$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/53009550-1451-3677-ae05-9e5e5e0b9c09.roa File: 53009550-1451-3677-ae05-9e5e5e0b9c09.roa (raw, json) Hash identifier: WF/4VR4hfnYPj4gvuFOpklfq+GH0pCrDfK4IcWOlQP4= Subject key identifier: BF:08:E5:EA:C9:4A:6D:32:D4:00:D3:8D:7C:9C:04:41:3C:30:D1:A1 Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F43285849A1EF6EA455BCA337C6C01140 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/53009550-1451-3677-ae05-9e5e5e0b9c09.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 3257 IP address blocks: 45.56.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:6e:a4:55:bc:a3:37:c6:c0:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=3bacd748-f569-40c7-ab71-7aeaf73dd591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5d:c9:28:08:23:3a:88:4a:f3:51:4d:57:ed: 7f:f3:bc:10:3b:45:f9:74:3e:dd:c9:d6:01:73:60: 5f:de:6a:64:c5:88:16:f3:f1:36:aa:c0:86:0e:e9: 33:ac:07:99:f3:b9:1f:8d:57:c9:ea:e2:5f:aa:c7: 96:54:33:3f:1e:0c:00:99:05:fd:7c:51:fb:64:f1: 53:4e:f2:fc:42:ba:ec:e5:69:50:ed:5a:5e:29:39: 57:ee:ce:74:51:9a:d8:5e:1c:60:2e:ad:9e:5d:39: 55:81:b0:59:86:1c:9b:bc:ee:34:4b:3a:30:f8:4c: 5f:54:a7:88:5d:6f:6e:88:e7:6b:30:cb:47:a0:75: 34:a0:d6:0a:7b:74:89:d9:fd:07:98:78:ca:5c:cd: 4a:e3:e0:40:86:de:90:c0:51:10:e1:6e:40:35:eb: a2:e4:42:6b:0b:96:a9:10:6a:db:17:21:25:3c:b6: 3f:31:d5:da:77:4d:03:e8:a7:bc:a8:a4:f1:63:19: cf:b0:2b:d9:c7:40:0f:9c:5e:e4:a1:3b:aa:75:9f: 40:7a:cf:40:41:e3:41:5d:48:06:b0:fb:95:cf:93: 3a:bc:0c:2d:e8:ba:81:36:d2:fb:44:96:6d:e6:23: 71:39:4a:f8:ac:c3:e0:b6:be:d8:32:78:c5:d6:b8: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:08:E5:EA:C9:4A:6D:32:D4:00:D3:8D:7C:9C:04:41:3C:30:D1:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/53009550-1451-3677-ae05-9e5e5e0b9c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv4: 45.56.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:8c:90:c8:e4:67:71:9c:68:68:da:95:2e:ab:4f:eb:3d:a5: 87:6b:2a:5a:56:d9:58:0f:4b:09:62:fa:af:24:de:8b:76:2c: e1:94:10:28:86:c7:d0:a2:80:40:da:23:cd:4b:70:03:cb:0d: 7c:f5:e5:7d:6b:93:17:78:bb:81:bc:c1:01:7a:91:27:42:4c: 2f:a7:94:56:bc:f8:f5:0f:ca:ef:3c:e7:20:52:c5:a9:65:be: 71:e2:e3:b6:77:8a:bf:c8:eb:7e:47:1b:27:dc:97:d8:da:1e: c7:c4:37:c7:29:84:36:9c:15:78:1f:02:82:b2:d1:04:6f:80: 81:c4:36:a9:e0:f2:93:d7:67:62:65:88:b5:6d:e6:1d:5c:9f: ff:d5:6b:a1:31:85:a7:8b:75:ef:79:0d:f8:1e:9e:3d:ae:16: cb:44:aa:ab:d7:e0:84:60:31:d7:86:25:0d:21:8c:4a:01:df: 90:ff:9e:85:7b:a4:67:31:3c:bc:a8:fc:75:af:2b:1d:31:a3: ff:c7:a0:a1:86:9b:6b:7a:a2:d0:73:d0:7c:d1:c3:a0:b3:ce: e2:e9:20:3b:89:6a:e4:18:32:b6:26:0e:cb:a1:2f:2a:d6:89: 56:0a:55:b1:23:a7:ec:d3:fc:0f:bf:a6:b3:93:ae:c0:a2:3c: d2:a1:57:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh726kVbyjN8bAEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk M2JhY2Q3NDgtZjU2OS00MGM3LWFiNzEtN2FlYWY3M2RkNTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA213JKAgjOohK81FNV+1/87wQO0X5dD7dydYB c2Bf3mpkxYgW8/E2qsCGDukzrAeZ87kfjVfJ6uJfqseWVDM/HgwAmQX9fFH7ZPFT TvL8Qrrs5WlQ7VpeKTlX7s50UZrYXhxgLq2eXTlVgbBZhhybvO40Szow+ExfVKeI XW9uiOdrMMtHoHU0oNYKe3SJ2f0HmHjKXM1K4+BAht6QwFEQ4W5ANeui5EJrC5ap EGrbFyElPLY/MdXad00D6Ke8qKTxYxnPsCvZx0APnF7koTuqdZ9Aes9AQeNBXUgG sPuVz5M6vAwt6LqBNtL7RJZt5iNxOUr4rMPgtr7YMnjF1ri++wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8I5erJSm0y1ADTjXycBEE8MNGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvNTMwMDk1NTAtMTQ1MS0z Njc3LWFlMDUtOWU1ZTVlMGI5YzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTjDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2MkMjkZ3GcaGjalS6rT+s9pYdrKlpW2VgPSwli+q8k3ot2LOGUECiG x9CigEDaI81LcAPLDXz15X1rkxd4u4G8wQF6kSdCTC+nlFa8+PUPyu885yBSxall vnHi47Z3ir/I635HGyfcl9jaHsfEN8cphDacFXgfAoKy0QRvgIHENqng8pPXZ2Jl iLVt5h1cn//Va6ExhaeLde95Dfgenj2uFstEqqvX4IRgMdeGJQ0hjEoB35D/noV7 pGcxPLyo/HWvKx0xo//HoKGGm2t6otBz0HzRw6CzzuLpIDuJauQYMrYmDsuhLyrW iVYKVbEjp+zT/A+/prOTrsCiPNKhV6g= -----END CERTIFICATE-----Generated at Sun Apr 27 17:46:32 2025 by rpki-client