$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/953ed597-a7ae-33d4-93c2-8a5e80848057.roa File: 953ed597-a7ae-33d4-93c2-8a5e80848057.roa (raw, json) Hash identifier: 25T3C10iTqk3INiabW2FMyUupG10SDH4Wb7Dc2S9uNQ= Subject key identifier: 6B:E9:E3:47:54:26:D2:F3:84:DA:60:11:AC:85:34:26:69:97:89:75 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858498E6487080610168796E92980 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/953ed597-a7ae-33d4-93c2-8a5e80848057.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 20303 IP address blocks: 45.58.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:87:08:06:10:16:87:96:e9:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=3549a4a7-d3bf-4d4b-b350-4552a9896e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b2:bb:bd:52:6a:53:41:91:00:0b:cc:fc:d0: f0:5a:2d:e7:5f:3d:27:ab:0c:a4:af:df:67:35:fd: 8a:0b:96:2b:d5:df:f5:b6:34:41:0b:7f:52:8d:75: 81:ff:0b:17:e6:36:e0:3b:ec:1c:5c:c9:71:2b:0c: fb:bd:7e:d4:2e:83:5d:18:47:6b:92:2e:93:00:fb: 06:41:cb:de:89:41:24:99:76:30:74:24:d2:7e:a8: 4c:65:8c:2f:32:ca:30:69:af:92:fa:4d:c9:25:96: 9a:7e:14:e8:d6:eb:54:86:ef:26:24:58:ab:e7:bb: 90:2d:de:5c:69:e3:a2:45:bb:86:5a:bc:4b:68:55: 2d:2c:58:e5:0a:9e:7b:02:18:3e:40:f1:87:85:27: 87:cd:5c:b6:e3:02:31:54:53:96:bc:0a:3f:37:8f: c0:88:d2:16:2f:8a:d2:9e:c9:aa:fb:06:54:34:7c: b4:e8:b2:d0:aa:58:35:a6:c5:e7:b2:1c:2c:e2:08: fe:a2:5a:2a:5b:f2:7e:bb:8b:2e:3f:53:49:44:4b: 0c:f8:b7:50:fa:f7:be:31:23:ab:17:e2:05:5a:15: f6:42:c7:f8:53:48:94:03:0d:57:7d:a8:c2:0e:ea: c1:24:3f:8b:1b:da:f5:4e:03:4d:50:75:94:6e:0c: 18:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E9:E3:47:54:26:D2:F3:84:DA:60:11:AC:85:34:26:69:97:89:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/953ed597-a7ae-33d4-93c2-8a5e80848057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f7:bd:27:9b:e8:8a:87:06:52:4e:7c:c8:54:44:c5:ea:77: 92:ca:e2:70:1c:eb:b2:55:34:f6:c6:7f:03:94:58:fd:8c:e4: dc:09:15:2e:61:1c:c7:3f:9c:bd:f4:fc:4c:44:39:f7:19:a2: eb:f5:66:de:fd:f8:70:7d:20:fa:81:b2:78:e4:26:4d:79:f7: c2:99:65:cd:0c:0c:83:44:26:85:29:cf:36:42:13:c2:73:4e: 05:3a:ee:aa:8b:1c:bd:75:c9:f2:6f:8b:60:6a:8b:51:bc:3a: 68:25:1c:51:2c:27:51:61:71:7a:c0:af:9e:db:51:ac:05:f1: 5a:23:c9:e5:65:cd:bc:50:b5:55:15:3f:b1:9f:dc:61:b1:06: fd:f2:1b:b9:08:7a:66:29:4a:7d:75:f4:2b:96:31:00:0f:36: bd:c9:b7:f8:d8:6e:74:ff:55:ec:f6:2e:52:f4:6e:1f:30:46: e0:05:2c:1f:39:98:57:87:fa:ce:9b:61:f4:9b:59:31:d5:7d: 55:f8:52:ea:63:d1:37:15:d6:4c:a1:8f:ea:20:05:40:42:d3: a5:4f:c1:ff:70:90:f1:7b:51:e1:72:f9:de:1e:c4:d6:32:70: b3:fe:da:f8:ed:c9:ec:6d:e9:90:f2:f9:13:48:fd:cb:99:0f: 6e:05:de:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIcIBhAWh5bpKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk MzU0OWE0YTctZDNiZi00ZDRiLWIzNTAtNDU1MmE5ODk2ZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrK7vVJqU0GRAAvM/NDwWi3nXz0nqwykr99n Nf2KC5Yr1d/1tjRBC39SjXWB/wsX5jbgO+wcXMlxKwz7vX7ULoNdGEdrki6TAPsG QcveiUEkmXYwdCTSfqhMZYwvMsowaa+S+k3JJZaafhTo1utUhu8mJFir57uQLd5c aeOiRbuGWrxLaFUtLFjlCp57Ahg+QPGHhSeHzVy24wIxVFOWvAo/N4/AiNIWL4rS nsmq+wZUNHy06LLQqlg1psXnshws4gj+oloqW/J+u4suP1NJREsM+LdQ+ve+MSOr F+IFWhX2Qsf4U0iUAw1XfajCDurBJD+LG9r1TgNNUHWUbgwYGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvp40dUJtLzhNpgEayFNCZpl4l1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTUzZWQ1OTctYTdhZS0z M2Q0LTkzYzItOGE1ZTgwODQ4MDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLTrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz3vSeb6IqHBlJOfMhURMXqd5LK4nAc67JVNPbGfwOUWP2M5NwJFS5h HMc/nL30/ExEOfcZouv1Zt79+HB9IPqBsnjkJk1598KZZc0MDINEJoUpzzZCE8Jz TgU67qqLHL11yfJvi2Bqi1G8OmglHFEsJ1FhcXrAr57bUawF8VojyeVlzbxQtVUV P7Gf3GGxBv3yG7kIemYpSn119CuWMQAPNr3Jt/jYbnT/Vez2LlL0bh8wRuAFLB85 mFeH+s6bYfSbWTHVfVX4Uupj0TcV1kyhj+ogBUBC06VPwf9wkPF7UeFy+d4exNYy cLP+2vjtyext6ZDy+RNI/cuZD24F3pQ= -----END CERTIFICATE-----Generated at Sun Apr 27 04:11:16 2025 by rpki-client