$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa File: 88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa (raw, json) Hash identifier: xGTAo5O+P7u2Vb/Nzd+OB0SKlDv4cxj7/SmKYW+zwNU= Subject key identifier: F3:E8:35:39:7F:DC:F2:73:32:A1:E3:1D:E1:58:F4:E8:5B:7C:F2:09 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F432858491C0C20D87D86DE707EEE6F00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa Signing time: Fri 07 Mar 2025 14:00:52 +0000 ROA not before: Fri 07 Mar 2025 14:00:52 +0000 ROA not after: Thu 05 Jun 2025 13:00:52 +0000 asID: 30036 IP address blocks: 45.59.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1c:0c:20:d8:7d:86:de:70:7e:ee:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 7 14:00:52 2025 GMT Not After : Jun 5 13:00:52 2025 GMT Subject: CN=ebdf375b-c21e-4e1a-b866-8e99d83961a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a3:b1:34:5d:d2:fc:8a:c7:a7:8c:72:71:ef: 55:52:88:e9:15:48:41:0c:02:06:16:f1:0f:c9:30: 50:f3:0f:bf:ea:e0:6f:09:b8:08:33:5b:1c:66:24: 17:69:2d:ff:8f:c0:81:7e:78:c5:3b:02:4d:f3:3b: 41:70:73:11:85:c8:19:c9:d5:bc:47:8f:4f:54:3e: e0:58:cc:5d:91:5e:bb:77:ec:4a:45:57:2f:59:96: 2e:fb:44:03:15:e0:7b:b1:85:e9:9d:05:51:49:0b: 80:9b:9b:d8:51:3f:a8:d8:94:df:ec:fb:e1:99:ff: 65:e2:b3:5f:42:34:9a:40:d5:99:0b:b3:ab:69:02: d9:3e:e4:ab:9b:6c:f0:af:74:bf:10:e9:b6:cc:74: 44:be:3e:42:f8:72:97:eb:69:16:3e:2b:ce:f4:08: e1:fd:2b:75:42:f5:4d:da:64:40:86:d1:88:8d:b0: 72:6c:be:c0:ad:68:df:31:74:d6:0b:fe:96:95:22: 9a:c4:d1:f2:24:65:a9:d9:af:26:7f:b2:8f:d7:21: 47:ca:3b:5f:80:a5:d0:0b:0a:b2:71:95:e1:a5:c6: 71:37:b5:a3:7f:f2:ed:1f:7a:50:67:95:f0:f4:62: ee:6a:e9:2f:9d:b9:0e:77:8a:a4:99:29:c4:83:87: f1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E8:35:39:7F:DC:F2:73:32:A1:E3:1D:E1:58:F4:E8:5B:7C:F2:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 45.59.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:7e:2f:53:13:cb:dd:65:b8:d5:34:42:ae:a8:32:49:88:1f: 20:43:69:da:c1:b0:d9:41:6d:17:a0:62:18:92:eb:81:8c:08: 69:7c:e9:74:1c:9a:18:cc:96:d1:71:bf:df:0b:6c:22:13:e1: 43:ec:4f:37:6d:df:20:18:10:10:26:1f:9c:4c:df:66:43:d8: 1d:af:d4:71:be:19:7f:f1:90:3a:a6:16:5b:12:7b:79:e2:37: e7:8a:ab:8c:ad:b4:a8:13:cb:70:f7:21:1d:8e:f6:08:b6:f1: 6e:ec:bc:bb:bd:91:cf:90:52:7d:5d:37:c0:0d:0f:60:6c:7f: 6c:26:52:ac:cc:41:36:11:77:34:f6:a3:ec:d1:01:d1:44:d8: 83:fc:67:dd:fa:b6:b1:6a:f0:99:2f:f3:18:3b:0a:3f:f1:06: 37:09:70:54:af:72:fd:f7:e9:31:9a:a2:f8:80:e5:37:f7:39: 8f:40:fd:e9:13:4b:f7:32:89:b1:60:d7:a8:ae:71:d4:c8:37: 4a:fe:ca:6e:bb:af:9a:68:43:e5:67:85:a7:7f:e7:3d:14:e9: 3b:68:2e:ff:13:ac:8e:b1:e1:28:33:c7:fb:44:50:83:6f:14: f0:f6:ee:85:06:31:3b:d6:ce:11:a0:55:c5:84:60:ba:d0:71: 4f:9f:7c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkcDCDYfYbecH7ubwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDMwNzE0MDA1MloXDTI1MDYwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWJkZjM3NWItYzIxZS00ZTFhLWI4NjYtOGU5OWQ4Mzk2MWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aOxNF3S/IrHp4xyce9VUojpFUhBDAIGFvEP yTBQ8w+/6uBvCbgIM1scZiQXaS3/j8CBfnjFOwJN8ztBcHMRhcgZydW8R49PVD7g WMxdkV67d+xKRVcvWZYu+0QDFeB7sYXpnQVRSQuAm5vYUT+o2JTf7Pvhmf9l4rNf QjSaQNWZC7OraQLZPuSrm2zwr3S/EOm2zHREvj5C+HKX62kWPivO9Ajh/St1QvVN 2mRAhtGIjbBybL7ArWjfMXTWC/6WlSKaxNHyJGWp2a8mf7KP1yFHyjtfgKXQCwqy cZXhpcZxN7Wjf/LtH3pQZ5Xw9GLuaukvnbkOd4qkmSnEg4fxhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPoNTl/3PJzMqHjHeFY9OhbfPIJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODhlMTUyMmItN2QzNi0z YzBlLTlmOGEtNTA5ZTg5OWY4ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTsLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId+L1MTy91luNU0Qq6oMkmIHyBDadrBsNlBbRegYhiS64GMCGl86XQc mhjMltFxv98LbCIT4UPsTzdt3yAYEBAmH5xM32ZD2B2v1HG+GX/xkDqmFlsSe3ni N+eKq4yttKgTy3D3IR2O9gi28W7svLu9kc+QUn1dN8AND2Bsf2wmUqzMQTYRdzT2 o+zRAdFE2IP8Z936trFq8Jkv8xg7Cj/xBjcJcFSvcv336TGaoviA5Tf3OY9A/ekT S/cyibFg16iucdTIN0r+ym67r5poQ+Vnhad/5z0U6TtoLv8TrI6x4Sgzx/tEUINv FPD27oUGMTvWzhGgVcWEYLrQcU+ffNc= -----END CERTIFICATE-----Generated at Sun Apr 27 20:20:17 2025 by rpki-client