$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/7fdcbf13-2c45-320d-abcf-6414fdb919b0.roa File: 7fdcbf13-2c45-320d-abcf-6414fdb919b0.roa (raw, json) Hash identifier: NSV6DtE75la6BVkFtRi3GFDyX18L7xbHjelscInOvv8= Subject key identifier: 4A:19:AF:08:FD:B1:65:BA:91:28:3C:8E:BD:F3:19:20:84:10:C2:83 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F432858495ABEDE84C3C80109187EEB00 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/7fdcbf13-2c45-320d-abcf-6414fdb919b0.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 40788 IP address blocks: 45.3.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:de:84:c3:c8:01:09:18:7e:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=ada60a8b-b84f-4149-a397-103af4c4b1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:7e:9c:2f:85:8f:c4:4e:59:e5:55:e4:d4: 8b:aa:f1:e2:06:bd:17:0d:6f:3d:ae:26:ea:8d:e9: 92:5a:77:60:f0:62:e5:80:51:c0:64:2a:b6:96:5d: 73:ae:e4:c2:d4:73:17:f1:73:cd:53:fc:a6:09:bb: fe:b2:c5:f6:b2:68:e3:f3:49:61:8b:77:9a:07:5b: c0:8e:f0:c0:5a:f9:4a:a0:94:3b:5e:c5:56:a0:83: 82:5d:11:5d:0c:9c:58:5f:e8:96:bf:ff:58:5f:d0: 10:47:fc:cd:fa:a1:90:df:88:2c:a3:7a:3e:e4:1f: 92:80:48:a4:5a:6e:98:5f:4c:22:92:49:83:51:bc: 17:e6:f7:e7:09:84:57:62:24:29:fa:a8:be:fc:20: b5:d1:35:03:01:fd:c3:5d:c7:70:9d:49:b4:ed:2a: 44:4f:8d:40:02:7f:5e:0b:41:6f:ec:c7:84:5c:64: 3a:a7:bf:d6:5c:c0:2a:d2:fe:46:53:7f:ed:8a:fd: 41:4a:68:4e:f6:aa:1b:33:7e:57:f3:6a:e7:e3:c9: 01:c1:e5:2a:ee:e1:0a:38:e8:02:44:2c:71:d2:c2: f9:21:c0:fb:fc:1f:fa:ce:67:37:84:c9:3c:df:7a: 5b:e1:3d:6f:22:b5:71:9d:c5:4a:90:fd:25:30:ee: 6a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:19:AF:08:FD:B1:65:BA:91:28:3C:8E:BD:F3:19:20:84:10:C2:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/7fdcbf13-2c45-320d-abcf-6414fdb919b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 45.3.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9c:6f:a0:b6:2e:d8:77:23:8a:f1:ab:c0:a5:ee:d2:f0:de: 99:a0:bd:7a:c1:ff:d1:0d:c1:46:2c:48:90:13:6d:c6:f8:f2: 4e:42:33:3a:f7:7e:f3:05:fd:3d:7d:c2:d6:cd:d7:c3:6f:e7: 1f:50:e5:25:04:03:1e:69:dc:ba:90:12:14:ff:99:3d:50:fa: 36:1f:1b:cd:3a:72:ff:ca:69:c8:16:d0:31:62:f1:9a:7b:d7: 7a:db:06:39:db:f9:4c:eb:b9:23:2b:cd:8d:c3:c8:62:9c:d5: 92:d3:19:44:b2:c9:aa:60:21:5c:ad:6a:fe:ac:8c:48:f2:00: 0a:45:65:3c:99:be:66:f0:4f:3c:23:e6:29:d5:99:54:f5:c3: 9d:3a:fe:03:4d:2b:a0:f1:7b:31:55:bd:7e:e4:ec:39:92:b4: 66:b5:71:2a:fb:61:1d:66:2f:54:3a:58:5a:27:bc:e3:a0:02: 62:6d:97:a8:04:7a:21:bc:e0:f0:8e:98:6b:3e:45:88:c6:a8: 6c:f7:57:be:9b:27:68:8c:d4:c4:4c:6b:f0:b0:1f:0d:b2:26: 1f:8f:83:78:ef:f5:a1:07:77:48:9b:70:46:e5:6a:92:0d:6c: 7a:e5:e1:99:91:b6:97:ab:48:56:08:29:d3:51:a9:6c:d3:73: 5c:64:13:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavt6Ew8gBCRh+6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk YWRhNjBhOGItYjg0Zi00MTQ5LWEzOTctMTAzYWY0YzRiMWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmd+nC+Fj8ROWeVV5NSLqvHiBr0XDW89ribq jemSWndg8GLlgFHAZCq2ll1zruTC1HMX8XPNU/ymCbv+ssX2smjj80lhi3eaB1vA jvDAWvlKoJQ7XsVWoIOCXRFdDJxYX+iWv/9YX9AQR/zN+qGQ34gso3o+5B+SgEik Wm6YX0wikkmDUbwX5vfnCYRXYiQp+qi+/CC10TUDAf3DXcdwnUm07SpET41AAn9e C0Fv7MeEXGQ6p7/WXMAq0v5GU3/tiv1BSmhO9qobM35X82rn48kBweUq7uEKOOgC RCxx0sL5IcD7/B/6zmc3hMk833pb4T1vIrVxncVKkP0lMO5qOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoZrwj9sWW6kSg8jr3zGSCEEMKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvN2ZkY2JmMTMtMmM0NS0z MjBkLWFiY2YtNjQxNGZkYjkxOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLQMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2cb6C2Lth3I4rxq8Cl7tLw3pmgvXrB/9ENwUYsSJATbcb48k5CMzr3 fvMF/T19wtbN18Nv5x9Q5SUEAx5p3LqQEhT/mT1Q+jYfG806cv/KacgW0DFi8Zp7 13rbBjnb+UzruSMrzY3DyGKc1ZLTGUSyyapgIVytav6sjEjyAApFZTyZvmbwTzwj 5inVmVT1w506/gNNK6DxezFVvX7k7DmStGa1cSr7YR1mL1Q6WFonvOOgAmJtl6gE eiG84PCOmGs+RYjGqGz3V76bJ2iM1MRMa/CwHw2yJh+Pg3jv9aEHd0ibcEblapIN bHrl4ZmRtperSFYIKdNRqWzTc1xkE4s= -----END CERTIFICATE-----Generated at Tue Apr 8 12:25:19 2025 by rpki-client