$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/76976d75-ee42-30cf-9881-ba84b1f75bee.roa File: 76976d75-ee42-30cf-9881-ba84b1f75bee.roa (raw, json) Hash identifier: kthkrhwaXwde9HgXvhjALcH8+t+3Nk0AkAAREvRC6Io= Subject key identifier: 49:4F:F3:19:B5:CE:35:27:6E:F5:3E:7F:72:2A:5B:0F:92:9E:BE:A4 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584944693F4DD728E31F3F5B4300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/76976d75-ee42-30cf-9881-ba84b1f75bee.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 9009 IP address blocks: 45.74.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3f:4d:d7:28:e3:1f:3f:5b:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=1a067a4f-0783-4d59-a5db-abf9ab9064bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:24:01:a9:be:63:c5:4d:ed:81:97:a4:76:65: 26:e3:87:1d:df:a0:a6:5b:d8:88:7b:dd:7e:86:ab: 1c:c1:3b:9e:8a:ea:bb:5b:1b:ef:53:11:3e:8a:5d: 1a:a4:f5:31:e2:07:5a:64:c3:1a:6a:65:fc:42:ec: 29:79:8a:06:cd:29:6a:ef:ba:2a:a9:cc:bd:c0:41: c7:f9:df:ef:44:c8:cb:33:10:b6:4b:1c:d6:5c:77: 47:d6:88:30:d3:c1:88:26:ec:ff:cd:32:c8:b0:f3: 2e:21:4e:6b:38:b5:47:e4:8c:fb:5d:ae:73:1d:bb: 8f:45:ab:87:12:0b:9d:e9:bf:f6:ce:76:eb:3a:ee: 8b:b6:5e:ae:66:77:30:6a:2b:54:5e:d9:7f:65:7a: fa:92:b0:cd:13:67:de:e7:62:5a:82:d2:0a:2f:64: 8b:14:f9:62:90:ed:6d:6e:cf:52:38:15:f5:84:8b: e5:d2:6f:80:e7:83:f4:96:ab:a2:09:58:4b:9a:23: a6:b0:33:b1:2e:35:74:06:27:e4:44:88:c1:77:ee: a9:a1:d6:27:ca:9b:2b:55:3e:45:a0:c6:09:bd:6a: ff:ef:e0:de:be:5c:c5:a7:c0:2b:9e:1d:dd:68:c2: a1:f5:c5:70:80:06:fa:10:e6:33:0c:16:19:a0:1a: 7c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4F:F3:19:B5:CE:35:27:6E:F5:3E:7F:72:2A:5B:0F:92:9E:BE:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/76976d75-ee42-30cf-9881-ba84b1f75bee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3a:c2:32:db:56:d2:45:0f:59:47:19:f5:a6:1c:02:49:d6: 1e:a2:54:7f:1e:23:55:c0:ae:f7:8c:94:64:fb:3d:d7:58:6c: 28:bb:f3:3c:7c:f1:ee:f5:13:b1:55:09:15:69:38:0b:f4:28: f1:60:7d:10:b3:e2:68:b5:ae:52:0e:01:be:59:6c:5f:c6:90: 26:bf:8e:68:8c:08:38:b1:26:61:6a:62:35:6c:18:eb:e6:10: cc:fc:d4:12:ad:63:08:59:8a:7f:f7:3d:89:fc:6c:8f:2f:31: c0:5f:58:3b:c3:bd:0c:3c:29:ee:74:35:4c:5e:bc:87:80:fd: 60:16:4b:1c:93:8e:2c:f5:ba:ba:c9:81:66:c9:2b:1a:2e:54: 58:06:04:4d:95:e3:ba:ad:a1:ea:be:72:a5:2f:9a:90:3f:4a: c6:34:64:51:14:c2:ca:ec:1e:e6:34:ca:d7:b4:1e:1f:86:e1: 81:6f:3c:c6:8b:f2:93:57:2e:2d:5f:84:cc:a4:a8:10:89:52: f9:be:d4:69:e1:f6:f0:1d:71:14:7e:4e:6e:76:d5:53:04:73: 53:b8:7b:10:0a:dd:b0:12:b3:31:ea:e9:f4:2e:ca:08:b8:d6: 53:4e:dc:aa:8b:2a:7c:10:1d:e1:70:b0:c3:98:08:b9:80:fd: 92:4f:b0:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaT9N1yjjHz9bQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MWEwNjdhNGYtMDc4My00ZDU5LWE1ZGItYWJmOWFiOTA2NGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSQBqb5jxU3tgZekdmUm44cd36CmW9iIe91+ hqscwTueiuq7WxvvUxE+il0apPUx4gdaZMMaamX8QuwpeYoGzSlq77oqqcy9wEHH +d/vRMjLMxC2SxzWXHdH1ogw08GIJuz/zTLIsPMuIU5rOLVH5Iz7Xa5zHbuPRauH Egud6b/2znbrOu6Ltl6uZncwaitUXtl/ZXr6krDNE2fe52JagtIKL2SLFPlikO1t bs9SOBX1hIvl0m+A54P0lquiCVhLmiOmsDOxLjV0BifkRIjBd+6podYnypsrVT5F oMYJvWr/7+DevlzFp8Arnh3daMKh9cVwgAb6EOYzDBYZoBp8cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElP8xm1zjUnbvU+f3IqWw+Snr6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzY5NzZkNzUtZWU0Mi0z MGNmLTk4ODEtYmE4NGIxZjc1YmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM6wjLbVtJFD1lHGfWmHAJJ1h6iVH8eI1XArveMlGT7PddYbCi78zx8 8e71E7FVCRVpOAv0KPFgfRCz4mi1rlIOAb5ZbF/GkCa/jmiMCDixJmFqYjVsGOvm EMz81BKtYwhZin/3PYn8bI8vMcBfWDvDvQw8Ke50NUxevIeA/WAWSxyTjiz1urrJ gWbJKxouVFgGBE2V47qtoeq+cqUvmpA/SsY0ZFEUwsrsHuY0yte0Hh+G4YFvPMaL 8pNXLi1fhMykqBCJUvm+1Gnh9vAdcRR+Tm521VMEc1O4exAK3bASszHq6fQuygi4 1lNO3KqLKnwQHeFwsMOYCLmA/ZJPsJA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:32:59 2025 by rpki-client