$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/78561032-10ef-3bdd-8982-5acef2c939a8.roa File: 78561032-10ef-3bdd-8982-5acef2c939a8.roa (raw, json) Hash identifier: cpNw/l5uaEuNl3rl3UIUyVjuo8qaT9YkqZjzBkWyoSk= Subject key identifier: 02:08:58:FA:69:ED:5F:D3:D2:23:8D:C7:D9:C4:B8:9E:2F:30:08:A6 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584974D4EC71F246A44D04003CC0 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/78561032-10ef-3bdd-8982-5acef2c939a8.roa Signing time: Tue 08 Apr 2025 09:16:36 +0000 ROA not before: Tue 08 Apr 2025 09:16:36 +0000 ROA not after: Mon 07 Jul 2025 09:16:36 +0000 asID: 215595 IP address blocks: 45.45.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:74:d4:ec:71:f2:46:a4:4d:04:00:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Apr 8 09:16:36 2025 GMT Not After : Jul 7 09:16:36 2025 GMT Subject: CN=231051e4-d602-4fe2-ae96-7527baf46d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b0:98:7a:da:ed:8b:d9:79:dc:9a:ed:ba:80: 4e:b6:84:55:10:63:c8:a3:b5:25:1e:e8:02:77:be: 32:52:60:96:72:c6:2a:8b:5a:23:38:6e:3a:57:e0: 95:f5:15:95:bb:bd:d9:a2:e0:c0:ab:9a:85:40:f2: 71:2d:e7:6f:1b:e0:a1:6f:13:3c:d0:9d:7f:57:6e: 0a:e2:60:e2:28:74:1f:7c:f3:6f:d1:2e:aa:d0:09: 8d:80:ec:9b:41:6c:3d:75:e7:b2:c9:47:b3:f1:3a: 7e:97:ec:95:02:1f:4d:02:41:53:49:a3:1c:da:8e: 76:a8:e0:cc:c0:42:72:04:3b:6c:41:fd:51:6c:1e: f5:e3:33:c2:1c:b7:cd:fc:b2:6e:d4:bb:57:49:e2: c1:34:f5:55:c7:40:89:a6:15:d1:26:a4:6c:e4:c5: df:42:b3:bd:d5:5d:e1:71:31:14:c5:12:13:ed:9e: 05:16:c9:a7:1d:08:6d:9c:8d:7a:9f:38:8b:43:bc: 12:40:ab:a1:67:30:ab:30:22:f3:6e:af:77:64:e5: 90:f3:39:ca:d0:84:c6:22:fb:77:e1:b1:05:ac:9c: 89:15:95:79:58:10:bd:d4:79:82:41:10:45:7c:0e: bb:15:17:59:a9:64:c7:63:01:18:a3:4e:87:54:16: 52:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:08:58:FA:69:ED:5F:D3:D2:23:8D:C7:D9:C4:B8:9E:2F:30:08:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/78561032-10ef-3bdd-8982-5acef2c939a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 45.45.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f2:f4:e1:a2:63:a2:9e:b3:0a:ed:84:b6:f6:d4:b3:fa:f3: 48:46:4a:ee:4d:03:da:f7:c0:e4:c3:3f:04:a0:33:95:da:7c: 3b:46:7d:db:2d:a7:55:3c:11:1f:61:eb:0b:f4:38:d8:6a:d7: f5:36:02:9d:fe:76:31:84:80:21:43:3b:7f:32:cb:4b:db:6a: b2:d6:a9:6c:7d:ee:99:3b:fb:15:cd:49:aa:de:f1:8c:7f:d6: 82:e5:e5:98:d7:20:6a:a6:b6:af:4e:62:0f:a1:dc:0a:80:ac: 1e:c7:e8:6b:0d:58:1b:3f:2b:f2:89:f9:2b:b6:8c:e3:04:9b: d2:c2:3a:73:70:35:5f:e7:6f:14:3d:15:5f:db:d3:e0:a6:7d: 82:9e:f7:17:4c:9c:a9:83:f6:25:20:22:ab:c2:f2:3e:3a:69: fe:9f:32:fe:c0:2d:4c:98:2c:a9:ef:fa:46:65:d3:f8:9c:8b: cd:4d:d3:6f:a7:18:6c:65:1c:b5:f4:88:58:8f:df:a8:94:e8: 89:66:9d:f7:dc:5a:0f:33:17:af:27:3e:14:88:c7:6b:98:38: 62:0c:c0:32:99:ae:5d:05:80:9b:29:86:f9:9a:9d:10:f3:77: 4b:57:cc:26:c5:bf:51:c8:0e:42:7c:d2:5e:c3:56:82:a3:ad: cd:8b:bb:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl01Oxx8kakTQQAPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MDQwODA5MTYzNloXDTI1MDcwNzA5MTYzNlowLzEtMCsGA1UEAxMk MjMxMDUxZTQtZDYwMi00ZmUyLWFlOTYtNzUyN2JhZjQ2ZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7CYetrti9l53JrtuoBOtoRVEGPIo7UlHugC d74yUmCWcsYqi1ojOG46V+CV9RWVu73ZouDAq5qFQPJxLedvG+ChbxM80J1/V24K 4mDiKHQffPNv0S6q0AmNgOybQWw9deeyyUez8Tp+l+yVAh9NAkFTSaMc2o52qODM wEJyBDtsQf1RbB714zPCHLfN/LJu1LtXSeLBNPVVx0CJphXRJqRs5MXfQrO91V3h cTEUxRIT7Z4FFsmnHQhtnI16nziLQ7wSQKuhZzCrMCLzbq93ZOWQ8znK0ITGIvt3 4bEFrJyJFZV5WBC91HmCQRBFfA67FRdZqWTHYwEYo06HVBZSrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIIWPpp7V/T0iONx9nEuJ4vMAimMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvNzg1NjEwMzItMTBlZi0z YmRkLTg5ODItNWFjZWYyYzkzOWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHy9OGiY6KeswrthLb21LP680hGSu5NA9r3wOTDPwSgM5XafDtGfdst p1U8ER9h6wv0ONhq1/U2Ap3+djGEgCFDO38yy0vbarLWqWx97pk7+xXNSare8Yx/ 1oLl5ZjXIGqmtq9OYg+h3AqArB7H6GsNWBs/K/KJ+Su2jOMEm9LCOnNwNV/nbxQ9 FV/b0+CmfYKe9xdMnKmD9iUgIqvC8j46af6fMv7ALUyYLKnv+kZl0/ici81N02+n GGxlHLX0iFiP36iU6IlmnffcWg8zF68nPhSIx2uYOGIMwDKZrl0FgJsphvmanRDz d0tXzCbFv1HIDkJ80l7DVoKjrc2Lu7Y= -----END CERTIFICATE-----Generated at Sun Apr 27 10:45:30 2025 by rpki-client