$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/387234de-b4e4-3e39-8944-a0d0a2cc9d75.roa File: 387234de-b4e4-3e39-8944-a0d0a2cc9d75.roa (raw, json) Hash identifier: nmy+TKZUyKkuczq1J6QBPUU6JSu7ay4ckgtBTCedtdI= Subject key identifier: 14:83:F5:5B:A9:85:C0:BB:1B:7C:B2:B4:48:89:89:D6:2B:28:76:3A Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658 Certificate serial: 010D0C9F4328584939E896A6E15A6E2F97AD9D30 Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/387234de-b4e4-3e39-8944-a0d0a2cc9d75.roa Signing time: Tue 18 Mar 2025 06:43:32 +0000 ROA not before: Tue 18 Mar 2025 06:43:32 +0000 ROA not after: Mon 16 Jun 2025 06:43:32 +0000 asID: 0 IP address blocks: 45.43.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:e8:96:a6:e1:5a:6e:2f:97:ad:9d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658 Validity Not Before: Mar 18 06:43:32 2025 GMT Not After : Jun 16 06:43:32 2025 GMT Subject: CN=1ee0c42e-374c-4c8f-b36e-d15680135c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7b:48:a9:94:f1:9e:fd:12:e5:6f:4c:1c:fb: ba:8b:b1:bc:84:56:f4:d8:e6:66:73:5a:f5:00:6d: ef:46:55:47:ce:4b:4a:0a:ab:23:31:34:8c:b4:de: 9c:8f:4a:84:8f:8a:e9:fa:db:d3:ac:73:ad:87:b0: 7c:f8:35:30:97:b4:8e:36:19:39:89:59:b7:64:2d: 81:4a:82:61:d7:ca:eb:b9:52:77:d9:fe:42:c8:ac: 11:a0:05:58:ec:37:ef:d0:f8:99:3f:40:bb:06:ab: 23:f5:3b:fc:41:8c:5c:27:d9:68:3f:cc:6b:3f:bc: cb:2b:34:c1:ea:e9:af:73:0b:67:cb:9d:ee:37:59: 73:3f:09:33:b2:c6:79:5a:93:81:af:82:fc:14:b5: 09:3d:df:51:28:1a:3b:27:cd:74:cf:f3:bf:54:45: a0:fd:c1:04:98:8a:d7:04:07:e6:ea:bc:4a:24:4c: e8:48:a5:05:a3:2b:25:f2:4d:2c:b3:c0:a9:f5:81: 6e:90:aa:c1:c7:1a:28:14:5c:57:e1:01:b6:44:fe: 3d:7d:44:b7:92:e8:42:77:52:fd:ce:24:ed:39:36: a2:51:04:ae:ab:8a:4b:87:ee:11:86:2d:20:8f:08: a8:67:aa:e6:b9:b1:a9:de:cf:f6:9a:e6:2b:80:fd: 53:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:83:F5:5B:A9:85:C0:BB:1B:7C:B2:B4:48:89:89:D6:2B:28:76:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/387234de-b4e4-3e39-8944-a0d0a2cc9d75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl X509v3 Authority Key Identifier: keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer sbgp-ipAddrBlock: critical IPv4: 45.43.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:47:48:dc:7b:17:de:7e:dc:6e:0e:59:87:45:ac:0b:44:95: fa:61:02:85:e2:5b:85:1b:fd:6c:e7:b6:72:1a:0c:0d:4f:37: 78:12:3c:a2:99:22:2e:6d:c5:f7:bd:e2:c1:c0:89:20:73:27: b8:c0:16:6d:fb:5c:55:4e:53:5e:ce:07:7d:20:0d:ed:94:b4: a5:23:fc:0f:25:9a:dc:52:e8:c9:dc:ac:c6:56:85:f0:f4:f1: 6f:ff:8f:22:85:92:53:1c:f7:40:78:cf:c8:4a:a5:6c:9b:b2: 06:54:b5:99:ba:fa:bf:a3:4b:0b:88:02:44:ef:1a:5c:55:96: ae:a9:8e:3d:6f:73:4c:c0:f9:24:ee:23:c9:fa:23:cf:9a:19: ae:14:99:db:cb:aa:af:c9:02:09:1e:e5:f3:b3:f8:3c:49:50: 59:9f:22:a3:25:4c:2a:e1:40:95:1c:b8:ab:83:b4:80:cc:1a: fb:d4:75:98:36:a8:fb:98:3b:95:d0:47:01:f2:67:fb:22:4a: 80:fb:d4:7b:cf:2e:d0:66:69:9d:79:7d:11:93:b4:f1:4e:1c: d0:46:10:25:62:4c:27:02:95:cb:f1:fc:f1:eb:d2:0e:77:2f: ea:3d:73:0b:2b:21:62:cc:47:05:92:90:67:36:76:f3:79:ec: 4d:a9:08:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk56Jam4VpuL5etnTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0 NjU4MB4XDTI1MDMxODA2NDMzMloXDTI1MDYxNjA2NDMzMlowLzEtMCsGA1UEAxMk MWVlMGM0MmUtMzc0Yy00YzhmLWIzNmUtZDE1NjgwMTM1YzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3tIqZTxnv0S5W9MHPu6i7G8hFb02OZmc1r1 AG3vRlVHzktKCqsjMTSMtN6cj0qEj4rp+tvTrHOth7B8+DUwl7SONhk5iVm3ZC2B SoJh18rruVJ32f5CyKwRoAVY7Dfv0PiZP0C7Bqsj9Tv8QYxcJ9loP8xrP7zLKzTB 6umvcwtny53uN1lzPwkzssZ5WpOBr4L8FLUJPd9RKBo7J810z/O/VEWg/cEEmIrX BAfm6rxKJEzoSKUFoysl8k0ss8Cp9YFukKrBxxooFFxX4QG2RP49fUS3kuhCd1L9 ziTtOTaiUQSuq4pLh+4Rhi0gjwioZ6rmubGp3s/2muYrgP1T1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSD9VuphcC7G3yytEiJidYrKHY6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvMzg3MjM0ZGUtYjRlNC0z ZTM5LTg5NDQtYTBkMGEyY2M5ZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz NzY1MzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhHSNx7F95+3G4OWYdFrAtElfphAoXiW4Ub/WzntnIaDA1PN3gSPKKZ Ii5txfe94sHAiSBzJ7jAFm37XFVOU17OB30gDe2UtKUj/A8lmtxS6MncrMZWhfD0 8W//jyKFklMc90B4z8hKpWybsgZUtZm6+r+jSwuIAkTvGlxVlq6pjj1vc0zA+STu I8n6I8+aGa4UmdvLqq/JAgke5fOz+DxJUFmfIqMlTCrhQJUcuKuDtIDMGvvUdZg2 qPuYO5XQRwHyZ/siSoD71HvPLtBmaZ15fRGTtPFOHNBGECViTCcClcvx/PHr0g53 L+o9cwsrIWLMRwWSkGc2dvN57E2pCCs= -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:20 2025 by rpki-client