$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa File: ceb06be8-602c-3b37-8ee5-ecc299990815.roa (raw, json) Hash identifier: OBdQeaU1iF4JMEXbhkxzTTw7eypnv4A5HH3pIZ3JtCg= Subject key identifier: 7E:77:22:89:21:B2:A0:80:4E:44:1E:0B:F1:A3:1B:96:9D:73:76:5E Certificate issuer: /CN=52fbdac8-20c0-4da4-8654-27b4bf592930 Certificate serial: 010D0C9F432858499DBF3188DB541EF325306780 Authority key identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 394491 IP address blocks: 45.45.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:31:88:db:54:1e:f3:25:30:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52fbdac8-20c0-4da4-8654-27b4bf592930 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=b8cf4e0d-345b-47c7-84f9-6e4788472580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:32:1b:dc:1e:d1:f3:c7:0c:de:35:83:cf:1a: 44:e4:a0:06:ab:0d:65:37:d5:45:55:c3:6a:57:9c: bb:c0:5c:3a:b8:df:71:39:a8:8b:ad:b0:52:63:68: c5:50:1f:87:b4:70:81:59:93:35:d0:fe:30:86:c0: ca:08:e1:71:a6:3b:19:4d:60:4d:ff:78:f7:00:95: 2f:57:a9:9e:81:f8:7d:af:83:96:4e:d9:0f:b1:00: 18:e0:7c:57:43:9c:1b:72:c3:f2:fc:fe:1e:cb:eb: 4f:39:0b:e2:75:82:76:4a:10:16:9a:07:0e:96:85: 8c:a8:77:90:40:68:40:d9:c0:41:7a:c6:2a:f1:66: 75:3c:de:58:cf:8a:7e:b8:1d:f9:11:e1:70:bf:9f: ef:0a:c3:40:ea:5a:c6:5b:eb:6e:15:f5:6e:a0:d8: b5:a4:4a:3e:75:d5:c6:ae:d9:7c:0a:7a:65:de:ba: 42:2d:66:b8:50:8f:31:e1:1a:29:8e:8d:8b:01:05: a8:96:98:33:6b:d5:21:f9:9f:0b:75:54:ed:6f:20: 3b:41:c8:23:2d:a5:28:1e:a9:0c:eb:79:3d:57:f5: a3:fe:18:a5:75:99:47:9b:17:e0:27:2b:66:e2:8b: f1:4e:48:6d:65:cd:e5:4e:b1:ff:10:1a:96:af:36: 14:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:77:22:89:21:B2:A0:80:4E:44:1E:0B:F1:A3:1B:96:9D:73:76:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl X509v3 Authority Key Identifier: keyid:83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer sbgp-ipAddrBlock: critical IPv4: 45.45.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:ba:8a:bd:c2:87:51:11:e0:b0:af:15:66:56:37:98:17:ba: 7a:71:24:1b:02:77:23:9a:cc:e0:f3:ef:35:be:15:fa:07:33: e1:bb:68:76:81:1e:a2:a1:d9:e6:b3:e5:8e:65:da:15:3d:56: 7b:e4:14:ff:ab:af:64:63:bc:ac:2e:cc:0e:f2:51:2d:15:c0: 10:d4:96:fd:76:90:96:27:0a:4b:cd:ab:14:18:c3:b3:de:6c: 4d:60:53:ec:25:95:be:0f:63:8f:21:c5:4f:92:4c:c2:1e:ca: c1:cd:79:79:c6:bd:f5:99:d1:c0:5a:00:94:30:9d:31:b3:bd: 7f:36:00:d9:75:09:89:66:44:19:c1:b9:c7:a5:fe:5e:dc:b6: cb:12:af:56:ef:c4:e1:12:82:6e:d0:d2:86:af:d5:a0:e9:cb: 1a:dd:34:83:4f:53:2c:3f:53:07:83:a2:8a:ea:4c:1b:18:86: 07:fc:b5:7b:68:33:51:43:69:02:a1:6a:2b:50:38:db:c4:25: f5:49:a0:f3:21:b0:9d:c4:5d:59:70:df:86:28:6c:d7:21:a0: 0b:df:82:4e:cc:91:02:62:7b:4a:6e:7a:69:00:cb:fb:bb:00: 27:dc:b0:14:cf:e6:31:f5:bf:c0:83:e6:2e:2f:9d:cc:1c:8a: ed:5e:77:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzGI21Qe8yUwZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJmYmRhYzgtMjBjMC00ZGE0LTg2NTQtMjdiNGJmNTky OTMwMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YjhjZjRlMGQtMzQ1Yi00N2M3LTg0ZjktNmU0Nzg4NDcyNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDIb3B7R88cM3jWDzxpE5KAGqw1lN9VFVcNq V5y7wFw6uN9xOaiLrbBSY2jFUB+HtHCBWZM10P4whsDKCOFxpjsZTWBN/3j3AJUv V6megfh9r4OWTtkPsQAY4HxXQ5wbcsPy/P4ey+tPOQvidYJ2ShAWmgcOloWMqHeQ QGhA2cBBesYq8WZ1PN5Yz4p+uB35EeFwv5/vCsNA6lrGW+tuFfVuoNi1pEo+ddXG rtl8Cnpl3rpCLWa4UI8x4Ropjo2LAQWolpgza9Uh+Z8LdVTtbyA7QcgjLaUoHqkM 63k9V/Wj/hildZlHmxfgJytm4ovxTkhtZc3lTrH/EBqWrzYUaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH53IokhsqCATkQeC/GjG5adc3ZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81MmZi ZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0YmY1OTI5MzAvY2ViMDZiZTgtNjAyYy0z YjM3LThlZTUtZWNjMjk5OTkwODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNTJmYmRhYzgtMjBjMC00ZGE0LTg2 NTQtMjdiNGJmNTkyOTMwLzUyZmJkYWM4LTIwYzAtNGRhNC04NjU0LTI3YjRiZjU5 MjkzMC5jcmwwHwYDVR0jBBgwFoAUg/WmWf8elpbI5bS53/Y9NykwpHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81MmZiZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0 YmY1OTI5MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK26ir3Ch1ER4LCvFWZWN5gXunpxJBsCdyOazODz7zW+FfoHM+G7aHaB HqKh2eaz5Y5l2hU9VnvkFP+rr2RjvKwuzA7yUS0VwBDUlv12kJYnCkvNqxQYw7Pe bE1gU+wllb4PY48hxU+STMIeysHNeXnGvfWZ0cBaAJQwnTGzvX82ANl1CYlmRBnB ucel/l7ctssSr1bvxOESgm7Q0oav1aDpyxrdNINPUyw/UweDoorqTBsYhgf8tXto M1FDaQKhaitQONvEJfVJoPMhsJ3EXVlw34YobNchoAvfgk7MkQJie0puemkAy/u7 ACfcsBTP5jH1v8CD5i4vncwciu1ed3w= -----END CERTIFICATE-----Generated at Mon Apr 28 01:15:31 2025 by rpki-client