rikDqy72javs/HsVkEUxeXQHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZGQx OGQ1My01OWM4LTQyN2YtOWMyZi0xZjYyZWFiOTdjYjIvMGE0NWI0OWUtZDI4OC0z MDE0LWJlNGUtZmNjYmM5MmJkM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmRkMThkNTMtNTljOC00MjdmLTlj MmYtMWY2MmVhYjk3Y2IyLzJkZDE4ZDUzLTU5YzgtNDI3Zi05YzJmLTFmNjJlYWI5 N2NiMi5jcmwwHwYDVR0jBBgwFoAUCbrTA0tqLMF0QYmByxVbZWRC/80wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZGQxOGQ1My01OWM4LTQyN2YtOWMyZi0xZjYy ZWFiOTdjYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSk2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcQoNYL9ww1xxB+T/h++WhT1vIV8tr5JlisE/Ol3D++ZkcNoqHtPD8e ZOhYIzeSVw2aX5h23TovVMfaIAlUG2FqoV2Q6j3qw1TMj3Pdk5Pa2pmmS+aZFTIM 934W45NSgrxSb5p4CpgXqt81a0tvna9CEZHBwZomYHJCBARXA2OJVtggylMIKNeK tM+uDdbG6sO2gWNwzvJt3T82nI/6mtVcc7oA7C/ldj0pKmLh5V6QVhh/l9hZ3BF5 xlob935QirQpH8Xwwi6GcHBIrO2UVgpHd22Sykmygj+pRaWSS/Fv+L8M2cP2Tkll KuZFeHYvGhIC93HVVcpVVwXmnrGetZM= -----END CERTIFICATE-----Generated at Fri Apr 4 20:55:06 2025 by rpki-client