$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e09d4cea-d423-3a06-91f1-682b8b11b34e.roa File: e09d4cea-d423-3a06-91f1-682b8b11b34e.roa (raw, json) Hash identifier: xA/dnCfQ/Ncr2pkNZSZSQ+SPSia+U3dKiyx323CFgIk= Subject key identifier: 8C:74:BB:D7:45:B1:C1:7A:02:3E:EE:5F:E1:1D:8B:9D:E6:74:8A:87 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849350E9B07DEFE17E4FB9C9B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e09d4cea-d423-3a06-91f1-682b8b11b34e.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 212238 IP address blocks: 45.74.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:9b:07:de:fe:17:e4:fb:9c:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=b41e45ad-83c5-426b-bbc2-a2cee5105d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:89:88:f3:06:17:32:92:df:eb:6b:a3:3c: d2:c1:62:2d:9e:e1:95:5e:a3:68:44:4d:c3:ac:bc: 3e:af:55:a7:68:b9:ef:81:a9:67:f5:cc:b6:23:2c: 4a:ac:16:83:6a:93:a3:eb:fe:6b:e4:ee:2d:0d:6f: aa:5a:8e:eb:d8:d0:5b:e9:de:2e:e7:bd:d8:a8:b3: 8f:74:1d:b9:0e:ad:e0:78:9d:da:9b:c9:7a:cc:75: 30:50:c1:dd:7f:00:34:d8:e0:90:03:29:87:6d:41: c5:03:6a:ec:c8:82:1d:8b:50:c7:71:19:4c:3c:20: 24:04:f1:2c:3a:50:8b:6c:fc:97:6b:47:f3:10:99: 79:04:77:6d:98:1a:a2:1f:bf:4f:da:ea:63:e7:dd: ff:db:b7:bc:42:a2:e6:48:68:9a:7c:55:7b:d1:61: 25:9a:04:25:49:2c:24:c2:b2:b9:89:d7:49:c5:3e: a1:7b:5e:93:13:83:17:dd:bc:4b:b1:c3:e3:8f:ad: bf:7a:11:89:85:ff:26:f3:22:d0:f8:9f:85:44:8e: 93:1d:26:e1:69:e1:cd:08:d3:94:a1:f9:84:36:65: 0f:6e:2a:49:c9:d9:34:af:13:87:36:d8:2c:9e:e6: df:e5:a4:42:c6:20:a9:8e:e5:d4:ed:76:69:f0:41: 3a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:74:BB:D7:45:B1:C1:7A:02:3E:EE:5F:E1:1D:8B:9D:E6:74:8A:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e09d4cea-d423-3a06-91f1-682b8b11b34e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:7b:d5:c6:6b:31:f5:23:1f:07:0b:34:d0:40:36:81:18:c7: ca:df:7a:5a:a5:91:84:38:c3:7b:37:ec:19:4a:7d:90:28:1a: 93:2c:d4:0e:99:53:bb:a3:be:88:50:de:68:03:0e:1c:0c:74: db:c7:19:24:d5:6b:c1:27:1d:80:56:df:b6:03:e4:aa:e1:b1: 1b:70:02:81:9b:f9:c7:60:e3:0e:3e:48:47:83:f1:17:83:2b: 56:18:fd:43:ec:14:d8:c3:72:a1:4d:1c:9d:5c:74:de:e2:4b: 5f:2c:7a:ea:72:b4:c5:85:2f:59:0e:0a:3d:9d:65:ed:93:e6: 9a:36:3b:9e:b4:a2:94:2e:f4:b2:d9:5f:72:b9:93:1b:ab:e3: 3f:42:cc:16:e8:9f:0a:92:8d:88:51:aa:82:b3:dc:13:52:0c: 31:e7:a4:46:b6:36:5c:ce:7f:79:36:b4:3a:a4:ff:2a:ca:fd: a6:46:17:e7:08:a7:38:a9:dd:76:e0:b8:bc:af:af:d1:a0:ee: 6b:fd:a3:ca:55:8d:db:8d:1e:91:43:28:4d:e2:24:a8:07:b1: 60:17:81:63:cb:ca:fc:2f:53:3f:58:87:94:55:90:b2:b8:af: 25:c8:32:05:4b:d0:d6:96:29:45:9f:0e:22:36:52:7c:1a:5d: ea:cb:bb:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpsH3v4X5Pucm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YjQxZTQ1YWQtODNjNS00MjZiLWJiYzItYTJjZWU1MTA1ZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2WJiPMGFzKS3+trozzSwWItnuGVXqNoRE3D rLw+r1WnaLnvgaln9cy2IyxKrBaDapOj6/5r5O4tDW+qWo7r2NBb6d4u573YqLOP dB25Dq3geJ3am8l6zHUwUMHdfwA02OCQAymHbUHFA2rsyIIdi1DHcRlMPCAkBPEs OlCLbPyXa0fzEJl5BHdtmBqiH79P2upj593/27e8QqLmSGiafFV70WElmgQlSSwk wrK5iddJxT6he16TE4MX3bxLscPjj62/ehGJhf8m8yLQ+J+FRI6THSbhaeHNCNOU ofmENmUPbipJydk0rxOHNtgsnubf5aRCxiCpjuXU7XZp8EE64wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIx0u9dFscF6Aj7uX+Edi53mdIqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTA5ZDRjZWEtZDQyMy0z YTA2LTkxZjEtNjgyYjhiMTFiMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ71cZrMfUjHwcLNNBANoEYx8rfelqlkYQ4w3s37BlKfZAoGpMs1A6Z U7ujvohQ3mgDDhwMdNvHGSTVa8EnHYBW37YD5KrhsRtwAoGb+cdg4w4+SEeD8ReD K1YY/UPsFNjDcqFNHJ1cdN7iS18seupytMWFL1kOCj2dZe2T5po2O560opQu9LLZ X3K5kxur4z9CzBbonwqSjYhRqoKz3BNSDDHnpEa2NlzOf3k2tDqk/yrK/aZGF+cI pzip3XbguLyvr9Gg7mv9o8pVjduNHpFDKE3iJKgHsWAXgWPLyvwvUz9Yh5RVkLK4 ryXIMgVL0NaWKUWfDiI2UnwaXerLu1Q= -----END CERTIFICATE-----Generated at Sat Apr 26 15:59:03 2025 by rpki-client