$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa File: 49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa (raw, json) Hash identifier: MOWjLVaL3HFXCS5CkOGZV63UuDRyd8eUmIrgxv+KcsE= Subject key identifier: 4C:1E:A0:B9:D3:D8:86:A5:36:A2:08:DF:02:82:75:4B:C1:24:A5:39 Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F432858492CAE8D05B3DF4475DB0A9600 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 35860 IP address blocks: 63.133.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:8d:05:b3:df:44:75:db:0a:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=2d4dc692-c774-4a7a-92e9-ae02e436cfee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:71:68:62:c3:b9:ef:73:02:26:1c:e3:70:31: ca:0a:6b:a3:70:16:d5:f0:4c:75:dc:71:f0:b5:30: c2:a0:19:d9:c9:8a:95:45:25:3e:d7:08:7c:00:58: 57:38:b7:c1:e5:f0:15:d5:30:eb:6e:b8:f8:b8:b3: 8f:d1:c3:ac:12:11:63:92:1a:2e:78:cb:8f:85:11: c4:db:bd:80:22:45:ed:19:02:32:c0:96:78:f4:c3: 78:61:95:93:b3:1f:47:0f:e9:5d:fb:6e:66:70:09: 73:f1:f7:94:36:d2:61:59:2c:64:7d:52:1d:de:de: 5e:0e:6c:83:7b:e1:6a:8c:fe:2e:28:b3:26:3f:bb: 5c:5d:e9:fc:ce:a3:28:f7:89:d0:52:a0:c4:4c:b6: 22:38:56:29:cb:3e:a3:4a:1a:75:ad:57:e7:d7:77: 06:cd:ea:59:e5:b4:b1:0a:1f:25:cc:4e:92:4e:3e: a2:89:ca:ed:b7:f8:54:26:5b:83:ba:75:22:8f:2e: be:b7:63:fc:02:37:a5:73:45:dc:04:67:c1:62:44: 4d:80:4d:da:9a:0e:5b:24:be:29:ee:11:2d:bb:df: 8b:3f:fa:bf:ac:62:06:41:a5:2b:11:eb:c5:3e:db: 26:70:60:e2:4b:cb:68:7c:d5:b6:44:87:bc:d8:eb: 4d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1E:A0:B9:D3:D8:86:A5:36:A2:08:DF:02:82:75:4B:C1:24:A5:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 63.133.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:aa:c4:c0:89:18:98:29:fa:c7:52:d0:e1:5a:b5:8f:9d:99: b4:ef:2f:70:2c:87:70:75:4e:85:83:73:ae:ae:73:a9:25:7d: b8:a5:69:ff:a5:85:1d:3e:de:89:2c:c3:47:05:95:c6:ef:e4: 04:af:f0:3c:dd:30:b7:94:c3:eb:65:27:f1:fa:f0:51:6e:bc: 0e:3a:79:59:51:9b:23:57:b7:de:87:5d:52:e5:f2:20:39:92: e5:4b:64:71:cd:a9:6c:53:32:63:8f:59:5f:81:74:79:e8:5c: 90:dd:7a:a0:d6:f1:1c:06:da:25:f8:76:7a:7d:c4:d3:a2:0f: d1:59:8f:53:28:7b:0f:79:52:95:82:43:3d:fd:36:8a:7c:0a: d6:6f:18:d8:89:10:d4:bc:38:e4:07:de:0b:b0:b9:7c:76:49: db:6c:b0:8f:8d:27:3b:f1:6e:c6:8c:68:44:95:a0:f0:ca:97: 7b:b0:f9:bd:95:0d:40:a3:aa:9b:19:d2:d7:a3:eb:88:6c:e5: bd:3a:5c:32:cf:5e:85:4e:49:c4:dc:c7:dd:4b:5a:c3:2e:2f: a0:9a:96:31:e4:62:13:d6:b7:d3:64:e5:50:65:86:d9:fe:35: 11:3a:cc:73:1c:83:c7:63:f6:f1:dd:8c:e6:af:53:32:16:d3: 53:19:58:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksro0Fs99EddsKlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MmQ0ZGM2OTItYzc3NC00YTdhLTkyZTktYWUwMmU0MzZjZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3FoYsO573MCJhzjcDHKCmujcBbV8Ex13HHw tTDCoBnZyYqVRSU+1wh8AFhXOLfB5fAV1TDrbrj4uLOP0cOsEhFjkhoueMuPhRHE 272AIkXtGQIywJZ49MN4YZWTsx9HD+ld+25mcAlz8feUNtJhWSxkfVId3t5eDmyD e+FqjP4uKLMmP7tcXen8zqMo94nQUqDETLYiOFYpyz6jShp1rVfn13cGzepZ5bSx Ch8lzE6STj6iicrtt/hUJluDunUijy6+t2P8Ajelc0XcBGfBYkRNgE3amg5bJL4p 7hEtu9+LP/q/rGIGQaUrEevFPtsmcGDiS8tofNW2RIe82OtNBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEweoLnT2IalNqII3wKCdUvBJKU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvNDljMzA5MmMtMTdmZS0z YTgxLWIzZWQtMTRmNTU2MjBkOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBP4XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSqxMCJGJgp+sdS0OFatY+dmbTvL3Ash3B1ToWDc66uc6klfbilaf+l hR0+3oksw0cFlcbv5ASv8DzdMLeUw+tlJ/H68FFuvA46eVlRmyNXt96HXVLl8iA5 kuVLZHHNqWxTMmOPWV+BdHnoXJDdeqDW8RwG2iX4dnp9xNOiD9FZj1Moew95UpWC Qz39Nop8CtZvGNiJENS8OOQH3guwuXx2SdtssI+NJzvxbsaMaESVoPDKl3uw+b2V DUCjqpsZ0tej64hs5b06XDLPXoVOScTcx91LWsMuL6CaljHkYhPWt9Nk5VBlhtn+ NRE6zHMcg8dj9vHdjOavUzIW01MZWFk= -----END CERTIFICATE-----Generated at Sat Apr 12 16:12:58 2025 by rpki-client