$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/bc225c7a-0ddf-3c04-b7ea-2158e691a9ea.roa File: bc225c7a-0ddf-3c04-b7ea-2158e691a9ea.roa (raw, json) Hash identifier: krX8QnxmB9ARgjX/feCarQKk9zw6oMVodB7y1HwEVUc= Subject key identifier: 0F:E8:D7:3B:46:88:B3:DA:B1:58:C0:38:B1:CF:68:F2:59:A0:A3:C6 Certificate issuer: /CN=30d537f2-f871-4f81-b20b-ae04610c521d Certificate serial: 010D0C9F43285849674EF95ECF45B4D58DF59B80 Authority key identifier: 0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/bc225c7a-0ddf-3c04-b7ea-2158e691a9ea.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 7018 IP address blocks: 45.41.240.0/22 maxlen: 22 216.146.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:f9:5e:cf:45:b4:d5:8d:f5:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d537f2-f871-4f81-b20b-ae04610c521d Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=eea36326-7bfe-4a53-867a-5ac012ba662e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ad:b3:c4:0e:61:dc:c8:20:bc:5b:15:60:d6: fe:cf:dc:a3:bc:84:9a:a0:d5:13:b7:c2:91:77:e6: 96:c6:5c:8d:3e:18:db:97:75:ae:6c:f5:8f:68:50: c3:6f:0a:49:aa:b9:b5:4c:c6:2a:34:76:c3:a0:27: 4f:7f:b5:7a:5b:a6:5e:fb:a6:35:3a:32:2f:97:da: d4:9a:7c:e5:4b:69:e6:06:a3:2e:38:24:41:1b:c4: 29:ec:be:2c:cf:f2:9d:86:42:3f:b8:f7:5d:b4:83: 1f:62:59:e4:4f:50:6a:63:5e:70:c2:37:f3:b7:58: bd:2a:38:7a:33:cb:22:ac:03:02:c6:62:1f:9a:09: b6:5f:a5:43:4f:af:8c:f3:55:87:e3:35:10:be:b3: b4:9e:fe:36:c9:cb:40:c0:e8:a5:8b:4d:98:96:1c: c0:ed:e7:9c:55:5e:19:81:9f:97:30:ff:a5:63:eb: 2a:62:74:b7:76:3d:d9:cd:99:94:1d:75:aa:fa:fc: ce:48:fb:81:b6:01:96:52:60:b8:21:4b:52:31:89: 37:da:22:e1:78:48:e5:71:bc:a5:4b:ac:7e:99:41: cb:29:28:08:23:6e:70:81:ef:b6:7c:ac:80:3f:3b: 37:cc:24:c3:e0:56:8c:94:e7:f2:18:75:2f:74:58: 8b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E8:D7:3B:46:88:B3:DA:B1:58:C0:38:B1:CF:68:F2:59:A0:A3:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/bc225c7a-0ddf-3c04-b7ea-2158e691a9ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.crl X509v3 Authority Key Identifier: keyid:0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer sbgp-ipAddrBlock: critical IPv4: 45.41.240.0/22 216.146.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:2b:f3:3f:8e:d7:f7:06:81:6b:3e:7d:9f:a7:19:4a:3e:78: 8e:d5:1b:1c:3c:32:da:20:bf:43:e8:c9:0b:9f:73:bd:a1:84: c0:46:32:7a:d9:e6:4b:ac:f6:54:62:93:66:6e:66:a1:48:d4: 45:4a:63:8c:d4:41:34:cb:3f:f4:5b:f3:23:b5:99:cc:58:f0: 40:02:ce:ad:d6:1b:ba:1f:2a:ec:69:c0:62:3c:08:e3:b8:82: bb:6b:0a:12:02:a5:fd:f2:95:b4:d1:ba:c0:41:43:9c:65:ad: b6:d6:42:79:7b:b9:41:10:60:33:9c:43:b5:f7:62:d5:90:19: 6e:71:1f:c0:28:c9:ae:cd:53:26:d9:51:91:7c:13:a5:88:b0: e8:21:f7:cd:28:0d:cc:ef:de:ab:ec:ba:16:bb:b0:e8:83:0d: de:0a:14:e7:c9:6c:dc:2f:7a:27:b4:cb:58:48:87:26:c2:32: 14:f6:b2:d8:73:1f:95:3e:1c:25:6a:fe:bd:3e:06:93:a0:15: b9:77:4c:2f:22:0b:cb:a5:3f:25:72:41:63:b2:aa:6b:90:2c: d4:3d:20:ba:4d:de:a0:16:88:8c:82:f4:05:92:03:f0:d8:13: 53:c7:c5:15:86:10:63:d2:28:f7:3f:4f:4b:87:64:76:6f:68: 04:19:a7:e4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElnTvlez0W01Y31m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBkNTM3ZjItZjg3MS00ZjgxLWIyMGItYWUwNDYxMGM1 MjFkMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk ZWVhMzYzMjYtN2JmZS00YTUzLTg2N2EtNWFjMDEyYmE2NjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg62zxA5h3MggvFsVYNb+z9yjvISaoNUTt8KR d+aWxlyNPhjbl3WubPWPaFDDbwpJqrm1TMYqNHbDoCdPf7V6W6Ze+6Y1OjIvl9rU mnzlS2nmBqMuOCRBG8Qp7L4sz/KdhkI/uPddtIMfYlnkT1BqY15wwjfzt1i9Kjh6 M8sirAMCxmIfmgm2X6VDT6+M81WH4zUQvrO0nv42yctAwOili02YlhzA7eecVV4Z gZ+XMP+lY+sqYnS3dj3ZzZmUHXWq+vzOSPuBtgGWUmC4IUtSMYk32iLheEjlcbyl S6x+mUHLKSgII25wge+2fKyAPzs3zCTD4FaMlOfyGHUvdFiLqQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFA/o1ztGiLPasVjAOLHPaPJZoKPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMGQ1 MzdmMi1mODcxLTRmODEtYjIwYi1hZTA0NjEwYzUyMWQvYmMyMjVjN2EtMGRkZi0z YzA0LWI3ZWEtMjE1OGU2OTFhOWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzBkNTM3ZjItZjg3MS00ZjgxLWIy MGItYWUwNDYxMGM1MjFkLzMwZDUzN2YyLWY4NzEtNGY4MS1iMjBiLWFlMDQ2MTBj NTIxZC5jcmwwHwYDVR0jBBgwFoAUDtDEojmV9uViCgbKK8mEogXk5IQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMGQ1MzdmMi1mODcxLTRmODEtYjIwYi1hZTA0 NjEwYzUyMWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLSnwAwQC 2JIUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABAr8z+O1/cGgWs+fZ+nGUo+eI7VGxw8Mtogv0PoyQufc72h hMBGMnrZ5kus9lRik2ZuZqFI1EVKY4zUQTTLP/Rb8yO1mcxY8EACzq3WG7ofKuxp wGI8COO4grtrChICpf3ylbTRusBBQ5xlrbbWQnl7uUEQYDOcQ7X3YtWQGW5xH8Ao ya7NUybZUZF8E6WIsOgh980oDczv3qvsuha7sOiDDd4KFOfJbNwveie0y1hIhybC MhT2sthzH5U+HCVq/r0+BpOgFbl3TC8iC8ulPyVyQWOyqmuQLNQ9ILpN3qAWiIyC 9AWSA/DYE1PHxRWGEGPSKPc/T0uHZHZvaAQZp+Q= -----END CERTIFICATE-----Generated at Sat Apr 26 16:02:47 2025 by rpki-client