$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/f14949f5-5a99-3643-87c7-29825b35b0f2.roa File: f14949f5-5a99-3643-87c7-29825b35b0f2.roa (raw, json) Hash identifier: VhvL2bFTD/H+IfuQbEM/hAKqDbPOWneNE8jX44LK8Lo= Subject key identifier: 7C:DC:0E:52:27:62:95:58:C4:7C:FC:27:C5:EA:D9:33:80:4C:A4:F8 Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F43285849393E79A2FC5F87EC0333FC40 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/f14949f5-5a99-3643-87c7-29825b35b0f2.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 6079 IP address blocks: 45.45.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:79:a2:fc:5f:87:ec:03:33:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=1e7b0db3-7b01-44d6-9121-81db385f7545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:be:14:92:63:1b:b5:3d:71:3e:8a:05:4d:a5: 63:51:0c:e7:6e:de:1d:f7:e0:b0:ef:72:46:6b:c3: 87:34:ec:af:dd:0d:c4:5c:c7:f2:cd:09:87:b2:d0: b2:da:0c:ec:3e:c2:58:38:19:ec:34:cb:da:56:0d: ef:6d:8a:49:19:6a:c0:eb:ea:12:63:44:e9:cc:b7: fe:11:96:91:54:84:fa:9b:e3:69:c6:ae:16:fb:09: bd:58:d9:e1:c0:2a:75:84:e7:64:e4:92:1c:3c:55: 28:d4:70:1d:b2:0e:38:4c:16:01:e7:9e:3b:5b:ba: 39:78:a6:63:cb:f4:86:be:98:fc:be:c1:86:47:d0: 83:47:6c:dc:de:b2:1d:13:34:7b:ef:fc:b4:17:63: eb:ca:1a:b0:2b:f3:66:ee:85:b7:20:b2:29:45:88: 1c:01:48:5e:57:40:b8:9f:86:cb:e0:7b:f5:09:fc: fd:9a:fd:6e:05:0d:db:78:32:94:60:8c:d7:c1:b4: 86:62:cf:ab:83:13:56:aa:7d:6e:95:2b:17:29:87: 93:d8:97:60:ab:61:9c:34:26:71:08:92:5b:dc:59: 41:64:a2:11:e8:9b:56:d7:91:c8:3b:09:87:7b:86: 3a:1c:24:46:63:82:7b:b7:b4:13:3d:26:71:e1:0c: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DC:0E:52:27:62:95:58:C4:7C:FC:27:C5:EA:D9:33:80:4C:A4:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/f14949f5-5a99-3643-87c7-29825b35b0f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 45.45.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:80:10:75:f6:f3:69:d5:f6:8f:49:9c:13:6d:25:3a:f8:a3: 35:bc:48:af:d8:17:c5:60:49:7a:e4:df:0f:8d:e8:db:3d:71: 7c:76:5b:5c:0b:5f:16:c6:19:30:ef:2a:a4:b7:33:ad:70:1a: b5:a9:5e:08:f9:ab:6a:a2:38:a9:3f:94:52:df:44:69:b4:07: 47:ec:d9:e2:bc:10:b7:c9:a2:3b:f7:38:9c:3d:22:e0:49:03: 98:0e:55:58:d7:ef:51:92:f5:8b:5f:87:70:f1:11:3c:5f:04: 18:b2:45:db:4c:8e:9d:3d:89:5e:fd:ac:8f:34:47:ab:2c:2c: 80:cf:02:57:7a:a4:82:79:fc:14:4b:03:61:1a:ce:ad:d6:9d: 6b:d2:74:a5:c3:b6:3e:d6:cb:e9:7a:2e:c2:62:f2:bc:b2:ea: 9c:4d:31:32:a1:b8:e3:6f:57:19:f0:ad:4e:e4:ba:01:f4:03: 5a:c7:b7:6e:26:f5:b9:b1:15:53:5d:e8:58:93:be:06:f5:0b: 13:31:e1:35:ca:67:a5:c8:82:f2:31:bd:29:d2:a8:8b:93:1a: 35:32:e8:bf:31:d1:72:32:4f:9a:97:69:77:31:51:31:1b:af: 49:4e:45:9e:2b:41:b7:ba:38:b5:98:36:ff:57:53:97:69:19: fa:84:80:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5Pnmi/F+H7AMz/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MWU3YjBkYjMtN2IwMS00NGQ2LTkxMjEtODFkYjM4NWY3NTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L4UkmMbtT1xPooFTaVjUQznbt4d9+Cw73JG a8OHNOyv3Q3EXMfyzQmHstCy2gzsPsJYOBnsNMvaVg3vbYpJGWrA6+oSY0TpzLf+ EZaRVIT6m+Npxq4W+wm9WNnhwCp1hOdk5JIcPFUo1HAdsg44TBYB5547W7o5eKZj y/SGvpj8vsGGR9CDR2zc3rIdEzR77/y0F2PryhqwK/Nm7oW3ILIpRYgcAUheV0C4 n4bL4Hv1Cfz9mv1uBQ3beDKUYIzXwbSGYs+rgxNWqn1ulSsXKYeT2Jdgq2GcNCZx CJJb3FlBZKIR6JtW15HIOwmHe4Y6HCRGY4J7t7QTPSZx4QzHPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzcDlInYpVYxHz8J8Xq2TOATKT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvZjE0OTQ5ZjUtNWE5OS0z NjQzLTg3YzctMjk4MjViMzViMGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeAEHX282nV9o9JnBNtJTr4ozW8SK/YF8VgSXrk3w+N6Ns9cXx2W1wL XxbGGTDvKqS3M61wGrWpXgj5q2qiOKk/lFLfRGm0B0fs2eK8ELfJojv3OJw9IuBJ A5gOVVjX71GS9Ytfh3DxETxfBBiyRdtMjp09iV79rI80R6ssLIDPAld6pIJ5/BRL A2Eazq3WnWvSdKXDtj7Wy+l6LsJi8ryy6pxNMTKhuONvVxnwrU7kugH0A1rHt24m 9bmxFVNd6FiTvgb1CxMx4TXKZ6XIgvIxvSnSqIuTGjUy6L8x0XIyT5qXaXcxUTEb r0lORZ4rQbe6OLWYNv9XU5dpGfqEgAU= -----END CERTIFICATE-----Generated at Sun Apr 27 05:40:43 2025 by rpki-client