$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1ef0062-29e1-3f93-b05d-77b703336eeb.roa File: a1ef0062-29e1-3f93-b05d-77b703336eeb.roa (raw, json) Hash identifier: y2f3BWSKkL77OpXTXAay/G2gayk028kQUr3IUnIdIEw= Subject key identifier: 8B:DA:0B:CC:45:0A:0C:65:0F:16:F0:67:DB:7A:B3:83:72:BE:EF:CC Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285849797446966A95BB9218C28F40 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1ef0062-29e1-3f93-b05d-77b703336eeb.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 7018 IP address blocks: 45.58.216.0/22 maxlen: 22 45.58.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:46:96:6a:95:bb:92:18:c2:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=845b9876-dcea-42ac-a1da-c6a5628a386f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:6e:e5:a7:b1:67:50:b9:73:02:7d:05:ee: f6:f3:1d:45:91:1e:88:fd:bb:dc:d8:cd:80:7b:3f: 9c:a1:a6:d4:50:f2:f7:7f:1c:09:32:cb:48:63:31: f2:f2:5c:05:b8:59:9c:33:c3:0c:ab:00:fc:a4:fb: 63:1c:91:51:8f:61:cd:59:6d:53:bb:d0:0b:12:ae: fe:dc:96:1d:be:31:fe:f9:ad:60:be:e0:42:45:55: fd:99:07:75:e7:a2:1f:9b:e9:8a:40:39:5b:50:03: 87:9d:b2:df:5b:79:f5:25:76:e0:42:8f:d6:a7:1e: 2a:83:40:e7:65:0d:00:1f:dd:64:ea:cc:82:ac:0c: c5:13:c7:cc:3d:e7:fc:f4:d4:65:46:c6:9a:20:5e: 8a:a3:34:26:28:83:d8:5c:ea:5c:3e:ce:9e:40:3b: 3c:fe:d6:9f:6a:64:be:2e:55:94:3f:b0:06:dd:91: ce:b4:36:bf:d3:8b:03:da:32:cd:12:45:8a:55:8d: 46:ae:05:69:14:5a:cf:21:3f:30:dd:17:c8:fb:a8: c1:03:28:f1:e6:24:03:c8:15:38:8b:e8:a4:3d:ae: 47:70:92:56:08:6e:99:84:91:83:3a:49:da:54:d4: 5e:7b:c9:24:d7:5c:11:e7:aa:2c:ad:6b:61:eb:1d: ab:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DA:0B:CC:45:0A:0C:65:0F:16:F0:67:DB:7A:B3:83:72:BE:EF:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1ef0062-29e1-3f93-b05d-77b703336eeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:75:ef:2e:4b:be:2b:6e:3a:03:a5:02:98:e0:c9:5c:4c:23: c5:9a:19:fe:7f:eb:3b:02:69:33:3a:b0:2b:6a:3a:cb:a6:a2: 38:a8:c7:b3:d6:85:20:de:fe:10:f5:89:c3:cd:ab:5d:7f:7a: 89:7b:4e:e3:eb:94:28:3f:88:b8:5e:38:e3:0d:a0:d7:a4:e1: cd:b1:b3:b8:10:af:6f:4e:76:0f:ed:48:b6:d4:3d:90:02:cd: 04:54:ec:b0:6e:71:3b:26:32:30:df:b6:a4:8e:7e:c7:5a:5e: b3:e6:4d:38:b8:4f:d4:f1:46:03:05:be:c3:62:bf:78:d9:17: 64:1c:93:e1:22:03:21:e6:50:f7:42:f0:96:d7:e4:7e:e5:52: dd:85:d6:07:0e:1c:86:66:fa:dd:54:3d:6b:4c:c2:22:cb:29: 24:e1:2f:50:9a:c7:ff:c3:8e:c0:1e:6a:fc:18:6e:3a:3c:0b: a3:cc:22:2b:49:20:f8:f3:03:97:79:59:54:55:4a:c0:46:b5: 18:20:7f:de:fd:c4:48:c3:df:c8:43:7c:13:25:15:c4:07:9c: e8:99:12:08:8c:26:15:57:9e:e9:44:0f:96:f5:6e:4a:cd:e7: 8a:6c:7f:c6:00:4d:93:9a:67:8a:cd:6b:be:ef:c0:86:ff:4f: ff:ff:07:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dEaWapW7khjCj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk ODQ1Yjk4NzYtZGNlYS00MmFjLWExZGEtYzZhNTYyOGEzODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvtu5aexZ1C5cwJ9Be728x1FkR6I/bvc2M2A ez+coabUUPL3fxwJMstIYzHy8lwFuFmcM8MMqwD8pPtjHJFRj2HNWW1Tu9ALEq7+ 3JYdvjH++a1gvuBCRVX9mQd156Ifm+mKQDlbUAOHnbLfW3n1JXbgQo/Wpx4qg0Dn ZQ0AH91k6syCrAzFE8fMPef89NRlRsaaIF6KozQmKIPYXOpcPs6eQDs8/tafamS+ LlWUP7AG3ZHOtDa/04sD2jLNEkWKVY1GrgVpFFrPIT8w3RfI+6jBAyjx5iQDyBU4 i+ikPa5HcJJWCG6ZhJGDOknaVNRee8kk11wR56osrWth6x2rOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvaC8xFCgxlDxbwZ9t6s4Nyvu/MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTFlZjAwNjItMjllMS0z ZjkzLWIwNWQtNzdiNzAzMzM2ZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLTrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB17y5LvituOgOlApjgyVxMI8WaGf5/6zsCaTM6sCtqOsumojiox7PW hSDe/hD1icPNq11/eol7TuPrlCg/iLheOOMNoNek4c2xs7gQr29Odg/tSLbUPZAC zQRU7LBucTsmMjDftqSOfsdaXrPmTTi4T9TxRgMFvsNiv3jZF2Qck+EiAyHmUPdC 8JbX5H7lUt2F1gcOHIZm+t1UPWtMwiLLKSThL1Cax//DjsAeavwYbjo8C6PMIitJ IPjzA5d5WVRVSsBGtRggf979xEjD38hDfBMlFcQHnOiZEgiMJhVXnulED5b1bkrN 54psf8YATZOaZ4rNa77vwIb/T///B1Q= -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:30 2025 by rpki-client