$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/34352e34352e3135362e302f32342d3234203d3e20333939373831.roa File: 34352e34352e3135362e302f32342d3234203d3e20333939373831.roa (raw, json) Hash identifier: I18XIbmN3VF09Ixs+INe1Ju84SD/Ghhp0xtxCKV6r60= Subject key identifier: 0F:AF:C2:27:45:DE:E8:B7:5C:CA:F2:DC:EF:EA:32:02:58:9F:CD:22 Certificate issuer: /CN=4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42 Certificate serial: 7A65460D5A4AFEC14AE47542768A88F4C1B82F87 Authority key identifier: 87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/34352e34352e3135362e302f32342d3234203d3e20333939373831.roa Signing time: Wed 30 Apr 2025 15:28:31 +0000 ROA not before: Wed 30 Apr 2025 15:23:31 +0000 ROA not after: Wed 29 Apr 2026 15:28:31 +0000 asID: 399781 IP address blocks: 45.45.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.crl rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 23:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:65:46:0d:5a:4a:fe:c1:4a:e4:75:42:76:8a:88:f4:c1:b8:2f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42 Validity Not Before: Apr 30 15:23:31 2025 GMT Not After : Apr 29 15:28:31 2026 GMT Subject: CN=0FAFC22745DEE8B75CCAF2DCEFEA3202589FCD22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:22:76:eb:ec:86:db:15:db:58:74:59:9b:d3: 15:07:e0:8f:5f:3d:14:7c:9d:4f:d3:a4:28:d4:bd: 5d:bc:ef:ae:8c:81:00:02:3c:63:3e:fb:df:16:3b: f5:68:7e:25:48:68:1e:f3:5d:0c:c0:7a:b8:41:63: 1e:0d:35:e1:3f:e1:a0:75:33:da:0b:c4:d1:ae:c1: 6e:aa:ec:19:fe:78:df:6c:5b:2e:85:67:12:28:78: b6:7e:8e:91:f4:32:15:4d:18:07:39:e1:03:3e:ce: 84:0c:58:40:fa:71:bb:f8:cb:62:65:08:af:5f:9c: 66:fd:97:aa:6b:30:2c:f4:02:7d:ad:a2:f8:b0:d0: 2a:71:f4:af:46:52:6a:8f:60:57:75:4d:fc:79:bb: 70:3d:d0:76:ad:40:2f:14:24:31:85:71:95:ff:94: 78:86:f2:9d:bb:86:f6:29:90:20:e6:dc:49:c7:88: d4:e5:52:f5:9a:80:13:b9:51:52:45:11:56:63:79: 57:c8:c2:13:56:27:a6:ea:d7:8a:6a:59:af:29:80: 05:f2:7a:db:b4:89:65:98:45:39:5a:85:ea:a1:47: 5e:ab:85:69:e4:15:86:eb:aa:cc:7e:82:32:ba:65: 11:c8:a2:4d:e0:43:df:12:9e:23:36:e3:da:6e:0f: 62:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AF:C2:27:45:DE:E8:B7:5C:CA:F2:DC:EF:EA:32:02:58:9F:CD:22 X509v3 Authority Key Identifier: keyid:87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/34352e34352e3135362e302f32342d3234203d3e20333939373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.45.156.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:b0:06:73:53:77:50:6d:02:89:61:a6:03:1b:78:87:77:1e: 44:44:49:43:90:05:8b:76:ad:f6:fd:e4:b2:11:68:f7:a4:23: 53:5f:db:c8:35:5e:29:f9:f3:f0:77:58:92:7d:7a:a1:cc:23: 0a:26:ad:b1:74:af:33:2b:c6:d0:82:72:1d:b3:27:23:40:f1: 30:5e:71:10:cd:b8:26:ae:7a:a4:bb:2a:b8:cd:85:31:6b:c5: 70:5a:dd:19:df:9f:c6:f3:6d:18:c6:37:5e:07:97:f7:84:57: 48:95:aa:04:d8:ee:08:86:87:0e:52:8e:af:d0:91:3f:67:20: 2f:e2:7b:ee:83:a7:20:80:ee:28:07:f8:54:6b:50:a9:db:11: db:d6:bc:d9:93:08:d9:11:d2:83:c7:cf:8a:39:9c:e5:0d:d2: 4d:16:41:a2:cc:be:6e:19:57:17:c9:f3:fd:21:f0:cd:e0:b3: d8:c5:85:59:30:49:dc:98:ef:da:54:f5:fe:08:66:27:13:ed: e4:f8:4d:93:60:4c:d4:46:4f:d6:8f:67:d8:9e:56:6f:bb:ea: 30:dc:6c:51:be:ac:51:00:33:59:c2:8a:4d:6c:5b:f8:3b:56: c4:18:ee:78:12:90:0a:91:f7:c6:a9:b4:ba:98:d8:3b:af:c7: d1:21:5d:f4 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUemVGDVpK/sFK5HVCdoqI9MG4L4cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNGFkNjNhZmNjOWI3ZDUxODYwYTI1ZjVmZWNjMjQ5MmQz NWJkMGFhNDEzNTAxOGRlNDIwHhcNMjUwNDMwMTUyMzMxWhcNMjYwNDI5MTUyODMx WjAzMTEwLwYDVQQDEygwRkFGQzIyNzQ1REVFOEI3NUNDQUYyRENFRkVBMzIwMjU4 OUZDRDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SJ26+yG2xXb WHRZm9MVB+CPXz0UfJ1P06Qo1L1dvO+ujIEAAjxjPvvfFjv1aH4lSGge810MwHq4 QWMeDTXhP+GgdTPaC8TRrsFuquwZ/njfbFsuhWcSKHi2fo6R9DIVTRgHOeEDPs6E DFhA+nG7+MtiZQivX5xm/ZeqazAs9AJ9raL4sNAqcfSvRlJqj2BXdU38ebtwPdB2 rUAvFCQxhXGV/5R4hvKdu4b2KZAg5txJx4jU5VL1moATuVFSRRFWY3lXyMITViem 6teKalmvKYAF8nrbtIllmEU5WoXqoUdeq4Vp5BWG66rMfoIyumURyKJN4EPfEp4j NuPabg9iiwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFA+vwidF3ui3XMry3O/qMgJY n80iMB8GA1UdIwQYMBaAFIdKNTru8qYHoauo5D0g8Y7JQRr4MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODg5YzQzZTcwMTg4YjM2OTA1ZDQxNjA1LzAv ODc0QTM1M0FFRUYyQTYwN0ExQUJBOEU0M0QyMEYxOEVDOTQxMUFGOC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1 ZmViODJiLzNlYjYwNTk4LTc2Y2EtNDliMC05YTFmLTAxMjcwNjAzZDhkOS80YWQ2 M2FmY2M5YjdkNTE4NjBhMjVmNWZlY2MyNDkyZDM1YmQwYWE0MTM1MDE4ZGU0Mi5j ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg4OWM0M2U3MDE4OGIz NjkwNWQ0MTYwNS8wLzM0MzUyZTM0MzUyZTMxMzUzNjJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDMzMzkzOTM3MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0tnDANBgkqhkiG9w0BAQsF AAOCAQEAO7AGc1N3UG0CiWGmAxt4h3ceRERJQ5AFi3at9v3kshFo96QjU1/byDVe Kfnz8HdYkn16ocwjCiatsXSvMyvG0IJyHbMnI0DxMF5xEM24Jq56pLsquM2FMWvF cFrdGd+fxvNtGMY3XgeX94RXSJWqBNjuCIaHDlKOr9CRP2cgL+J77oOnIIDuKAf4 VGtQqdsR29a82ZMI2RHSg8fPijmc5Q3STRZBosy+bhlXF8nz/SHwzeCz2MWFWTBJ 3Jjv2lT1/ghmJxPt5PhNk2BM1EZP1o9n2J5Wb7vqMNxsUb6sUQAzWcKKTWxb+DtW xBjueBKQCpH3xqm0upjYO6/H0SFd9A== -----END CERTIFICATE-----Generated at Mon May 12 08:49:41 2025 by rpki-client