$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21de63c3-6765-3164-854b-cc75a3fa9104.roa File: 21de63c3-6765-3164-854b-cc75a3fa9104.roa (raw, json) Hash identifier: wl0PURgVlfkiDTKy69RKnXQ17BRYyWpgm8m/Yz+8A8U= Subject key identifier: AF:53:52:1D:CF:9E:4E:CD:F1:72:30:E9:C0:24:95:37:82:B5:EC:E9 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A2A0CD15CD06D67E86F60 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21de63c3-6765-3164-854b-cc75a3fa9104.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 212238 IP address blocks: 45.39.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:2a:0c:d1:5c:d0:6d:67:e8:6f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=9c4bd482-9657-406b-be5c-7e641c157c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:2d:60:a1:d0:26:b4:e4:b8:99:22:20:9e: 42:3f:8f:ee:fc:df:24:2b:1e:52:34:f5:e1:7f:ba: 94:30:d6:a0:a2:42:e0:ce:06:e6:13:38:3c:3a:6c: 06:ed:ff:09:7d:c6:3d:8a:c9:da:1f:0c:df:d1:3e: fc:b6:00:64:84:62:0a:93:7c:ee:d5:38:10:52:58: 7e:6c:fc:74:98:1a:1f:a6:29:72:44:90:07:89:00: 02:95:40:4a:31:6a:58:f7:18:81:91:76:af:ed:b2: 5b:00:2a:8b:2b:24:7e:c9:aa:1a:6a:15:27:00:4e: 9b:33:f7:29:1a:ea:34:f4:49:6e:78:66:11:db:52: ab:70:e8:f1:c2:9b:e4:16:06:90:df:5d:cd:61:ef: dd:3f:68:ef:41:cc:ae:19:92:1c:9d:76:84:3c:46: b3:8e:d8:d9:fc:a1:c6:31:7d:2e:07:7d:be:b5:a5: 07:0a:a7:10:e2:cd:8b:4a:c3:96:b5:7e:b5:be:0e: ec:05:96:1b:56:ac:21:dc:40:ed:38:40:8c:74:1e: 6c:07:9a:d6:a7:6d:22:b7:7d:5c:e6:96:1b:66:93: af:90:ee:9e:78:c9:08:67:88:e6:3b:99:eb:ad:18: 52:0d:5c:6d:54:6a:b5:f8:b0:06:80:0e:69:48:21: f4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:53:52:1D:CF:9E:4E:CD:F1:72:30:E9:C0:24:95:37:82:B5:EC:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21de63c3-6765-3164-854b-cc75a3fa9104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 45.39.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c5:f5:8c:99:c2:4d:26:a4:3e:ca:54:4e:e4:43:f0:00:02: 6a:23:d8:0d:ed:64:70:40:de:c9:5f:22:b8:26:6d:ed:9e:f5: 2e:a4:9a:dc:38:5e:6d:75:d2:b0:78:8a:da:16:ad:f8:11:c3: 83:35:64:df:1a:3a:a5:c8:2f:fc:0b:0e:6d:2f:02:6b:a7:c2: 59:22:93:87:a1:8a:b0:63:56:14:99:ea:70:67:b3:04:b1:6c: 21:5e:80:f8:07:16:93:e5:42:b4:d1:d5:6a:a1:47:84:f0:9e: 49:b8:f0:21:ca:86:f2:2a:62:7e:d0:15:81:d9:2d:6a:30:4b: 4e:70:d4:b0:06:bb:88:1a:6c:07:f8:5e:50:fc:96:3d:a2:27: cc:c4:21:88:e9:45:cd:b8:54:4e:63:ed:84:81:ea:7c:d3:94: fb:59:88:11:ac:ed:d9:18:9b:84:17:7c:bf:a4:1b:cf:f3:b6: d4:a3:97:d2:0d:39:70:08:12:87:95:9a:46:38:15:be:23:2d: 8d:44:18:f6:7e:79:b8:47:97:60:f8:45:59:b9:db:f9:2a:7d: 8c:1c:6b:b6:2e:d9:41:1c:ff:fb:2c:35:4e:a3:24:01:1e:1d: da:53:a4:19:51:d8:67:a5:8e:df:fe:b7:ab:84:e7:07:7a:7f: cb:f8:71:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eioM0VzQbWfob2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk OWM0YmQ0ODItOTY1Ny00MDZiLWJlNWMtN2U2NDFjMTU3YzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvQtYKHQJrTkuJkiIJ5CP4/u/N8kKx5SNPXh f7qUMNagokLgzgbmEzg8OmwG7f8JfcY9isnaHwzf0T78tgBkhGIKk3zu1TgQUlh+ bPx0mBofpilyRJAHiQAClUBKMWpY9xiBkXav7bJbACqLKyR+yaoaahUnAE6bM/cp Guo09ElueGYR21KrcOjxwpvkFgaQ313NYe/dP2jvQcyuGZIcnXaEPEazjtjZ/KHG MX0uB32+taUHCqcQ4s2LSsOWtX61vg7sBZYbVqwh3EDtOECMdB5sB5rWp20it31c 5pYbZpOvkO6eeMkIZ4jmO5nrrRhSDVxtVGq1+LAGgA5pSCH0kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9TUh3Pnk7N8XIw6cAklTeCtezpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjFkZTYzYzMtNjc2NS0z MTY0LTg1NGItY2M3NWEzZmE5MTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSd+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHF9YyZwk0mpD7KVE7kQ/AAAmoj2A3tZHBA3slfIrgmbe2e9S6kmtw4 Xm110rB4itoWrfgRw4M1ZN8aOqXIL/wLDm0vAmunwlkik4ehirBjVhSZ6nBnswSx bCFegPgHFpPlQrTR1WqhR4Twnkm48CHKhvIqYn7QFYHZLWowS05w1LAGu4gabAf4 XlD8lj2iJ8zEIYjpRc24VE5j7YSB6nzTlPtZiBGs7dkYm4QXfL+kG8/zttSjl9IN OXAIEoeVmkY4Fb4jLY1EGPZ+ebhHl2D4RVm52/kqfYwca7Yu2UEc//ssNU6jJAEe HdpTpBlR2Geljt/+t6uE5wd6f8v4cRI= -----END CERTIFICATE-----Generated at Mon May 12 04:23:27 2025 by rpki-client