$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa File: ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa (raw, json) Hash identifier: ykPRa6yB1FlCiCYb4bAC1xGqj0I3pBZwtTbC+5nnQAg= Subject key identifier: 92:69:F9:66:E5:93:23:E8:E2:28:5B:71:94:9A:5D:55:BA:77:D2:DF Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F432858496B7ED71055C90D0F70069200 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa Signing time: Sat 05 Apr 2025 01:00:47 +0000 ROA not before: Sat 05 Apr 2025 01:00:47 +0000 ROA not after: Fri 04 Jul 2025 01:00:47 +0000 asID: 35860 IP address blocks: 63.133.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:7e:d7:10:55:c9:0d:0f:70:06:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Apr 5 01:00:47 2025 GMT Not After : Jul 4 01:00:47 2025 GMT Subject: CN=f22e54c0-d3b7-4745-ba3f-5c191d32ef8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:98:51:7b:bb:c1:fa:60:39:0c:49:e5:2a:86: 30:95:d3:c6:21:33:1c:e6:f9:4b:c1:7a:7b:4c:5f: 44:d0:f0:13:c6:92:25:6b:96:48:1b:b4:c2:00:44: 6c:37:38:62:9b:48:1e:dc:3a:17:e9:44:05:43:49: c4:9d:0b:87:5d:3f:b9:8f:c8:28:96:d6:2c:f8:e3: 14:7a:fc:a7:6e:45:da:b6:14:21:1a:2b:40:a2:10: 1e:eb:2b:58:86:b2:93:6c:63:55:8c:c9:57:14:33: 4d:0e:de:4a:8f:33:40:70:1c:4e:be:8c:54:81:2b: 69:d0:02:91:91:6a:9c:7e:c2:d2:02:0d:ef:f9:2a: 85:f9:89:b0:83:12:3c:50:f0:04:f4:32:a2:61:c1: a7:5d:ff:80:11:84:90:8e:3f:01:eb:06:bc:da:c6: 10:70:1b:cf:30:54:04:64:18:7a:9f:68:c4:92:7c: 13:1d:54:0c:b8:76:90:00:42:61:af:68:04:ab:f4: 23:66:5a:b1:3e:a5:e3:16:f5:ef:fc:c3:a7:94:b8: e5:bc:30:b1:b2:63:04:b1:50:fb:ab:83:39:5c:7b: 5a:1e:6d:03:a2:4d:8c:15:89:c7:7b:23:db:0a:ab: 6a:39:3b:5e:08:bd:87:c3:d7:c2:55:6d:71:f2:8f: d6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:69:F9:66:E5:93:23:E8:E2:28:5B:71:94:9A:5D:55:BA:77:D2:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 63.133.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:4a:10:80:a4:ec:8b:9c:5b:fd:93:d7:87:ee:4b:58:da:b8: a1:6e:b3:b8:48:d6:41:8a:fd:81:82:d3:63:e8:14:d4:f2:4f: 5d:0b:53:64:32:83:fe:cc:c7:f7:f0:c4:bc:4c:3b:b1:aa:bf: b7:bf:8a:48:58:c7:ba:44:b9:a9:11:24:14:88:5f:23:22:d1: 19:92:6f:48:e2:ab:d1:24:7c:01:82:42:51:fa:b2:13:5b:11: de:1a:bf:8a:73:09:ea:27:27:cf:fa:31:6c:96:2c:98:10:ca: b9:e9:5a:0f:07:2a:e1:6c:d4:44:db:4f:17:80:14:6c:a4:95: f0:16:1a:f5:54:e5:e3:cd:16:db:3a:9d:bc:56:c3:f1:a6:1e: 10:aa:7e:5b:cb:39:82:24:d8:70:3c:07:81:d0:c0:27:1b:3b: c9:f4:54:c8:df:48:15:9e:0e:de:6a:8b:d5:21:03:ab:5b:30: 07:c8:2a:8f:24:a7:60:bd:14:aa:f1:8a:90:be:44:cc:76:d7: 82:a7:cd:e0:22:04:a6:b5:29:89:7e:01:85:fd:f3:33:93:cd: d7:c3:59:da:bd:80:d0:0b:e8:14:d3:68:ae:e8:7c:7e:3c:56: 06:7e:26:de:42:70:4d:a6:b3:b8:84:42:d1:a9:1d:25:42:27: a0:c1:83:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElrftcQVckND3AGkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZjIyZTU0YzAtZDNiNy00NzQ1LWJhM2YtNWMxOTFkMzJlZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZhRe7vB+mA5DEnlKoYwldPGITMc5vlLwXp7 TF9E0PATxpIla5ZIG7TCAERsNzhim0ge3DoX6UQFQ0nEnQuHXT+5j8goltYs+OMU evynbkXathQhGitAohAe6ytYhrKTbGNVjMlXFDNNDt5KjzNAcBxOvoxUgStp0AKR kWqcfsLSAg3v+SqF+YmwgxI8UPAE9DKiYcGnXf+AEYSQjj8B6wa82sYQcBvPMFQE ZBh6n2jEknwTHVQMuHaQAEJhr2gEq/QjZlqxPqXjFvXv/MOnlLjlvDCxsmMEsVD7 q4M5XHtaHm0Dok2MFYnHeyPbCqtqOTteCL2Hw9fCVW1x8o/WAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJp+WblkyPo4ihbcZSaXVW6d9LfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvZmY2NWFmNDEtZWNkMy0z ODk1LWJjY2QtNmYxYjU1NDQ4YTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINKEICk7IucW/2T14fuS1jauKFus7hI1kGK/YGC02PoFNTyT10LU2Qy g/7Mx/fwxLxMO7Gqv7e/ikhYx7pEuakRJBSIXyMi0RmSb0jiq9EkfAGCQlH6shNb Ed4av4pzCeonJ8/6MWyWLJgQyrnpWg8HKuFs1ETbTxeAFGyklfAWGvVU5ePNFts6 nbxWw/GmHhCqflvLOYIk2HA8B4HQwCcbO8n0VMjfSBWeDt5qi9UhA6tbMAfIKo8k p2C9FKrxipC+RMx214KnzeAiBKa1KYl+AYX98zOTzdfDWdq9gNAL6BTTaK7ofH48 VgZ+Jt5CcE2ms7iEQtGpHSVCJ6DBg0Q= -----END CERTIFICATE-----Generated at Sat Apr 12 16:15:14 2025 by rpki-client