$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa File: 0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa (raw, json) Hash identifier: bUnCTv+1GZYxmg8wRID5XhjHHmzdNoRh9SW8Ie8E4O4= Subject key identifier: 53:EB:7E:B0:FA:3D:CE:5B:A6:8B:1A:7C:46:BC:CC:46:69:E0:DA:1D Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F43285849350EA768F981BE8B7DE82500 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 8987 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a7:68:f9:81:be:8b:7d:e8:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=ae9802b8-bce2-41e9-90b5-8056e1054c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:ca:03:87:bd:9f:f1:17:07:28:7e:a7:e9: 0b:bc:5a:f2:00:99:52:ac:55:ff:a5:14:7f:79:15: 3b:53:dc:99:b3:4b:98:ff:e7:9c:42:63:2a:24:2e: cc:7e:00:db:dd:5b:a4:82:ed:a5:d2:1f:63:65:cf: aa:80:4c:c2:d0:77:7b:d6:f8:69:08:30:c5:60:e9: 66:82:a0:da:e4:13:2c:74:9e:e2:76:e8:2e:29:64: 16:c2:b9:fc:6a:1b:9d:8e:1a:fc:25:da:70:c2:d9: cb:97:7e:ea:b3:ba:5c:22:3f:51:44:2e:15:de:e4: 90:83:b3:81:b8:26:ea:f2:d8:65:09:60:7b:00:39: 24:20:24:da:31:dd:7e:22:df:fc:b8:13:1c:2a:c2: 74:a5:6c:7b:13:35:78:2d:e2:f1:d5:35:b5:8b:c4: 18:e8:20:fd:4a:fc:60:02:54:69:c8:3f:d6:ac:de: 51:d5:62:4c:79:fb:28:fe:cf:0c:64:58:59:00:65: c0:67:05:b7:b4:78:53:32:17:83:a5:db:1f:3c:10: 3d:d4:2a:40:28:de:94:51:5d:47:55:0b:c9:82:b8: bb:16:e4:d6:5b:cb:d8:9d:7c:f9:00:66:41:31:e0: 90:95:3d:0b:36:db:1d:40:e9:b8:ca:ae:4c:e8:fe: 1f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EB:7E:B0:FA:3D:CE:5B:A6:8B:1A:7C:46:BC:CC:46:69:E0:DA:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:5c:43:cb:bc:92:92:d6:38:24:63:dc:c3:95:9b:b0:55:67: f8:98:4c:b5:fa:da:60:3c:5e:f9:07:b5:bc:48:57:14:30:45: 4f:f8:19:2e:b9:4d:6e:b1:b1:45:07:c2:f8:98:f7:43:b5:d0: 98:65:7a:80:21:bb:d6:22:23:1b:2e:fa:a5:ce:53:70:94:8b: 59:fc:d4:22:86:69:42:72:2f:ad:18:48:3f:79:30:eb:7a:f0: e4:33:18:c9:fa:c3:7a:bb:2a:01:09:7a:f4:9d:1d:ac:9f:86: 09:60:36:5b:30:b9:aa:02:84:f2:ac:19:5a:a0:27:44:57:dc: ca:55:24:4f:6a:b9:fb:3d:42:1b:72:a7:c8:07:52:fa:f6:42: 76:d5:7e:a3:5f:1d:34:33:5d:8c:f0:8f:ef:73:76:60:2f:7f: 58:a3:8d:0e:19:a4:a9:da:32:ec:ee:f1:09:4d:0a:b4:37:19: b6:a6:aa:de:c3:d0:7a:9b:53:31:fc:1e:99:8b:bf:0a:f8:aa: 81:93:0a:8b:c1:e8:b7:4f:86:ad:35:c0:9c:15:c6:10:4b:6b: c5:59:71:ea:fb:91:fd:8b:fe:a1:d5:b2:65:2a:24:22:c0:78: ab:ac:df:af:e1:31:6f:b7:dd:97:94:26:79:57:9d:03:ab:0f: 08:ec:33:c1 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEk1Dqdo+YG+i33oJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YWU5ODAyYjgtYmNlMi00MWU5LTkwYjUtODA1NmUxMDU0YzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJXKA4e9n/EXByh+p+kLvFryAJlSrFX/pRR/ eRU7U9yZs0uY/+ecQmMqJC7MfgDb3Vukgu2l0h9jZc+qgEzC0Hd71vhpCDDFYOlm gqDa5BMsdJ7iduguKWQWwrn8ahudjhr8JdpwwtnLl37qs7pcIj9RRC4V3uSQg7OB uCbq8thlCWB7ADkkICTaMd1+It/8uBMcKsJ0pWx7EzV4LeLx1TW1i8QY6CD9Svxg AlRpyD/WrN5R1WJMefso/s8MZFhZAGXAZwW3tHhTMheDpdsfPBA91CpAKN6UUV1H VQvJgri7FuTWW8vYnXz5AGZBMeCQlT0LNtsdQOm4yq5M6P4fBwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFFPrfrD6Pc5bposafEa8zEZp4NodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvMGNkODc0OWYtZTgzYi0z NGQ4LWEyZWQtMjFhMzgzY2ZlOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACZcQ8u8kpLWOCRj3MOVm7BVZ/iY TLX62mA8XvkHtbxIVxQwRU/4GS65TW6xsUUHwviY90O10JhleoAhu9YiIxsu+qXO U3CUi1n81CKGaUJyL60YSD95MOt68OQzGMn6w3q7KgEJevSdHayfhglgNlswuaoC hPKsGVqgJ0RX3MpVJE9qufs9Qhtyp8gHUvr2QnbVfqNfHTQzXYzwj+9zdmAvf1ij jQ4ZpKnaMuzu8QlNCrQ3Gbamqt7D0HqbUzH8HpmLvwr4qoGTCovB6LdPhq01wJwV xhBLa8VZcer7kf2L/qHVsmUqJCLAeKus36/hMW+33ZeUJnlXnQOrDwjsM8E= -----END CERTIFICATE-----Generated at Sat Apr 5 04:31:27 2025 by rpki-client