$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/3c529cbb-9f8d-34c8-9371-e628e7734516.roa File: 3c529cbb-9f8d-34c8-9371-e628e7734516.roa (raw, json) Hash identifier: RdrgxmW1aRxzbWkhF/2gad7sA4IqWyzaChwSqWVbC9Q= Subject key identifier: AB:7D:FB:36:15:46:71:1C:C2:75:C9:EE:65:9C:D6:4F:72:97:64:36 Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F432858495ABEBCE3A4954AFF74B4FE00 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/3c529cbb-9f8d-34c8-9371-e628e7734516.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 35860 IP address blocks: 63.133.208.0/22 maxlen: 22 74.119.52.0/22 maxlen: 22 74.119.52.0/24 maxlen: 24 74.119.53.0/24 maxlen: 24 192.149.254.0/23 maxlen: 23 192.149.254.0/24 maxlen: 24 192.149.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:bc:e3:a4:95:4a:ff:74:b4:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=e8331ad2-9ed9-414f-afac-8a24c262aea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:f5:68:19:cd:e3:5f:cc:5e:61:df:b1:1a: 12:b6:07:88:67:63:ff:92:d4:a1:df:ed:44:8e:a0: 0c:03:d8:51:5d:9d:95:50:fd:07:0f:24:d9:76:c5: 82:bd:ec:36:10:56:4f:92:1d:d0:f5:8e:5d:a6:6a: b0:ec:a5:d9:58:f4:0c:b0:1b:68:c2:07:4d:f2:2d: 9b:da:ae:9d:d2:09:51:d6:6c:66:08:ef:d8:f2:8f: bf:5a:4e:98:fb:46:16:91:e4:e5:80:3f:30:94:18: c8:11:ca:37:42:73:94:92:71:4f:02:8d:05:95:64: bc:d7:33:55:53:38:4e:56:9a:62:53:a2:cf:98:5b: ab:f2:eb:11:18:d9:e4:eb:d0:73:ef:08:00:f5:4a: 61:1a:97:be:9c:45:e0:e5:a8:04:1b:5d:b1:59:96: 23:35:3d:4b:9e:2d:13:bc:4c:e2:b2:a5:c1:6b:91: 44:ff:24:0f:72:d4:6f:fd:e2:26:dd:1d:b3:02:4c: 39:e9:7f:97:00:e7:91:4d:c2:e1:1a:fc:12:05:9c: 53:9f:37:b5:10:c8:70:41:f5:c5:d0:1e:2e:61:c3: f8:1d:9b:22:2a:aa:6b:79:3f:2e:83:5a:82:e7:3d: aa:10:4a:77:21:73:79:e3:f8:24:22:fe:b4:76:79: 05:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7D:FB:36:15:46:71:1C:C2:75:C9:EE:65:9C:D6:4F:72:97:64:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/3c529cbb-9f8d-34c8-9371-e628e7734516.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 63.133.208.0/22 74.119.52.0/22 192.149.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:45:ad:de:e9:b8:6c:57:a9:24:a8:e1:ff:25:8d:95:80:15: 76:20:2e:3e:9b:23:0c:81:d8:15:63:a4:80:0b:39:4f:85:c9: 5a:28:95:41:86:61:0a:b9:27:70:cd:8c:0a:2a:ea:24:42:36: 92:65:9a:0b:51:48:01:9e:e9:26:fd:cd:ce:5c:a7:98:c0:e5: e8:63:75:10:3a:88:7c:65:85:2f:e2:12:b6:83:fe:df:73:91: ac:f0:43:68:18:cc:e7:38:e3:21:b3:cb:07:8e:bd:57:23:03: 51:6c:ca:11:68:30:ed:17:b4:a8:a7:7c:c7:7c:e8:f2:e1:a4: 97:89:63:70:33:cd:c6:91:6b:b0:2b:74:03:a8:7b:fc:9e:6f: 83:1c:cf:0c:31:0d:60:a5:d4:61:9a:24:1a:22:b3:97:54:7d: 78:66:ae:70:e5:55:ab:73:54:20:c3:20:72:c1:6b:f2:8f:aa: b0:1e:e2:d4:32:4a:e5:4c:4c:e4:54:f6:fa:5e:b4:81:be:2d: 24:77:da:38:72:66:e7:fe:18:64:ac:9c:56:9a:0a:84:71:e0: 96:f0:86:44:fc:57:e7:d3:d4:41:0b:f8:67:36:ef:bc:bc:31: c0:3d:9d:1f:2a:28:73:51:63:51:bd:37:0f:dc:b6:d4:11:c5: 0f:b0:dd:4e -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWElavrzjpJVK/3S0/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZTgzMzFhZDItOWVkOS00MTRmLWFmYWMtOGEyNGMyNjJhZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUv1aBnN41/MXmHfsRoStgeIZ2P/ktSh3+1E jqAMA9hRXZ2VUP0HDyTZdsWCvew2EFZPkh3Q9Y5dpmqw7KXZWPQMsBtowgdN8i2b 2q6d0glR1mxmCO/Y8o+/Wk6Y+0YWkeTlgD8wlBjIEco3QnOUknFPAo0FlWS81zNV UzhOVppiU6LPmFur8usRGNnk69Bz7wgA9UphGpe+nEXg5agEG12xWZYjNT1Lni0T vEzisqXBa5FE/yQPctRv/eIm3R2zAkw56X+XAOeRTcLhGvwSBZxTnze1EMhwQfXF 0B4uYcP4HZsiKqpreT8ug1qC5z2qEEp3IXN54/gkIv60dnkFBwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFKt9+zYVRnEcwnXJ7mWc1k9yl2Q2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvM2M1MjljYmItOWY4ZC0z NGM4LTkzNzEtZTYyOGU3NzM0NTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCP4XQAwQC Snc0AwQBwJX+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADBFrd7puGxXqSSo4f8ljZWAFXYgLj6bIwyB2BVj pIALOU+FyVoolUGGYQq5J3DNjAoq6iRCNpJlmgtRSAGe6Sb9zc5cp5jA5ehjdRA6 iHxlhS/iEraD/t9zkazwQ2gYzOc44yGzyweOvVcjA1FsyhFoMO0XtKinfMd86PLh pJeJY3AzzcaRa7ArdAOoe/yeb4MczwwxDWCl1GGaJBois5dUfXhmrnDlVatzVCDD IHLBa/KPqrAe4tQySuVMTORU9vpetIG+LSR32jhyZuf+GGSsnFaaCoRx4JbwhkT8 V+fT1EEL+Gc277y8McA9nR8qKHNRY1G9Nw/cttQRxQ+w3U4= -----END CERTIFICATE-----Generated at Sat Apr 12 16:29:21 2025 by rpki-client