$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32e7e922-b778-3bd0-bebc-ac72aa723124.roa File: 32e7e922-b778-3bd0-bebc-ac72aa723124.roa (raw, json) Hash identifier: kZP1MQKv3uCX8vA0YDMFXzygq4W5qDlcytn0pJDSv9U= Subject key identifier: A0:F4:A1:F0:17:11:2F:5F:C7:29:F0:F6:BB:8A:86:93:93:BA:FD:E5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849AC76BB7226E4B46353C28F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32e7e922-b778-3bd0-bebc-ac72aa723124.roa Signing time: Mon 28 Apr 2025 07:32:05 +0000 ROA not before: Mon 28 Apr 2025 07:32:05 +0000 ROA not after: Sun 27 Jul 2025 07:32:05 +0000 asID: 213659 IP address blocks: 45.74.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ac:76:bb:72:26:e4:b4:63:53:c2:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 28 07:32:05 2025 GMT Not After : Jul 27 07:32:05 2025 GMT Subject: CN=0348b902-aced-4b53-aba4-fdbd7526d466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:af:0b:b7:b4:87:4c:4f:55:e0:52:14:9f:20: d3:58:6e:97:8d:d0:c6:0f:6e:a0:fd:52:79:c2:81: 0c:ce:cd:1f:b1:e9:d4:33:79:bd:60:fa:0d:d7:1f: 6a:31:51:64:75:36:e1:5e:03:57:e7:7a:2d:c6:fe: 36:68:1c:ae:ed:76:46:e4:8c:df:73:c9:0d:bf:7c: 4a:d8:d1:17:e6:17:53:9a:14:ea:de:9b:6c:0d:05: 20:8f:5e:02:eb:2b:90:9d:7d:b2:e9:71:1c:16:73: 12:92:af:72:41:0a:25:02:4f:a9:88:d3:c3:8e:08: b8:5a:ce:6c:cb:87:ae:25:14:a7:4a:1d:86:e9:7f: 55:b2:c9:86:e1:cd:71:d3:7e:5f:f4:aa:09:15:39: 20:c4:c9:6e:3b:a3:08:a1:40:33:5b:ac:c8:a9:ca: f6:91:ae:e3:a6:42:ec:33:ca:06:e1:ea:8c:88:b8: 58:50:a7:3c:86:2c:76:d6:06:4c:c0:40:11:d3:98: 7c:b7:04:84:7a:99:47:3c:e9:54:b2:e1:aa:66:3e: ba:38:9a:de:a7:9c:fc:6e:76:46:68:b7:9e:76:d8: a7:4e:40:a6:62:9f:ee:49:5d:47:06:40:92:33:42: 5e:ae:61:c7:f4:27:36:df:0f:29:f8:84:ea:2f:08: 9e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F4:A1:F0:17:11:2F:5F:C7:29:F0:F6:BB:8A:86:93:93:BA:FD:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32e7e922-b778-3bd0-bebc-ac72aa723124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:11:ff:45:11:0c:d2:e9:0b:ef:35:c0:d0:ab:b5:2e:5b:3e: 11:4d:2c:f1:10:ac:68:dd:e3:fd:68:72:97:e8:5b:61:9a:9d: 67:05:16:8b:5a:c0:91:1b:80:63:cf:72:58:ec:f3:7b:fd:1e: fa:c7:94:78:50:34:d3:c2:15:ec:35:16:33:83:1c:e2:8c:99: b7:5d:7b:c0:78:01:01:4b:55:cf:7e:ae:b4:38:0c:70:10:ec: 23:ef:56:18:bb:a3:79:a1:78:20:f7:c5:7a:cf:f2:a7:11:ab: b4:3f:ea:50:1b:8c:17:fb:47:ab:bd:5d:6b:2e:75:43:54:ae: 34:b1:53:bb:6d:4a:e8:84:27:ee:b6:a6:0c:e0:b2:8c:f4:6c: 31:db:db:00:f9:63:b0:8a:0d:b8:a2:52:76:eb:ff:74:5e:98: bf:88:a6:2c:f1:29:c3:1f:f1:79:d4:13:7a:d2:c0:21:4b:9f: cd:37:83:ae:5a:5c:4b:12:c7:31:d9:c2:1f:de:23:8a:84:44: b2:b1:df:b8:2d:a9:71:94:50:a9:60:7e:46:fe:4c:97:28:5c: b1:74:c5:2a:87:b7:14:38:d9:23:39:fa:4b:1b:3e:5e:74:d5: be:be:de:c6:d4:fe:3d:7a:33:1e:ee:d5:39:57:0e:71:b3:aa: a3:70:b8:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmsdrtyJuS0Y1PCj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyODA3MzIwNVoXDTI1MDcyNzA3MzIwNVowLzEtMCsGA1UEAxMk MDM0OGI5MDItYWNlZC00YjUzLWFiYTQtZmRiZDc1MjZkNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq8Lt7SHTE9V4FIUnyDTWG6XjdDGD26g/VJ5 woEMzs0fsenUM3m9YPoN1x9qMVFkdTbhXgNX53otxv42aByu7XZG5Izfc8kNv3xK 2NEX5hdTmhTq3ptsDQUgj14C6yuQnX2y6XEcFnMSkq9yQQolAk+piNPDjgi4Ws5s y4euJRSnSh2G6X9VssmG4c1x035f9KoJFTkgxMluO6MIoUAzW6zIqcr2ka7jpkLs M8oG4eqMiLhYUKc8hix21gZMwEAR05h8twSEeplHPOlUsuGqZj66OJrep5z8bnZG aLeedtinTkCmYp/uSV1HBkCSM0JermHH9Cc23w8p+ITqLwietQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKD0ofAXES9fxynw9ruKhpOTuv3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzJlN2U5MjItYjc3OC0z YmQwLWJlYmMtYWM3MmFhNzIzMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcR/0URDNLpC+81wNCrtS5bPhFNLPEQrGjd4/1ocpfoW2GanWcFFota wJEbgGPPcljs83v9HvrHlHhQNNPCFew1FjODHOKMmbdde8B4AQFLVc9+rrQ4DHAQ 7CPvVhi7o3mheCD3xXrP8qcRq7Q/6lAbjBf7R6u9XWsudUNUrjSxU7ttSuiEJ+62 pgzgsoz0bDHb2wD5Y7CKDbiiUnbr/3RemL+IpizxKcMf8XnUE3rSwCFLn803g65a XEsSxzHZwh/eI4qERLKx37gtqXGUUKlgfkb+TJcoXLF0xSqHtxQ42SM5+ksbPl50 1b6+3sbU/j16Mx7u1TlXDnGzqqNwuB8= -----END CERTIFICATE-----Generated at Sun May 11 04:02:41 2025 by rpki-client