$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/d1facf3a-0252-3062-bd40-b1752bcaaa35.roa File: d1facf3a-0252-3062-bd40-b1752bcaaa35.roa (raw, json) Hash identifier: bp8fnzGIye6bA19ZqPq2xBJxgLeI/dd1n/dXlQhD720= Subject key identifier: ED:1C:05:D1:11:88:49:2C:C6:6D:F2:21:15:7C:73:62:20:A1:AA:EB Certificate issuer: /CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6 Certificate serial: 010D0C9F43285849393E7430BDBABD61EBFBDF00 Authority key identifier: CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/d1facf3a-0252-3062-bd40-b1752bcaaa35.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 16509 IP address blocks: 45.45.214.0/24 maxlen: 24 136.175.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:74:30:bd:ba:bd:61:eb:fb:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=6aaf0d94-7b5b-4f6d-9659-fe722fe76390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:99:b4:22:38:df:91:83:9e:65:b2:cd:0d: 68:be:b0:46:44:aa:b6:0e:03:a3:a0:f4:21:58:03: 09:76:a6:a4:67:1b:86:da:2d:81:4f:be:d4:64:fc: f9:f2:46:31:82:80:08:08:76:86:14:7f:67:3c:91: 90:77:45:4a:ee:e5:dd:7c:57:28:cf:df:d8:85:fe: ef:07:39:8d:03:ec:7e:11:10:de:64:d6:9e:4b:3f: 10:90:aa:72:ee:57:f2:00:e7:33:b2:64:63:7d:36: bb:b8:13:f2:c4:0c:bb:cc:d0:24:6a:ce:9a:2d:db: 8c:1e:f2:d4:d9:6f:f1:8f:a7:de:98:64:f7:7d:84: ff:ff:ea:fc:76:9d:e0:d4:bd:4d:ed:d3:a5:65:f6: 7c:5e:8b:78:64:3b:a0:95:a1:c1:ed:ea:87:07:ad: ef:e0:a5:a5:b6:8f:ed:c2:90:f7:1f:fc:80:13:18: 8f:4c:22:d6:77:de:2e:31:46:96:0d:55:14:c4:a7: c9:04:54:e1:48:62:60:cf:a6:45:b8:ee:f4:5b:5e: 68:34:13:e0:6a:f1:25:40:c9:a6:95:7c:f8:b0:e3: 78:e1:fb:14:a6:a8:4e:de:29:82:54:19:7d:c8:37: ae:ee:24:f2:71:25:a3:c0:c4:16:2f:0e:7f:c9:38: 39:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1C:05:D1:11:88:49:2C:C6:6D:F2:21:15:7C:73:62:20:A1:AA:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/d1facf3a-0252-3062-bd40-b1752bcaaa35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl X509v3 Authority Key Identifier: keyid:CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer sbgp-ipAddrBlock: critical IPv4: 45.45.214.0/24 136.175.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a5:87:ee:95:0f:0d:7f:2a:8b:43:4b:13:2c:33:b0:48:37: 68:e4:00:d5:45:ed:f9:be:5f:aa:b6:b3:ca:d6:59:1b:a2:97: 68:ae:5c:32:75:c3:fe:e7:2a:e1:69:5c:c8:69:e7:28:dc:eb: 91:87:52:dd:b2:3b:9f:d2:aa:1e:8f:82:40:ce:75:e3:21:9d: e2:5b:5a:14:c7:e1:fe:03:ff:d1:53:60:16:0a:bd:1a:9e:ee: a5:f2:e3:07:9a:77:ac:ea:67:ed:0d:52:42:b9:32:9f:6c:0c: 72:f4:48:c2:ce:f7:b9:57:ca:5c:67:97:c4:33:ad:81:9b:0f: 84:2c:5b:a4:29:be:39:c4:ac:d3:45:32:d5:aa:95:86:e4:1a: 5e:80:62:1a:de:88:84:bd:70:d8:74:09:84:1b:02:d9:17:47: 98:0c:72:27:da:08:f2:18:41:0d:e0:09:83:6a:7c:4f:8b:2e: 6c:b5:cb:37:a3:a2:8f:99:32:a6:ac:30:7b:30:96:71:69:a0: 59:72:f6:58:49:99:91:0e:ba:4e:88:e1:11:e4:9a:24:f4:45: 17:c8:63:5f:60:87:55:59:88:39:d3:5b:da:0f:34:5e:a4:de: 21:29:67:95:65:cf:50:07:5f:a2:54:11:79:92:7c:df:b0:80: 49:4d:a0:d9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEk5PnQwvbq9Yev73wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU5OGE1ZTEtOWViOS00MDg3LWIyYzEtZDI1YTU4Zjkw MGM2MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk NmFhZjBkOTQtN2I1Yi00ZjZkLTk2NTktZmU3MjJmZTc2MzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuKZtCI435GDnmWyzQ1ovrBGRKq2DgOjoPQh WAMJdqakZxuG2i2BT77UZPz58kYxgoAICHaGFH9nPJGQd0VK7uXdfFcoz9/Yhf7v BzmNA+x+ERDeZNaeSz8QkKpy7lfyAOczsmRjfTa7uBPyxAy7zNAkas6aLduMHvLU 2W/xj6femGT3fYT//+r8dp3g1L1N7dOlZfZ8Xot4ZDuglaHB7eqHB63v4KWlto/t wpD3H/yAExiPTCLWd94uMUaWDVUUxKfJBFThSGJgz6ZFuO70W15oNBPgavElQMmm lXz4sON44fsUpqhO3imCVBl9yDeu7iTycSWjwMQWLw5/yTg5iQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFO0cBdERiEksxm3yIRV8c2IgoarrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NTk4 YTVlMS05ZWI5LTQwODctYjJjMS1kMjVhNThmOTAwYzYvZDFmYWNmM2EtMDI1Mi0z MDYyLWJkNDAtYjE3NTJiY2FhYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODU5OGE1ZTEtOWViOS00MDg3LWIy YzEtZDI1YTU4ZjkwMGM2Lzg1OThhNWUxLTllYjktNDA4Ny1iMmMxLWQyNWE1OGY5 MDBjNi5jcmwwHwYDVR0jBBgwFoAUylQfThcBLKrmOgWKbqIyVo6cFSowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NTk4YTVlMS05ZWI5LTQwODctYjJjMS1kMjVh NThmOTAwYzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALS3WAwQA iK+eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACSlh+6VDw1/KotDSxMsM7BIN2jkANVF7fm+X6q2s8rWWRui l2iuXDJ1w/7nKuFpXMhp5yjc65GHUt2yO5/Sqh6PgkDOdeMhneJbWhTH4f4D/9FT YBYKvRqe7qXy4wead6zqZ+0NUkK5Mp9sDHL0SMLO97lXylxnl8QzrYGbD4QsW6Qp vjnErNNFMtWqlYbkGl6AYhreiIS9cNh0CYQbAtkXR5gMcifaCPIYQQ3gCYNqfE+L Lmy1yzejoo+ZMqasMHswlnFpoFly9lhJmZEOuk6I4RHkmiT0RRfIY19gh1VZiDnT W9oPNF6k3iEpZ5Vlz1AHX6JUEXmSfN+wgElNoNk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:32:54 2025 by rpki-client