$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa File: 866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa (raw, json) Hash identifier: qmZvJbiFvU/M/DbPo7l79EQo5ouqLDlIsJlmJhxUFu8= Subject key identifier: 96:E6:62:0B:A0:02:FA:25:47:57:F7:16:4C:3E:7E:C1:38:4B:0E:C3 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F432858456F1DCA8E3F69D3FE3F40EB00 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa Signing time: Thu 04 Apr 2024 13:00:36 +0000 ROA not before: Thu 04 Apr 2024 13:00:36 +0000 ROA not after: Wed 03 Jul 2024 13:00:36 +0000 asID: 13325 IP address blocks: 204.25.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6f:1d:ca:8e:3f:69:d3:fe:3f:40:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Apr 4 13:00:36 2024 GMT Not After : Jul 3 13:00:36 2024 GMT Subject: CN=052c1bfa-be6a-4c8a-8968-60c6879c4f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:39:e2:57:15:43:ec:e7:47:a5:a6:83:50:d4: 72:51:4d:58:c4:7d:51:f4:a0:56:2c:59:68:5e:50: 0a:02:7c:33:07:64:9a:71:f9:e1:1a:cd:3a:04:36: fb:0d:98:f6:d5:17:c4:f2:20:f4:fd:a9:7f:d6:9f: ae:99:33:56:4d:ea:52:45:02:ac:2f:cd:12:d6:bf: 15:e7:82:fe:b1:0c:d7:6e:5d:cd:d2:ca:ed:9f:f2: 93:32:89:10:f0:f7:ff:16:b1:c1:c8:ee:13:01:3e: 02:62:a2:55:83:69:c7:9e:c4:7d:4d:4d:1f:1a:e7: f8:6f:d9:da:34:b6:14:2d:09:4d:03:bc:e6:f0:1e: a2:12:8a:d1:ea:f3:f0:e3:55:c1:2f:0b:0a:1f:cb: 78:24:02:fd:78:af:eb:9c:17:cf:c6:19:1b:5f:2f: 88:a7:14:3b:05:ee:ff:26:bc:57:92:af:06:83:11: 9b:28:4c:21:86:07:a6:09:9d:f3:82:82:9d:27:1f: 68:64:94:b9:af:cd:2e:a4:a8:2b:b7:03:6d:00:c5: 5a:47:f3:27:17:46:6b:f9:50:dd:6b:1c:1c:a2:02: 24:52:f9:ef:be:99:59:8c:11:61:32:84:b0:ea:99: 04:a9:70:39:a2:c2:d2:4c:a7:da:9b:86:fc:6d:2f: 69:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E6:62:0B:A0:02:FA:25:47:57:F7:16:4C:3E:7E:C1:38:4B:0E:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 204.25.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:37:fc:69:96:e6:72:37:bf:43:4f:b1:5c:13:97:64:a7:44: c6:22:66:5c:e5:bf:1c:fa:ed:d4:ad:c4:e2:d2:f8:2e:a9:1f: aa:ea:9d:13:ff:bc:52:f8:40:ea:34:85:3a:6c:d6:46:9d:3f: 77:8f:79:ee:df:4a:ff:f4:ad:7a:de:18:bb:1c:63:80:86:e4: 6b:70:6a:96:35:36:b0:d2:0f:de:2e:f0:56:eb:4e:e0:3e:6c: c0:dc:22:18:37:e5:a0:d7:d8:1c:94:8d:46:21:d8:0b:d2:f2: ee:2f:01:1b:22:08:d3:3f:0b:b0:fa:03:04:ea:8a:6c:52:47: 02:ed:4c:12:de:75:66:ad:e8:0f:b7:a9:e4:4e:78:7e:52:da: 69:e8:32:34:b1:33:4e:2c:30:36:6b:59:1a:b6:e6:fe:f0:ac: c4:bf:a3:c9:d7:cf:bb:ce:0f:ca:0f:72:61:8c:62:b5:a5:60: df:0e:9a:1d:b9:84:61:ce:0e:f7:56:fe:cb:3b:43:1b:81:3d: f9:ec:a1:c8:da:61:b5:a6:84:c0:5a:cd:2f:ef:69:14:a9:45: 7a:e9:03:24:fb:27:28:a7:92:fc:1d:68:26:bb:17:7c:02:b9: 1f:ba:b3:2d:0c:3d:59:75:f6:f9:50:dd:fe:48:72:c8:71:88: a7:4d:da:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVvHcqOP2nT/j9A6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI0MDQwNDEzMDAzNloXDTI0MDcwMzEzMDAzNlowLzEtMCsGA1UEAxMk MDUyYzFiZmEtYmU2YS00YzhhLTg5NjgtNjBjNjg3OWM0ZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzniVxVD7OdHpaaDUNRyUU1YxH1R9KBWLFlo XlAKAnwzB2SacfnhGs06BDb7DZj21RfE8iD0/al/1p+umTNWTepSRQKsL80S1r8V 54L+sQzXbl3N0srtn/KTMokQ8Pf/FrHByO4TAT4CYqJVg2nHnsR9TU0fGuf4b9na NLYULQlNA7zm8B6iEorR6vPw41XBLwsKH8t4JAL9eK/rnBfPxhkbXy+IpxQ7Be7/ JrxXkq8GgxGbKEwhhgemCZ3zgoKdJx9oZJS5r80upKgrtwNtAMVaR/MnF0Zr+VDd axwcogIkUvnvvplZjBFhMoSw6pkEqXA5osLSTKfam4b8bS9pPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbmYgugAvolR1f3Fkw+fsE4Sw7DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvODY2ZGEzZTAtMGQyZi0z OWU1LTg2OGItMmY2MGU0ZmY5MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzBkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHk3/GmW5nI3v0NPsVwTl2SnRMYiZlzlvxz67dStxOLS+C6pH6rqnRP/ vFL4QOo0hTps1kadP3ePee7fSv/0rXreGLscY4CG5GtwapY1NrDSD94u8FbrTuA+ bMDcIhg35aDX2ByUjUYh2AvS8u4vARsiCNM/C7D6AwTqimxSRwLtTBLedWat6A+3 qeROeH5S2mnoMjSxM04sMDZrWRq25v7wrMS/o8nXz7vOD8oPcmGMYrWlYN8Omh25 hGHODvdW/ss7QxuBPfnsocjaYbWmhMBazS/vaRSpRXrpAyT7JyinkvwdaCa7F3wC uR+6sy0MPVl19vlQ3f5IcshxiKdN2kI= -----END CERTIFICATE-----Generated at Wed May 15 16:06:06 2024 by rpki-client on console-ams.rpki-client.org