$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa File: ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa (raw, json) Hash identifier: H081nZMm9UMRMm6KuLKMyzBCH+BFXRxd2Yb53cv2PEU= Subject key identifier: DB:A0:8A:30:5A:AB:33:B2:33:0D:7C:58:AE:15:A5:55:BE:B7:89:D0 Certificate issuer: /CN=497813be-498e-4129-a627-225f97d0e2b5 Certificate serial: 010D0C9F432858483F801EDEFB62522DC2E05780 Authority key identifier: B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa Signing time: Wed 18 Dec 2024 14:00:52 +0000 ROA not before: Wed 18 Dec 2024 14:00:52 +0000 ROA not after: Tue 18 Mar 2025 13:00:52 +0000 asID: 399606 IP address blocks: 45.45.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3f:80:1e:de:fb:62:52:2d:c2:e0:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=497813be-498e-4129-a627-225f97d0e2b5 Validity Not Before: Dec 18 14:00:52 2024 GMT Not After : Mar 18 13:00:52 2025 GMT Subject: CN=579f7aec-63af-444a-b83e-1a18db1a87a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:b0:02:e0:56:a0:00:d7:ca:82:93:ec:c4: 6a:24:ac:1e:ac:d7:10:01:d1:08:69:6b:d6:6c:27: 8d:ce:a9:b0:0d:b7:76:ff:70:31:fe:4d:92:1f:68: d1:52:de:4a:46:b6:e2:87:3a:ca:b0:61:5a:d0:5f: 96:a5:20:d1:9b:b1:be:c6:bd:e2:1e:e8:2f:98:ca: 39:88:7d:3e:d7:32:c0:b1:d0:64:49:ed:3c:d2:cb: 67:f5:ca:4a:c1:1a:6a:28:7a:97:ff:5c:75:5e:c6: 10:7b:1b:e0:44:4d:1c:a4:b2:c7:18:2e:c0:0b:e0: 5d:c0:53:42:de:02:69:a3:e1:c9:a0:d6:13:50:ad: 31:73:a9:32:b6:b7:b7:ab:e4:d5:b8:8c:1a:a2:49: 7c:d1:bc:29:de:ab:b6:c9:11:e0:5b:6c:8d:f8:b4: 30:67:af:ed:1e:c6:2f:79:f9:23:86:82:d1:89:5b: 25:bf:4e:15:c1:0b:06:fb:ec:59:42:29:c3:50:53: d6:fd:59:c1:5c:07:03:dd:9d:55:64:b6:a1:88:d9: 3e:46:ad:55:07:07:03:ee:86:ec:4c:99:48:17:64: e8:67:fa:f2:f9:f8:e1:69:b5:91:00:7f:bc:37:32: 9d:6f:55:bc:09:15:ba:39:ab:c8:f0:71:f9:b3:f8: 6f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A0:8A:30:5A:AB:33:B2:33:0D:7C:58:AE:15:A5:55:BE:B7:89:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/ce47c968-0a16-3170-948d-a2cfae3eb8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl X509v3 Authority Key Identifier: keyid:B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer sbgp-ipAddrBlock: critical IPv4: 45.45.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b9:e0:c0:19:eb:12:00:72:d6:d5:d3:6d:e5:ab:b2:b2:ec: b0:a9:a6:67:47:ec:ad:eb:79:39:63:08:c6:6b:a7:27:79:5c: a8:4a:cb:91:82:fd:ca:48:ca:c2:91:99:ea:20:ef:8b:54:20: bf:0e:a8:f3:7f:ae:48:ff:60:e2:6e:6e:12:59:d4:81:bc:e3: 01:3d:d0:c9:66:78:6e:21:f4:a8:b2:76:ea:ef:32:0d:c2:dc: 7f:3c:7e:cb:71:d9:c9:ec:55:c8:41:75:3c:63:e7:bc:27:d8: a6:bd:92:1a:2a:d8:43:95:33:84:ff:f0:35:61:83:91:55:e0: f8:fe:e9:cd:45:77:08:18:55:a5:a5:9b:48:7e:e6:63:3a:d3: 19:91:12:af:f5:90:e3:78:71:58:4b:d2:37:b8:f2:a5:47:6c: 68:8c:68:9c:2f:86:bc:b2:90:cb:41:54:92:d0:e2:25:4e:3a: 7c:3e:ab:80:dd:80:5b:31:de:ee:b9:1d:91:bb:3e:b5:17:c1: ad:4a:9a:0c:07:23:fd:98:b7:c6:a6:26:8b:2a:b1:da:2b:59: 3f:2a:55:52:f4:41:e5:81:e0:1c:e1:a0:70:ac:9b:cd:5a:79: d5:fd:24:d6:98:57:7c:2f:43:e1:37:b7:eb:1f:9f:b1:3b:f4: fa:cf:c5:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gB7e+2JSLcLgV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk3ODEzYmUtNDk4ZS00MTI5LWE2MjctMjI1Zjk3ZDBl MmI1MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk NTc5ZjdhZWMtNjNhZi00NDRhLWI4M2UtMWExOGRiMWE4N2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdOwAuBWoADXyoKT7MRqJKwerNcQAdEIaWvW bCeNzqmwDbd2/3Ax/k2SH2jRUt5KRrbihzrKsGFa0F+WpSDRm7G+xr3iHugvmMo5 iH0+1zLAsdBkSe080stn9cpKwRpqKHqX/1x1XsYQexvgRE0cpLLHGC7AC+BdwFNC 3gJpo+HJoNYTUK0xc6kytre3q+TVuIwaokl80bwp3qu2yRHgW2yN+LQwZ6/tHsYv efkjhoLRiVslv04VwQsG++xZQinDUFPW/VnBXAcD3Z1VZLahiNk+Rq1VBwcD7obs TJlIF2ToZ/ry+fjhabWRAH+8NzKdb1W8CRW6OavI8HH5s/hvEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNugijBaqzOyMw18WK4VpVW+t4nQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OTc4 MTNiZS00OThlLTQxMjktYTYyNy0yMjVmOTdkMGUyYjUvY2U0N2M5NjgtMGExNi0z MTcwLTk0OGQtYTJjZmFlM2ViOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk3ODEzYmUtNDk4ZS00MTI5LWE2 MjctMjI1Zjk3ZDBlMmI1LzQ5NzgxM2JlLTQ5OGUtNDEyOS1hNjI3LTIyNWY5N2Qw ZTJiNS5jcmwwHwYDVR0jBBgwFoAUuDd7Tk8D/gmswblAiz+e8Eyi/yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OTc4MTNiZS00OThlLTQxMjktYTYyNy0yMjVm OTdkMGUyYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC54MAZ6xIActbV023lq7Ky7LCppmdH7K3reTljCMZrpyd5XKhKy5GC /cpIysKRmeog74tUIL8OqPN/rkj/YOJubhJZ1IG84wE90MlmeG4h9KiydurvMg3C 3H88fstx2cnsVchBdTxj57wn2Ka9khoq2EOVM4T/8DVhg5FV4Pj+6c1FdwgYVaWl m0h+5mM60xmREq/1kON4cVhL0je48qVHbGiMaJwvhryykMtBVJLQ4iVOOnw+q4Dd gFsx3u65HZG7PrUXwa1KmgwHI/2Yt8amJosqsdorWT8qVVL0QeWB4BzhoHCsm81a edX9JNaYV3wvQ+E3t+sfn7E79PrPxWM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:34 2025 by rpki-client