$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa File: 04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa (raw, json) Hash identifier: 4L5nOpKRJ6zlNUQx7471CcDLBW3dWEI1wh7xd5+nMHg= Subject key identifier: 72:13:55:DD:DA:04:14:CD:85:76:77:63:ED:CD:E1:E6:9D:E1:51:85 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F432858499C7D6941579BCE975A8EAE40 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa Signing time: Tue 22 Apr 2025 14:12:37 +0000 ROA not before: Tue 22 Apr 2025 14:12:37 +0000 ROA not after: Mon 21 Jul 2025 14:12:37 +0000 asID: 31715 IP address blocks: 209.145.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:7d:69:41:57:9b:ce:97:5a:8e:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Apr 22 14:12:37 2025 GMT Not After : Jul 21 14:12:37 2025 GMT Subject: CN=b0a5fa6b-9c01-43c9-886b-3eb76664d392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3c:cb:d3:e4:66:b6:c5:d9:9e:ea:c5:f6:4d: 68:b6:df:3f:a7:10:b9:55:f7:14:c1:c1:17:b3:7a: 7d:1c:1b:ec:8d:5e:31:73:22:84:c1:a0:12:fc:db: bf:9a:fc:ec:50:08:6e:da:24:94:65:33:e6:56:68: 68:b5:68:11:8e:b1:6f:9b:12:47:cd:09:94:07:8d: 61:f8:f5:88:63:47:9d:5f:92:bb:33:65:e1:12:e9: 75:96:8b:90:87:60:27:9b:dd:02:48:7e:20:d1:98: b9:16:d1:39:5f:3c:a4:26:c1:22:c4:58:f3:b5:25: ad:50:93:81:64:9b:13:72:07:8b:82:b8:40:97:fd: 40:e3:ad:d1:d6:db:79:32:e6:bc:1c:bb:5a:93:c6: a9:94:4d:8e:e3:cd:a4:fa:e6:90:80:83:54:6a:17: 8d:44:08:b6:2e:72:63:46:73:e6:4d:05:99:36:15: a3:43:5a:95:18:a4:ff:14:43:17:1f:29:07:a2:59: 81:77:bb:e5:e1:ca:8d:4b:23:2b:26:62:e7:04:6d: 85:71:e2:d8:d7:bf:27:e9:39:b8:d6:fd:01:0f:ee: 91:e1:34:5e:c1:9a:68:cf:53:f0:ff:71:4d:37:a1: c8:3e:24:2a:5c:ed:d6:6f:0a:4d:ee:47:e9:df:39: 7f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:13:55:DD:DA:04:14:CD:85:76:77:63:ED:CD:E1:E6:9D:E1:51:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.145.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:41:0a:e7:46:a9:98:eb:3b:da:7e:ee:7f:ad:f2:5a:dd:79: c4:95:f0:bc:46:34:e1:4f:34:19:fe:31:35:cf:e0:67:93:b3: 96:60:4e:a7:3d:01:54:37:ce:fd:4d:f7:2b:78:95:68:57:a6: d7:87:37:42:dd:f2:5d:16:05:c4:7d:cc:3d:74:44:6e:c3:ce: ce:b8:d5:1d:c4:99:4f:43:a3:f9:ef:0a:ae:8f:a9:ed:2f:91: e0:66:af:de:7c:ad:17:17:04:da:48:a1:56:03:39:c1:10:fa: 12:a1:12:1e:55:db:46:33:88:85:50:77:bc:65:64:5e:4d:ce: ea:34:96:cd:be:e0:ec:91:3d:a1:ee:75:13:62:7f:23:eb:09: 15:ee:88:da:d1:7e:37:f0:c9:d7:8e:83:3f:2f:8e:05:d0:f6: 83:43:9c:26:fb:aa:ef:90:db:2a:8b:9f:63:72:e5:e5:b1:95: eb:5f:75:7d:7a:8d:0e:91:9d:e4:71:07:cf:40:ad:aa:43:f9: 47:e2:5a:c1:c8:03:9a:a0:60:4c:44:50:4b:28:a3:9d:88:73: d8:ea:1f:d5:32:c1:54:8e:68:64:e9:ed:fd:00:ca:88:68:7f: a2:57:ba:c9:d1:21:f8:90:eb:c6:cd:50:ad:f7:c0:b5:ab:a0: 93:8d:17:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcfWlBV5vOl1qOrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDQyMjE0MTIzN1oXDTI1MDcyMTE0MTIzN1owLzEtMCsGA1UEAxMk YjBhNWZhNmItOWMwMS00M2M5LTg4NmItM2ViNzY2NjRkMzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzzL0+RmtsXZnurF9k1ott8/pxC5VfcUwcEX s3p9HBvsjV4xcyKEwaAS/Nu/mvzsUAhu2iSUZTPmVmhotWgRjrFvmxJHzQmUB41h +PWIY0edX5K7M2XhEul1louQh2Anm90CSH4g0Zi5FtE5XzykJsEixFjztSWtUJOB ZJsTcgeLgrhAl/1A463R1tt5Mua8HLtak8aplE2O482k+uaQgINUaheNRAi2LnJj RnPmTQWZNhWjQ1qVGKT/FEMXHykHolmBd7vl4cqNSyMrJmLnBG2FceLY178n6Tm4 1v0BD+6R4TRewZpoz1Pw/3FNN6HIPiQqXO3WbwpN7kfp3zl/swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHITVd3aBBTNhXZ3Y+3N4ead4VGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMDRhMzhkMzItNWMyYS0z NmVmLTk2YzAtY2Y1NGFiZWQ1YTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZEuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1BCudGqZjrO9p+7n+t8lrdecSV8LxGNOFPNBn+MTXP4GeTs5ZgTqc9 AVQ3zv1N9yt4lWhXpteHN0Ld8l0WBcR9zD10RG7Dzs641R3EmU9Do/nvCq6Pqe0v keBmr958rRcXBNpIoVYDOcEQ+hKhEh5V20YziIVQd7xlZF5Nzuo0ls2+4OyRPaHu dRNifyPrCRXuiNrRfjfwydeOgz8vjgXQ9oNDnCb7qu+Q2yqLn2Ny5eWxletfdX16 jQ6RneRxB89ArapD+UfiWsHIA5qgYExEUEsoo52Ic9jqH9UywVSOaGTp7f0Ayoho f6JXusnRIfiQ68bNUK33wLWroJONF8s= -----END CERTIFICATE-----Generated at Sun Apr 27 12:20:39 2025 by rpki-client