$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa File: 38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa (raw, json) Hash identifier: 1dJhZC9ByWSstvImcDMZvbGcOqgrH1t9eEees2w796g= Subject key identifier: 01:04:0C:2E:E1:13:B3:60:5F:65:D7:6D:95:CD:5E:D9:A5:D5:B7:F7 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F43285849A1EF70C382128BBEA1B03240 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 1100 IP address blocks: 45.59.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:70:c3:82:12:8b:be:a1:b0:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=67310383-061c-455a-a225-f9fb764b4799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:62:8f:3c:b9:57:9a:cb:66:be:1f:a8:9b: b8:79:56:92:de:8b:d5:be:c8:de:65:1c:a9:99:57: 11:8a:2a:1c:f5:1c:d2:2f:f8:05:9d:27:1d:32:80: 85:bc:50:f2:e7:81:45:0b:e6:6a:84:12:c9:6e:04: fb:ca:b4:85:cd:8a:8b:a4:ee:6c:b1:51:9a:31:5c: e9:1a:9d:03:0f:42:96:ab:c1:d3:ab:8e:87:0d:96: 66:20:5b:ad:8a:9d:1d:79:60:76:ae:fa:ea:b1:e6: 2c:62:69:87:97:5e:98:b3:8f:e8:ff:c7:5e:8f:17: 52:2f:e1:98:b7:19:17:f4:b8:31:e1:33:5b:10:ca: d6:e5:6e:5d:81:46:b1:ce:92:c0:2d:70:08:c1:58: b3:a4:da:00:cf:b9:b3:00:da:dd:b3:8e:fe:77:a0: d9:a8:ad:26:1e:10:28:65:74:ef:cc:c5:9c:43:85: ef:f4:65:98:a7:18:08:33:c2:b5:56:8b:f5:b8:ed: 8e:93:40:27:c7:6c:c5:df:6c:4e:94:81:5c:aa:a6: 14:6e:8f:03:23:c2:e0:5b:8b:a1:43:8c:a1:36:c5: 92:47:28:c9:74:48:29:8b:0c:10:09:4e:c6:44:37: 51:ea:47:31:b0:54:62:de:52:fa:11:67:3d:b6:16: 3e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:04:0C:2E:E1:13:B3:60:5F:65:D7:6D:95:CD:5E:D9:A5:D5:B7:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:29:2c:1c:d2:5e:cf:f9:b6:1b:67:2a:87:0d:ee:a0:c9:e2: 83:a7:50:32:dd:8a:fa:ee:cd:1b:0c:f2:bb:9a:5e:77:9d:28: df:93:51:c3:62:cf:a9:4f:5b:e1:1c:41:04:dd:5f:1d:ba:cf: ed:83:a2:60:52:4d:02:fd:c6:c2:62:f1:eb:cb:a1:69:49:46: 44:45:11:88:0a:40:07:0e:53:8a:ba:a3:92:c7:10:d8:56:d2: fb:f4:ed:73:6d:fd:08:18:51:dd:d9:c8:69:90:87:87:83:70: 40:8f:88:7c:9f:1e:3c:34:67:a5:40:df:ff:5e:29:ce:4b:bf: 07:e7:26:45:4e:27:83:ce:06:16:c9:dc:ce:6d:08:92:fe:0d: f4:bf:20:ad:6d:38:6d:6d:67:8e:31:66:88:2e:2a:6c:97:77: 06:a6:74:44:79:6c:ba:61:22:68:7d:85:8c:2a:8e:1f:4d:21: b7:c2:48:57:10:5f:eb:17:7a:84:c2:fd:26:0a:94:de:45:a8: 0a:9e:82:0e:e7:d1:04:29:5e:4c:c2:40:7e:8a:a7:b2:c0:08: d5:b7:15:4a:f6:79:ef:fa:2c:5d:61:bf:0e:26:0c:b9:76:1f: 5a:d0:fd:7e:13:f8:7b:1b:7d:1f:f2:86:89:b7:09:b6:aa:f8: e3:87:40:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73DDghKLvqGwMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NjczMTAzODMtMDYxYy00NTVhLWEyMjUtZjlmYjc2NGI0Nzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv09ijzy5V5rLZr4fqJu4eVaS3ovVvsjeZRyp mVcRiioc9RzSL/gFnScdMoCFvFDy54FFC+ZqhBLJbgT7yrSFzYqLpO5ssVGaMVzp Gp0DD0KWq8HTq46HDZZmIFutip0deWB2rvrqseYsYmmHl16Ys4/o/8dejxdSL+GY txkX9Lgx4TNbEMrW5W5dgUaxzpLALXAIwVizpNoAz7mzANrds47+d6DZqK0mHhAo ZXTvzMWcQ4Xv9GWYpxgIM8K1Vov1uO2Ok0Anx2zF32xOlIFcqqYUbo8DI8LgW4uh Q4yhNsWSRyjJdEgpiwwQCU7GRDdR6kcxsFRi3lL6EWc9thY+vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEEDC7hE7NgX2XXbZXNXtml1bf3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMzhlMGNkNjItNWI5Yy0z NWY4LWFhNDctZTE0YWFkOTUwZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwpLBzSXs/5thtnKocN7qDJ4oOnUDLdivruzRsM8ruaXnedKN+TUcNi z6lPW+EcQQTdXx26z+2DomBSTQL9xsJi8evLoWlJRkRFEYgKQAcOU4q6o5LHENhW 0vv07XNt/QgYUd3ZyGmQh4eDcECPiHyfHjw0Z6VA3/9eKc5LvwfnJkVOJ4POBhbJ 3M5tCJL+DfS/IK1tOG1tZ44xZoguKmyXdwamdER5bLphImh9hYwqjh9NIbfCSFcQ X+sXeoTC/SYKlN5FqAqegg7n0QQpXkzCQH6Kp7LACNW3FUr2ee/6LF1hvw4mDLl2 H1rQ/X4T+HsbfR/yhom3Cbaq+OOHQK8= -----END CERTIFICATE-----Generated at Sun Apr 27 00:20:42 2025 by rpki-client