$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/493df7eb-5298-369a-adb2-76f786c0b925.roa File: 493df7eb-5298-369a-adb2-76f786c0b925.roa (raw, json) Hash identifier: /6qqcxKTb5V9FXt1S8y7tPQawW0KckdAijC08YdQ9Ik= Subject key identifier: 85:E3:AB:0E:C8:A6:1E:B7:7A:58:4A:89:29:17:5B:15:B2:42:7F:DF Certificate issuer: /CN=45b0b374-863f-468e-a08d-342445e7a940 Certificate serial: 010D0C9F43285848B4AB3CA09CB244FC8157EEA0 Authority key identifier: 59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/493df7eb-5298-369a-adb2-76f786c0b925.roa Signing time: Wed 29 Jan 2025 13:17:25 +0000 ROA not before: Wed 29 Jan 2025 13:17:25 +0000 ROA not after: Tue 29 Apr 2025 12:17:25 +0000 asID: 63270 IP address blocks: 209.212.48.0/20 maxlen: 24 2604:9fc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:ab:3c:a0:9c:b2:44:fc:81:57:ee:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45b0b374-863f-468e-a08d-342445e7a940 Validity Not Before: Jan 29 13:17:25 2025 GMT Not After : Apr 29 12:17:25 2025 GMT Subject: CN=766ec696-d0a0-49d1-b0de-599765660da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:74:e0:32:0b:a5:f2:f6:43:cf:31:a1:98:84: cd:ff:4c:9f:0a:63:b5:4f:5f:c1:b9:06:7b:fb:b8: 37:5a:3e:44:cd:d2:5f:7e:81:29:c5:22:3d:1a:e1: a5:2e:b7:ce:36:ad:23:74:29:78:bd:42:bb:26:b6: bd:0e:ea:23:c7:e2:f0:52:3e:12:fe:96:51:c5:f5: 62:19:22:2e:8c:d9:70:e7:8a:9c:8c:9d:be:01:20: cb:a0:67:69:b9:9b:07:a3:cd:3e:a2:23:0b:a7:0f: 23:b9:3b:62:32:6c:0c:23:10:e0:32:b5:2d:ea:4c: b4:64:33:45:85:cb:9e:10:d5:20:75:3e:d6:bc:e2: 43:63:07:fc:87:b8:e2:fb:73:f8:0d:36:a1:ea:b6: 01:27:35:84:3e:c2:05:df:1b:1d:ae:0c:5d:ae:c9: 4b:ea:47:44:4e:86:24:98:b7:d4:cd:bc:ab:fe:51: 42:d4:5c:5b:71:68:21:98:a5:17:57:86:92:01:d2: 79:24:29:ad:e6:d9:f3:49:ac:72:b9:97:2b:96:0a: 02:10:c6:ea:db:4d:d4:ac:b9:db:23:0b:14:e9:4b: 79:b3:cb:36:84:7f:d6:05:a3:65:c1:ba:e2:7e:d0: fb:49:64:e8:24:a0:5b:d5:ca:00:97:17:83:3e:f3: f8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E3:AB:0E:C8:A6:1E:B7:7A:58:4A:89:29:17:5B:15:B2:42:7F:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/493df7eb-5298-369a-adb2-76f786c0b925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl X509v3 Authority Key Identifier: keyid:59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer sbgp-ipAddrBlock: critical IPv4: 209.212.48.0/20 IPv6: 2604:9fc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:77:6d:c7:c7:bb:79:42:e9:13:4c:39:fb:54:b5:f1:1f:f3: bc:28:92:b2:f9:21:61:40:b0:a3:3f:f7:e6:be:67:4d:c7:65: 12:c1:0b:54:f7:6d:19:84:04:12:91:d9:e0:80:3b:9d:47:80: 0d:dd:29:7f:09:0d:39:ce:4c:3a:5d:f8:bf:0c:bb:d0:bc:f1: 69:fa:01:5b:32:31:0e:60:0e:0a:c7:4d:d1:78:63:81:a0:65: b5:0b:96:02:e7:39:67:55:1c:ad:c1:5c:7b:46:f2:f4:bc:72: ec:64:bd:77:f6:c8:4c:75:ef:aa:ed:05:0c:18:50:dc:2d:df: 48:e4:f7:e8:60:1a:33:96:9b:9d:3a:98:f6:41:4d:5b:58:4e: d9:7f:00:4f:45:9e:10:63:8d:d5:5e:1d:48:5a:43:c4:e7:40: 10:df:b9:07:b0:53:cf:55:f9:4c:41:2b:53:58:7a:85:a8:b3: 23:2d:5a:ed:65:c0:8a:53:bf:f1:6a:67:20:a8:72:9a:03:9a: f1:02:da:eb:46:64:97:9c:4b:49:e9:4a:0f:d0:33:71:da:b1: a8:46:77:2b:0d:24:cc:30:24:e6:13:38:bd:f3:7a:13:79:3c: c5:6e:d5:5f:92:65:99:57:72:6c:21:8f:17:ac:ba:c1:0f:e1: f3:7c:3f:c6 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEi0qzygnLJE/IFX7qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDViMGIzNzQtODYzZi00NjhlLWEwOGQtMzQyNDQ1ZTdh OTQwMB4XDTI1MDEyOTEzMTcyNVoXDTI1MDQyOTEyMTcyNVowLzEtMCsGA1UEAxMk NzY2ZWM2OTYtZDBhMC00OWQxLWIwZGUtNTk5NzY1NjYwZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3TgMgul8vZDzzGhmITN/0yfCmO1T1/BuQZ7 +7g3Wj5EzdJffoEpxSI9GuGlLrfONq0jdCl4vUK7Jra9Duojx+LwUj4S/pZRxfVi GSIujNlw54qcjJ2+ASDLoGdpuZsHo80+oiMLpw8juTtiMmwMIxDgMrUt6ky0ZDNF hcueENUgdT7WvOJDYwf8h7ji+3P4DTah6rYBJzWEPsIF3xsdrgxdrslL6kdEToYk mLfUzbyr/lFC1FxbcWghmKUXV4aSAdJ5JCmt5tnzSaxyuZcrlgoCEMbq203UrLnb IwsU6Ut5s8s2hH/WBaNlwbriftD7SWToJKBb1coAlxeDPvP4DwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFIXjqw7Iph63elhKiSkXWxWyQn/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NWIw YjM3NC04NjNmLTQ2OGUtYTA4ZC0zNDI0NDVlN2E5NDAvNDkzZGY3ZWItNTI5OC0z NjlhLWFkYjItNzZmNzg2YzBiOTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDViMGIzNzQtODYzZi00NjhlLWEw OGQtMzQyNDQ1ZTdhOTQwLzQ1YjBiMzc0LTg2M2YtNDY4ZS1hMDhkLTM0MjQ0NWU3 YTk0MC5jcmwwHwYDVR0jBBgwFoAUWfqRqOr7Ky3+V6oj1tTVl2+8au4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80NWIwYjM3NC04NjNmLTQ2OGUtYTA4ZC0zNDI0 NDVlN2E5NDAuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE0dQwMA0E AgACMAcDBQAmBJ/AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHt3bcfHu3lC6RNMOftUtfEf87wokrL5IWFA sKM/9+a+Z03HZRLBC1T3bRmEBBKR2eCAO51HgA3dKX8JDTnOTDpd+L8Mu9C88Wn6 AVsyMQ5gDgrHTdF4Y4GgZbULlgLnOWdVHK3BXHtG8vS8cuxkvXf2yEx176rtBQwY UNwt30jk9+hgGjOWm506mPZBTVtYTtl/AE9FnhBjjdVeHUhaQ8TnQBDfuQewU89V +UxBK1NYeoWosyMtWu1lwIpTv/FqZyCocpoDmvEC2utGZJecS0npSg/QM3HasahG dysNJMwwJOYTOL3zehN5PMVu1V+SZZlXcmwhjxesusEP4fN8P8Y= -----END CERTIFICATE-----Generated at Sat Apr 12 00:10:38 2025 by rpki-client