$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d087aab0-7821-3eb2-bc4e-1737f60d2e3a.roa File: d087aab0-7821-3eb2-bc4e-1737f60d2e3a.roa (raw, json) Hash identifier: mxZjYgvBu4gEuxMeUjg5mYMq4Ptw22SCuG0OZtaVh4Y= Subject key identifier: 3B:6F:95:76:F2:5E:4B:6B:1F:AE:4A:3E:22:9B:81:BA:0B:5F:CD:0F Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F4328584910E17E04DA6CC726DFA6E300 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d087aab0-7821-3eb2-bc4e-1737f60d2e3a.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 30823 IP address blocks: 45.59.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:7e:04:da:6c:c7:26:df:a6:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=3337f60c-14ce-471e-ba31-66c21052c468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:14:87:eb:ff:0b:e3:0c:0c:d1:77:3c:37: bf:4f:29:15:c5:e8:12:dc:86:1b:f8:00:12:66:b3: 8e:6c:28:05:9b:a4:42:15:eb:71:3e:31:c8:31:38: 04:74:f9:56:a2:31:da:80:3b:6a:e4:cd:c3:c4:bb: c3:95:79:76:d1:27:3b:ab:a7:21:2c:50:04:70:c7: a2:4c:be:7b:c9:e8:81:21:5d:6e:ce:3b:35:90:3b: 9f:46:4a:61:b1:2a:8b:6d:fd:3a:48:d9:13:f0:d5: 17:b8:30:9e:40:98:cc:fa:39:b5:93:16:d2:03:de: fb:1c:40:49:1a:19:73:6b:de:e5:03:5c:30:c6:d9: 51:3e:4a:65:b6:fe:51:cb:ac:d0:73:39:d7:46:08: 1c:63:f3:28:e2:40:bb:2c:da:d3:d2:05:50:2c:01: f4:82:cd:ae:22:59:e7:87:a7:d1:16:89:55:03:fa: 0d:a0:3d:3b:24:bd:09:1c:48:de:f6:c9:66:74:bd: 0c:2c:9f:2d:d0:0c:43:90:a2:81:ea:6d:fe:f5:18: 76:e1:bf:bf:ec:e6:92:14:cd:b9:48:54:1c:3b:2a: 15:31:28:0c:65:71:55:63:e8:a0:dc:b1:f6:45:d4: 88:31:7e:b5:a7:4b:f8:f2:82:5c:20:53:54:13:ab: 85:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6F:95:76:F2:5E:4B:6B:1F:AE:4A:3E:22:9B:81:BA:0B:5F:CD:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d087aab0-7821-3eb2-bc4e-1737f60d2e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 45.59.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:77:8d:05:9a:d7:92:4d:65:42:9e:95:79:db:4d:50:78:6e: 3e:ac:7c:02:12:43:ff:08:96:c9:ac:2c:74:90:d1:b7:e0:c6: 6a:fc:6c:ed:c5:07:11:29:41:79:be:28:7f:0c:26:b6:b6:ec: 6b:b3:59:93:21:dc:0c:5a:df:7e:ab:ab:33:ad:4d:67:58:ce: ca:53:2a:57:cb:6d:d1:53:fe:08:c8:35:a1:f3:2d:8c:33:81: f8:3d:ee:4f:59:4c:9e:71:45:69:23:23:f9:d7:84:9c:95:b2: 2f:49:9d:79:72:99:7c:6a:82:bf:59:54:e2:cf:b1:61:c1:48: dd:0b:c1:24:54:8e:79:f4:95:7e:06:97:83:d4:42:19:73:9b: 9c:d3:4f:06:25:f9:c3:02:c9:64:37:d0:a3:cf:a1:32:9a:3f: 15:e1:0f:e2:1e:3a:4d:f4:57:d8:62:87:80:29:4a:4b:50:ac: fd:7b:30:b2:66:1f:fd:0e:58:76:50:c1:16:c0:f4:0f:af:36: 80:df:7a:74:fa:e9:ae:8a:f5:b1:8e:9c:db:cb:db:0f:e3:7b: 6f:3d:ad:14:a6:15:d6:7c:b6:1e:08:67:28:25:23:03:95:db: 74:15:df:96:af:2e:77:d2:84:cd:71:4c:dd:f3:14:f3:8d:0a: 2d:26:3c:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4X4E2mzHJt+m4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk MzMzN2Y2MGMtMTRjZS00NzFlLWJhMzEtNjZjMjEwNTJjNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMkUh+v/C+MMDNF3PDe/TykVxegS3IYb+AAS ZrOObCgFm6RCFetxPjHIMTgEdPlWojHagDtq5M3DxLvDlXl20Sc7q6chLFAEcMei TL57yeiBIV1uzjs1kDufRkphsSqLbf06SNkT8NUXuDCeQJjM+jm1kxbSA977HEBJ Ghlza97lA1wwxtlRPkpltv5Ry6zQcznXRggcY/Mo4kC7LNrT0gVQLAH0gs2uIlnn h6fRFolVA/oNoD07JL0JHEje9slmdL0MLJ8t0AxDkKKB6m3+9Rh24b+/7OaSFM25 SFQcOyoVMSgMZXFVY+ig3LH2RdSIMX61p0v48oJcIFNUE6uFJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtvlXbyXktrH65KPiKbgboLX80PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZDA4N2FhYjAtNzgyMS0z ZWIyLWJjNGUtMTczN2Y2MGQyZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt3jQWa15JNZUKelXnbTVB4bj6sfAISQ/8IlsmsLHSQ0bfgxmr8bO3F BxEpQXm+KH8MJra27GuzWZMh3Axa336rqzOtTWdYzspTKlfLbdFT/gjINaHzLYwz gfg97k9ZTJ5xRWkjI/nXhJyVsi9JnXlymXxqgr9ZVOLPsWHBSN0LwSRUjnn0lX4G l4PUQhlzm5zTTwYl+cMCyWQ30KPPoTKaPxXhD+IeOk30V9hih4ApSktQrP17MLJm H/0OWHZQwRbA9A+vNoDfenT66a6K9bGOnNvL2w/je289rRSmFdZ8th4IZyglIwOV 23QV35avLnfShM1xTN3zFPONCi0mPOU= -----END CERTIFICATE-----Generated at Sat Apr 5 16:37:52 2025 by rpki-client