$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/eaec0fe6-2e5d-394d-99d5-8ec7cec899a8.roa File: eaec0fe6-2e5d-394d-99d5-8ec7cec899a8.roa (raw, json) Hash identifier: X3fat5rxO90wN42GgC7l75H3Lf3eo+xg1tIcIjDyCvU= Subject key identifier: 69:E0:E5:22:63:92:0C:61:48:53:08:D4:D8:CD:B7:C4:D1:07:C4:37 Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658 Certificate serial: 010D0C9F43285848C2B63D89A4346758FD539B00 Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/eaec0fe6-2e5d-394d-99d5-8ec7cec899a8.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 215123 IP address blocks: 45.43.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:3d:89:a4:34:67:58:fd:53:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=96d22456-22b2-4f2b-92fd-489173648e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4e:88:d2:ad:8e:d9:7d:d0:34:f5:7f:b3:9d: 34:f2:41:46:70:01:2d:0b:e6:2b:ae:63:9a:6c:dd: 16:76:db:c1:6f:de:eb:5a:97:d9:3c:c6:b8:af:75: 62:95:a3:2b:4e:87:01:a1:5b:51:78:43:aa:bf:a6: d3:76:4c:83:fd:2d:ac:71:1c:fd:11:6b:08:cb:6b: 11:15:66:19:ec:c3:81:c4:4c:c9:7f:9a:3c:99:b1: 71:f7:d6:04:ca:aa:da:8f:9a:2f:f5:30:d4:7d:52: 76:ee:d9:05:ff:a9:ed:d5:f4:e9:b8:00:81:2d:b5: 7b:5b:6a:4a:81:81:45:53:51:11:98:72:14:be:22: 1a:f2:a2:91:da:07:de:d2:a3:2b:26:c0:a6:09:9c: 67:c7:de:61:4b:6e:16:4d:cd:e3:da:76:42:50:35: 3c:77:68:74:ca:69:81:36:96:55:0d:28:d0:0b:e2: e9:9f:e1:3b:cc:01:fb:6e:c0:c1:f9:c1:6e:9f:8d: 53:1c:b8:df:bc:a3:f7:8a:7a:26:c9:fa:96:15:54: 3e:2b:db:f2:3a:5b:62:10:35:97:9b:49:3f:86:5f: b6:d2:d1:e5:8d:56:62:dc:d3:99:ce:3f:d6:37:e1: ae:ce:f4:a6:8f:18:20:1e:6f:35:50:aa:34:13:76: af:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E0:E5:22:63:92:0C:61:48:53:08:D4:D8:CD:B7:C4:D1:07:C4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/eaec0fe6-2e5d-394d-99d5-8ec7cec899a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl X509v3 Authority Key Identifier: keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer sbgp-ipAddrBlock: critical IPv4: 45.43.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:08:1b:1a:48:00:ea:94:6e:80:14:8d:ba:3f:e3:bd:9a:56: 3d:7c:23:f3:f9:67:e2:5d:7e:06:56:b2:c6:87:af:7a:4f:23: 8a:51:e5:78:45:8f:d1:64:18:0e:1d:7d:93:9e:7a:d3:37:59: 89:82:66:40:cf:f7:00:14:60:8b:c9:bd:6d:71:58:c6:26:a5: 52:05:fc:b0:55:06:dd:08:76:91:57:c6:21:4b:f3:86:f1:cb: 16:ba:ae:7c:86:a2:04:a0:ff:14:14:e6:eb:ad:d2:8c:9c:8e: 0e:f3:f2:1e:79:1b:d2:d6:c0:93:97:e0:11:d4:56:ed:19:36: 63:51:95:08:a2:c1:b9:97:e4:14:31:0d:4a:02:1a:09:42:83: 7a:d5:f7:81:ff:6b:c6:67:d9:3e:d8:b1:2e:15:8e:46:3a:29: 63:d9:53:88:11:0f:85:d4:d3:79:52:d5:b2:47:f2:f5:31:10: ca:54:9b:9a:27:a8:03:ad:09:d9:e4:5a:03:3d:1b:c7:cf:5e: 18:7c:9c:9c:5c:65:63:ee:4d:47:11:e1:13:a7:c3:e5:04:10: a9:0f:8e:1b:80:7b:29:18:85:6c:56:84:4b:5a:f3:4f:58:5e: 7f:17:5e:b5:72:67:0b:99:6b:39:51:80:89:aa:f6:d7:da:39: 96:cf:34:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtj2JpDRnWP1TmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0 NjU4MB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk OTZkMjI0NTYtMjJiMi00ZjJiLTkyZmQtNDg5MTczNjQ4ZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU6I0q2O2X3QNPV/s5008kFGcAEtC+YrrmOa bN0WdtvBb97rWpfZPMa4r3VilaMrTocBoVtReEOqv6bTdkyD/S2scRz9EWsIy2sR FWYZ7MOBxEzJf5o8mbFx99YEyqraj5ov9TDUfVJ27tkF/6nt1fTpuACBLbV7W2pK gYFFU1ERmHIUviIa8qKR2gfe0qMrJsCmCZxnx95hS24WTc3j2nZCUDU8d2h0ymmB NpZVDSjQC+Lpn+E7zAH7bsDB+cFun41THLjfvKP3inomyfqWFVQ+K9vyOltiEDWX m0k/hl+20tHljVZi3NOZzj/WN+GuzvSmjxggHm81UKo0E3av2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGng5SJjkgxhSFMI1NjNt8TRB8Q3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvZWFlYzBmZTYtMmU1ZC0z OTRkLTk5ZDUtOGVjN2NlYzg5OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz NzY1MzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsIGxpIAOqUboAUjbo/472aVj18I/P5Z+JdfgZWssaHr3pPI4pR5XhF j9FkGA4dfZOeetM3WYmCZkDP9wAUYIvJvW1xWMYmpVIF/LBVBt0IdpFXxiFL84bx yxa6rnyGogSg/xQU5uut0oycjg7z8h55G9LWwJOX4BHUVu0ZNmNRlQiiwbmX5BQx DUoCGglCg3rV94H/a8Zn2T7YsS4VjkY6KWPZU4gRD4XU03lS1bJH8vUxEMpUm5on qAOtCdnkWgM9G8fPXhh8nJxcZWPuTUcR4ROnw+UEEKkPjhuAeykYhWxWhEta809Y Xn8XXrVyZwuZazlRgImq9tfaOZbPNDI= -----END CERTIFICATE-----Generated at Fri Mar 14 11:21:42 2025 by rpki-client