$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/d8de2f24-85d0-37dd-a2f8-018801ca07ac.roa File: d8de2f24-85d0-37dd-a2f8-018801ca07ac.roa (raw, json) Hash identifier: ycmS0pIxYbq00PN1jfcqlKgxC5V7+7RYnLkQInk+xS4= Subject key identifier: CE:1C:5E:67:47:C9:53:D8:69:D4:88:97:FC:2A:6C:94:76:DF:96:29 Certificate issuer: /CN=52fbdac8-20c0-4da4-8654-27b4bf592930 Certificate serial: 010D0C9F432858499DBF316370B31279745C6D80 Authority key identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/d8de2f24-85d0-37dd-a2f8-018801ca07ac.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 394491 IP address blocks: 45.45.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:31:63:70:b3:12:79:74:5c:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52fbdac8-20c0-4da4-8654-27b4bf592930 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=85dd7b89-08b4-4534-b928-89fe35c5d5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:03:6e:32:54:b2:15:2c:35:83:19:34:5a: 96:4a:40:71:7b:df:2d:7c:06:34:42:13:2e:13:93: 5f:19:81:20:1a:d6:96:65:6d:02:4a:30:c3:88:ce: 21:f0:6b:82:3f:6b:49:ac:2d:62:21:34:8a:47:ad: 0c:d2:80:d7:eb:31:32:76:d9:7d:2d:7b:2c:29:93: b3:a3:1c:2b:d7:d9:20:ad:8f:0d:af:fd:79:b8:c1: cb:0e:44:25:10:96:39:e9:37:5e:ca:de:9a:31:6b: b8:ea:1f:e8:5a:6a:54:08:a6:96:93:bd:9a:1f:8f: 66:7d:f3:3a:a2:ca:c5:db:3b:7a:2c:ad:c9:bc:b0: 7c:44:7f:50:8d:b9:ab:a9:4d:43:79:38:77:a5:10: b7:aa:0a:84:76:4e:96:fb:64:d6:77:9e:87:5c:5b: 49:fe:ad:d1:f9:ae:3a:60:c9:b5:e2:5b:7c:11:f5: fa:f1:49:d9:ab:58:b8:a0:46:80:52:ac:3d:7d:db: 6f:95:8d:29:53:ae:cb:03:26:07:6c:69:48:08:6a: 96:cb:c2:fc:f9:24:b3:ef:2c:2b:e0:55:13:c1:68: bc:2a:15:9e:a3:fc:34:49:d6:e2:15:7e:37:c3:25: 1c:92:e3:85:1b:13:2e:89:af:e9:4b:37:89:2a:bd: f6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1C:5E:67:47:C9:53:D8:69:D4:88:97:FC:2A:6C:94:76:DF:96:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/d8de2f24-85d0-37dd-a2f8-018801ca07ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl X509v3 Authority Key Identifier: keyid:83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer sbgp-ipAddrBlock: critical IPv4: 45.45.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b8:63:c1:b2:68:32:ed:ff:a8:3c:30:ea:90:3f:f4:5c:1c: a7:8a:ed:29:c3:2d:2c:61:a3:94:08:f8:95:5e:6d:11:50:75: b5:b9:13:cd:b8:44:12:dd:78:5e:53:46:f9:c5:fc:1a:ba:63: 7c:e6:38:a9:c5:50:01:cb:17:e2:48:4e:09:77:34:29:89:16: ef:4f:2f:da:b4:5e:8b:b8:66:19:40:9d:57:7e:23:c1:8d:da: 86:cf:ce:70:d0:ab:31:06:63:0c:70:34:48:11:5c:3f:ec:b9: ac:49:31:a5:73:ec:0c:55:11:86:29:7b:1b:96:9a:5c:18:f4: db:09:99:62:d3:24:8e:7f:07:12:17:62:03:4c:91:05:64:d3: f2:b3:d3:92:2f:c5:7f:8e:62:a1:6e:09:a8:88:5a:6c:fa:d8: 8c:a1:3e:01:b9:de:91:ae:54:6b:66:f5:d3:ae:9d:bf:6d:0f: 4c:32:13:aa:0f:d1:a1:37:d8:c0:b8:9f:87:bf:e8:9a:ef:45: 42:42:33:3e:f3:d6:16:57:ea:5c:2f:1c:2d:fc:fd:39:6f:6e: 2f:9b:6e:02:1b:b3:bf:b9:9c:34:68:7e:c2:51:d3:f5:68:1f: 94:72:a9:04:c7:aa:2b:99:07:29:03:c7:62:7a:98:01:ef:2f: 19:80:3b:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzFjcLMSeXRcbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJmYmRhYzgtMjBjMC00ZGE0LTg2NTQtMjdiNGJmNTky OTMwMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ODVkZDdiODktMDhiNC00NTM0LWI5MjgtODlmZTM1YzVkNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IcDbjJUshUsNYMZNFqWSkBxe98tfAY0QhMu E5NfGYEgGtaWZW0CSjDDiM4h8GuCP2tJrC1iITSKR60M0oDX6zEydtl9LXssKZOz oxwr19kgrY8Nr/15uMHLDkQlEJY56Tdeyt6aMWu46h/oWmpUCKaWk72aH49mffM6 osrF2zt6LK3JvLB8RH9QjbmrqU1DeTh3pRC3qgqEdk6W+2TWd56HXFtJ/q3R+a46 YMm14lt8EfX68UnZq1i4oEaAUqw9fdtvlY0pU67LAyYHbGlICGqWy8L8+SSz7ywr 4FUTwWi8KhWeo/w0SdbiFX43wyUckuOFGxMuia/pSzeJKr32DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4cXmdHyVPYadSIl/wqbJR235YpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81MmZi ZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0YmY1OTI5MzAvZDhkZTJmMjQtODVkMC0z N2RkLWEyZjgtMDE4ODAxY2EwN2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNTJmYmRhYzgtMjBjMC00ZGE0LTg2 NTQtMjdiNGJmNTkyOTMwLzUyZmJkYWM4LTIwYzAtNGRhNC04NjU0LTI3YjRiZjU5 MjkzMC5jcmwwHwYDVR0jBBgwFoAUg/WmWf8elpbI5bS53/Y9NykwpHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81MmZiZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0 YmY1OTI5MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa4Y8GyaDLt/6g8MOqQP/RcHKeK7SnDLSxho5QI+JVebRFQdbW5E824 RBLdeF5TRvnF/Bq6Y3zmOKnFUAHLF+JITgl3NCmJFu9PL9q0Xou4ZhlAnVd+I8GN 2obPznDQqzEGYwxwNEgRXD/suaxJMaVz7AxVEYYpexuWmlwY9NsJmWLTJI5/BxIX YgNMkQVk0/Kz05IvxX+OYqFuCaiIWmz62IyhPgG53pGuVGtm9dOunb9tD0wyE6oP 0aE32MC4n4e/6JrvRUJCMz7z1hZX6lwvHC38/Tlvbi+bbgIbs7+5nDRofsJR0/Vo H5RyqQTHqiuZBykDx2J6mAHvLxmAO/s= -----END CERTIFICATE-----Generated at Sat May 10 14:53:48 2025 by rpki-client