$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa File: a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa (raw, json) Hash identifier: zGnuViKQLMqThFj0lhu9Bd6S6QC3Mms2UaIA35gMCTk= Subject key identifier: 69:30:F6:02:78:5F:2D:F6:96:9E:80:49:9E:C5:ED:28:92:B5:FF:F6 Certificate issuer: /CN=af121a54-266e-447b-8176-bfcd1dc7867c Certificate serial: 010D0C9F43285848F22BE3C838232D73BCF7E78C Authority key identifier: 32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 152117 IP address blocks: 45.9.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2b:e3:c8:38:23:2d:73:bc:f7:e7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af121a54-266e-447b-8176-bfcd1dc7867c Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=06c031b5-447c-4861-8fae-5d8f572bad54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a3:b1:7b:70:f1:37:8d:1c:88:8d:a3:d5:4d: 7b:53:cf:6e:bc:3a:2c:48:c7:42:4f:5f:71:00:73: 61:62:d9:75:a1:37:30:59:56:2f:01:bc:af:8c:a9: 79:34:ca:27:40:86:39:89:62:41:85:2c:47:cb:6e: a0:e0:f6:c5:d1:6f:50:a1:99:c7:9f:f2:3f:fd:79: 47:85:d1:da:be:a2:53:0d:5e:16:c5:1a:20:07:64: e4:90:c5:46:8f:6b:99:59:dd:14:ea:e0:bf:7f:5b: 4f:a6:77:60:05:bf:9d:11:5b:15:82:55:0d:7a:b1: 50:12:7c:7e:02:7b:8b:a0:00:76:62:52:fd:03:01: 15:c4:5d:c4:f1:0f:99:d7:7e:1f:91:3d:06:b1:cd: 46:24:96:36:b7:12:95:f5:59:8f:cd:96:8d:68:e6: 1d:f7:ad:05:67:91:86:27:6e:b5:dc:59:b2:45:c4: 06:2a:b3:61:5d:4d:da:c5:5b:28:e7:50:d4:62:a2: 1a:7d:12:e9:97:50:a3:e7:6f:9d:e4:39:53:cd:44: 1a:a3:b0:1f:0b:d6:75:ba:41:0e:c1:c0:9c:ca:e0: 2e:83:a6:96:e4:b6:0d:f5:01:c8:49:5d:96:cd:af: b5:ff:b9:ec:bd:51:1f:78:77:c0:41:34:f1:c7:f8: 84:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:30:F6:02:78:5F:2D:F6:96:9E:80:49:9E:C5:ED:28:92:B5:FF:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl X509v3 Authority Key Identifier: keyid:32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer sbgp-ipAddrBlock: critical IPv4: 45.9.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:4e:e7:56:08:f7:7b:f0:0c:5b:e8:c1:36:5d:9d:5b:44:91: 6f:ee:41:be:38:67:ab:6f:17:ee:6c:b6:03:05:22:d7:c7:91: 24:0b:27:88:36:35:ee:83:a5:bc:f8:b1:37:54:bc:b7:ee:ac: f4:10:a5:cc:7e:03:8c:1d:6d:3a:39:12:1e:4d:fc:8d:8c:ec: 1a:b6:8f:40:d0:30:f9:45:37:2f:56:ac:eb:34:f7:14:9f:75: 10:ba:cc:e4:ca:2a:6a:1b:54:ac:fa:09:8c:16:ed:28:fa:e3: 17:d3:e8:09:ab:d3:b6:db:f6:42:98:71:35:ea:54:d5:ef:91: 1f:1d:c3:8a:30:05:78:7c:b9:9f:3f:bc:9f:d0:ea:8d:c1:47: 81:7f:d6:49:f2:b7:66:b7:83:9e:b9:91:3a:23:14:91:8b:ea: 3d:11:1f:76:7c:e6:ca:fb:46:60:da:ac:11:bf:19:27:e9:4b: ea:36:e6:70:8b:db:0f:cf:2f:4c:15:14:75:b3:a6:05:97:bb: 89:2e:4f:94:26:2d:a4:a6:99:50:2f:1b:d4:0a:ed:9e:b6:a9: ee:67:da:57:56:63:d5:06:82:58:de:2d:77:9f:64:d3:cc:b7: 52:c5:04:8e:01:16:7c:08:eb:30:9c:bb:29:4e:60:56:3e:88: d6:76:fa:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyK+PIOCMtc7z354wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYxMjFhNTQtMjY2ZS00NDdiLTgxNzYtYmZjZDFkYzc4 NjdjMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MDZjMDMxYjUtNDQ3Yy00ODYxLThmYWUtNWQ4ZjU3MmJhZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKOxe3DxN40ciI2j1U17U89uvDosSMdCT19x AHNhYtl1oTcwWVYvAbyvjKl5NMonQIY5iWJBhSxHy26g4PbF0W9QoZnHn/I//XlH hdHavqJTDV4WxRogB2TkkMVGj2uZWd0U6uC/f1tPpndgBb+dEVsVglUNerFQEnx+ AnuLoAB2YlL9AwEVxF3E8Q+Z134fkT0Gsc1GJJY2txKV9VmPzZaNaOYd960FZ5GG J2613FmyRcQGKrNhXU3axVso51DUYqIafRLpl1Cj52+d5DlTzUQao7AfC9Z1ukEO wcCcyuAug6aW5LYN9QHISV2Wza+1/7nsvVEfeHfAQTTxx/iEowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkw9gJ4Xy32lp6ASZ7F7SiStf/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZjEy MWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNkMWRjNzg2N2MvYTkyZjBjNjEtYTg2Zi0z YWM2LWFmOTUtZTRlMmUyNGFiNjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWYxMjFhNTQtMjY2ZS00NDdiLTgx NzYtYmZjZDFkYzc4NjdjL2FmMTIxYTU0LTI2NmUtNDQ3Yi04MTc2LWJmY2QxZGM3 ODY3Yy5jcmwwHwYDVR0jBBgwFoAUMnVcxUnAaQnSNG495BOLXF/85b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZjEyMWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNk MWRjNzg2N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1O51YI93vwDFvowTZdnVtEkW/uQb44Z6tvF+5stgMFItfHkSQLJ4g2 Ne6Dpbz4sTdUvLfurPQQpcx+A4wdbTo5Eh5N/I2M7Bq2j0DQMPlFNy9WrOs09xSf dRC6zOTKKmobVKz6CYwW7Sj64xfT6Amr07bb9kKYcTXqVNXvkR8dw4owBXh8uZ8/ vJ/Q6o3BR4F/1knyt2a3g565kTojFJGL6j0RH3Z85sr7RmDarBG/GSfpS+o25nCL 2w/PL0wVFHWzpgWXu4kuT5QmLaSmmVAvG9QK7Z62qe5n2ldWY9UGgljeLXefZNPM t1LFBI4BFnwI6zCcuylOYFY+iNZ2+us= -----END CERTIFICATE-----Generated at Sun Apr 27 03:37:40 2025 by rpki-client