$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/0fc287bb-8d1d-3ef0-b206-c840c5330fa9.roa File: 0fc287bb-8d1d-3ef0-b206-c840c5330fa9.roa (raw, json) Hash identifier: iO+5bNY5A9c5Rr1EnjKSX8oXn6cZqLyDvgYpPHprbpI= Subject key identifier: 5D:86:9A:08:EA:4E:DF:9E:30:43:D1:05:06:43:DC:E7:4A:F0:32:20 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F432858495ABEDE93E955831467BE1040 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/0fc287bb-8d1d-3ef0-b206-c840c5330fa9.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 40788 IP address blocks: 45.74.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:de:93:e9:55:83:14:67:be:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=418e42af-7253-4720-8196-17b2df882a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:15:a1:e4:35:72:e0:f5:1f:9c:17:6d:7d:54: 8d:8a:db:5e:55:3d:30:4b:bf:80:8c:fa:12:81:5d: c2:7d:16:df:72:62:73:bb:a2:29:93:e7:ae:1e:78: 9a:29:44:df:65:22:8d:dc:cb:af:b4:5c:c7:dc:df: b0:d5:2a:fb:05:8d:74:cd:4c:4d:47:00:9e:c6:1a: ec:e1:c4:2c:59:00:58:7e:bd:23:fa:0a:19:56:51: 25:63:8d:c5:97:a4:98:b3:c1:89:52:b1:64:60:bd: fc:22:1c:d5:94:34:ba:c0:62:93:4e:62:9a:3c:81: 86:7b:ef:25:49:0f:b2:a0:50:1f:4f:22:f9:65:b0: 60:bf:ab:e3:64:f9:b8:83:d9:61:fb:60:13:b8:b6: 96:b4:4d:8b:70:ff:03:11:00:f0:fd:f8:36:7e:cd: 0d:1d:f3:d4:19:65:7d:fa:2e:59:8e:1e:31:12:fd: 27:0c:3d:4b:d3:25:1f:e6:9b:d3:bd:32:6b:14:07: 0f:9e:25:a7:a3:bc:fd:e0:ad:7b:a9:30:7e:59:23: 56:21:ab:22:43:62:ee:26:76:3a:6d:ae:27:d7:f9: fb:62:7d:6e:1b:ba:65:cc:0b:f8:bf:32:08:8b:04: 4e:2d:f3:f5:36:d4:42:b7:21:e5:15:0e:88:20:b1: 44:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:86:9A:08:EA:4E:DF:9E:30:43:D1:05:06:43:DC:E7:4A:F0:32:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/0fc287bb-8d1d-3ef0-b206-c840c5330fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 45.74.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:04:f7:ba:3e:d9:27:d0:33:74:62:66:f3:3f:f4:d4:46:3c: b7:78:b2:8f:8e:70:63:c6:59:a0:71:2b:1e:fb:e3:72:31:c7: fb:11:cf:98:aa:d9:f2:6f:20:15:c1:9b:bc:5f:69:8a:0d:32: e3:00:95:be:63:57:65:55:f1:6e:7f:ee:36:db:f2:98:83:4c: 79:2c:07:e1:bc:05:1a:42:9b:11:16:89:68:56:7c:11:9a:5a: b5:b1:ac:02:c5:a3:a3:57:6a:c4:74:ab:fc:2d:42:1e:6b:90: fb:6d:e8:61:4b:ea:65:22:a2:c2:80:75:25:91:e6:3a:28:91: d8:f0:a6:00:ee:a3:5d:7f:47:a3:bf:d4:20:2e:51:6b:12:8c: e0:40:77:1c:bd:51:6a:31:42:d2:5b:c8:7e:6a:ea:f8:c3:c6: 36:2f:33:8c:97:54:9a:51:ea:fe:ae:b2:bb:b2:3b:ab:e6:4f: 1c:a9:92:d2:87:18:02:24:ca:5c:37:5b:07:04:43:f2:14:da: aa:25:26:bd:c6:91:c0:34:12:ca:46:e9:b9:d6:74:7d:8a:34: e5:93:b1:3a:69:a2:31:2c:8c:de:42:41:97:08:b4:d2:5e:e7: 58:a9:9e:50:c6:35:48:c3:ce:54:04:9c:4c:89:e9:1d:8f:15: 55:88:4b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavt6T6VWDFGe+EEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NDE4ZTQyYWYtNzI1My00NzIwLTgxOTYtMTdiMmRmODgyYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRWh5DVy4PUfnBdtfVSNitteVT0wS7+AjPoS gV3CfRbfcmJzu6Ipk+euHniaKUTfZSKN3MuvtFzH3N+w1Sr7BY10zUxNRwCexhrs 4cQsWQBYfr0j+goZVlElY43Fl6SYs8GJUrFkYL38IhzVlDS6wGKTTmKaPIGGe+8l SQ+yoFAfTyL5ZbBgv6vjZPm4g9lh+2ATuLaWtE2LcP8DEQDw/fg2fs0NHfPUGWV9 +i5Zjh4xEv0nDD1L0yUf5pvTvTJrFAcPniWno7z94K17qTB+WSNWIasiQ2LuJnY6 ba4n1/n7Yn1uG7plzAv4vzIIiwROLfP1NtRCtyHlFQ6IILFEiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2GmgjqTt+eMEPRBQZD3OdK8DIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMGZjMjg3YmItOGQxZC0z ZWYwLWIyMDYtYzg0MGM1MzMwZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLUpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4E97o+2SfQM3RiZvM/9NRGPLd4so+OcGPGWaBxKx7743Ixx/sRz5iq 2fJvIBXBm7xfaYoNMuMAlb5jV2VV8W5/7jbb8piDTHksB+G8BRpCmxEWiWhWfBGa WrWxrALFo6NXasR0q/wtQh5rkPtt6GFL6mUiosKAdSWR5jookdjwpgDuo11/R6O/ 1CAuUWsSjOBAdxy9UWoxQtJbyH5q6vjDxjYvM4yXVJpR6v6usruyO6vmTxypktKH GAIkylw3WwcEQ/IU2qolJr3GkcA0EspG6bnWdH2KNOWTsTppojEsjN5CQZcItNJe 51ipnlDGNUjDzlQEnEyJ6R2PFVWIS0s= -----END CERTIFICATE-----Generated at Tue Apr 8 14:46:28 2025 by rpki-client