$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa File: 46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa (raw, json) Hash identifier: CMHrtrFbrTxrhFEVggcbZwdCEN2bfSU1XM4JI/HKn6g= Subject key identifier: 49:42:B5:E3:DD:1F:81:CA:C8:3A:ED:CC:D8:11:3F:3D:72:78:20:D2 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584921840B93332DF4A25B62A580 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 9009 IP address blocks: 45.33.152.0/24 maxlen: 24 45.33.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:0b:93:33:2d:f4:a2:5b:62:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=da510a02-b4e9-4c76-9263-52c39e9829e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6b:6a:25:3a:ec:e5:19:55:69:58:a9:83:32: 47:8d:ca:d0:a2:78:4e:3c:8d:83:00:53:25:21:7c: d2:30:3e:cc:ba:dd:db:6d:dc:fd:21:7a:36:c9:9b: 00:f0:c3:4d:b6:c1:61:70:5d:70:4c:c3:a3:94:62: f9:45:54:24:b0:ee:79:f5:5b:1b:d9:82:88:e8:67: 1b:48:95:3e:9b:a2:d1:8c:b5:49:57:cc:b5:52:13: 77:70:d7:1e:17:ee:62:0e:37:42:8c:b4:82:74:2b: 46:d0:91:71:e1:01:94:50:53:e7:e5:b3:d9:40:da: fa:7e:55:f9:9b:9d:ef:d0:46:b3:ff:db:99:05:b9: 0d:6e:cf:ce:40:fe:fb:a4:ea:66:8b:ce:05:f7:e1: d7:82:ab:55:d5:45:9a:1a:e5:39:c4:6c:76:60:d5: 31:39:6b:9a:10:a4:f0:a9:88:ba:61:3b:ec:b6:13: 24:aa:6f:1d:85:e3:5d:4b:43:08:09:d2:6a:09:da: 9f:7a:e8:8e:46:b4:df:28:fd:02:68:70:66:bd:21: f1:b6:a9:d2:3f:30:94:8a:75:67:c6:bf:c7:c0:90: 14:da:fe:c4:13:62:87:93:6c:06:83:cd:ac:d0:58: 10:e4:c4:4a:a7:32:1e:fb:4d:8a:89:4b:84:d3:4b: 3f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:42:B5:E3:DD:1F:81:CA:C8:3A:ED:CC:D8:11:3F:3D:72:78:20:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 45.33.152.0/24 45.33.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:db:3c:db:ea:1c:9c:97:60:db:9d:85:bc:86:ac:f7:b7:ec: a5:63:9f:de:c5:c2:f3:ff:5d:19:33:81:ae:7b:f6:00:42:85: 5a:e8:da:40:49:21:16:09:14:8c:c7:9b:73:4d:21:cb:75:43: 0c:e6:1f:05:1b:9c:de:fa:57:c3:84:9d:4a:60:eb:e7:de:b0: 25:4a:b4:81:0e:e0:28:01:a2:79:18:f2:d0:99:33:87:d3:38: b0:d4:3d:a7:51:b8:0c:1c:66:e1:21:93:1b:ca:93:c2:a2:db: 93:7b:f4:03:59:e8:07:5b:b3:90:26:8f:de:c2:6c:d4:3c:e6: 41:1b:0b:5c:14:ff:1e:96:56:f8:c4:17:44:39:89:dc:3c:63: 2b:27:72:30:2c:39:be:70:e4:0d:6b:b8:d6:e6:29:d5:18:ea: 6d:a4:80:f3:04:00:39:8f:25:39:bb:b7:22:1c:92:d6:9d:b3: 66:80:0d:01:90:00:64:6a:a9:35:54:41:8b:f7:7a:44:fa:b4: f1:68:a9:fa:6c:b8:b3:99:66:1e:33:4b:c5:c3:12:fd:04:6c: 37:35:b2:df:c2:6d:d4:b1:15:3f:e5:b2:7c:ff:fb:e3:ce:20: 58:d2:b3:87:82:44:e4:a2:07:fc:dd:87:5b:a5:ee:68:46:f1: d5:0f:9b:c4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkhhAuTMy30oltipYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZGE1MTBhMDItYjRlOS00Yzc2LTkyNjMtNTJjMzllOTgyOWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGtqJTrs5RlVaVipgzJHjcrQonhOPI2DAFMl IXzSMD7Mut3bbdz9IXo2yZsA8MNNtsFhcF1wTMOjlGL5RVQksO559Vsb2YKI6Gcb SJU+m6LRjLVJV8y1UhN3cNceF+5iDjdCjLSCdCtG0JFx4QGUUFPn5bPZQNr6flX5 m53v0Eaz/9uZBbkNbs/OQP77pOpmi84F9+HXgqtV1UWaGuU5xGx2YNUxOWuaEKTw qYi6YTvsthMkqm8dheNdS0MICdJqCdqfeuiORrTfKP0CaHBmvSHxtqnSPzCUinVn xr/HwJAU2v7EE2KHk2wGg82s0FgQ5MRKpzIe+02KiUuE00s/GwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFElCtePdH4HKyDrtzNgRPz1yeCDSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNDZjMWE3YzItYjNkNi0z ZTFiLWEwYjEtNWM5N2I0YzM2NmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALSGYAwQA LSGfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGzbPNvqHJyXYNudhbyGrPe37KVjn97FwvP/XRkzga579gBC hVro2kBJIRYJFIzHm3NNIct1QwzmHwUbnN76V8OEnUpg6+fesCVKtIEO4CgBonkY 8tCZM4fTOLDUPadRuAwcZuEhkxvKk8Ki25N79ANZ6Adbs5Amj97CbNQ85kEbC1wU /x6WVvjEF0Q5idw8YysncjAsOb5w5A1ruNbmKdUY6m2kgPMEADmPJTm7tyIcktad s2aADQGQAGRqqTVUQYv3ekT6tPFoqfpsuLOZZh4zS8XDEv0EbDc1st/CbdSxFT/l snz/++POIFjSs4eCROSiB/zdh1ul7mhG8dUPm8Q= -----END CERTIFICATE-----Generated at Sat Apr 26 15:52:31 2025 by rpki-client