$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/24d1e724-70a9-34bf-9bce-3eb67e7a5d50.roa File: 24d1e724-70a9-34bf-9bce-3eb67e7a5d50.roa (raw, json) Hash identifier: B87KKiEtpcMzOOEH3b9P6/1vQJPtkiTCmm668sSnPME= Subject key identifier: 13:53:EE:06:1F:A9:43:26:81:45:D0:95:6A:71:0A:3C:F0:5F:29:AF Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Certificate serial: 010D0C9F43285848E9CBE10A14672F3303F70600 Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/24d1e724-70a9-34bf-9bce-3eb67e7a5d50.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 2906 IP address blocks: 45.57.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e1:0a:14:67:2f:33:03:f7:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=0d109be4-176f-449d-adb3-5307ef9283fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8c:ff:9c:09:89:ed:35:d1:5d:b7:dc:dc:25: c7:ce:27:87:c2:60:47:1c:02:08:d5:88:bf:d1:4d: 77:2b:59:35:dc:28:55:95:17:de:d2:6e:3f:91:e5: 0e:7a:2c:40:15:75:f7:ae:b3:bc:d4:78:2d:ad:d5: 52:4d:4e:37:fc:41:f5:79:29:c3:5a:f0:8d:6f:ae: a5:ca:7b:79:7d:73:56:2e:28:d8:d0:28:1c:56:ad: aa:b0:8f:9b:5f:e3:ad:b5:80:57:21:2f:03:53:4f: 8d:d2:8a:78:12:1b:f1:ae:d3:8e:28:dc:9a:a1:20: 2e:8f:21:37:85:43:2a:07:b2:fa:a6:5c:0a:6c:27: 98:df:b2:c0:fb:33:69:8d:ae:2f:4d:6e:57:88:08: a0:24:b0:49:04:d3:0b:a8:2f:42:8d:82:69:b5:1d: 60:29:4a:8b:50:6b:e9:6d:3c:f2:19:54:ad:cb:41: 12:f4:06:03:78:91:bf:32:ec:4b:92:40:5f:b4:28: 11:99:59:f3:2c:f2:d4:f0:af:73:0d:a8:7f:6e:82: 89:9c:01:75:66:7c:15:59:94:11:a7:95:e2:f2:3c: b9:e2:90:be:cd:44:b7:70:91:c6:c6:0f:27:94:1f: c8:a9:47:09:2a:60:f6:d3:a5:4c:84:94:65:53:4c: fc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:53:EE:06:1F:A9:43:26:81:45:D0:95:6A:71:0A:3C:F0:5F:29:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/24d1e724-70a9-34bf-9bce-3eb67e7a5d50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl X509v3 Authority Key Identifier: keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer sbgp-ipAddrBlock: critical IPv4: 45.57.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ce:5a:65:c6:ad:78:49:be:72:22:fe:a7:e9:ee:46:af:7b: 38:d3:69:60:ac:dc:c5:71:88:35:ae:cd:9a:bc:23:e0:be:bb: 7c:01:f6:1e:da:74:c4:d7:ec:a9:2c:37:52:6e:ff:12:3c:c4: 60:bf:60:84:a7:f7:6f:f6:ed:32:2a:57:63:58:ee:e4:ba:f2: 5a:cb:1f:95:cc:4e:17:07:8b:91:c8:77:b2:e2:e5:74:4b:57: 74:81:8d:0c:a4:e2:27:c9:89:51:fd:74:73:ce:d0:5b:04:fc: e7:8b:70:9d:70:5a:64:a9:4f:85:b1:73:58:d9:db:c1:33:3c: a6:4a:85:64:56:20:4a:62:fe:80:a7:b7:a9:89:cc:28:53:8d: 9e:07:37:7a:a7:b6:be:96:4e:98:e1:d3:15:c5:13:68:b0:bf: a0:cd:7e:84:34:8c:51:e9:8d:25:83:4e:02:7a:8f:16:2d:21: 80:88:f8:99:50:2c:a0:37:6d:7f:3a:c6:83:44:00:02:ee:9e: f0:fd:2b:b7:7b:26:07:6c:f0:fe:a7:ef:65:42:e2:99:c1:4a: 8d:c9:91:6e:6f:78:54:aa:62:23:65:03:ba:fb:7c:b5:45:a4: bf:2f:55:e0:ba:93:9c:e6:c8:8f:15:04:21:c0:68:c0:9f:d2: 5a:92:b1:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+EKFGcvMwP3BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl NTdjMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk MGQxMDliZTQtMTc2Zi00NDlkLWFkYjMtNTMwN2VmOTI4M2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYz/nAmJ7TXRXbfc3CXHzieHwmBHHAII1Yi/ 0U13K1k13ChVlRfe0m4/keUOeixAFXX3rrO81HgtrdVSTU43/EH1eSnDWvCNb66l ynt5fXNWLijY0CgcVq2qsI+bX+OttYBXIS8DU0+N0op4EhvxrtOOKNyaoSAujyE3 hUMqB7L6plwKbCeY37LA+zNpja4vTW5XiAigJLBJBNMLqC9CjYJptR1gKUqLUGvp bTzyGVSty0ES9AYDeJG/MuxLkkBftCgRmVnzLPLU8K9zDah/boKJnAF1ZnwVWZQR p5Xi8jy54pC+zUS3cJHGxg8nlB/IqUcJKmD206VMhJRlU0z8TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNT7gYfqUMmgUXQlWpxCjzwXymvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2 NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvMjRkMWU3MjQtNzBhOS0z NGJmLTliY2UtM2ViNjdlN2E1ZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2 ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2 NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHLTkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrOWmXGrXhJvnIi/qfp7kavezjTaWCs3MVxiDWuzZq8I+C+u3wB9h7a dMTX7KksN1Ju/xI8xGC/YISn92/27TIqV2NY7uS68lrLH5XMThcHi5HId7Li5XRL V3SBjQyk4ifJiVH9dHPO0FsE/OeLcJ1wWmSpT4Wxc1jZ28EzPKZKhWRWIEpi/oCn t6mJzChTjZ4HN3qntr6WTpjh0xXFE2iwv6DNfoQ0jFHpjSWDTgJ6jxYtIYCI+JlQ LKA3bX86xoNEAALunvD9K7d7Jgds8P6n72VC4pnBSo3JkW5veFSqYiNlA7r7fLVF pL8vVeC6k5zmyI8VBCHAaMCf0lqSsUs= -----END CERTIFICATE-----Generated at Sun Apr 27 00:35:23 2025 by rpki-client