$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5f4d50f2-be50-305a-8739-6a8bf1882be6.roa File: 5f4d50f2-be50-305a-8739-6a8bf1882be6.roa (raw, json) Hash identifier: 9u4qv4WI94lmPB7lOf/5yzMmp5k2kJRHCxw1innxbN4= Subject key identifier: 84:E2:84:67:E2:C5:54:A0:C7:DB:69:4C:1F:27:51:B5:0E:D1:CF:51 Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Certificate serial: 010D0C9F432858495C24364726A7E3A70BDF5DA0 Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5f4d50f2-be50-305a-8739-6a8bf1882be6.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 14618 IP address blocks: 45.223.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:36:47:26:a7:e3:a7:0b:df:5d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=3a8dd99f-45cc-4dd0-ae93-085f16a303ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7c:95:fc:39:92:72:f5:e8:e2:4a:31:73:5c: 4f:4d:e4:cd:6a:1e:0b:56:73:ed:b4:55:0d:c5:d8: 4a:ec:ce:c2:5f:17:91:36:cf:59:57:04:9c:6a:e3: 52:48:52:ad:74:bf:ba:11:6b:d9:bc:fa:2b:c7:e8: fa:0a:d0:e1:98:47:03:cb:93:97:ba:be:f0:04:bc: c1:94:1f:b6:0a:fd:b6:f8:c4:42:51:80:7b:26:8f: 44:3d:53:0f:f4:1f:c5:7a:7a:af:18:56:f1:02:92: 10:dc:2c:58:dd:cf:32:e1:2b:4c:59:eb:fd:06:6c: 81:46:25:27:87:b9:85:b7:23:69:b7:32:ee:a2:18: 88:07:38:4c:f1:88:2c:a8:b4:80:04:14:e2:16:a8: bc:05:74:94:6c:a8:ab:ab:34:88:03:45:e8:7b:c7: 9a:e9:e0:8d:de:32:39:00:e4:1d:22:f3:86:a2:12: 16:ff:b9:83:b4:b1:13:29:a2:cc:d0:b4:24:a8:7e: 8a:8a:ff:32:ab:f4:68:57:fe:d1:5e:8e:99:40:f6: b0:7a:6a:5f:72:bd:1f:d1:0a:15:a5:b0:af:2e:2d: 28:a0:d6:6b:e9:e3:87:c3:7a:0c:66:4e:75:cd:97: 19:a3:34:6d:cb:36:5e:3f:4f:f4:01:d2:89:32:36: ce:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E2:84:67:E2:C5:54:A0:C7:DB:69:4C:1F:27:51:B5:0E:D1:CF:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5f4d50f2-be50-305a-8739-6a8bf1882be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl X509v3 Authority Key Identifier: keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer sbgp-ipAddrBlock: critical IPv4: 45.223.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:d9:1d:d2:1c:93:3c:79:1e:cc:12:16:29:f5:40:55:0c:94: c9:a6:89:47:ab:5c:fa:8a:5c:91:bf:20:3e:d9:49:52:4f:23: b4:60:45:dc:2c:ea:06:d6:90:79:f6:d5:ba:bc:6e:df:64:60: 40:5d:9c:5d:80:53:90:25:91:28:8d:41:4b:6b:a8:5a:0c:27: 72:94:8d:ce:af:c3:80:a9:08:b0:70:02:6d:ba:70:9a:81:9b: 26:98:c2:bf:8d:68:f9:a5:9b:a3:f2:e4:36:32:08:09:e0:5b: 26:1c:82:40:e5:b3:07:9d:0f:8c:be:56:d9:af:6c:aa:5b:20: d2:2c:1e:93:56:60:6a:f8:2c:26:fe:f0:fb:60:05:d7:43:ce: 83:8a:de:3c:64:5f:c2:f7:76:25:fb:32:c8:3a:81:e5:38:e9: de:e6:a5:0b:d0:ec:c5:8f:dd:cf:10:04:35:65:50:92:c7:1f: 99:f9:85:a8:94:3d:c9:47:82:a8:32:53:2a:e9:01:7e:24:f7: 3a:d7:fc:06:3f:a3:58:4d:26:92:53:6e:30:5a:4a:19:bf:4b: 2c:46:e3:4b:2a:15:ce:f7:74:6a:53:52:99:da:ac:ed:10:da: 90:55:79:df:2a:13:12:6b:2c:68:f6:f8:7c:a4:3f:ca:80:d8: f4:ba:28:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDZHJqfjpwvfXaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj Yzc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk M2E4ZGQ5OWYtNDVjYy00ZGQwLWFlOTMtMDg1ZjE2YTMwM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXyV/DmScvXo4koxc1xPTeTNah4LVnPttFUN xdhK7M7CXxeRNs9ZVwScauNSSFKtdL+6EWvZvPorx+j6CtDhmEcDy5OXur7wBLzB lB+2Cv22+MRCUYB7Jo9EPVMP9B/FenqvGFbxApIQ3CxY3c8y4StMWev9BmyBRiUn h7mFtyNptzLuohiIBzhM8YgsqLSABBTiFqi8BXSUbKirqzSIA0Xoe8ea6eCN3jI5 AOQdIvOGohIW/7mDtLETKaLM0LQkqH6Kiv8yq/RoV/7RXo6ZQPawempfcr0f0QoV pbCvLi0ooNZr6eOHw3oMZk51zZcZozRtyzZeP0/0AdKJMjbOxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITihGfixVSgx9tpTB8nUbUO0c9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvNWY0ZDUwZjItYmU1MC0z MDVhLTg3MzktNmE4YmYxODgyYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0 ZDZiY2NjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALd8MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3ZHdIckzx5HswSFin1QFUMlMmmiUerXPqKXJG/ID7ZSVJPI7RgRdws 6gbWkHn21bq8bt9kYEBdnF2AU5AlkSiNQUtrqFoMJ3KUjc6vw4CpCLBwAm26cJqB myaYwr+NaPmlm6Py5DYyCAngWyYcgkDlswedD4y+VtmvbKpbINIsHpNWYGr4LCb+ 8PtgBddDzoOK3jxkX8L3diX7Msg6geU46d7mpQvQ7MWP3c8QBDVlUJLHH5n5haiU PclHgqgyUyrpAX4k9zrX/AY/o1hNJpJTbjBaShm/SyxG40sqFc73dGpTUpnarO0Q 2pBVed8qExJrLGj2+HykP8qA2PS6KBM= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:31 2025 by rpki-client