$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/708838d8-8559-3142-a30e-932c38e17aff.roa File: 708838d8-8559-3142-a30e-932c38e17aff.roa (raw, json) Hash identifier: tLt2KhweqNXLDjFgtp+9xanVjtmJeDyJOGLZQLgi1jM= Subject key identifier: 19:5C:4B:ED:1D:30:B4:70:81:19:F2:BC:68:CA:3F:0F:19:0C:C8:9F Certificate issuer: /CN=4d929512-7541-4207-be46-8af4cc4a4800 Certificate serial: 010D0C9F43285849806F2A235107B4C04CC0A980 Authority key identifier: 50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/708838d8-8559-3142-a30e-932c38e17aff.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 26658 IP address blocks: 45.33.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:2a:23:51:07:b4:c0:4c:c0:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d929512-7541-4207-be46-8af4cc4a4800 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=3d04de78-852d-4b0b-956e-e29e04368666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:93:f7:b5:c0:f2:8c:fb:f7:91:35:cf:78:59: 09:f3:aa:67:f0:b5:4e:38:3c:30:f3:bd:c3:a4:78: 41:0b:81:6f:a3:7f:37:1d:88:92:8a:62:b1:5b:6a: 98:a2:02:0a:a0:ec:87:82:40:b9:f3:82:57:ec:d1: 77:4c:b2:89:5f:ae:28:a5:3f:25:bc:17:8e:76:c2: e5:c0:78:6b:21:3c:24:62:6f:a8:30:88:fb:2a:32: 66:15:9c:2e:2c:1f:33:f9:90:4b:85:a9:b0:7d:7e: 3e:36:c6:61:04:aa:42:b0:3a:a9:31:73:52:92:b1: 9c:70:5f:6f:a4:f4:18:2a:8e:48:b1:32:84:8f:dd: 90:82:bf:bb:13:34:b8:0e:81:a3:f7:10:1d:d1:cc: 87:02:7f:5d:22:89:52:43:dc:5d:d3:c5:ca:c4:ea: df:6a:74:e0:47:bc:2b:15:08:79:12:ec:92:fa:7e: 2a:f0:cd:bd:b0:4b:c4:81:57:26:c8:52:3f:73:cc: 82:22:74:80:79:77:bc:3b:be:b9:30:a1:de:76:b2: 50:b8:ce:25:d4:7c:67:bc:f2:9d:45:9e:8c:6e:44: 59:2e:4c:76:27:78:12:ff:a0:92:b4:33:b7:ff:20: 6b:12:2b:92:ec:bb:9a:ca:b8:bc:e6:d8:39:71:51: 30:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5C:4B:ED:1D:30:B4:70:81:19:F2:BC:68:CA:3F:0F:19:0C:C8:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/708838d8-8559-3142-a30e-932c38e17aff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl X509v3 Authority Key Identifier: keyid:50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer sbgp-ipAddrBlock: critical IPv4: 45.33.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f6:55:93:7b:df:a7:6b:e8:3d:ab:c6:ee:29:33:93:3f:aa: f9:b3:60:b6:a9:54:60:ca:ff:0a:44:f6:eb:d9:c5:c3:13:89: 1c:ec:31:c2:01:83:a7:9e:73:c3:4f:95:65:69:99:0a:10:0f: 44:5b:dc:71:85:2a:95:4c:ed:37:11:59:6c:33:4a:74:66:21: f1:86:81:02:3d:11:4b:4a:bb:f2:b9:00:b6:28:30:94:9b:73: ca:30:1f:0f:b9:ce:43:50:26:5f:69:67:a4:cd:8d:97:01:6f: 67:cb:5e:3e:57:9b:5a:32:66:a3:0a:68:a2:c6:0d:e0:bc:10: bf:bd:9a:35:0e:29:b3:2f:3d:06:48:42:ac:0a:05:49:dc:86: bf:9d:a4:fb:b9:07:6c:8e:04:8a:53:80:79:b7:86:0f:62:75: a8:40:ac:6c:b8:9c:70:e5:1d:1e:68:78:1a:db:3c:97:78:78: e0:fd:71:fc:df:59:bc:81:80:af:21:46:3b:93:ea:ff:ae:51: dd:e7:62:37:e3:63:d5:de:9c:b3:27:5b:a7:d7:fe:6c:be:6e: 88:0a:fa:44:a1:4b:40:82:c1:87:a2:12:1c:3e:1c:ac:d5:0a: 36:71:be:1d:c6:e4:86:01:21:17:2e:50:a5:ff:1b:58:a0:02: 2a:c6:47:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbyojUQe0wEzAqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5Mjk1MTItNzU0MS00MjA3LWJlNDYtOGFmNGNjNGE0 ODAwMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk M2QwNGRlNzgtODUyZC00YjBiLTk1NmUtZTI5ZTA0MzY4NjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5P3tcDyjPv3kTXPeFkJ86pn8LVOODww873D pHhBC4Fvo383HYiSimKxW2qYogIKoOyHgkC584JX7NF3TLKJX64opT8lvBeOdsLl wHhrITwkYm+oMIj7KjJmFZwuLB8z+ZBLhamwfX4+NsZhBKpCsDqpMXNSkrGccF9v pPQYKo5IsTKEj92Qgr+7EzS4DoGj9xAd0cyHAn9dIolSQ9xd08XKxOrfanTgR7wr FQh5EuyS+n4q8M29sEvEgVcmyFI/c8yCInSAeXe8O765MKHedrJQuM4l1HxnvPKd RZ6MbkRZLkx2J3gS/6CStDO3/yBrEiuS7Luayri85tg5cVEw1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlcS+0dMLRwgRnyvGjKPw8ZDMifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80ZDky OTUxMi03NTQxLTQyMDctYmU0Ni04YWY0Y2M0YTQ4MDAvNzA4ODM4ZDgtODU1OS0z MTQyLWEzMGUtOTMyYzM4ZTE3YWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGQ5Mjk1MTItNzU0MS00MjA3LWJl NDYtOGFmNGNjNGE0ODAwLzRkOTI5NTEyLTc1NDEtNDIwNy1iZTQ2LThhZjRjYzRh NDgwMC5jcmwwHwYDVR0jBBgwFoAUUHbGsA5Pv93rRfzEAudPVstdNTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80ZDkyOTUxMi03NTQxLTQyMDctYmU0Ni04YWY0 Y2M0YTQ4MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX2VZN736dr6D2rxu4pM5M/qvmzYLapVGDK/wpE9uvZxcMTiRzsMcIB g6eec8NPlWVpmQoQD0Rb3HGFKpVM7TcRWWwzSnRmIfGGgQI9EUtKu/K5ALYoMJSb c8owHw+5zkNQJl9pZ6TNjZcBb2fLXj5Xm1oyZqMKaKLGDeC8EL+9mjUOKbMvPQZI QqwKBUnchr+dpPu5B2yOBIpTgHm3hg9idahArGy4nHDlHR5oeBrbPJd4eOD9cfzf WbyBgK8hRjuT6v+uUd3nYjfjY9XenLMnW6fX/my+bogK+kShS0CCwYeiEhw+HKzV CjZxvh3G5IYBIRcuUKX/G1igAirGR2Y= -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:47 2025 by rpki-client