$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/403d2a0e-ce3d-3142-bfda-3420120bd555.roa File: 403d2a0e-ce3d-3142-bfda-3420120bd555.roa (raw, json) Hash identifier: V3uvzUtj0GvxQeTJHdjgH9lDHEGOFS0TYWBDFSc9OrI= Subject key identifier: 58:8F:08:DD:34:7F:B7:C3:E0:E7:A6:CE:5C:27:39:FA:26:BA:3C:23 Certificate issuer: /CN=fe1d4594-94df-4fba-9cf4-2280ebebbbbd Certificate serial: 010D0C9F432858498C014D16441D4E0906E45140 Authority key identifier: 43:2E:78:72:CE:A8:A6:2D:95:3B:7E:F9:AC:BF:89:F5:4C:D8:4D:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/403d2a0e-ce3d-3142-bfda-3420120bd555.roa Signing time: Wed 16 Apr 2025 16:29:37 +0000 ROA not before: Wed 16 Apr 2025 16:29:37 +0000 ROA not after: Tue 15 Jul 2025 16:29:37 +0000 asID: 399790 IP address blocks: 45.150.58.0/24 maxlen: 24 68.68.219.0/24 maxlen: 24 199.34.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/fe1d4594-94df-4fba-9cf4-2280ebebbbbd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/fe1d4594-94df-4fba-9cf4-2280ebebbbbd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:01:4d:16:44:1d:4e:09:06:e4:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe1d4594-94df-4fba-9cf4-2280ebebbbbd Validity Not Before: Apr 16 16:29:37 2025 GMT Not After : Jul 15 16:29:37 2025 GMT Subject: CN=daa66c87-4e8f-4036-8c46-a570996b2904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:04:21:04:9c:78:2f:f8:1c:23:91:c4:22: 9b:9b:26:c2:c3:8d:db:2d:06:89:62:58:6a:93:4c: 7e:eb:86:79:65:cc:10:ba:3f:4f:40:1f:b8:1a:36: 60:94:62:ec:c9:6e:a4:f9:f7:2f:6e:18:e7:cc:05: e0:75:83:35:7b:13:3c:16:54:23:01:1e:86:25:af: d7:92:8c:19:00:ff:6f:35:f5:d4:fd:f8:06:38:ec: a3:6b:71:93:1a:ee:3c:8f:56:ca:4c:2f:c2:bb:c5: 7a:ca:d6:8b:e1:88:6b:9d:c6:f9:14:9c:ad:9f:a1: 73:57:aa:d1:b5:d9:a2:3a:c4:47:5a:25:46:e3:23: e2:4c:0a:67:fb:90:51:a4:1f:06:66:e9:3e:3a:df: bb:17:0d:7d:36:f0:39:40:8a:14:81:d2:de:49:a4: f6:fb:f0:cd:03:7c:d3:ef:02:94:69:b3:4d:8c:4d: 79:c0:bb:0e:ef:1b:9c:c6:ea:f2:33:02:78:86:c7: 7c:b8:9d:e7:0b:4f:54:50:68:de:79:7a:73:17:5a: c8:0f:dc:5e:0b:67:2c:83:5f:24:3e:27:bf:90:c9: f9:d9:b3:41:ad:db:6b:4d:d5:cc:cb:d1:52:cd:43: ed:d6:c7:a7:90:e3:c4:72:e9:c3:32:54:4d:62:42: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8F:08:DD:34:7F:B7:C3:E0:E7:A6:CE:5C:27:39:FA:26:BA:3C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/403d2a0e-ce3d-3142-bfda-3420120bd555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/fe1d4594-94df-4fba-9cf4-2280ebebbbbd.crl X509v3 Authority Key Identifier: keyid:43:2E:78:72:CE:A8:A6:2D:95:3B:7E:F9:AC:BF:89:F5:4C:D8:4D:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd.cer sbgp-ipAddrBlock: critical IPv4: 45.150.58.0/24 68.68.219.0/24 199.34.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0c:bf:e7:ac:f5:f4:1f:1b:d3:fc:1a:08:ee:20:35:96:3d: 0b:c2:f8:d7:50:94:8f:bf:46:0e:47:2c:ba:5a:a8:6a:e6:bc: 71:7d:04:71:69:20:be:b8:4f:7b:61:01:5c:b2:fe:ee:c0:e7: cb:74:d9:b6:6e:05:44:71:f2:17:b7:42:b4:0e:5f:69:61:ac: 32:4a:41:d6:d2:62:6e:70:f6:b6:a2:78:91:e7:f9:46:5d:ef: c3:c5:b5:d5:7a:85:b7:a9:c6:84:09:69:e6:7b:bb:9a:56:6e: 33:f0:fc:5a:e1:3d:42:cb:f6:eb:cf:20:b7:96:9c:94:8d:e8: b2:97:97:60:d4:dd:96:58:b3:07:fb:f0:da:49:3e:b3:6f:cb: ea:f0:ff:9e:96:f0:8b:5b:55:f2:1f:ff:4c:da:75:24:75:e0: c5:35:97:94:76:b8:9e:89:94:29:3d:54:30:3c:f2:fa:fb:5f: 79:bb:cc:e8:3a:09:05:49:a2:f5:c2:f8:11:56:d6:bd:ba:10: aa:70:fe:97:a8:27:1c:2b:03:1a:a4:59:4c:63:65:67:76:b2: b4:74:02:01:5a:51:d2:41:93:58:28:ca:8f:78:ae:08:46:2d: 0c:ab:bb:8a:3d:ce:26:28:87:a4:ea:85:2d:04:ab:c5:46:95: 0c:be:a1:42 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEmMAU0WRB1OCQbkUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmUxZDQ1OTQtOTRkZi00ZmJhLTljZjQtMjI4MGViZWJi YmJkMB4XDTI1MDQxNjE2MjkzN1oXDTI1MDcxNTE2MjkzN1owLzEtMCsGA1UEAxMk ZGFhNjZjODctNGU4Zi00MDM2LThjNDYtYTU3MDk5NmIyOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPUEIQSceC/4HCORxCKbmybCw43bLQaJYlhq k0x+64Z5ZcwQuj9PQB+4GjZglGLsyW6k+fcvbhjnzAXgdYM1exM8FlQjAR6GJa/X kowZAP9vNfXU/fgGOOyja3GTGu48j1bKTC/Cu8V6ytaL4Yhrncb5FJytn6FzV6rR tdmiOsRHWiVG4yPiTApn+5BRpB8GZuk+Ot+7Fw19NvA5QIoUgdLeSaT2+/DNA3zT 7wKUabNNjE15wLsO7xucxuryMwJ4hsd8uJ3nC09UUGjeeXpzF1rID9xeC2csg18k Pie/kMn52bNBrdtrTdXMy9FSzUPt1senkOPEcunDMlRNYkKXbQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFiPCN00f7fD4OemzlwnOfomujwjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mZTFk NDU5NC05NGRmLTRmYmEtOWNmNC0yMjgwZWJlYmJiYmQvNDAzZDJhMGUtY2UzZC0z MTQyLWJmZGEtMzQyMDEyMGJkNTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZmUxZDQ1OTQtOTRkZi00ZmJhLTlj ZjQtMjI4MGViZWJiYmJkL2ZlMWQ0NTk0LTk0ZGYtNGZiYS05Y2Y0LTIyODBlYmVi YmJiZC5jcmwwHwYDVR0jBBgwFoAUQy54cs6opi2VO375rL+J9UzYTbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mZTFkNDU5NC05NGRmLTRmYmEtOWNmNC0yMjgw ZWJlYmJiYmQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZY6AwQA RETbAwQAxyJgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEAMv+es9fQfG9P8GgjuIDWWPQvC+NdQlI+/Rg5H LLpaqGrmvHF9BHFpIL64T3thAVyy/u7A58t02bZuBURx8he3QrQOX2lhrDJKQdbS Ym5w9raieJHn+UZd78PFtdV6hbepxoQJaeZ7u5pWbjPw/FrhPULL9uvPILeWnJSN 6LKXl2DU3ZZYswf78NpJPrNvy+rw/56W8ItbVfIf/0zadSR14MU1l5R2uJ6JlCk9 VDA88vr7X3m7zOg6CQVJovXC+BFW1r26EKpw/peoJxwrAxqkWUxjZWd2srR0AgFa UdJBk1goyo94rghGLQyru4o9ziYoh6TqhS0Eq8VGlQy+oUI= -----END CERTIFICATE-----Generated at Tue Apr 29 16:20:31 2025 by rpki-client