$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c28c0ca9-1339-3401-a0de-940672c0d49a.roa File: c28c0ca9-1339-3401-a0de-940672c0d49a.roa (raw, json) Hash identifier: DSw9xC0GN5YwffD0ArxLNimJj4k9MGtXfDWClVTDy68= Subject key identifier: 87:7E:B0:F3:1C:80:6A:0A:09:E2:5C:4B:A9:C3:1E:30:52:DF:0C:E0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C28A331085A043E50D16B580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c28c0ca9-1339-3401-a0de-940672c0d49a.roa Signing time: Tue 06 May 2025 05:19:06 +0000 ROA not before: Tue 06 May 2025 05:19:06 +0000 ROA not after: Mon 04 Aug 2025 05:19:06 +0000 asID: 36352 IP address blocks: 45.74.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:8a:33:10:85:a0:43:e5:0d:16:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 6 05:19:06 2025 GMT Not After : Aug 4 05:19:06 2025 GMT Subject: CN=71ae935a-4fac-4c98-b3ba-385e23d51f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:bd:91:84:43:51:f5:59:15:45:71:52:57: 74:1e:16:78:8e:3a:cd:d5:22:40:da:26:17:59:e2: cd:7a:12:a4:57:1d:62:ae:17:76:0d:86:e9:81:c0: cb:d5:9b:9c:9e:32:bc:dd:a5:0d:aa:ea:31:49:3c: e7:68:ad:94:a1:bd:d2:67:01:a6:ab:56:8d:a0:d5: 23:c3:05:01:03:39:e2:4d:c9:24:cb:24:96:3a:31: d8:d3:ff:25:2e:32:25:c5:12:36:9c:db:bb:f5:15: 8d:7e:af:1e:ce:3c:27:70:a8:19:93:f9:5c:16:dd: 9a:ab:9d:5e:c8:7e:83:f9:0c:21:f8:61:e6:f8:41: 0f:c2:66:53:b3:d3:19:26:d8:ee:fd:5e:eb:db:6e: b0:d6:73:a9:19:55:dc:ae:0e:98:8f:8b:6c:4a:30: e0:49:87:c1:35:26:7b:e5:44:71:48:fe:85:f2:f3: 3e:29:53:ec:85:89:dc:6e:bb:5c:1d:64:e7:ec:53: 5b:bf:dc:7c:6d:89:c6:8f:69:50:36:6b:4c:dd:85: 9e:69:ac:62:78:66:26:ef:db:3a:c9:5c:95:cc:ed: 0e:03:fd:fc:c8:de:06:52:4f:64:7d:69:38:a5:5c: 2a:8f:90:f9:d0:93:d3:6b:cf:f4:ec:96:26:ec:e4: 45:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7E:B0:F3:1C:80:6A:0A:09:E2:5C:4B:A9:C3:1E:30:52:DF:0C:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c28c0ca9-1339-3401-a0de-940672c0d49a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:5a:da:e4:de:73:b5:a0:83:55:19:3e:2b:aa:55:60:65:ab: 4f:47:85:25:74:71:cd:ba:d9:70:d6:f0:00:54:38:5c:f3:fe: f9:4d:a0:fa:41:1e:47:3d:c3:db:3f:bf:dd:80:1d:3e:57:5c: 4a:81:f0:47:d2:25:2b:ba:b6:34:22:03:bf:14:2e:a6:8f:58: 4a:44:f3:d1:56:cf:f9:9d:91:52:6c:65:66:e5:26:37:3b:d7: 20:5f:3e:65:06:1a:57:78:e4:db:5f:cd:a6:ee:03:ae:08:dd: f0:30:12:6c:3d:70:36:be:e0:92:4e:a4:ae:e1:d7:ed:f9:eb: 26:f0:93:72:71:4b:7a:7a:1e:ca:18:34:aa:25:cd:bd:bf:b6: fe:53:87:65:87:8b:fb:87:82:60:e4:9d:84:5e:3a:84:68:89: 59:a5:b3:4e:9e:7d:e3:90:14:2c:9d:e8:4b:f4:e3:71:38:b6: 5e:d9:aa:2a:1c:a7:fb:b2:87:51:40:c2:b1:bd:8c:d5:53:71: 2b:a2:3c:0a:c7:f7:a1:e2:28:58:43:5c:0e:0c:30:2f:ec:96: 40:66:0c:1c:94:af:09:31:f1:73:69:62:9d:91:20:41:39:e7: 0a:b8:1e:f1:fe:9e:54:f2:84:0d:a9:d5:f4:9e:31:1c:e6:5f: 8f:a6:2c:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCijMQhaBD5Q0WtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwNjA1MTkwNloXDTI1MDgwNDA1MTkwNlowLzEtMCsGA1UEAxMk NzFhZTkzNWEtNGZhYy00Yzk4LWIzYmEtMzg1ZTIzZDUxZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOW9kYRDUfVZFUVxUld0HhZ4jjrN1SJA2iYX WeLNehKkVx1irhd2DYbpgcDL1ZucnjK83aUNquoxSTznaK2Uob3SZwGmq1aNoNUj wwUBAzniTckkyySWOjHY0/8lLjIlxRI2nNu79RWNfq8ezjwncKgZk/lcFt2aq51e yH6D+Qwh+GHm+EEPwmZTs9MZJtju/V7r226w1nOpGVXcrg6Yj4tsSjDgSYfBNSZ7 5URxSP6F8vM+KVPshYncbrtcHWTn7FNbv9x8bYnGj2lQNmtM3YWeaaxieGYm79s6 yVyVzO0OA/38yN4GUk9kfWk4pVwqj5D50JPTa8/07JYm7ORFKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId+sPMcgGoKCeJcS6nDHjBS3wzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzI4YzBjYTktMTMzOS0z NDAxLWEwZGUtOTQwNjcyYzBkNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUorMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1a2uTec7Wgg1UZPiuqVWBlq09HhSV0cc262XDW8ABUOFzz/vlNoPpB Hkc9w9s/v92AHT5XXEqB8EfSJSu6tjQiA78ULqaPWEpE89FWz/mdkVJsZWblJjc7 1yBfPmUGGld45NtfzabuA64I3fAwEmw9cDa+4JJOpK7h1+356ybwk3JxS3p6HsoY NKolzb2/tv5Th2WHi/uHgmDknYReOoRoiVmls06efeOQFCyd6Ev043E4tl7Zqioc p/uyh1FAwrG9jNVTcSuiPArH96HiKFhDXA4MMC/slkBmDByUrwkx8XNpYp2RIEE5 5wq4HvH+nlTyhA2p1fSeMRzmX4+mLPc= -----END CERTIFICATE-----Generated at Sat May 10 10:03:58 2025 by rpki-client