$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/7aae7543-e378-3e55-a7c6-c2e088db3d3b.roa File: 7aae7543-e378-3e55-a7c6-c2e088db3d3b.roa (raw, json) Hash identifier: GjMoSBeOYkazF+lbaFZYHAvG1nXzwbIxAXKLEU5SN+c= Subject key identifier: D7:0F:4A:A3:50:A7:06:89:F2:D2:7B:62:87:1B:BB:19:11:9C:80:A9 Certificate issuer: /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Certificate serial: 010D0C9F43285848F22C711C9DFB3EEC2F9E01C0 Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/7aae7543-e378-3e55-a7c6-c2e088db3d3b.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 6206 IP address blocks: 45.89.48.0/22 maxlen: 24 45.92.16.0/22 maxlen: 24 107.178.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:71:1c:9d:fb:3e:ec:2f:9e:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=b5325f62-e841-48b0-83ab-be07cda098aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:f6:bf:50:fc:f2:62:8b:13:93:ef:2d:ce: 76:05:78:66:bc:d7:aa:69:a4:30:1d:04:d2:f8:7f: bc:b4:e9:34:fd:b2:a1:e9:34:13:86:78:42:b9:b4: 5e:d9:74:28:76:05:61:19:ca:53:f8:8e:fb:9c:f1: 11:4c:7e:2c:2b:9e:95:85:49:35:f2:19:8f:3f:bc: 13:96:cc:e6:92:52:ff:63:23:81:6d:d9:51:b5:1e: ce:f8:07:d6:fe:a3:d8:66:87:79:56:b7:fd:5f:e9: 48:07:92:a6:bd:8e:72:29:3f:cb:a4:7a:47:37:dc: 97:f8:de:82:7f:fb:99:2c:47:23:5c:64:fb:2b:8f: b8:89:48:0a:25:30:0f:b2:8d:f0:23:6b:dc:30:34: 74:43:6e:e3:31:db:d6:b0:26:bd:96:71:76:dd:d3: 30:ba:e1:0d:93:19:bf:8e:a3:03:c4:c3:1d:42:70: 4b:6f:22:25:00:d0:0e:3c:a2:90:0e:b5:81:cd:78: e7:5b:42:2c:28:16:9a:e6:e9:a9:d7:72:3a:a1:1b: 48:23:08:87:3d:43:4f:88:0f:27:c5:15:2f:59:73: a1:56:83:65:60:7b:83:03:c2:31:86:a3:84:04:16: 01:9c:67:77:99:fd:3b:70:6e:91:64:88:ec:47:4f: b0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0F:4A:A3:50:A7:06:89:F2:D2:7B:62:87:1B:BB:19:11:9C:80:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/7aae7543-e378-3e55-a7c6-c2e088db3d3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl X509v3 Authority Key Identifier: keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer sbgp-ipAddrBlock: critical IPv4: 45.89.48.0/22 45.92.16.0/22 107.178.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ba:9d:d2:80:41:33:d7:ec:a9:23:76:37:07:18:2e:c2:ea: 4f:32:01:6e:a3:ef:96:32:4c:a7:9a:9e:ff:c7:70:a9:11:fb: 31:1d:a5:93:33:9c:6a:80:aa:08:53:a4:ba:69:a4:1c:39:f7: 0a:07:36:69:cc:29:d2:4f:12:96:c6:f7:6b:3e:c6:70:27:62: eb:71:b7:3d:c1:ab:dd:d1:1e:3c:70:b3:2c:88:98:bd:87:ee: fe:21:c3:ed:e4:d5:92:39:c4:e7:a9:0a:22:df:15:2e:22:a4: 50:b4:4e:68:74:5d:f2:85:4e:00:9a:c4:2b:3f:9b:54:cd:9a: f0:5b:c4:8b:88:45:7c:d6:eb:04:cc:66:a9:2a:10:14:ae:4b: 45:e1:a2:d9:65:46:82:48:fc:07:9f:d5:c0:e2:b1:8c:b6:f9: 77:45:57:88:58:30:4a:0a:25:df:71:2d:b1:cd:fc:84:a3:cc: ce:0b:b2:48:c2:96:44:c1:b9:16:ed:90:fe:0e:3b:06:66:b6: f3:43:7c:58:e8:09:0d:fb:4b:e8:a2:db:47:f1:55:e7:8d:66: 28:23:a9:8d:12:1d:4b:97:9c:0c:f9:21:63:5a:c9:7d:24:fc: 02:65:3a:2c:43:d8:12:dd:aa:15:ca:df:70:11:33:39:d5:8f: 20:d3:2f:79 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEjyLHEcnfs+7C+eAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4 MWIyMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk YjUzMjVmNjItZTg0MS00OGIwLTgzYWItYmUwN2NkYTA5OGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq332v1D88mKLE5PvLc52BXhmvNeqaaQwHQTS +H+8tOk0/bKh6TQThnhCubRe2XQodgVhGcpT+I77nPERTH4sK56VhUk18hmPP7wT lszmklL/YyOBbdlRtR7O+AfW/qPYZod5Vrf9X+lIB5KmvY5yKT/LpHpHN9yX+N6C f/uZLEcjXGT7K4+4iUgKJTAPso3wI2vcMDR0Q27jMdvWsCa9lnF23dMwuuENkxm/ jqMDxMMdQnBLbyIlANAOPKKQDrWBzXjnW0IsKBaa5ump13I6oRtIIwiHPUNPiA8n xRUvWXOhVoNlYHuDA8IxhqOEBBYBnGd3mf07cG6RZIjsR0+wPwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNcPSqNQpwaJ8tJ7YocbuxkRnICpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFl OGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvN2FhZTc1NDMtZTM3OC0z ZTU1LWE3YzYtYzJlMDg4ZGIzZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDUxZThkOWYtZDllYS00NWNmLThm YjktMjgxMWU4NmI4MWIyLzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04ZmI5LTI4MTFlODZi ODFiMi5jcmwwHwYDVR0jBBgwFoAU8rMonBGkahiZAc+bjSQ+l9AEF8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODEx ZTg2YjgxYjIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLVkwAwQC LVwQAwQDa7IwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHK6ndKAQTPX7KkjdjcHGC7C6k8yAW6j75YyTKea nv/HcKkR+zEdpZMznGqAqghTpLpppBw59woHNmnMKdJPEpbG92s+xnAnYutxtz3B q93RHjxwsyyImL2H7v4hw+3k1ZI5xOepCiLfFS4ipFC0Tmh0XfKFTgCaxCs/m1TN mvBbxIuIRXzW6wTMZqkqEBSuS0XhotllRoJI/Aef1cDisYy2+XdFV4hYMEoKJd9x LbHN/ISjzM4LskjClkTBuRbtkP4OOwZmtvNDfFjoCQ37S+ii20fxVeeNZigjqY0S HUuXnAz5IWNayX0k/AJlOixD2BLdqhXK33ARMznVjyDTL3k= -----END CERTIFICATE-----Generated at Mon Apr 28 20:17:30 2025 by rpki-client