$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/b5305974-b6a0-3146-97ed-a648a7e7cbb8.roa File: b5305974-b6a0-3146-97ed-a648a7e7cbb8.roa (raw, json) Hash identifier: QCFfFtUdXE2VwYPFFaQQreKJzjkl9Zf9FSD+5FHJN8c= Subject key identifier: 68:A2:C9:CE:6A:2B:37:CD:40:5E:08:41:6B:00:71:09:EC:62:8D:10 Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F43285849998F38697F40F9A10008B560 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/b5305974-b6a0-3146-97ed-a648a7e7cbb8.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 396948 IP address blocks: 45.61.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:38:69:7f:40:f9:a1:00:08:b5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=2d6c3460-7724-4ec3-9f3c-6dae7ce8f310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:07:cb:23:d0:09:a2:d9:4f:fc:84:bc:98:b7: a9:fb:47:86:a7:a4:8e:49:0b:cf:86:f4:cd:83:b1: 06:27:24:29:a7:fe:77:3f:2b:63:c7:d2:61:5e:7b: b2:77:05:fb:bc:16:b9:52:a6:eb:c1:4e:55:30:8b: 11:d2:4c:d9:37:7b:09:b0:a6:12:0f:02:d9:ea:c3: 6a:87:ae:18:c4:67:16:1b:17:06:62:00:4e:9e:43: 52:62:aa:63:57:79:70:22:e4:ff:8c:d8:45:29:90: 27:12:0c:0c:b7:3b:6d:48:80:89:21:9f:bf:fd:3b: e9:2a:bd:01:e6:b9:32:6c:f8:f4:31:29:87:2d:8b: af:98:a9:87:94:e8:6e:5b:00:e6:88:f2:68:11:67: da:8c:bb:55:a3:c6:30:9a:09:8f:ae:34:a2:1a:a3: ec:24:c1:77:d8:71:db:af:47:ab:9d:66:61:39:fe: b5:28:67:82:04:6f:0f:3a:b9:ae:e1:44:40:86:64: 8a:19:0c:e5:31:48:16:13:ea:54:59:04:9f:d7:e9: 23:c1:83:94:8a:8a:59:47:e0:4c:de:6b:b2:58:ee: 35:20:4c:08:55:d2:1b:a8:00:08:ce:69:ea:8f:2c: 9c:27:df:55:84:9f:2b:84:b5:45:b2:c2:84:ca:a7: c1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A2:C9:CE:6A:2B:37:CD:40:5E:08:41:6B:00:71:09:EC:62:8D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/b5305974-b6a0-3146-97ed-a648a7e7cbb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 45.61.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d8:9f:39:6a:66:49:91:b9:78:ce:2d:55:a8:d0:69:b7:6e: 73:e1:17:50:e4:d0:75:22:2d:7a:7c:28:19:15:98:c8:a6:34: 93:be:69:fd:1a:9f:46:90:85:b6:7d:22:87:53:11:fd:d7:ff: ee:74:73:e4:65:fc:ab:11:6f:1a:b3:7c:09:e7:5b:81:f5:a5: f3:b2:cd:18:e2:30:32:ce:58:28:54:64:3b:1c:8a:47:f9:50: 42:ec:70:37:bd:95:df:54:f0:00:50:4e:3e:a0:5a:a1:59:a1: d3:5a:78:8a:c8:fb:6f:e9:99:37:3c:4d:d7:ca:b2:3b:35:3f: 82:85:ac:86:53:92:da:23:70:a0:93:24:d5:0c:88:ff:b4:5c: 34:df:63:bf:b4:db:db:ee:b1:4d:73:8c:6f:7b:14:c8:2e:27: d9:fa:dd:3d:58:d1:db:b1:40:31:d7:a6:ff:b5:14:39:40:4a: 79:22:85:46:fa:f5:2f:7e:cc:64:3e:94:f6:de:cd:99:d1:53: d5:70:43:2d:fe:ad:a4:ec:0a:b0:30:31:7d:3d:d6:7a:2d:8d: 4e:69:e9:e9:ba:60:8b:7e:7e:d0:b8:78:ea:cb:8a:b6:4d:76: f8:37:57:a3:89:e9:f4:e0:56:16:46:0d:9d:4d:2b:d2:0e:98: cc:65:1a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzhpf0D5oQAItWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk MmQ2YzM0NjAtNzcyNC00ZWMzLTlmM2MtNmRhZTdjZThmMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigfLI9AJotlP/IS8mLep+0eGp6SOSQvPhvTN g7EGJyQpp/53Pytjx9JhXnuydwX7vBa5UqbrwU5VMIsR0kzZN3sJsKYSDwLZ6sNq h64YxGcWGxcGYgBOnkNSYqpjV3lwIuT/jNhFKZAnEgwMtzttSICJIZ+//TvpKr0B 5rkybPj0MSmHLYuvmKmHlOhuWwDmiPJoEWfajLtVo8YwmgmPrjSiGqPsJMF32HHb r0ernWZhOf61KGeCBG8POrmu4URAhmSKGQzlMUgWE+pUWQSf1+kjwYOUiopZR+BM 3muyWO41IEwIVdIbqAAIzmnqjyycJ99VhJ8rhLVFssKEyqfBrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiiyc5qKzfNQF4IQWsAcQnsYo0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvYjUzMDU5NzQtYjZhMC0z MTQ2LTk3ZWQtYTY0OGE3ZTdjYmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT01MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLYnzlqZkmRuXjOLVWo0Gm3bnPhF1Dk0HUiLXp8KBkVmMimNJO+af0a n0aQhbZ9IodTEf3X/+50c+Rl/KsRbxqzfAnnW4H1pfOyzRjiMDLOWChUZDscikf5 UELscDe9ld9U8ABQTj6gWqFZodNaeIrI+2/pmTc8TdfKsjs1P4KFrIZTktojcKCT JNUMiP+0XDTfY7+029vusU1zjG97FMguJ9n63T1Y0duxQDHXpv+1FDlASnkihUb6 9S9+zGQ+lPbezZnRU9VwQy3+raTsCrAwMX091notjU5p6em6YIt+ftC4eOrLirZN dvg3V6OJ6fTgVhZGDZ1NK9IOmMxlGvE= -----END CERTIFICATE-----Generated at Thu May 1 03:08:56 2025 by rpki-client