$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa File: d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa (raw, json) Hash identifier: ztsy9bXmOTo5BO/osReZUgIhV2uUBn4GHuZKL5UWtH4= Subject key identifier: 35:0D:8B:20:CD:55:39:FB:EC:BA:18:93:34:3B:CC:6E:E6:81:F0:57 Certificate issuer: /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Certificate serial: 010D0C9F432858496054191ABCC6E3BCAD840980 Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 400967 IP address blocks: 45.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:19:1a:bc:c6:e3:bc:ad:84:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=23d95ba0-2dbb-4d44-ad2b-5577da6fe631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:72:3b:70:6b:de:51:d7:a5:ad:b7:0a:3b:83: e6:1d:42:d5:f4:0d:05:f8:86:87:33:b8:a9:02:5e: ff:17:93:de:c4:46:fb:17:89:34:6d:95:79:e6:78: 77:e4:1a:84:3b:1d:f5:d9:6c:82:ce:dc:e2:65:c4: 49:f2:93:a8:b3:dc:90:17:cd:0a:38:65:cd:b5:ce: e2:cf:dd:9e:0b:fd:90:b0:31:0f:70:13:b5:8e:48: 2d:16:c9:d2:9e:42:f0:6d:1d:3e:f4:68:b7:8d:e3: 3e:36:15:5f:70:ec:76:0c:b7:8e:ad:9d:51:7d:03: d9:d7:ec:f4:00:be:3d:e7:eb:c1:be:29:1c:62:7d: 2c:b7:85:95:23:e5:18:53:11:fc:70:8c:d0:81:0d: 5a:3f:61:ce:2f:3a:b0:ca:c3:df:70:d7:77:40:2e: b5:12:f6:90:d2:9c:6f:0c:d1:a6:f8:36:73:9c:bb: 01:45:e9:7d:0d:f0:b5:e9:18:9b:02:8a:66:d5:8c: ef:3d:41:e5:e7:ce:78:dc:b4:77:fd:25:ff:1c:12: cf:08:51:cb:b4:d3:93:e8:57:34:ca:be:23:31:b1: 97:11:f9:32:f6:98:bb:e1:0a:fb:6d:c3:4d:37:0a: 96:b2:d1:02:44:1b:9d:52:8a:91:4b:a1:8f:98:14: 1e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0D:8B:20:CD:55:39:FB:EC:BA:18:93:34:3B:CC:6E:E6:81:F0:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl X509v3 Authority Key Identifier: keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer sbgp-ipAddrBlock: critical IPv4: 45.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:d8:f9:61:6a:5f:c7:7d:50:d9:e7:84:89:4b:93:ad:b4:35: 21:7b:b4:b7:cf:2e:91:f9:2a:6f:76:87:20:fe:94:ea:e1:f8: dc:45:ad:eb:9f:50:25:dd:c4:5b:15:cf:87:a6:27:5b:c7:50: 01:f6:9e:76:68:76:da:6a:df:56:44:97:53:4a:da:2b:39:7a: 11:a4:93:7a:a2:cb:b4:fe:f3:b7:5d:15:3c:5d:58:6a:9d:3d: bf:89:ea:26:04:b7:1e:df:f9:aa:03:19:94:b2:04:7b:07:9f: 64:a9:cb:34:36:77:89:c6:da:4e:ae:84:31:86:0f:c4:cc:06: dc:1c:72:a1:40:5b:d0:6f:18:15:7e:81:e6:14:1b:69:40:6b: ab:07:6d:e4:70:e0:19:7f:be:0f:c6:87:e9:a3:b1:f4:47:02: 34:72:aa:77:d8:d9:bf:4d:d6:fc:58:f1:2f:40:e2:fe:d1:dd: 96:dc:d9:44:44:c9:91:ec:ed:9a:7d:c0:e6:6e:7d:ff:bd:0f: 91:a2:6a:c3:50:63:e9:84:f2:5d:26:e2:d3:63:83:c0:05:44: 01:be:4b:11:08:6a:f9:0c:ce:33:c7:7d:63:66:58:cd:49:70: 25:7c:c2:67:7e:64:80:be:67:fa:35:e7:8f:2f:51:d1:53:c8: 7a:7b:cb:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBkavMbjvK2ECYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU4ZWQ5NTAtNDQ4OC00OWIxLThkMzktYmI4YzcxYTc2 N2QyMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk MjNkOTViYTAtMmRiYi00ZDQ0LWFkMmItNTU3N2RhNmZlNjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXI7cGveUdelrbcKO4PmHULV9A0F+IaHM7ip Al7/F5PexEb7F4k0bZV55nh35BqEOx312WyCztziZcRJ8pOos9yQF80KOGXNtc7i z92eC/2QsDEPcBO1jkgtFsnSnkLwbR0+9Gi3jeM+NhVfcOx2DLeOrZ1RfQPZ1+z0 AL495+vBvikcYn0st4WVI+UYUxH8cIzQgQ1aP2HOLzqwysPfcNd3QC61EvaQ0pxv DNGm+DZznLsBRel9DfC16RibAopm1YzvPUHl58543LR3/SX/HBLPCFHLtNOT6Fc0 yr4jMbGXEfky9pi74Qr7bcNNNwqWstECRBudUoqRS6GPmBQePQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUNiyDNVTn77LoYkzQ7zG7mgfBXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThl ZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhjNzFhNzY3ZDIvZDNmZWZmMjQtOWNiMy0z YzdkLTgwYzAtZjRjNzZmZTMwMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWU4ZWQ5NTAtNDQ4OC00OWIxLThk MzktYmI4YzcxYTc2N2QyLzllOGVkOTUwLTQ0ODgtNDliMS04ZDM5LWJiOGM3MWE3 NjdkMi5jcmwwHwYDVR0jBBgwFoAUJhbbhZB9FA+mCJFa84xIt9zz1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThlZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhj NzFhNzY3ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjY+WFqX8d9UNnnhIlLk620NSF7tLfPLpH5Km92hyD+lOrh+NxFreuf UCXdxFsVz4emJ1vHUAH2nnZodtpq31ZEl1NK2is5ehGkk3qiy7T+87ddFTxdWGqd Pb+J6iYEtx7f+aoDGZSyBHsHn2SpyzQ2d4nG2k6uhDGGD8TMBtwccqFAW9BvGBV+ geYUG2lAa6sHbeRw4Bl/vg/Gh+mjsfRHAjRyqnfY2b9N1vxY8S9A4v7R3Zbc2URE yZHs7Zp9wOZuff+9D5GiasNQY+mE8l0m4tNjg8AFRAG+SxEIavkMzjPHfWNmWM1J cCV8wmd+ZIC+Z/o1548vUdFTyHp7y5g= -----END CERTIFICATE-----Generated at Sat Apr 12 13:49:48 2025 by rpki-client