$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/43eb115a-2968-3e76-bd9b-b0925731c484.roa File: 43eb115a-2968-3e76-bd9b-b0925731c484.roa (raw, json) Hash identifier: kcUuQXEXuyXaY/98uekMxUfh23mqvvMhnKq/EAP/5vQ= Subject key identifier: 77:83:97:D6:E3:16:0E:29:9A:46:0D:71:56:A7:CD:52:D1:51:36:0F Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Certificate serial: 010D0C9F43285849EBEA533138DFE5869E113600 Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/43eb115a-2968-3e76-bd9b-b0925731c484.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 0 IP address blocks: 45.41.248.0/22 maxlen: 22 68.69.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:53:31:38:df:e5:86:9e:11:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=fcf5b6ec-627c-4b27-8f85-27aed0e80039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:95:fd:b1:03:7d:53:99:c5:6c:d8:00:99: 28:0d:94:e1:cb:17:85:e9:c8:1f:dc:d3:24:d5:05: ea:a8:89:6e:5f:96:be:b0:b1:0d:4e:78:d0:04:9a: e0:62:3c:24:06:dc:b3:a5:18:1b:51:ad:9a:22:6a: f3:a4:78:0f:52:ca:cc:ce:b9:5d:77:f3:d1:c2:3e: da:4c:d2:3e:17:73:84:7d:af:5f:22:ad:23:c0:dc: 6c:67:d9:74:7a:6a:90:4a:46:92:03:07:3c:58:17: cf:7e:04:f3:8c:0b:cf:8a:bc:21:66:92:f5:1d:d1: bd:8d:08:11:b5:21:c7:f1:0a:bf:b8:cb:b3:23:77: d5:c0:ba:82:d3:63:d4:55:c3:fa:64:ca:d3:40:f9: d3:67:4b:1b:86:5e:57:7d:bb:e6:96:34:57:39:6e: 96:81:b1:93:b7:fb:99:08:33:1f:1d:c7:5e:b6:90: ed:0a:68:7a:19:08:db:1d:0d:96:33:2f:aa:75:f3: ae:24:b1:05:45:8f:09:e0:2e:9c:7d:54:89:d8:8c: 67:9a:c6:a7:4e:b5:88:45:20:2f:e6:1d:9f:a1:4f: 30:f7:35:d6:d4:bf:4d:0d:40:2d:a8:e5:d8:8f:93: dc:63:48:fd:2d:50:8e:7b:04:dc:a0:29:a8:09:f4: 82:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:83:97:D6:E3:16:0E:29:9A:46:0D:71:56:A7:CD:52:D1:51:36:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/43eb115a-2968-3e76-bd9b-b0925731c484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl X509v3 Authority Key Identifier: keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer sbgp-ipAddrBlock: critical IPv4: 45.41.248.0/22 68.69.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:0c:5d:9d:43:d3:3e:90:ec:87:33:62:d6:22:b9:e6:48:4d: cf:1c:dd:c2:d6:ea:15:56:36:2c:5f:db:08:ec:83:a5:6d:56: bd:1d:45:bc:36:7f:59:d2:c0:4c:ee:de:a0:b4:42:55:b1:6d: 3a:c4:02:91:80:b2:69:fc:1c:d4:7d:0f:a3:14:1f:59:fe:f2: 83:a2:da:03:f6:f7:63:4d:f9:dc:69:bb:82:6b:b0:2c:34:a2: ca:af:23:be:cf:3c:eb:73:fb:85:da:fc:14:7f:f5:4e:71:a0: 0e:76:68:8c:9e:7d:f3:7d:20:49:0c:03:c8:95:35:33:7e:53: 13:4e:76:8a:1f:a2:a8:36:ab:45:ce:3b:c6:29:81:5d:66:ab: 51:fd:f8:43:fd:04:07:24:75:96:40:70:5c:c7:c2:1f:f2:db: 01:77:e1:2f:04:ff:02:a1:b8:6a:b2:06:c9:f4:64:91:4e:0f: 3e:19:1a:bd:1f:ee:c8:ee:e9:a1:13:26:ec:53:bf:9a:c7:74: f2:6d:79:5e:df:d3:55:8a:24:1a:1a:76:16:23:d0:93:f5:65: fe:b8:cd:ad:d6:08:50:b5:ac:c6:ff:d9:74:20:24:0a:7c:b2: 0e:6d:8a:2f:83:91:ec:55:2e:f5:f4:73:97:15:23:b8:50:65: 1a:bd:3c:dd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnr6lMxON/lhp4RNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4 OTc2MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ZmNmNWI2ZWMtNjI3Yy00YjI3LThmODUtMjdhZWQwZTgwMDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIyV/bEDfVOZxWzYAJkoDZThyxeF6cgf3NMk 1QXqqIluX5a+sLENTnjQBJrgYjwkBtyzpRgbUa2aImrzpHgPUsrMzrldd/PRwj7a TNI+F3OEfa9fIq0jwNxsZ9l0emqQSkaSAwc8WBfPfgTzjAvPirwhZpL1HdG9jQgR tSHH8Qq/uMuzI3fVwLqC02PUVcP6ZMrTQPnTZ0sbhl5XfbvmljRXOW6WgbGTt/uZ CDMfHcdetpDtCmh6GQjbHQ2WMy+qdfOuJLEFRY8J4C6cfVSJ2IxnmsanTrWIRSAv 5h2foU8w9zXW1L9NDUAtqOXYj5PcY0j9LVCOewTcoCmoCfSC+QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHeDl9bjFg4pmkYNcVanzVLRUTYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvNDNlYjExNWEtMjk2OC0z ZTc2LWJkOWItYjA5MjU3MzFjNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4 ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj YTU2ODg5NzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLSn4AwQC REWwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF0MXZ1D0z6Q7IczYtYiueZITc8c3cLW6hVWNixf2wjsg6Vt Vr0dRbw2f1nSwEzu3qC0QlWxbTrEApGAsmn8HNR9D6MUH1n+8oOi2gP292NN+dxp u4JrsCw0osqvI77PPOtz+4Xa/BR/9U5xoA52aIyeffN9IEkMA8iVNTN+UxNOdoof oqg2q0XOO8YpgV1mq1H9+EP9BAckdZZAcFzHwh/y2wF34S8E/wKhuGqyBsn0ZJFO Dz4ZGr0f7sju6aETJuxTv5rHdPJteV7f01WKJBoadhYj0JP1Zf64za3WCFC1rMb/ 2XQgJAp8sg5tii+DkexVLvX0c5cVI7hQZRq9PN0= -----END CERTIFICATE-----Generated at Sun Jun 1 03:20:06 2025 by rpki-client