$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/68fd729e-0ae2-3b6f-a1f6-6996eef1c4d0.roa File: 68fd729e-0ae2-3b6f-a1f6-6996eef1c4d0.roa (raw, json) Hash identifier: 8gwm1Tiq5b0pEUHxuh6NPGzs3C7ydsB1JsQgLY7boGM= Subject key identifier: CA:26:94:91:1B:AA:78:ED:46:23:41:65:AD:E7:46:8B:C0:4D:EC:C3 Certificate issuer: /CN=45fe4043-69f6-4f38-9003-897cd909fb3b Certificate serial: 010D0C9F4328584967B06E09A126727D6D4BB900 Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/68fd729e-0ae2-3b6f-a1f6-6996eef1c4d0.roa Signing time: Thu 03 Apr 2025 16:17:34 +0000 ROA not before: Thu 03 Apr 2025 16:17:34 +0000 ROA not after: Wed 02 Jul 2025 16:17:34 +0000 asID: 21534 IP address blocks: 135.84.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:b0:6e:09:a1:26:72:7d:6d:4b:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b Validity Not Before: Apr 3 16:17:34 2025 GMT Not After : Jul 2 16:17:34 2025 GMT Subject: CN=c3ddc5a7-511f-4e4a-ba9e-10a9ac546607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:74:e0:f9:dc:6b:0b:03:bf:14:a4:f0:c2:43: fb:69:db:60:b8:4f:fb:23:05:24:70:5a:2e:cd:57: 23:e5:24:03:e7:92:cf:56:da:26:1b:a0:a8:b0:77: 5b:63:2d:78:21:1f:9e:e4:12:eb:0c:1f:85:20:66: 76:69:6a:13:5e:2e:c4:99:75:ed:14:a6:26:22:25: db:94:37:5b:55:5f:70:aa:44:37:08:46:17:a2:9e: d2:65:eb:c6:18:f0:8f:c3:30:63:9b:07:84:c6:c2: 15:76:b9:5b:f4:ee:75:d1:23:00:d7:72:0a:e4:29: ed:33:1d:7c:d0:1b:1d:3e:29:ab:85:58:82:4b:d5: d5:7f:ed:da:be:ef:38:c6:4f:e8:13:cb:10:0e:0d: bf:06:5d:28:4c:33:40:b8:61:e2:ea:36:75:19:f0: e3:0d:0d:04:19:be:1e:19:38:6d:3b:0d:c7:d1:eb: 37:04:18:f4:9b:1e:8d:a2:e8:35:a7:e6:a2:82:1e: 07:1f:29:80:f7:9d:65:6f:ab:3f:de:71:e9:2b:e8: e1:84:16:b7:7c:b1:87:d3:b6:c6:b6:7e:c6:32:fc: d2:79:56:4c:df:74:c1:70:df:6b:d9:cf:45:ad:1e: 80:6f:b2:6a:63:d5:73:a1:a7:8b:37:11:4e:a7:40: cb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:26:94:91:1B:AA:78:ED:46:23:41:65:AD:E7:46:8B:C0:4D:EC:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/68fd729e-0ae2-3b6f-a1f6-6996eef1c4d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl X509v3 Authority Key Identifier: keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer sbgp-ipAddrBlock: critical IPv4: 135.84.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:01:fb:0d:8e:9d:bf:a7:47:99:40:5d:90:e7:f4:28:e1:ec: b6:e8:5d:f1:47:70:12:a3:1f:4a:34:95:2c:c2:a0:65:60:b0: 73:67:5a:a1:04:d9:f4:1f:fb:ad:58:0a:d3:e5:60:fa:b4:d2: 3e:ef:fd:48:f7:cc:08:77:31:5c:c7:16:e4:b4:d5:82:3d:6f: 05:13:8c:73:e5:79:c4:ca:3c:75:49:fd:1b:f9:f5:7e:6b:07: 0a:a2:df:01:c0:23:03:f0:88:9d:73:2b:70:26:1f:3e:8d:a7: 81:29:78:b8:60:8c:1b:5f:d9:f7:fd:34:c0:66:10:24:09:a2: 43:ef:6c:c4:93:27:a8:a1:72:0d:1d:30:0f:76:68:b1:54:e9: a2:5c:b2:d0:57:58:f6:62:a1:b2:8b:ca:b0:21:a0:11:b6:93: 90:53:6c:c4:df:7a:57:53:80:b4:6f:dc:f1:c3:b1:7f:16:af: 6d:65:44:cc:df:30:bb:99:0c:46:23:b6:66:af:34:53:9e:0b: b9:1a:f3:e0:2b:a1:39:e0:4a:39:84:e0:b6:41:3f:1a:56:47: 75:3c:d7:6b:43:91:c6:07:8b:1b:cd:d3:5b:62:84:13:38:13: 41:be:e1:8e:a9:f4:e4:a4:ff:2c:8f:39:5d:41:e8:65:b0:9e: 87:be:de:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnsG4JoSZyfW1LuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVmZTQwNDMtNjlmNi00ZjM4LTkwMDMtODk3Y2Q5MDlm YjNiMB4XDTI1MDQwMzE2MTczNFoXDTI1MDcwMjE2MTczNFowLzEtMCsGA1UEAxMk YzNkZGM1YTctNTExZi00ZTRhLWJhOWUtMTBhOWFjNTQ2NjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnTg+dxrCwO/FKTwwkP7adtguE/7IwUkcFou zVcj5SQD55LPVtomG6CosHdbYy14IR+e5BLrDB+FIGZ2aWoTXi7EmXXtFKYmIiXb lDdbVV9wqkQ3CEYXop7SZevGGPCPwzBjmweExsIVdrlb9O510SMA13IK5CntMx18 0BsdPimrhViCS9XVf+3avu84xk/oE8sQDg2/Bl0oTDNAuGHi6jZ1GfDjDQ0EGb4e GThtOw3H0es3BBj0mx6Noug1p+aigh4HHymA951lb6s/3nHpK+jhhBa3fLGH07bG tn7GMvzSeVZM33TBcN9r2c9FrR6Ab7JqY9VzoaeLNxFOp0DL4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMomlJEbqnjtRiNBZa3nRovATezDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NWZl NDA0My02OWY2LTRmMzgtOTAwMy04OTdjZDkwOWZiM2IvNjhmZDcyOWUtMGFlMi0z YjZmLWExZjYtNjk5NmVlZjFjNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDVmZTQwNDMtNjlmNi00ZjM4LTkw MDMtODk3Y2Q5MDlmYjNiLzQ1ZmU0MDQzLTY5ZjYtNGYzOC05MDAzLTg5N2NkOTA5 ZmIzYi5jcmwwHwYDVR0jBBgwFoAU0DHIaPcTXNFR/vwIg1/VKc2jFhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80NWZlNDA0My02OWY2LTRmMzgtOTAwMy04OTdj ZDkwOWZiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAh1SoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4B+w2Onb+nR5lAXZDn9Cjh7LboXfFHcBKjH0o0lSzCoGVgsHNnWqEE 2fQf+61YCtPlYPq00j7v/Uj3zAh3MVzHFuS01YI9bwUTjHPlecTKPHVJ/Rv59X5r Bwqi3wHAIwPwiJ1zK3AmHz6Np4EpeLhgjBtf2ff9NMBmECQJokPvbMSTJ6ihcg0d MA92aLFU6aJcstBXWPZiobKLyrAhoBG2k5BTbMTfeldTgLRv3PHDsX8Wr21lRMzf MLuZDEYjtmavNFOeC7ka8+AroTngSjmE4LZBPxpWR3U812tDkcYHixvN01tihBM4 E0G+4Y6p9OSk/yyPOV1B6GWwnoe+3vY= -----END CERTIFICATE-----Generated at Sun Apr 27 02:01:10 2025 by rpki-client