$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/52cb71d4-7624-39c6-adc7-d655c420ce15.roa File: 52cb71d4-7624-39c6-adc7-d655c420ce15.roa (raw, json) Hash identifier: vteKiz8Yv9FBVcvxaPtsoMUao5GSjdhrGcI2i+Peg6U= Subject key identifier: 88:9B:84:07:9B:A8:D9:5D:B4:2A:35:7C:69:6F:2A:42:7B:6B:63:7E Certificate issuer: /CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1 Certificate serial: 010D0C9F432858489D05E668385B5E69970691C0 Authority key identifier: 07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/52cb71d4-7624-39c6-adc7-d655c420ce15.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 18451 IP address blocks: 199.87.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:e6:68:38:5b:5e:69:97:06:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1 Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=257b4590-3e61-44e5-9fd9-9ffa1e223b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7b:b1:be:28:d4:f7:56:cc:60:e0:40:d5:d3: 87:a8:6c:a9:81:eb:44:48:bd:f9:90:0c:89:a8:fe: 13:2f:a4:18:35:61:5e:5a:95:e9:85:19:e9:bc:0a: a6:73:16:d5:08:55:14:ad:79:fc:4d:e9:a7:b8:8b: 62:50:54:a6:c1:e0:9d:32:74:98:9d:00:7f:a4:67: 4d:43:b4:65:d0:e5:e1:00:62:ee:f8:cc:22:b8:c5: 14:44:b4:71:b1:77:fb:93:94:97:86:6e:20:d0:67: d9:ec:f5:04:49:d4:99:53:e9:ed:95:5d:be:d3:8e: 57:10:44:55:f3:ac:59:83:d9:22:b9:73:90:e0:2c: d3:ce:39:7f:c5:94:5d:66:1c:76:11:c1:55:83:74: dc:84:03:77:af:37:74:8b:e2:0c:42:a0:6d:92:69: a6:9b:25:36:fb:bc:9d:92:77:8a:51:b0:bd:3d:8b: be:56:56:0f:d9:6d:71:0f:63:4a:b2:af:64:a6:bf: 0b:04:4c:6b:b4:b4:82:c9:45:5d:90:c9:38:cb:e7: ce:98:be:1e:c5:ef:df:ac:df:be:dd:73:d3:4a:a2: 92:f7:ad:a0:06:46:4b:dc:5c:1a:22:ec:39:9e:2a: ef:07:ef:04:b0:f8:e8:24:72:ff:ed:9e:a0:67:12: 0f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9B:84:07:9B:A8:D9:5D:B4:2A:35:7C:69:6F:2A:42:7B:6B:63:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/52cb71d4-7624-39c6-adc7-d655c420ce15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl X509v3 Authority Key Identifier: keyid:07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer sbgp-ipAddrBlock: critical IPv4: 199.87.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:71:95:39:3e:22:9d:bf:d8:cb:d5:b0:f8:79:8f:3f:3c:61: 80:e1:c2:0d:24:0f:1b:72:40:c0:d7:20:9d:d6:27:9e:68:92: 6e:04:06:4d:a9:44:5e:2a:b9:14:90:8a:ce:e7:02:94:9a:4e: 34:e9:99:df:8a:13:b6:ee:fd:9f:5c:2e:ae:6b:00:c3:6d:21: 06:a2:8e:62:6f:8d:28:a2:e0:f6:48:33:36:96:3b:d3:94:6f: cc:8e:0e:8e:98:98:c1:66:7b:9e:77:85:d7:10:b8:16:a4:f1: fb:52:09:ac:da:f4:0d:cb:e1:20:1a:c8:3e:72:03:5b:76:e3: f1:98:9b:00:44:ea:c0:c0:96:54:6f:8b:fc:c0:13:fb:6e:cc: 51:0f:df:80:04:32:3d:45:c7:b4:d7:fa:00:98:06:00:a1:5c: c9:50:4d:e5:3f:4d:d5:ed:ce:7c:ea:48:ff:ee:b7:83:da:79: 95:d5:16:15:23:e4:6d:09:cf:89:3b:1b:56:35:8f:82:b6:cc: 13:a6:e6:8f:74:df:f8:5c:d5:06:fb:c3:4c:0c:48:7c:04:75: a3:2b:9b:78:3d:d9:75:f8:2b:74:33:af:d5:cc:ea:eb:69:48: 31:f0:a2:3b:e3:95:b0:a3:d3:34:50:89:e2:72:d8:6c:90:47: 87:97:e3:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBeZoOFteaZcGkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmI0M2RjMjEtZTFiMy00N2JiLWJmNDItNDRmZTU1ZTUy N2YxMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk MjU3YjQ1OTAtM2U2MS00NGU1LTlmZDktOWZmYTFlMjIzYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinuxvijU91bMYOBA1dOHqGypgetESL35kAyJ qP4TL6QYNWFeWpXphRnpvAqmcxbVCFUUrXn8TemnuItiUFSmweCdMnSYnQB/pGdN Q7Rl0OXhAGLu+MwiuMUURLRxsXf7k5SXhm4g0GfZ7PUESdSZU+ntlV2+045XEERV 86xZg9kiuXOQ4CzTzjl/xZRdZhx2EcFVg3TchAN3rzd0i+IMQqBtkmmmmyU2+7yd kneKUbC9PYu+VlYP2W1xD2NKsq9kpr8LBExrtLSCyUVdkMk4y+fOmL4exe/frN++ 3XPTSqKS962gBkZL3FwaIuw5nirvB+8EsPjoJHL/7Z6gZxIPcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIibhAebqNldtCo1fGlvKkJ7a2N+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82YjQz ZGMyMS1lMWIzLTQ3YmItYmY0Mi00NGZlNTVlNTI3ZjEvNTJjYjcxZDQtNzYyNC0z OWM2LWFkYzctZDY1NWM0MjBjZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmI0M2RjMjEtZTFiMy00N2JiLWJm NDItNDRmZTU1ZTUyN2YxLzZiNDNkYzIxLWUxYjMtNDdiYi1iZjQyLTQ0ZmU1NWU1 MjdmMS5jcmwwHwYDVR0jBBgwFoAUB64YrfJryPrmWzLNhHyxbwenyaYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82YjQzZGMyMS1lMWIzLTQ3YmItYmY0Mi00NGZl NTVlNTI3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1eYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFxlTk+Ip2/2MvVsPh5jz88YYDhwg0kDxtyQMDXIJ3WJ55okm4EBk2p RF4quRSQis7nApSaTjTpmd+KE7bu/Z9cLq5rAMNtIQaijmJvjSii4PZIMzaWO9OU b8yODo6YmMFme553hdcQuBak8ftSCaza9A3L4SAayD5yA1t24/GYmwBE6sDAllRv i/zAE/tuzFEP34AEMj1Fx7TX+gCYBgChXMlQTeU/TdXtznzqSP/ut4PaeZXVFhUj 5G0Jz4k7G1Y1j4K2zBOm5o903/hc1Qb7w0wMSHwEdaMrm3g92XX4K3Qzr9XM6utp SDHwojvjlbCj0zRQieJy2GyQR4eX46I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:40 2025 by rpki-client