$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/6c49595c-1616-3a49-a142-78e4d88c3f6c.roa File: 6c49595c-1616-3a49-a142-78e4d88c3f6c.roa (raw, json) Hash identifier: zOH/NKQTanpztRwENk9nxa9/9oteoncmGmBgCu/2D50= Subject key identifier: 52:33:43:E3:14:4D:0E:42:7C:1A:B1:30:BC:23:33:2F:02:BC:C8:57 Certificate issuer: /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Certificate serial: 010D0C9F43285849A229A68BE998BC6A4279F090 Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/6c49595c-1616-3a49-a142-78e4d88c3f6c.roa Signing time: Thu 24 Apr 2025 14:58:42 +0000 ROA not before: Thu 24 Apr 2025 14:58:42 +0000 ROA not after: Wed 23 Jul 2025 14:58:42 +0000 asID: 400967 IP address blocks: 45.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:29:a6:8b:e9:98:bc:6a:42:79:f0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Validity Not Before: Apr 24 14:58:42 2025 GMT Not After : Jul 23 14:58:42 2025 GMT Subject: CN=1f59f54c-48e0-4431-b563-cc78027e5a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e8:b0:c5:9c:d2:df:f1:9a:9e:9f:de:f5:08: 61:e0:e5:e3:52:57:b2:2a:5b:f9:11:e9:86:30:c4: a0:d5:53:c6:34:f1:88:f4:54:44:75:15:7a:81:0b: ef:f4:4c:ef:e1:8b:91:e9:c9:85:67:80:80:68:8b: 44:bf:e8:c6:8f:2b:c7:2f:58:f2:8b:fa:30:c6:f8: 0f:71:50:56:b6:4c:88:74:b7:db:01:df:74:3b:c9: d4:5f:01:3a:83:d2:d2:07:89:b8:64:d6:ac:ad:8e: 4b:87:f0:bd:58:1d:f1:c6:55:cb:71:68:5d:f5:f6: 41:4b:59:9e:f3:ed:4b:c9:0c:49:57:94:41:fe:a3: a6:9f:f6:ce:1d:45:23:2a:a6:68:1d:45:6d:4d:12: 6a:55:83:57:d1:dd:72:c3:b6:4d:ea:99:03:5b:24: 1e:a5:a0:f6:f7:c3:3d:8a:37:2a:06:d1:fe:3a:9c: 7b:e0:5d:7e:a9:a5:d1:3b:90:c8:1b:b6:6a:1e:e0: 7f:d3:f9:ee:f3:eb:e2:42:60:63:f4:99:cb:8e:b1: ea:f3:92:67:0b:2d:a0:3d:bb:57:c2:1b:fb:fd:54: 10:dc:39:a8:e1:b0:82:ce:a6:70:57:cd:d9:11:35: f3:59:ed:f3:0e:61:f2:73:45:30:4f:3d:aa:4f:1d: 54:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:33:43:E3:14:4D:0E:42:7C:1A:B1:30:BC:23:33:2F:02:BC:C8:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/6c49595c-1616-3a49-a142-78e4d88c3f6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl X509v3 Authority Key Identifier: keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer sbgp-ipAddrBlock: critical IPv4: 45.42.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:02:13:a4:49:96:77:ec:fd:ae:fd:16:26:12:a3:09:18:01: b1:dd:36:05:93:a0:e3:87:7e:d5:be:24:1d:87:8b:86:10:aa: ff:b9:c7:56:1a:db:e3:0b:22:36:4b:00:33:ed:3b:c8:75:1e: 7b:25:57:82:f8:8b:20:66:33:78:7e:11:50:ff:f9:e2:92:bf: f8:72:62:80:1e:e5:d5:43:ef:0b:3b:c5:0c:7b:f5:27:53:39: dd:65:db:ce:f9:82:35:79:e6:e5:b8:bd:35:4d:19:dc:e6:8f: 07:ab:c8:ef:1c:cb:96:1f:f9:fd:2b:ab:d2:f9:80:fd:f5:f5: 15:7e:39:de:21:44:1d:65:f3:bb:04:8a:86:99:24:a9:7d:26: 8f:5f:62:02:66:b2:1b:7f:a1:60:02:b1:34:a8:2b:30:30:87: e6:e7:ec:16:0e:72:88:cd:c2:c0:75:5a:fe:68:bf:cc:16:da: d3:96:5c:73:3a:b5:7a:74:e9:72:1f:92:65:d4:29:9d:6a:99: 12:72:56:46:92:d4:5b:5c:1c:87:62:2a:7c:3b:a0:87:36:b9: cc:c5:bc:e3:ab:d3:00:5a:28:f3:72:03:81:ad:02:70:5b:85: fd:e8:ca:5d:0a:bb:31:29:d5:e9:17:49:2d:7a:a2:b8:6b:ec: 4a:ab:23:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiKaaL6Zi8akJ58JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU4ZWQ5NTAtNDQ4OC00OWIxLThkMzktYmI4YzcxYTc2 N2QyMB4XDTI1MDQyNDE0NTg0MloXDTI1MDcyMzE0NTg0MlowLzEtMCsGA1UEAxMk MWY1OWY1NGMtNDhlMC00NDMxLWI1NjMtY2M3ODAyN2U1YTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheiwxZzS3/Ganp/e9Qhh4OXjUleyKlv5EemG MMSg1VPGNPGI9FREdRV6gQvv9Ezv4YuR6cmFZ4CAaItEv+jGjyvHL1jyi/owxvgP cVBWtkyIdLfbAd90O8nUXwE6g9LSB4m4ZNasrY5Lh/C9WB3xxlXLcWhd9fZBS1me 8+1LyQxJV5RB/qOmn/bOHUUjKqZoHUVtTRJqVYNX0d1yw7ZN6pkDWyQepaD298M9 ijcqBtH+Opx74F1+qaXRO5DIG7ZqHuB/0/nu8+viQmBj9JnLjrHq85JnCy2gPbtX whv7/VQQ3Dmo4bCCzqZwV83ZETXzWe3zDmHyc0UwTz2qTx1UKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIzQ+MUTQ5CfBqxMLwjMy8CvMhXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThl ZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhjNzFhNzY3ZDIvNmM0OTU5NWMtMTYxNi0z YTQ5LWExNDItNzhlNGQ4OGMzZjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWU4ZWQ5NTAtNDQ4OC00OWIxLThk MzktYmI4YzcxYTc2N2QyLzllOGVkOTUwLTQ0ODgtNDliMS04ZDM5LWJiOGM3MWE3 NjdkMi5jcmwwHwYDVR0jBBgwFoAUJhbbhZB9FA+mCJFa84xIt9zz1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThlZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhj NzFhNzY3ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwCE6RJlnfs/a79FiYSowkYAbHdNgWToOOHftW+JB2Hi4YQqv+5x1Ya 2+MLIjZLADPtO8h1HnslV4L4iyBmM3h+EVD/+eKSv/hyYoAe5dVD7ws7xQx79SdT Od1l2875gjV55uW4vTVNGdzmjweryO8cy5Yf+f0rq9L5gP319RV+Od4hRB1l87sE ioaZJKl9Jo9fYgJmsht/oWACsTSoKzAwh+bn7BYOcojNwsB1Wv5ov8wW2tOWXHM6 tXp06XIfkmXUKZ1qmRJyVkaS1FtcHIdiKnw7oIc2uczFvOOr0wBaKPNyA4GtAnBb hf3oyl0KuzEp1ekXSS16orhr7EqrIxM= -----END CERTIFICATE-----Generated at Sun May 11 08:17:02 2025 by rpki-client