$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa File: fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa (raw, json) Hash identifier: uZ9jesH9RIjzXz2j3lSZU6p6Tqdua/N5aMrT95xKERI= Subject key identifier: E2:45:B9:F0:1E:B9:4F:03:79:37:72:EF:A8:4C:E6:97:AB:81:B5:AC Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F43285849BC74AD0F5CAEF6EA87339400 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 53414 IP address blocks: 45.72.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:ad:0f:5c:ae:f6:ea:87:33:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=0e713552-7e8f-4601-8180-161b446aa0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:61:eb:3c:c1:1b:4e:19:fb:52:c0:8c:f6:e7: 54:80:16:46:cd:c7:2a:4f:a8:42:54:3a:2f:ee:2e: 17:ca:3b:86:ef:e1:9a:24:2a:a3:98:9e:93:44:ba: 0a:c4:f7:dd:c9:b3:5d:2c:34:31:c6:df:90:d6:ad: 1a:46:1e:40:24:12:ae:55:1d:9d:34:7e:b0:db:dc: 4f:c3:32:d8:00:52:2e:d7:ba:b9:47:76:3d:5f:52: 9a:38:12:33:28:37:2a:2b:0c:ea:6b:b9:b9:28:59: 22:68:b1:1a:c4:38:bf:14:47:c7:f6:36:b6:4b:59: 2d:a5:90:6f:dc:01:89:fa:29:25:74:01:43:ef:61: 75:54:e7:ea:38:3e:8f:af:fa:23:bd:56:a7:79:10: 24:2f:26:8c:07:a3:65:a3:21:e0:b1:94:60:e8:19: b6:91:cd:7b:79:bf:77:67:79:37:4e:c5:17:82:b3: 5b:81:25:34:42:fe:b7:56:1d:6f:9d:e2:e4:02:f8: 45:15:2d:81:72:c8:51:3b:61:50:a2:9e:99:46:cd: e2:f4:c6:f0:ae:3b:f0:69:34:69:6d:ae:f4:65:f0: 60:58:44:c0:cc:dd:c8:69:5c:46:34:58:bb:61:06: e4:5b:b5:e9:01:ef:94:0e:f5:8d:0c:77:ab:62:44: 8a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:45:B9:F0:1E:B9:4F:03:79:37:72:EF:A8:4C:E6:97:AB:81:B5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 45.72.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b6:40:41:33:b4:d3:6a:3e:85:69:26:94:ff:ea:9e:94:98: 61:8f:33:f6:bd:8a:df:f0:e4:bb:de:c6:5c:c7:11:b6:4d:bc: b7:16:92:98:96:20:09:65:4f:2a:9c:83:e6:2a:14:2b:ba:4b: 31:40:34:3e:1c:6f:b7:af:af:e5:74:61:46:f0:c5:ba:b8:9d: 55:fc:ed:02:19:55:28:fd:b5:f6:c5:e3:b2:9d:ad:0a:62:9a: 22:2d:d5:66:18:eb:1f:1f:fa:65:be:36:43:8e:d9:82:c9:f2: 3c:b1:b8:66:b9:a0:71:83:18:9f:02:5c:fd:04:de:4c:d2:f7: a3:99:a7:9d:8e:0c:30:19:4b:e0:08:61:ac:8c:a9:e3:61:a4: c7:52:56:5f:48:b3:eb:c9:6d:c4:11:9b:e5:b6:c7:d2:1a:5e: 45:5c:d9:0d:f9:a1:ba:4a:07:86:e3:01:69:08:46:ef:22:f7: 4f:89:1f:7f:3a:0d:fc:f8:57:75:81:f3:ab:6b:65:c8:5c:c0: 5f:27:80:46:1c:c7:db:cc:33:8e:09:0a:94:0e:fc:30:b2:3e: b4:22:d2:96:0b:5e:78:8a:c4:5e:c7:2c:dc:88:f6:31:34:19: dc:6f:db:c6:1f:dc:52:d2:20:ca:e5:a4:27:3c:e6:a5:0d:f2: de:82:d2:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dK0PXK726oczlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk MGU3MTM1NTItN2U4Zi00NjAxLTgxODAtMTYxYjQ0NmFhMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82HrPMEbThn7UsCM9udUgBZGzccqT6hCVDov 7i4XyjuG7+GaJCqjmJ6TRLoKxPfdybNdLDQxxt+Q1q0aRh5AJBKuVR2dNH6w29xP wzLYAFIu17q5R3Y9X1KaOBIzKDcqKwzqa7m5KFkiaLEaxDi/FEfH9ja2S1ktpZBv 3AGJ+ikldAFD72F1VOfqOD6Pr/ojvVaneRAkLyaMB6NloyHgsZRg6Bm2kc17eb93 Z3k3TsUXgrNbgSU0Qv63Vh1vneLkAvhFFS2BcshRO2FQop6ZRs3i9MbwrjvwaTRp ba70ZfBgWETAzN3IaVxGNFi7YQbkW7XpAe+UDvWNDHerYkSKFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJFufAeuU8DeTdy76hM5pergbWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZmNmNmQwYzMtYjcxMS0z YTVkLThmMDctMDFmN2M2OWE4NGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJG2QEEztNNqPoVpJpT/6p6UmGGPM/a9it/w5LvexlzHEbZNvLcWkpiW IAllTyqcg+YqFCu6SzFAND4cb7evr+V0YUbwxbq4nVX87QIZVSj9tfbF47KdrQpi miIt1WYY6x8f+mW+NkOO2YLJ8jyxuGa5oHGDGJ8CXP0E3kzS96OZp52ODDAZS+AI YayMqeNhpMdSVl9Is+vJbcQRm+W2x9IaXkVc2Q35obpKB4bjAWkIRu8i90+JH386 Dfz4V3WB86trZchcwF8ngEYcx9vMM44JCpQO/DCyPrQi0pYLXniKxF7HLNyI9jE0 Gdxv28Yf3FLSIMrlpCc85qUN8t6C0ng= -----END CERTIFICATE-----Generated at Tue May 6 07:35:50 2025 by rpki-client