$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa File: 9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa (raw, json) Hash identifier: PjoqFfD55CwaFZXnL9VxhxtvIgOr5G1KzJYzh4TW0V8= Subject key identifier: B7:3B:DF:D5:C5:5D:D4:E4:52:D4:34:39:6E:76:28:78:83:C3:B0:B3 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F432858492E13BBB58A4CBD2FE5D9E580 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 38001 IP address blocks: 45.42.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:bb:b5:8a:4c:bd:2f:e5:d9:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=17ac71f4-b57f-485f-8cc2-2fc8d8aaac08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:3a:a6:08:07:fc:27:ab:de:3a:a2:c3:c1: 47:94:22:33:e0:cb:a5:f7:b5:a1:aa:23:55:2d:5e: 86:ee:e4:bd:77:78:cf:ae:57:3d:ab:a7:d7:40:0b: a2:c8:a7:9d:79:b6:d8:56:68:47:8f:77:36:a1:e5: 7f:3f:85:1c:1c:aa:92:24:02:cd:37:84:d9:4e:52: 57:eb:db:35:d7:83:30:25:93:77:b7:31:e1:19:6f: d3:2a:fc:02:fe:05:bd:21:89:9a:c2:c1:a9:55:03: 01:41:28:9f:25:b3:70:ef:0d:a7:b2:d5:73:bf:88: aa:cb:51:a9:68:56:4f:7b:68:1f:08:21:39:e4:4a: 45:c4:b2:59:56:82:41:79:9c:d1:88:41:7b:7d:8e: 58:0c:ad:d1:9a:86:0c:c2:e9:41:91:3f:0d:40:bd: 22:d8:e1:99:f2:ac:57:c4:14:96:e0:a5:21:4e:7f: 35:a4:ca:0f:d8:6e:42:34:54:6a:16:5f:48:a7:8c: 03:fa:0c:ec:31:f0:4a:a3:4d:23:6a:a2:b1:fb:02: 72:e4:0b:00:a4:ac:c7:b1:3b:55:7d:16:6f:47:97: 8f:34:b0:97:67:ad:4b:08:ac:aa:38:2f:7b:37:98: 2c:11:64:bc:39:43:f3:ba:1f:60:5d:2b:f4:f5:6e: 50:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3B:DF:D5:C5:5D:D4:E4:52:D4:34:39:6E:76:28:78:83:C3:B0:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 45.42.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:81:5f:6f:89:eb:ba:f8:73:ab:5b:00:8e:6d:68:fa:11:16: f2:1a:3a:8e:92:ba:70:2e:eb:40:b7:58:b2:65:55:15:c4:aa: cf:74:85:45:13:4f:9b:7a:9b:8c:c5:a5:7c:de:c1:e2:ef:83: 29:33:77:b8:58:24:f7:d9:ae:6e:8b:ca:0f:44:36:dc:b1:25: 02:a3:42:a0:ab:84:9b:d8:df:e1:cb:94:58:18:6e:78:e2:47: ab:16:76:1b:e8:37:a3:42:22:b7:51:58:a1:48:b7:6c:a4:53: 64:10:ba:60:17:c1:46:8f:a1:85:71:6f:26:0f:bb:6c:62:ab: 41:14:f5:b0:e5:85:e0:95:d1:25:e4:48:1d:ac:1a:44:07:b8: fe:2d:ce:b2:22:f1:da:40:04:cc:57:45:d0:e4:e0:68:68:98: e7:ae:a2:a4:ff:bf:a8:1d:e1:b1:64:a2:f9:1d:5c:a0:23:e7: 51:a7:84:df:51:5e:ac:5c:aa:b8:55:1d:4c:2c:19:a9:cd:a0: 77:10:94:93:2d:91:2b:38:45:b1:dc:e8:69:77:25:fa:e5:7f: ee:70:ad:95:3c:36:e4:2e:75:3f:3a:be:52:27:f1:62:a5:3f: fc:5f:f6:d8:87:25:cb:05:a2:af:0d:0e:1f:37:cc:a0:06:16: 71:a6:8f:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE7u1iky9L+XZ5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk MTdhYzcxZjQtYjU3Zi00ODVmLThjYzItMmZjOGQ4YWFhYzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIM6pggH/Cer3jqiw8FHlCIz4Mul97WhqiNV LV6G7uS9d3jPrlc9q6fXQAuiyKedebbYVmhHj3c2oeV/P4UcHKqSJALNN4TZTlJX 69s114MwJZN3tzHhGW/TKvwC/gW9IYmawsGpVQMBQSifJbNw7w2nstVzv4iqy1Gp aFZPe2gfCCE55EpFxLJZVoJBeZzRiEF7fY5YDK3RmoYMwulBkT8NQL0i2OGZ8qxX xBSW4KUhTn81pMoP2G5CNFRqFl9Ip4wD+gzsMfBKo00jaqKx+wJy5AsApKzHsTtV fRZvR5ePNLCXZ61LCKyqOC97N5gsEWS8OUPzuh9gXSv09W5QTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLc739XFXdTkUtQ0OW52KHiDw7CzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvOWRhNzU5MTYtZTQwYi0z ZGJlLWJkYmUtNzdkOTkxYzZmYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSqPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+BX2+J67r4c6tbAI5taPoRFvIaOo6SunAu60C3WLJlVRXEqs90hUUT T5t6m4zFpXzeweLvgykzd7hYJPfZrm6Lyg9ENtyxJQKjQqCrhJvY3+HLlFgYbnji R6sWdhvoN6NCIrdRWKFIt2ykU2QQumAXwUaPoYVxbyYPu2xiq0EU9bDlheCV0SXk SB2sGkQHuP4tzrIi8dpABMxXRdDk4GhomOeuoqT/v6gd4bFkovkdXKAj51GnhN9R XqxcqrhVHUwsGanNoHcQlJMtkSs4RbHc6Gl3Jfrlf+5wrZU8NuQudT86vlIn8WKl P/xf9tiHJcsFoq8NDh83zKAGFnGmj1U= -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:22 2025 by rpki-client