$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/b8284293-bc14-36f3-a3bd-f5e172f91d0f.roa File: b8284293-bc14-36f3-a3bd-f5e172f91d0f.roa (raw, json) Hash identifier: MkGeKr3W/KF2T9YUrVVRsYsvgzv6Ub4yz7m2Q2H93jo= Subject key identifier: 24:AA:9C:E7:02:F9:B5:E8:F1:42:98:D1:38:58:20:AA:C7:E5:45:CC Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F432858496E4989E9E6595461996B4380 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/b8284293-bc14-36f3-a3bd-f5e172f91d0f.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 35860 IP address blocks: 63.133.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:89:e9:e6:59:54:61:99:6b:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=4faf5907-6cb2-4280-8832-64581247f47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d9:a2:85:06:4f:68:db:c8:ea:2b:13:60:4e: 39:f6:01:da:8c:10:50:97:5f:89:e3:84:12:6b:2e: 84:75:37:1c:dd:bc:04:50:0d:22:a1:0a:89:b9:44: 82:a4:a9:08:3e:83:9c:b2:49:e4:03:96:f4:ee:99: 93:49:0c:2c:ca:1a:9e:17:f8:ed:a8:d5:a7:66:56: ed:38:4c:06:2e:d9:74:9e:62:3b:75:c5:12:aa:76: 9b:41:cc:15:c1:4a:62:46:82:b0:b9:1b:88:49:5c: 0e:49:02:83:83:b9:0d:79:c6:70:4b:6b:d8:48:11: 54:91:0f:45:b8:d7:0a:5f:ea:d6:bd:8b:1e:b8:cb: 45:c1:33:4d:1f:d7:1f:dd:63:52:39:bf:25:f9:ca: 8f:10:45:54:ca:19:76:2f:2f:62:ad:87:2b:b5:c6: 72:8e:03:3e:9e:e0:1b:81:55:ac:56:98:5e:e1:cb: d1:d4:30:44:69:3e:98:fb:d1:35:93:37:cb:9e:49: 15:d2:47:54:46:c8:db:e7:9e:43:cc:c0:3a:c5:6d: 6b:c0:03:21:47:8f:6b:c8:9f:68:77:a1:d3:3e:3d: 57:a3:7c:59:4e:15:bb:c2:0b:b5:c5:09:7d:c8:f2: ad:b7:79:19:1c:d7:de:4e:e4:c2:88:02:55:af:36: ff:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AA:9C:E7:02:F9:B5:E8:F1:42:98:D1:38:58:20:AA:C7:E5:45:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/b8284293-bc14-36f3-a3bd-f5e172f91d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 63.133.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ab:fe:08:f4:7c:2b:7b:7e:52:0d:61:e4:6c:d9:02:25:8a: 1f:ce:6b:30:72:4f:ed:65:03:e9:ef:60:09:70:51:28:e0:50: d0:3f:b7:54:0d:b8:b7:52:dd:f9:40:d6:0a:72:a9:a6:a5:38: 1f:aa:23:30:3c:7f:d2:e2:1f:14:76:f6:a5:c3:f7:7c:99:b0: 0f:7f:39:96:97:fc:73:9b:e9:8e:3a:d1:a9:4b:ef:17:04:35: 76:71:4b:e9:89:53:29:b8:2e:04:56:1d:7f:bb:27:54:45:5a: 87:70:e1:c0:b9:03:1d:42:8b:c4:c7:1f:e7:37:ab:a3:3f:bd: 89:28:aa:d7:4b:93:cd:e1:78:a7:52:0a:84:b3:26:dd:83:c5: 3f:e7:90:42:f3:a4:e3:a7:97:17:6c:65:9e:57:b4:e5:d5:61: f6:cc:c0:77:2d:6c:b0:9d:ca:d8:a2:57:fe:e9:6b:e4:cd:8f: 8c:c4:66:39:f6:0e:2d:a7:42:7a:30:53:44:5b:d0:8e:77:e0: 61:47:7a:d4:4a:5b:bc:e1:8c:8a:e4:41:2d:35:97:9c:4b:ae: 59:95:26:92:9a:d0:eb:15:6a:31:28:8f:f5:77:c4:9e:3b:3c: cc:ad:df:03:b2:ef:a9:c3:c1:86:63:65:10:aa:a8:25:3a:25: 5f:95:f2:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYnp5llUYZlrQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk NGZhZjU5MDctNmNiMi00MjgwLTg4MzItNjQ1ODEyNDdmNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNmihQZPaNvI6isTYE459gHajBBQl1+J44QS ay6EdTcc3bwEUA0ioQqJuUSCpKkIPoOcsknkA5b07pmTSQwsyhqeF/jtqNWnZlbt OEwGLtl0nmI7dcUSqnabQcwVwUpiRoKwuRuISVwOSQKDg7kNecZwS2vYSBFUkQ9F uNcKX+rWvYseuMtFwTNNH9cf3WNSOb8l+cqPEEVUyhl2Ly9irYcrtcZyjgM+nuAb gVWsVphe4cvR1DBEaT6Y+9E1kzfLnkkV0kdURsjb555DzMA6xW1rwAMhR49ryJ9o d6HTPj1Xo3xZThW7wgu1xQl9yPKtt3kZHNfeTuTCiAJVrzb/3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSqnOcC+bXo8UKY0ThYIKrH5UXMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvYjgyODQyOTMtYmMxNC0z NmYzLWEzYmQtZjVlMTcyZjkxZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4XRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABar/gj0fCt7flINYeRs2QIlih/OazByT+1lA+nvYAlwUSjgUNA/t1QN uLdS3flA1gpyqaalOB+qIzA8f9LiHxR29qXD93yZsA9/OZaX/HOb6Y460alL7xcE NXZxS+mJUym4LgRWHX+7J1RFWodw4cC5Ax1Ci8THH+c3q6M/vYkoqtdLk83heKdS CoSzJt2DxT/nkELzpOOnlxdsZZ5XtOXVYfbMwHctbLCdytiiV/7pa+TNj4zEZjn2 Di2nQnowU0Rb0I534GFHetRKW7zhjIrkQS01l5xLrlmVJpKa0OsVajEoj/V3xJ47 PMyt3wOy76nDwYZjZRCqqCU6JV+V8v0= -----END CERTIFICATE-----Generated at Sat Apr 12 16:13:00 2025 by rpki-client