$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/436d215e-6d6e-30c3-b32d-eedeac625ace.roa File: 436d215e-6d6e-30c3-b32d-eedeac625ace.roa (raw, json) Hash identifier: 9mNA4x18/A9pXoy5TyPRiZDzc3yftyXeaUwsheckZjU= Subject key identifier: 0C:55:65:EC:CA:DA:87:AA:4C:88:1E:1B:58:CC:CF:AA:1A:6F:1C:4B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858499AF48C759DFD881260C9DC00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/436d215e-6d6e-30c3-b32d-eedeac625ace.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 9009 IP address blocks: 45.74.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8c:75:9d:fd:88:12:60:c9:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=e9444da6-bcfa-4cc4-b2c5-1e0fbe88f370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b4:6a:92:55:5b:c7:f2:c1:92:9e:3d:db:90: 80:19:c2:9b:d9:23:7f:58:10:5e:10:6d:56:2b:90: 20:7d:f5:f6:b3:62:3d:89:35:d6:a1:95:01:83:2e: 23:8e:be:ed:c3:b6:be:77:1b:20:db:2f:2f:ef:0b: d0:84:c0:89:bf:2f:9a:1e:e6:73:d8:bb:d8:ff:ce: af:3d:2d:42:b6:b7:20:c2:a6:7a:ce:14:d0:78:e0: 7f:ee:8d:7c:f3:94:e7:50:f5:4c:e6:01:07:f3:62: 82:00:a0:ae:c4:d4:8f:cb:3a:7d:dc:d6:a4:4e:3c: 84:16:7b:e2:46:31:ed:c6:5f:93:e4:a9:72:2d:42: 23:fb:88:ba:68:df:5f:b3:6b:77:80:28:b2:ba:05: c1:38:3b:05:2d:7c:5a:8d:70:59:3f:01:87:00:69: 30:5e:c8:27:8e:24:b7:22:60:78:d0:28:51:3c:42: 48:03:eb:4d:2d:87:31:5d:de:52:aa:e8:f7:f9:21: a2:c3:e2:dc:f8:ce:b3:ed:2c:78:18:17:73:10:cc: 4e:cc:07:ac:a3:fc:59:65:48:c9:c2:0b:d1:0e:88: 89:a7:05:0b:8f:01:da:9f:f0:f6:bb:16:80:83:aa: 24:01:c3:70:55:25:fa:b6:49:94:c5:e7:09:18:73: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:55:65:EC:CA:DA:87:AA:4C:88:1E:1B:58:CC:CF:AA:1A:6F:1C:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/436d215e-6d6e-30c3-b32d-eedeac625ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:65:b4:17:05:33:e3:78:98:74:9b:dd:bd:d3:3d:5a:74:53: 79:81:2a:9e:47:7f:d8:cd:ea:50:d3:82:82:5b:88:ce:ac:1d: 02:f3:b2:68:d2:33:bf:95:8d:7b:17:1f:b9:ec:81:e1:d2:64: 3c:70:03:72:37:34:0f:8f:fc:44:92:54:f1:56:fc:5d:2f:c6: 41:60:e9:21:9d:07:0d:d2:f4:f7:bb:58:02:11:e9:63:17:57: 39:51:36:e7:6d:ba:e4:eb:01:76:69:ca:2a:35:6c:14:43:ed: df:79:45:3a:42:2a:ba:bc:5c:c7:e6:0a:f4:bf:0e:f8:47:c0: 0a:55:0b:6d:1d:c6:2d:05:37:92:73:47:e8:29:89:fd:8a:42: 67:96:e6:9e:7e:ce:e8:60:26:b6:2c:e0:2c:29:f6:99:ab:36: 60:95:d8:a3:0f:16:58:ab:c6:0c:96:0a:c7:74:b9:fc:f5:ff: dd:41:a8:c6:fc:7c:d3:d0:a3:0d:7f:0a:13:6c:01:f3:28:6e: ea:cb:fc:6d:d7:05:24:3d:92:fd:69:85:d4:ea:8d:09:c5:20: 7f:23:63:24:2a:ba:f2:59:18:2b:73:77:d1:05:79:bf:88:96: 6c:63:27:92:96:d3:3d:44:28:9c:e1:c7:d6:c8:09:87:ed:d6: 7d:f0:4d:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Ix1nf2IEmDJ3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZTk0NDRkYTYtYmNmYS00Y2M0LWIyYzUtMWUwZmJlODhmMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLRqklVbx/LBkp4925CAGcKb2SN/WBBeEG1W K5AgffX2s2I9iTXWoZUBgy4jjr7tw7a+dxsg2y8v7wvQhMCJvy+aHuZz2LvY/86v PS1CtrcgwqZ6zhTQeOB/7o1885TnUPVM5gEH82KCAKCuxNSPyzp93NakTjyEFnvi RjHtxl+T5KlyLUIj+4i6aN9fs2t3gCiyugXBODsFLXxajXBZPwGHAGkwXsgnjiS3 ImB40ChRPEJIA+tNLYcxXd5Squj3+SGiw+Lc+M6z7Sx4GBdzEMxOzAeso/xZZUjJ wgvRDoiJpwULjwHan/D2uxaAg6okAcNwVSX6tkmUxecJGHNDJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxVZezK2oeqTIgeG1jMz6oabxxLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDM2ZDIxNWUtNmQ2ZS0z MGMzLWIzMmQtZWVkZWFjNjI1YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUodMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZltBcFM+N4mHSb3b3TPVp0U3mBKp5Hf9jN6lDTgoJbiM6sHQLzsmjS M7+VjXsXH7nsgeHSZDxwA3I3NA+P/ESSVPFW/F0vxkFg6SGdBw3S9Pe7WAIR6WMX VzlRNudtuuTrAXZpyio1bBRD7d95RTpCKrq8XMfmCvS/DvhHwApVC20dxi0FN5Jz R+gpif2KQmeW5p5+zuhgJrYs4Cwp9pmrNmCV2KMPFlirxgyWCsd0ufz1/91BqMb8 fNPQow1/ChNsAfMoburL/G3XBSQ9kv1phdTqjQnFIH8jYyQquvJZGCtzd9EFeb+I lmxjJ5KW0z1EKJzhx9bICYft1n3wTaA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:19:09 2025 by rpki-client