$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/03d6ba40-02b4-3565-a74a-d62126945baf.roa File: 03d6ba40-02b4-3565-a74a-d62126945baf.roa (raw, json) Hash identifier: hQsTkPUpofdsCstMc5S/3ys926yVs8wwGJX5O59msho= Subject key identifier: 48:05:CB:1C:9B:04:81:0E:D4:FF:15:78:C2:BC:C2:6D:EE:9A:C7:0C Certificate issuer: /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Certificate serial: 010D0C9F43285848C2B64AA6E46BFD89F3909800 Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/03d6ba40-02b4-3565-a74a-d62126945baf.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 399141 IP address blocks: 45.42.172.0/22 maxlen: 24 2602:fcd8::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:4a:a6:e4:6b:fd:89:f3:90:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=791418ab-e3b4-4e6b-9401-6bc645c3a0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:99:c8:3e:ef:ef:64:29:4a:34:2c:e2:cf:59: a9:c7:c3:26:08:93:1e:af:cc:c0:37:21:69:0c:cd: dc:54:78:51:cc:c7:5b:81:c9:35:54:c8:ae:a4:90: 4a:3d:2b:e5:bd:79:b6:37:b6:0c:f5:a0:37:f7:e3: ae:34:8d:3a:0d:4c:7d:c0:fc:5d:68:d3:11:65:d5: 29:48:0f:a2:8e:bf:a1:15:5a:05:f6:b0:06:24:98: 88:c2:47:d7:69:fb:10:59:f1:2d:db:60:68:a6:1d: d2:b8:a8:57:86:90:bf:12:b8:65:f7:45:73:09:64: 0e:86:95:f9:87:9b:17:2e:00:29:cc:fa:f7:21:94: 3c:1c:7a:bf:7d:46:6a:fb:a8:77:b0:88:c2:4e:99: 2d:aa:90:da:f4:dc:ac:7d:a8:5f:f6:5e:23:87:78: 89:34:f2:29:c6:e5:5b:62:d4:30:6c:d9:37:68:fe: 6e:c0:f0:6f:c9:a0:98:97:68:4d:a7:cc:be:a7:f3: cf:30:fe:72:2e:2e:7e:ac:1c:80:35:02:e2:28:05: e9:d0:06:d7:a1:b3:d6:05:82:7e:93:2b:07:18:e2: 34:30:f1:75:e2:c1:c3:c6:eb:bf:ff:c7:04:35:8b: e5:1e:e2:3a:20:d5:95:ca:32:32:a7:f4:e7:8b:39: 12:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:05:CB:1C:9B:04:81:0E:D4:FF:15:78:C2:BC:C2:6D:EE:9A:C7:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/03d6ba40-02b4-3565-a74a-d62126945baf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl X509v3 Authority Key Identifier: keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer sbgp-ipAddrBlock: critical IPv4: 45.42.172.0/22 IPv6: 2602:fcd8::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:79:4b:d2:46:e9:ae:41:fc:50:c4:20:21:fd:24:2e:11:14: b1:7a:06:00:c0:2b:4c:76:e7:4b:80:5d:36:79:31:cc:06:62: 73:78:e8:69:12:f7:8f:db:62:b4:88:fb:d7:8a:39:41:7a:ed: f2:5d:bb:dc:26:cd:72:1b:07:36:c4:3d:57:2f:db:e7:77:d2: 94:68:6a:ef:d7:9e:b0:8d:43:97:58:a0:b5:81:23:d0:43:3f: 14:5e:1c:57:50:6b:af:61:ed:f2:a0:9e:cb:36:97:fe:02:8e: aa:69:72:2b:7d:7b:5e:6c:51:c1:48:42:00:38:8c:42:46:b2: 6f:84:59:97:72:4e:f7:75:4a:2c:15:9c:8f:0c:a6:3f:69:f2: 35:b1:39:96:77:07:0e:33:a7:30:91:87:f1:9e:6b:9c:0f:e1: e5:42:e2:ad:9b:7b:12:50:3d:2b:64:60:99:7e:a7:8f:3c:48: 00:88:da:e1:99:39:82:15:cf:d7:77:63:c7:c3:50:4e:28:bc: 45:cd:20:0d:d7:91:4d:10:0c:33:df:52:eb:98:b0:58:b6:39: 20:31:90:5b:2d:99:ed:0e:c3:9c:d7:42:74:85:9d:31:b4:32: 4c:a7:c1:b5:70:68:2f:c6:b7:03:2d:d6:6d:c3:30:e2:5e:3e: c6:d9:d8:d8 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEjCtkqm5Gv9ifOQmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU4ZWQ5NTAtNDQ4OC00OWIxLThkMzktYmI4YzcxYTc2 N2QyMB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk NzkxNDE4YWItZTNiNC00ZTZiLTk0MDEtNmJjNjQ1YzNhMGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JnIPu/vZClKNCziz1mpx8MmCJMer8zANyFp DM3cVHhRzMdbgck1VMiupJBKPSvlvXm2N7YM9aA39+OuNI06DUx9wPxdaNMRZdUp SA+ijr+hFVoF9rAGJJiIwkfXafsQWfEt22Boph3SuKhXhpC/Erhl90VzCWQOhpX5 h5sXLgApzPr3IZQ8HHq/fUZq+6h3sIjCTpktqpDa9Nysfahf9l4jh3iJNPIpxuVb YtQwbNk3aP5uwPBvyaCYl2hNp8y+p/PPMP5yLi5+rByANQLiKAXp0AbXobPWBYJ+ kysHGOI0MPF14sHDxuu//8cENYvlHuI6INWVyjIyp/TnizkSmwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEgFyxybBIEO1P8VeMK8wm3umscMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThl ZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhjNzFhNzY3ZDIvMDNkNmJhNDAtMDJiNC0z NTY1LWE3NGEtZDYyMTI2OTQ1YmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWU4ZWQ5NTAtNDQ4OC00OWIxLThk MzktYmI4YzcxYTc2N2QyLzllOGVkOTUwLTQ0ODgtNDliMS04ZDM5LWJiOGM3MWE3 NjdkMi5jcmwwHwYDVR0jBBgwFoAUJhbbhZB9FA+mCJFa84xIt9zz1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThlZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhj NzFhNzY3ZDIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCLSqsMA4E AgACMAgDBgQmAvzYADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCleUvSRumuQfxQxCAh/SQuERSxegYAwCtM dudLgF02eTHMBmJzeOhpEveP22K0iPvXijlBeu3yXbvcJs1yGwc2xD1XL9vnd9KU aGrv156wjUOXWKC1gSPQQz8UXhxXUGuvYe3yoJ7LNpf+Ao6qaXIrfXtebFHBSEIA OIxCRrJvhFmXck73dUosFZyPDKY/afI1sTmWdwcOM6cwkYfxnmucD+HlQuKtm3sS UD0rZGCZfqePPEgAiNrhmTmCFc/Xd2PHw1BOKLxFzSAN15FNEAwz31LrmLBYtjkg MZBbLZntDsOc10J0hZ0xtDJMp8G1cGgvxrcDLdZtwzDiXj7G2djY -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:01 2025 by rpki-client