$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/eec29711-ade1-3873-a4bb-57205961a057.roa File: eec29711-ade1-3873-a4bb-57205961a057.roa (raw, json) Hash identifier: 2oBKBnKAsvjsPhTZtTF7dlT+d4AazRwUIdQe6kEA/eE= Subject key identifier: C7:71:2A:FA:DC:6E:07:25:8A:48:80:DA:6E:A2:30:22:C3:B9:03:0A Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F43285848F65BE7EFE98A28BF1C5CD400 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/eec29711-ade1-3873-a4bb-57205961a057.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 396986 IP address blocks: 101.45.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e7:ef:e9:8a:28:bf:1c:5c:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=7a8e1c2c-4b92-4092-8a54-d380c6494f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:8f:ac:86:98:3c:a9:fa:71:c8:ef:73:20: bd:bc:5c:d6:14:41:7a:8e:15:9c:12:79:f8:e6:1d: 3b:87:e6:bc:59:a3:20:d3:2e:ab:67:4d:c5:f8:bc: 5c:84:84:23:f0:45:3e:85:98:53:f5:47:32:25:56: b2:a1:52:0a:15:9e:3d:0e:f9:9c:a7:3e:37:8f:6f: aa:63:66:9b:ef:91:55:36:49:17:91:dc:c4:58:16: 21:65:52:b3:56:c9:b2:c4:a5:81:0d:8c:0d:cf:a1: 09:65:e4:cf:0f:ab:0a:3c:a4:5b:10:b8:e0:24:87: e6:dd:d9:71:21:7f:7c:9b:bb:66:d8:31:22:d2:43: b5:4b:3d:94:ef:cf:27:4d:e9:cc:40:cb:e6:c9:ba: 9b:4d:fc:20:7f:5f:c6:e9:5b:b5:31:3c:b5:34:d0: b6:de:e6:f8:76:f1:4a:a1:38:fc:30:9e:49:51:7a: 56:82:7b:cb:a1:60:5f:f2:6c:3f:9d:2c:cd:15:19: aa:23:f4:76:9c:a1:39:6b:ba:5c:26:2e:c1:6d:89: c6:cc:50:bb:a0:d2:e9:6b:1e:e3:05:07:b5:92:3e: 05:ab:31:9f:71:ef:a8:55:33:ca:80:31:0c:d2:0d: c9:4e:39:aa:61:2a:1a:36:2d:30:ff:43:df:57:2b: 12:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:71:2A:FA:DC:6E:07:25:8A:48:80:DA:6E:A2:30:22:C3:B9:03:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/eec29711-ade1-3873-a4bb-57205961a057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 101.45.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:86:1d:99:47:71:09:e2:78:24:1e:41:ee:51:0d:f4:b4:15: 3b:19:62:f7:3b:83:35:2b:cc:d4:d2:55:d4:d0:3a:4e:68:7e: 83:e8:d2:7e:30:4a:97:6f:e0:2b:1a:f6:9f:68:3c:8f:fa:e0: bb:60:e9:85:0a:75:68:d5:09:96:cd:05:17:ce:49:0d:a2:07: 77:d2:ff:bf:6b:1b:9e:4e:98:df:09:dc:e4:b8:fa:f3:ce:46: 63:b0:b4:47:ab:38:a2:ea:4b:a3:85:27:81:ac:f6:09:f1:f9: 68:1e:84:d5:7d:e6:ba:fc:b6:55:12:ea:92:2f:68:a1:c3:9d: 69:aa:c5:57:41:be:49:e1:81:60:02:31:2b:8a:1f:63:00:20: e5:0d:14:d7:88:9a:4b:2a:12:2c:59:3d:4d:18:4e:20:45:ea: 10:95:f6:e6:07:c2:4f:18:a7:7d:86:ea:e5:b6:bd:3b:5a:ec: 32:62:28:de:4c:7e:1c:bc:bc:b1:04:b4:9f:97:49:4a:c2:6c: c5:ff:3f:dc:55:45:49:b2:3c:7b:c8:10:38:c4:13:2e:dd:6d: 9a:24:9e:5a:34:e4:29:4f:ce:b4:94:5e:46:43:5e:ea:c7:3a: 91:e9:17:d0:c7:d7:5f:a9:d4:fc:62:51:07:26:be:78:ec:48: 89:d3:12:06 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEj2W+fv6Yoovxxc1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk N2E4ZTFjMmMtNGI5Mi00MDkyLThhNTQtZDM4MGM2NDk0ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a2PrIaYPKn6ccjvcyC9vFzWFEF6jhWcEnn4 5h07h+a8WaMg0y6rZ03F+LxchIQj8EU+hZhT9UcyJVayoVIKFZ49Dvmcpz43j2+q Y2ab75FVNkkXkdzEWBYhZVKzVsmyxKWBDYwNz6EJZeTPD6sKPKRbELjgJIfm3dlx IX98m7tm2DEi0kO1Sz2U788nTenMQMvmybqbTfwgf1/G6Vu1MTy1NNC23ub4dvFK oTj8MJ5JUXpWgnvLoWBf8mw/nSzNFRmqI/R2nKE5a7pcJi7BbYnGzFC7oNLpax7j BQe1kj4FqzGfce+oVTPKgDEM0g3JTjmqYSoaNi0w/0PfVysSgQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMdxKvrcbgclikiA2m6iMCLDuQMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvZWVjMjk3MTEtYWRlMS0z ODczLWE0YmItNTcyMDU5NjFhMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZS0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZIYdmUdxCeJ4JB5B7lEN9LQVOxli9zuDNSvM1NJV1NA6Tmh+g+jSfjBK l2/gKxr2n2g8j/rgu2DphQp1aNUJls0FF85JDaIHd9L/v2sbnk6Y3wnc5Lj6885G Y7C0R6s4oupLo4Ungaz2CfH5aB6E1X3muvy2VRLqki9oocOdaarFV0G+SeGBYAIx K4ofYwAg5Q0U14iaSyoSLFk9TRhOIEXqEJX25gfCTxinfYbq5ba9O1rsMmIo3kx+ HLy8sQS0n5dJSsJsxf8/3FVFSbI8e8gQOMQTLt1tmiSeWjTkKU/OtJReRkNe6sc6 kekX0MfXX6nU/GJRBya+eOxIidMSBg== -----END CERTIFICATE-----Generated at Sat Apr 26 12:57:37 2025 by rpki-client