$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4f2a2068-6db2-3959-b309-e0f879ed0df8.roa File: 4f2a2068-6db2-3959-b309-e0f879ed0df8.roa (raw, json) Hash identifier: u8DxBq6QvxF9Fegm09hBpwmxM0uyhCFgjWxI1DFdjHc= Subject key identifier: 60:20:14:49:BC:10:9A:D7:10:6B:84:64:4C:2A:B9:F1:C5:8B:59:22 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584971D45C75383DC14EED95A700 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4f2a2068-6db2-3959-b309-e0f879ed0df8.roa Signing time: Mon 07 Apr 2025 07:28:03 +0000 ROA not before: Mon 07 Apr 2025 07:28:03 +0000 ROA not after: Sun 06 Jul 2025 07:28:03 +0000 asID: 208485 IP address blocks: 45.74.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:d4:5c:75:38:3d:c1:4e:ed:95:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 7 07:28:03 2025 GMT Not After : Jul 6 07:28:03 2025 GMT Subject: CN=b79eb178-a27a-4e80-ba63-9612075db325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2f:ca:48:79:51:46:43:82:f9:2b:40:94:2d: 84:0e:83:b9:d3:4f:a9:7e:d5:eb:ac:f7:ba:80:98: df:c7:9f:94:e2:2d:09:a4:c9:28:94:ab:a5:85:e6: ed:97:49:9c:01:33:f8:bf:96:d8:f5:6e:c7:8d:98: 77:fa:32:7a:bc:7b:1d:d3:df:03:0c:6d:62:3e:46: 25:8f:c9:74:10:aa:4b:07:3b:ad:94:47:22:68:1a: 2d:b5:3e:e9:68:23:0b:4a:d5:0b:17:81:f5:e8:96: f5:58:ab:de:38:23:31:6a:4e:b3:b4:fd:c3:93:e9: ac:66:a9:bd:35:8c:a9:6c:db:68:17:3e:03:91:fe: 9e:ca:d0:89:2a:65:55:03:dd:09:eb:c6:90:6c:01: 20:32:d7:a8:10:2f:84:6a:a4:0b:e4:80:d5:6c:3a: a0:ce:03:b4:95:7a:73:79:81:62:bb:9d:f6:7e:e2: 72:9a:68:d5:57:ab:8d:17:54:95:ee:33:9c:d9:e3: 0f:f8:78:0c:88:fa:4e:94:e4:aa:7b:f2:0c:22:45: 47:e3:b0:51:2e:ee:52:17:8c:d2:a1:68:92:c4:30: 7a:b5:e5:63:b9:74:67:6e:7d:a3:90:d0:03:72:fa: 22:cf:c5:b3:e0:7c:b2:64:c6:23:f4:c2:2a:d3:5d: 8c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:20:14:49:BC:10:9A:D7:10:6B:84:64:4C:2A:B9:F1:C5:8B:59:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4f2a2068-6db2-3959-b309-e0f879ed0df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:73:c5:1f:c9:37:52:aa:06:84:4b:5f:b4:8a:4c:57:45:87: bd:b1:a6:6e:dc:14:d4:87:30:fa:c7:93:51:c2:03:2c:23:64: 27:31:42:3f:cf:b9:55:12:a7:02:8e:b8:df:40:b4:02:fa:68: 9d:3d:d2:74:62:e2:63:34:57:58:f6:a1:01:bc:aa:31:8e:b1: 79:3f:3d:92:b1:b9:0a:2a:bb:fa:bc:b2:2d:84:b7:92:53:1b: 4f:c8:37:26:92:9b:0a:16:25:f1:c4:62:2d:ac:9c:03:05:9e: 88:fe:5f:3f:70:32:29:0d:1d:e6:5f:18:5c:6a:4b:d2:ce:b4: fc:82:e6:3c:15:67:36:8f:6a:73:85:7a:27:9a:f3:4c:96:ac: 9d:b0:fc:64:67:76:04:39:3c:c9:e7:60:6f:36:96:ea:d7:13: 7f:81:7f:75:7c:df:51:6b:6e:95:3d:63:cd:c1:23:e9:4f:ce: 95:d7:f9:dd:fa:6c:43:6b:0d:23:a9:04:ca:a5:d2:2c:d8:9c: fb:e5:89:f2:9d:02:ee:82:5c:42:85:b2:e5:77:8a:90:37:0f: 3b:9e:14:d0:b3:1f:22:3a:ce:db:18:e0:58:1f:8c:f3:a5:46: 95:dd:be:cf:d3:a1:53:ad:6a:a6:67:3f:27:14:98:89:79:43: 35:cc:17:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElx1Fx1OD3BTu2VpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQwNzA3MjgwM1oXDTI1MDcwNjA3MjgwM1owLzEtMCsGA1UEAxMk Yjc5ZWIxNzgtYTI3YS00ZTgwLWJhNjMtOTYxMjA3NWRiMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS/KSHlRRkOC+StAlC2EDoO500+pftXrrPe6 gJjfx5+U4i0JpMkolKulhebtl0mcATP4v5bY9W7HjZh3+jJ6vHsd098DDG1iPkYl j8l0EKpLBzutlEciaBottT7paCMLStULF4H16Jb1WKveOCMxak6ztP3Dk+msZqm9 NYypbNtoFz4Dkf6eytCJKmVVA90J68aQbAEgMteoEC+EaqQL5IDVbDqgzgO0lXpz eYFiu532fuJymmjVV6uNF1SV7jOc2eMP+HgMiPpOlOSqe/IMIkVH47BRLu5SF4zS oWiSxDB6teVjuXRnbn2jkNADcvoiz8Wz4HyyZMYj9MIq012MeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAgFEm8EJrXEGuEZEwqufHFi1kiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGYyYTIwNjgtNmRiMi0z OTU5LWIzMDktZTBmODc5ZWQwZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZzxR/JN1KqBoRLX7SKTFdFh72xpm7cFNSHMPrHk1HCAywjZCcxQj/P uVUSpwKOuN9AtAL6aJ090nRi4mM0V1j2oQG8qjGOsXk/PZKxuQoqu/q8si2Et5JT G0/INyaSmwoWJfHEYi2snAMFnoj+Xz9wMikNHeZfGFxqS9LOtPyC5jwVZzaPanOF eiea80yWrJ2w/GRndgQ5PMnnYG82lurXE3+Bf3V831FrbpU9Y83BI+lPzpXX+d36 bENrDSOpBMql0izYnPvlifKdAu6CXEKFsuV3ipA3DzueFNCzHyI6ztsY4FgfjPOl RpXdvs/ToVOtaqZnPycUmIl5QzXMF/k= -----END CERTIFICATE-----Generated at Sun May 11 13:34:25 2025 by rpki-client