$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa File: 9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa (raw, json) Hash identifier: Cklw0qdyP2GGiS1kUFUz29nh1qCT9cUZWhCh4IYDGJw= Subject key identifier: 94:A3:84:FC:7A:A3:AD:42:60:3E:F2:84:D0:CD:90:24:C4:F8:AD:1C Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F432858491ED6DC2E45469F81ABD0E080 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 397423 IP address blocks: 45.59.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:dc:2e:45:46:9f:81:ab:d0:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=750fdf3b-0506-4924-b5c4-8828772b8004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:82:8c:fb:a5:01:9b:6e:4e:4e:a4:ef:d1:13: c6:fe:a2:5b:1d:95:73:a3:8a:d5:1e:60:da:00:f2: 9d:cd:bc:15:b3:e0:05:32:29:19:6e:d3:5e:d0:2c: 8f:06:d3:80:b9:9e:42:6f:b5:41:38:5b:bf:20:84: b2:c2:77:68:85:d5:88:e7:6e:32:83:be:2f:75:12: 7f:e9:5c:45:fe:17:76:a2:b9:71:63:fb:7c:0d:64: a5:34:4c:cf:2a:d8:8b:70:16:32:81:f5:2f:9f:1e: 38:a5:4b:ce:10:6d:8d:eb:92:dc:de:b2:eb:e8:01: bb:4a:62:cb:74:26:13:2d:52:c1:cf:3d:87:90:eb: c1:7f:4b:f2:99:ee:3b:c4:31:5f:12:eb:fc:0b:a3: c5:a6:a9:b0:20:83:38:c6:64:e9:f7:6b:57:91:60: 0d:f2:51:5a:55:cd:77:39:74:39:67:d2:50:cb:ec: 8a:71:93:1c:4d:b3:bb:74:cd:37:26:fe:4e:06:c0: 05:a8:45:b0:eb:6b:d7:e2:66:d1:f5:16:f4:48:9c: 54:37:02:5f:e8:f3:66:83:12:37:af:e0:08:c1:86: 25:47:ff:82:ac:0a:8a:5b:0c:93:a2:ad:4d:96:d7: 9d:80:c6:4d:ce:7a:e6:db:53:8c:58:ce:72:57:42: 24:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A3:84:FC:7A:A3:AD:42:60:3E:F2:84:D0:CD:90:24:C4:F8:AD:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 45.59.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:cb:f1:6b:99:bb:53:39:d5:c3:03:00:61:94:1c:3e:69:54: b3:e2:0e:21:28:84:11:1a:84:9f:b8:52:b3:42:b1:22:d8:45: 1e:e1:ed:26:b8:23:5a:65:86:c8:43:f4:cc:be:25:64:ef:fd: d8:7b:12:af:e0:df:36:7d:49:c0:7d:c0:38:76:eb:c3:9e:d1: ea:bc:18:6f:1d:16:81:d6:54:9e:d7:a0:9f:f8:b2:a5:92:93: b6:14:e5:0b:ab:c1:60:65:e6:40:b1:24:f9:81:5b:26:23:b2: fd:55:f9:f2:0c:3b:47:8a:b6:35:d8:5b:63:cb:f6:db:e0:89: df:9d:cd:e1:ae:b8:03:2c:85:c4:93:01:17:19:9c:f7:04:55: 9b:93:bc:43:dd:80:f9:af:02:1e:55:b1:3f:e8:74:ec:22:1f: ed:2e:1c:60:5b:82:69:52:04:b5:d9:b9:3e:0b:ef:22:06:83: 74:59:80:b6:c9:2c:f6:b7:57:15:69:0c:f8:dc:a7:89:62:f8: 36:0d:ee:9f:31:4b:06:90:c1:c7:51:64:07:b4:dd:81:d4:6d: 9b:ca:52:77:9d:67:b3:4d:88:67:16:dd:c4:2c:d3:32:bf:c8: 2c:21:70:e9:e0:63:fa:c8:c5:55:30:c1:d9:c6:7a:71:c6:82: 6b:cf:07:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1twuRUafgavQ4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NzUwZmRmM2ItMDUwNi00OTI0LWI1YzQtODgyODc3MmI4MDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYKM+6UBm25OTqTv0RPG/qJbHZVzo4rVHmDa APKdzbwVs+AFMikZbtNe0CyPBtOAuZ5Cb7VBOFu/IISywndohdWI524yg74vdRJ/ 6VxF/hd2orlxY/t8DWSlNEzPKtiLcBYygfUvnx44pUvOEG2N65Lc3rLr6AG7SmLL dCYTLVLBzz2HkOvBf0vyme47xDFfEuv8C6PFpqmwIIM4xmTp92tXkWAN8lFaVc13 OXQ5Z9JQy+yKcZMcTbO7dM03Jv5OBsAFqEWw62vX4mbR9Rb0SJxUNwJf6PNmgxI3 r+AIwYYlR/+CrAqKWwyToq1NltedgMZNznrm21OMWM5yV0IkrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSjhPx6o61CYD7yhNDNkCTE+K0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvOTAwM2I4MWQtZDZkYy0z YTMzLWE2YTItOTlhZGUzYTEzM2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLTugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7L8WuZu1M51cMDAGGUHD5pVLPiDiEohBEahJ+4UrNCsSLYRR7h7Sa4 I1plhshD9My+JWTv/dh7Eq/g3zZ9ScB9wDh268Oe0eq8GG8dFoHWVJ7XoJ/4sqWS k7YU5QurwWBl5kCxJPmBWyYjsv1V+fIMO0eKtjXYW2PL9tvgid+dzeGuuAMshcST ARcZnPcEVZuTvEPdgPmvAh5VsT/odOwiH+0uHGBbgmlSBLXZuT4L7yIGg3RZgLbJ LPa3VxVpDPjcp4li+DYN7p8xSwaQwcdRZAe03YHUbZvKUnedZ7NNiGcW3cQs0zK/ yCwhcOngY/rIxVUwwdnGenHGgmvPB1U= -----END CERTIFICATE-----Generated at Sat Apr 26 18:35:42 2025 by rpki-client