$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/634ebe40-87fb-3a5f-b27c-9f25e18469d8.roa File: 634ebe40-87fb-3a5f-b27c-9f25e18469d8.roa (raw, json) Hash identifier: iaVfPA7xMPaxDDKjxvLctL9gehAwSdRojzGQDL1iRLA= Subject key identifier: 37:EA:EE:C8:86:B7:08:AE:41:10:4D:B4:18:8A:8D:D1:DF:40:E8:BF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849A1EF75AED0BC082F12F4DFC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/634ebe40-87fb-3a5f-b27c-9f25e18469d8.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 212238 IP address blocks: 45.74.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:75:ae:d0:bc:08:2f:12:f4:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=87cf2bc5-277c-47ba-b056-33b5a2a47f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:df:29:ac:75:0b:1d:10:97:a4:13:f2:55:6f: b1:64:cc:63:49:69:33:08:f8:e7:1a:84:93:03:5a: 6c:c5:a7:78:30:25:b6:c7:62:a6:39:10:1d:ed:22: 9d:0f:27:25:5e:19:a4:55:05:4f:73:13:81:9c:7d: 1d:69:2a:7a:31:a7:83:63:b7:97:ea:f7:36:0d:e7: d7:d7:5b:30:11:82:c1:77:ae:c1:a0:2d:28:b2:a9: 1b:51:2b:d8:48:84:0a:96:2f:44:ea:d8:d7:4f:c5: b4:95:ea:83:86:6a:5a:23:e2:a1:3f:19:bd:bd:37: b5:1f:0b:5e:c0:6a:9b:2a:23:bd:bf:22:41:d1:6a: 89:b5:52:e6:a8:5b:01:5f:0b:99:de:e7:33:b3:c7: df:8e:28:6e:f8:bc:d6:c8:5e:78:1c:04:43:d9:d0: 2e:03:10:76:fa:ad:bb:04:37:f7:ec:7f:d6:1b:01: aa:9e:b2:6f:ed:a8:17:03:46:2e:a5:c0:fa:16:5d: bc:d4:b5:18:db:76:af:9c:ac:c9:cd:60:e4:32:56: 91:69:88:06:e4:a5:b7:20:37:33:5f:4e:7f:23:e5: 1f:16:69:e8:7b:14:53:51:37:45:8d:d1:d5:b0:68: 3f:65:78:2d:72:20:2c:a6:11:29:96:b5:33:27:06: c9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EA:EE:C8:86:B7:08:AE:41:10:4D:B4:18:8A:8D:D1:DF:40:E8:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/634ebe40-87fb-3a5f-b27c-9f25e18469d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:18:ed:ba:d4:f2:50:a9:57:85:3d:58:dd:30:58:0e:6d:cf: f9:86:73:1e:33:94:46:e7:5f:e5:9a:cd:cc:f3:e5:ab:ee:4f: 27:12:28:57:75:d8:0d:16:b2:88:d8:8c:e1:21:51:3e:60:60: 79:cc:38:34:82:34:95:1b:6f:6f:45:d9:d0:00:59:c0:dc:dc: cc:67:0c:ba:cc:c4:bd:46:8a:95:44:aa:9b:96:b9:67:68:f4: 0e:7d:3a:79:65:db:5b:e8:20:50:25:c3:01:27:17:60:f9:28: 58:ae:83:05:58:33:c6:51:05:91:ff:7c:b7:f2:94:7c:bc:2e: dd:42:5d:d1:5b:ea:26:f6:2e:74:a4:0e:a8:3f:cc:3b:ad:24: 48:5b:59:ca:f1:54:8b:8e:a9:26:59:30:f5:75:bd:1e:77:b0: cc:e9:5e:01:3f:c8:f4:9a:64:87:10:2c:82:05:5e:7b:9f:81: fa:d5:c4:b2:19:8c:fb:d2:31:5c:87:90:bd:37:d9:7f:2c:92: 92:86:75:97:cf:84:75:cf:83:af:06:71:2c:d8:45:35:29:19: 37:75:2b:88:30:3e:c1:43:48:01:8e:28:70:fc:6f:ce:aa:c3: a8:d6:90:97:78:ef:1c:40:5a:8c:1e:ea:8b:b9:0b:91:a1:2d: 80:39:9d:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73Wu0LwILxL038AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ODdjZjJiYzUtMjc3Yy00N2JhLWIwNTYtMzNiNWEyYTQ3ZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl98prHULHRCXpBPyVW+xZMxjSWkzCPjnGoST A1psxad4MCW2x2KmORAd7SKdDyclXhmkVQVPcxOBnH0daSp6MaeDY7eX6vc2DefX 11swEYLBd67BoC0osqkbUSvYSIQKli9E6tjXT8W0leqDhmpaI+KhPxm9vTe1Hwte wGqbKiO9vyJB0WqJtVLmqFsBXwuZ3uczs8ffjihu+LzWyF54HARD2dAuAxB2+q27 BDf37H/WGwGqnrJv7agXA0YupcD6Fl281LUY23avnKzJzWDkMlaRaYgG5KW3IDcz X05/I+UfFmnoexRTUTdFjdHVsGg/ZXgtciAsphEplrUzJwbJVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfq7siGtwiuQRBNtBiKjdHfQOi/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjM0ZWJlNDAtODdmYi0z YTVmLWIyN2MtOWYyNWUxODQ2OWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUY7brU8lCpV4U9WN0wWA5tz/mGcx4zlEbnX+Wazczz5avuTycSKFd1 2A0WsojYjOEhUT5gYHnMODSCNJUbb29F2dAAWcDc3MxnDLrMxL1GipVEqpuWuWdo 9A59Onll21voIFAlwwEnF2D5KFiugwVYM8ZRBZH/fLfylHy8Lt1CXdFb6ib2LnSk Dqg/zDutJEhbWcrxVIuOqSZZMPV1vR53sMzpXgE/yPSaZIcQLIIFXnufgfrVxLIZ jPvSMVyHkL032X8skpKGdZfPhHXPg68GcSzYRTUpGTd1K4gwPsFDSAGOKHD8b86q w6jWkJd47xxAWowe6ou5C5GhLYA5neA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:49:25 2025 by rpki-client