$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e0f0210b-2a38-3774-808a-e967a6bcb25e.roa File: e0f0210b-2a38-3774-808a-e967a6bcb25e.roa (raw, json) Hash identifier: /91UDQSAKT/XbKmam5S9+Q4Lbox3mOg8xiQ8rL137o0= Subject key identifier: 4F:08:C9:64:62:D3:1F:57:96:04:ED:87:01:F9:AC:DD:F1:5D:11:1A Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F432858493C092738E4D2403479FD7E00 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e0f0210b-2a38-3774-808a-e967a6bcb25e.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 46261 IP address blocks: 45.59.16.0/24 maxlen: 24 45.59.19.0/24 maxlen: 24 45.59.28.0/24 maxlen: 24 45.59.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:27:38:e4:d2:40:34:79:fd:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=cb50cef7-2183-4be3-9fa3-228e87a7a6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:47:de:ad:ba:a1:60:71:a5:5a:75:67:4e: 23:39:f8:f6:93:4a:70:4b:08:45:2a:89:97:25:a8: f3:3c:c4:32:86:36:22:69:fd:43:80:37:aa:18:1b: ca:4f:5c:70:00:f9:e2:d2:5f:ee:6e:1e:d7:ae:fd: 7d:b5:d5:94:e0:e9:f3:95:ca:a9:3b:0c:bf:b9:72: 98:42:32:04:23:7c:58:b8:c7:fc:62:5f:c3:6d:36: 89:79:f1:55:9d:eb:73:76:85:7d:e4:54:59:68:4d: ac:c5:f2:bc:d3:d8:bf:76:73:04:de:7f:55:49:91: 34:8b:61:9d:b7:19:c1:b7:b9:cd:8a:b7:4c:05:21: 7d:0f:90:19:17:6a:08:e6:5c:5e:f1:4a:40:0d:ce: b4:28:43:9f:fa:55:93:5c:1e:35:3c:48:c9:5c:c1: fb:6f:51:fa:ff:ae:f7:ae:a2:21:37:a0:2c:62:4b: 72:a1:57:c7:6d:ed:df:94:3b:c2:3c:29:f3:0f:f7: 5f:00:5b:17:2c:93:4a:b4:cc:e9:e9:51:d4:47:86: 98:d1:78:07:9c:68:39:8e:93:68:21:56:65:5a:af: 04:d3:75:fb:a3:7a:26:81:51:a2:c3:91:7b:8c:b6: 5b:65:61:00:4e:57:7a:2b:ea:6e:f0:36:55:e1:d3: 88:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:08:C9:64:62:D3:1F:57:96:04:ED:87:01:F9:AC:DD:F1:5D:11:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e0f0210b-2a38-3774-808a-e967a6bcb25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 45.59.16.0/24 45.59.19.0/24 45.59.28.0/24 45.59.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:8b:ff:ff:64:ea:f8:0a:de:79:4f:72:8f:d5:64:d9:e4:3a: 7f:3f:85:28:a8:1b:f8:52:dc:31:da:3b:70:37:0b:33:33:3a: 48:d0:89:e5:b5:e9:39:ce:5e:d1:2b:f7:c9:2f:34:cf:c4:f5: a8:6b:db:9f:08:ba:7e:2b:77:59:66:a9:39:41:48:d4:48:16: 83:d3:97:f9:f7:f8:c3:03:de:38:d7:ed:e0:9f:d6:7f:f7:9a: 66:09:03:7e:0d:07:22:b4:9a:58:53:38:76:b9:51:b9:a5:1e: f7:87:ec:74:0e:70:fd:32:2e:60:21:5d:28:05:e2:e7:da:31: b5:46:5d:88:16:3a:99:f8:86:86:ef:09:cb:37:98:32:92:cf: 4b:41:1b:97:e6:1a:c3:06:40:15:f3:db:cb:20:cb:7d:a8:8b: 87:81:a2:41:3a:41:fd:61:64:42:1d:4d:af:bf:21:68:91:01: d8:3e:9c:db:d3:00:e0:65:ef:a5:79:19:c8:03:c5:36:5e:c7: 77:cb:84:90:9c:b7:0d:e0:a0:10:f4:a5:50:6b:dd:8b:65:f0: 2f:dd:f6:f8:fd:aa:a6:76:a2:8e:39:bb:ad:4a:a1:37:db:22: 83:46:f5:64:18:a4:8a:63:4e:bb:e9:04:84:8b:73:ba:5b:bb: 01:d8:25:b6 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEk8CSc45NJANHn9fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk Y2I1MGNlZjctMjE4My00YmUzLTlmYTMtMjI4ZTg3YTdhNmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgNH3q26oWBxpVp1Z04jOfj2k0pwSwhFKomX JajzPMQyhjYiaf1DgDeqGBvKT1xwAPni0l/ubh7Xrv19tdWU4OnzlcqpOwy/uXKY QjIEI3xYuMf8Yl/DbTaJefFVnetzdoV95FRZaE2sxfK809i/dnME3n9VSZE0i2Gd txnBt7nNirdMBSF9D5AZF2oI5lxe8UpADc60KEOf+lWTXB41PEjJXMH7b1H6/673 rqIhN6AsYktyoVfHbe3flDvCPCnzD/dfAFsXLJNKtMzp6VHUR4aY0XgHnGg5jpNo IVZlWq8E03X7o3omgVGiw5F7jLZbZWEATld6K+pu8DZV4dOIZwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFE8IyWRi0x9XlgTthwH5rN3xXREaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvZTBmMDIxMGItMmEzOC0z Nzc0LTgwOGEtZTk2N2E2YmNiMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALTsQAwQA LTsTAwQALTscAwQALTsfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABCL//9k6vgK3nlPco/VZNnkOn8/hSio G/hS3DHaO3A3CzMzOkjQieW16TnOXtEr98kvNM/E9ahr258Iun4rd1lmqTlBSNRI FoPTl/n3+MMD3jjX7eCf1n/3mmYJA34NByK0mlhTOHa5UbmlHveH7HQOcP0yLmAh XSgF4ufaMbVGXYgWOpn4hobvCcs3mDKSz0tBG5fmGsMGQBXz28sgy32oi4eBokE6 Qf1hZEIdTa+/IWiRAdg+nNvTAOBl76V5GcgDxTZex3fLhJCctw3goBD0pVBr3Ytl 8C/d9vj9qqZ2oo45u61KoTfbIoNG9WQYpIpjTrvpBISLc7pbuwHYJbY= -----END CERTIFICATE-----Generated at Sun Apr 27 20:17:30 2025 by rpki-client