$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/cdb55576-3077-358a-a411-40c0f4e67ec5.roa File: cdb55576-3077-358a-a411-40c0f4e67ec5.roa (raw, json) Hash identifier: CjV6T8DM3KKR18gM+F0HmiGztuaWWTMsM5kZFye17Zg= Subject key identifier: 02:2B:8E:C0:FA:00:26:70:1F:78:14:86:7E:4D:28:6C:59:33:1D:F2 Certificate issuer: /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Certificate serial: 010D0C9F43285849218401255E20D5388089F880 Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/cdb55576-3077-358a-a411-40c0f4e67ec5.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 213122 IP address blocks: 45.61.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:01:25:5e:20:d5:38:80:89:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=9d74a7b9-f342-4b42-88dd-21c76ad391b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:57:b0:bb:b6:99:e7:0c:39:51:55:57:88:6b: 03:f8:7f:f4:19:94:4b:c5:89:26:74:92:66:43:0d: f4:b3:ef:50:b2:80:e9:d0:b9:6e:2c:d3:41:0d:ca: 8a:fc:5e:91:b2:79:3d:df:6d:51:d9:ae:2a:d1:be: 9c:8d:06:f5:44:c0:17:2c:52:50:37:45:af:51:bf: a8:8a:1f:7f:0d:b0:cc:0a:21:70:51:a1:9b:9d:08: 12:a8:1b:83:21:18:38:c8:2b:b3:e5:82:2f:b7:f8: f5:fa:5e:89:31:61:8f:a1:6d:a3:fc:8a:03:2a:85: f6:f8:5b:99:a3:47:82:90:8e:9f:6f:4b:5e:8b:e9: 2d:ea:4f:4b:1d:f2:ab:12:38:a0:36:03:3c:5a:69: 97:5b:88:45:d0:d6:84:ad:5d:04:ec:bb:03:51:29: f4:06:d6:34:76:d9:bf:b7:e5:ba:00:03:d6:5e:6d: 53:55:19:ab:38:89:18:0e:1a:41:7e:ff:14:d1:81: c7:38:75:25:17:b8:2a:9b:2d:59:3a:47:a1:00:d4: 07:8e:5e:76:80:0d:84:ae:74:48:d6:ce:26:7a:f2: 26:73:bd:5e:f1:29:25:d5:2d:13:b8:08:d0:9e:84: 99:35:6f:f5:21:53:d6:1a:47:23:54:87:5c:67:0d: b5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2B:8E:C0:FA:00:26:70:1F:78:14:86:7E:4D:28:6C:59:33:1D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/cdb55576-3077-358a-a411-40c0f4e67ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl X509v3 Authority Key Identifier: keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer sbgp-ipAddrBlock: critical IPv4: 45.61.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:6d:ee:b8:7e:49:0e:b6:d9:b3:1b:cc:b3:a8:b4:e7:9f:9d: f3:e4:a3:39:88:6f:20:93:de:0c:43:ac:b6:6c:b0:3e:a5:34: 24:6a:16:a2:b4:5e:a6:c7:0f:a7:2d:7d:ad:1a:b6:ea:d3:3b: d7:1c:49:19:e4:c0:52:bc:1e:46:3e:c2:03:8a:b7:5b:c9:f5: b1:bb:bb:17:1a:3f:d5:1b:1a:c9:37:ad:b7:82:92:29:cf:00: 29:6a:60:6b:ed:53:34:78:bb:16:b7:51:b4:5c:20:33:ef:c0: 76:dc:6b:98:9f:3d:ab:fa:01:01:83:c5:12:06:c0:42:7a:32: b5:3d:6f:31:1a:c4:23:d2:94:91:00:b5:c3:7d:91:4e:fb:45: a2:ba:01:f8:a5:db:69:d9:55:4e:2f:d6:05:5a:66:a8:d8:df: 91:52:1b:85:aa:c1:14:ad:7f:89:59:10:26:ec:ea:ac:de:4d: 1d:04:a1:b5:46:75:65:87:c2:15:84:54:2d:4e:6a:02:52:b8: bf:94:5c:cd:32:9c:13:2c:47:4b:eb:26:7f:a9:53:9d:da:6f: 6c:18:8a:d3:dd:ca:84:e9:be:19:40:d8:27:b7:cb:7c:7b:94: f9:32:6c:b7:ac:ac:47:7f:26:c9:f1:e3:57:90:29:83:cc:4d: b1:52:2c:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAElXiDVOICJ+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi OWQ3MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk OWQ3NGE3YjktZjM0Mi00YjQyLTg4ZGQtMjFjNzZhZDM5MWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVewu7aZ5ww5UVVXiGsD+H/0GZRLxYkmdJJm Qw30s+9QsoDp0LluLNNBDcqK/F6Rsnk9321R2a4q0b6cjQb1RMAXLFJQN0WvUb+o ih9/DbDMCiFwUaGbnQgSqBuDIRg4yCuz5YIvt/j1+l6JMWGPoW2j/IoDKoX2+FuZ o0eCkI6fb0tei+kt6k9LHfKrEjigNgM8WmmXW4hF0NaErV0E7LsDUSn0BtY0dtm/ t+W6AAPWXm1TVRmrOIkYDhpBfv8U0YHHOHUlF7gqmy1ZOkehANQHjl52gA2ErnRI 1s4mevImc71e8Skl1S0TuAjQnoSZNW/1IVPWGkcjVIdcZw21kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIrjsD6ACZwH3gUhn5NKGxZMx3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvY2RiNTU1NzYtMzA3Ny0z NThhLWE0MTEtNDBjMGY0ZTY3ZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT2rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBt7rh+SQ622bMbzLOotOefnfPkozmIbyCT3gxDrLZssD6lNCRqFqK0 XqbHD6ctfa0aturTO9ccSRnkwFK8HkY+wgOKt1vJ9bG7uxcaP9UbGsk3rbeCkinP AClqYGvtUzR4uxa3UbRcIDPvwHbca5ifPav6AQGDxRIGwEJ6MrU9bzEaxCPSlJEA tcN9kU77RaK6Afil22nZVU4v1gVaZqjY35FSG4WqwRStf4lZECbs6qzeTR0EobVG dWWHwhWEVC1OagJSuL+UXM0ynBMsR0vrJn+pU53ab2wYitPdyoTpvhlA2Ce3y3x7 lPkybLesrEd/Jsnx41eQKYPMTbFSLP4= -----END CERTIFICATE-----Generated at Fri Mar 14 08:41:27 2025 by rpki-client