$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a21b20f3-965c-3e8c-8197-b8efcab073f1.roa File: a21b20f3-965c-3e8c-8197-b8efcab073f1.roa (raw, json) Hash identifier: qyK4rFhqJON8BXo5u8vOtW7a2r2dTbtCxPb7Uk4oc28= Subject key identifier: 05:75:3F:E4:B4:DC:CB:AE:88:ED:6E:2F:E3:9B:A3:17:09:BC:D1:3C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C86DB3F15364E4C98B02B500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a21b20f3-965c-3e8c-8197-b8efcab073f1.roa Signing time: Thu 08 May 2025 07:56:32 +0000 ROA not before: Thu 08 May 2025 07:56:32 +0000 ROA not after: Wed 06 Aug 2025 07:56:32 +0000 asID: 200010 IP address blocks: 45.74.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c8:6d:b3:f1:53:64:e4:c9:8b:02:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 8 07:56:32 2025 GMT Not After : Aug 6 07:56:32 2025 GMT Subject: CN=6d511e89-55ec-4fb0-8ec6-15e4fe1cc4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a1:b8:e6:bd:c6:f5:e3:38:98:33:45:06:c4: d4:18:74:95:c9:7b:62:f1:a2:7b:3c:3d:05:83:89: fd:60:7b:8b:8b:26:af:66:e3:7d:a4:92:ea:51:02: 99:2d:eb:fb:38:2a:45:74:28:a4:8e:16:b0:8a:d1: fa:49:c1:99:d9:eb:9c:eb:9c:91:33:0c:fe:b4:8d: 69:eb:d8:0d:34:9d:0d:f0:f8:d1:d2:f3:16:76:c4: 29:d5:a2:2f:60:66:d7:05:97:d8:24:55:97:90:e9: da:a9:d9:e0:b0:97:8a:12:7d:94:08:a4:83:cc:d2: a9:f3:43:1b:c6:70:7e:ec:9d:bb:0d:b0:b8:4c:aa: f3:d1:02:e5:46:77:fb:84:4b:ee:2e:06:72:c1:9e: a4:35:fd:9d:2a:92:fd:6f:ea:66:c4:27:f5:c9:b7: 2a:02:4d:73:e8:a5:39:3b:65:12:cb:14:bd:af:10: 5d:03:5f:b7:00:ca:1c:ec:d4:26:7d:10:03:71:3d: 22:fe:46:b0:42:19:89:53:b4:0b:11:42:9e:8f:a1: 2e:bf:2f:a5:10:cd:77:4c:2c:2e:29:b0:67:97:be: 72:39:c3:98:6d:b6:10:f3:36:bd:d4:41:31:36:8c: db:28:ee:8a:95:ab:6a:0d:02:cb:31:4f:37:dc:e6: 66:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:75:3F:E4:B4:DC:CB:AE:88:ED:6E:2F:E3:9B:A3:17:09:BC:D1:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a21b20f3-965c-3e8c-8197-b8efcab073f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a4:1f:6b:f9:ae:c5:b6:11:f3:75:bb:93:11:5b:c0:0e:5d: 96:14:b5:88:64:b7:5b:96:ff:30:1b:3d:0c:4b:55:84:c4:b3: c7:e7:50:a9:c1:39:b0:af:f0:21:ba:94:67:5d:c0:90:68:7b: 78:a6:f5:0f:1b:cf:f9:13:23:0e:e1:91:d9:d7:d7:a7:9f:cb: 7e:ce:c9:9d:be:13:e9:85:f5:76:a6:1b:83:8f:b0:f0:ea:72: 0f:5c:b8:38:33:b6:69:de:bf:a6:c8:36:c7:73:09:5b:1c:8d: ec:43:ba:fb:d4:96:1b:3d:25:ca:d4:85:d7:fc:2d:4b:c7:a8: 0c:b5:fe:38:b8:d8:e2:51:45:15:19:a4:74:c4:a4:1c:95:c2: 26:74:96:ab:03:54:2d:22:e6:fa:c3:9e:69:f4:14:cf:c2:5d: d4:1d:3c:01:ff:de:ca:a9:b3:67:42:d4:2c:e6:6e:f5:ba:b3: 48:84:37:30:aa:2b:47:17:35:16:13:51:8f:3f:db:c8:0a:59: f9:a6:29:f8:f4:c8:9b:77:2b:72:e8:3b:62:48:4e:a0:4f:0e: 86:4b:88:73:0f:36:b9:63:61:94:0d:89:97:01:79:7f:26:b3: 42:b1:ea:1b:e5:cf:47:28:0d:5e:de:40:01:8a:9e:b9:9d:09: 3d:77:ac:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnIbbPxU2TkyYsCtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwODA3NTYzMloXDTI1MDgwNjA3NTYzMlowLzEtMCsGA1UEAxMk NmQ1MTFlODktNTVlYy00ZmIwLThlYzYtMTVlNGZlMWNjNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaG45r3G9eM4mDNFBsTUGHSVyXti8aJ7PD0F g4n9YHuLiyavZuN9pJLqUQKZLev7OCpFdCikjhawitH6ScGZ2euc65yRMwz+tI1p 69gNNJ0N8PjR0vMWdsQp1aIvYGbXBZfYJFWXkOnaqdngsJeKEn2UCKSDzNKp80Mb xnB+7J27DbC4TKrz0QLlRnf7hEvuLgZywZ6kNf2dKpL9b+pmxCf1ybcqAk1z6KU5 O2USyxS9rxBdA1+3AMoc7NQmfRADcT0i/kawQhmJU7QLEUKej6Euvy+lEM13TCwu KbBnl75yOcOYbbYQ8za91EExNozbKO6KlatqDQLLMU833OZmCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAV1P+S03MuuiO1uL+OboxcJvNE8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTIxYjIwZjMtOTY1Yy0z ZThjLTgxOTctYjhlZmNhYjA3M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCkH2v5rsW2EfN1u5MRW8AOXZYUtYhkt1uW/zAbPQxLVYTEs8fnUKnB ObCv8CG6lGddwJBoe3im9Q8bz/kTIw7hkdnX16efy37OyZ2+E+mF9XamG4OPsPDq cg9cuDgztmnev6bINsdzCVscjexDuvvUlhs9JcrUhdf8LUvHqAy1/ji42OJRRRUZ pHTEpByVwiZ0lqsDVC0i5vrDnmn0FM/CXdQdPAH/3sqps2dC1CzmbvW6s0iENzCq K0cXNRYTUY8/28gKWfmmKfj0yJt3K3LoO2JITqBPDoZLiHMPNrljYZQNiZcBeX8m s0Kx6hvlz0coDV7eQAGKnrmdCT13rII= -----END CERTIFICATE-----Generated at Sat May 10 04:53:54 2025 by rpki-client