$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa File: 3d97d649-dd61-39e8-94b1-2e5a345cf305.roa (raw, json) Hash identifier: P6HEXzlley/eZOLcFxT3u2QVkqeuynKeCfhqlkhD7wE= Subject key identifier: 90:96:EC:86:41:40:92:62:ED:0B:66:91:6C:0B:76:E1:79:9B:EE:42 Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F43285848EF61687E583060DA786D4680 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 11775 IP address blocks: 192.149.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:68:7e:58:30:60:da:78:6d:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=8800332f-2ed8-4cd6-a73c-5d951e1a9fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:ba:49:bb:3f:6a:b5:93:63:0f:3c:39:da: c6:6c:af:89:4c:ec:22:2c:1b:cb:cd:ec:68:47:b4: af:fc:3b:a8:5d:f2:88:30:a7:48:a8:d9:35:fe:50: cd:ba:b0:13:5c:f6:73:a1:c6:69:b7:75:97:5c:c2: df:20:79:ce:db:4e:d5:aa:74:37:65:9b:fc:92:d7: 7a:7e:55:1f:20:0d:25:04:c4:d0:a8:8c:b4:c8:55: 35:a5:09:5e:d9:0c:7e:b3:c2:e4:96:ad:9c:8e:5d: 47:7a:23:c1:5c:2f:b2:bc:45:80:6d:9b:56:c7:87: 7a:82:0b:8c:59:f5:07:0a:d3:1d:57:d2:91:57:8c: 74:a9:87:da:7e:34:d0:84:2e:ae:43:96:54:f4:e4: 2c:ae:8d:2c:62:b8:05:81:89:7a:7f:09:8b:09:95: a7:ce:64:e3:d5:10:90:b9:f4:87:5a:83:20:5d:43: 86:db:b2:e9:ca:7b:d6:55:aa:bd:29:4e:cc:15:57: c6:d3:9d:db:64:d2:f0:cc:d2:1e:96:86:ce:5f:65: 8a:94:b8:a2:b8:0b:5f:ed:f2:e7:df:3b:53:42:eb: b4:98:4a:00:32:a6:a3:35:fa:5b:6d:e4:a6:23:fd: 1d:6e:99:7a:27:c2:1b:42:2b:f2:61:ac:20:e4:29: ab:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:96:EC:86:41:40:92:62:ED:0B:66:91:6C:0B:76:E1:79:9B:EE:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv4: 192.149.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e5:01:14:1d:ee:14:d6:2e:5d:cc:30:9d:b3:b3:04:8e:b4: 20:f1:44:d3:6c:f4:ad:12:f4:f4:93:a2:c6:62:c3:96:05:1a: 6e:f5:32:1a:68:5b:0c:6e:05:c3:9c:76:a8:3e:25:9e:a4:70: 90:d3:77:41:10:a8:70:b7:e1:a3:f7:6b:28:fd:bb:23:ea:22: 19:d1:dd:8a:db:14:a2:3f:b8:1c:47:2a:4b:9c:b5:2c:2a:c0: 6d:c0:0d:34:d1:3e:96:1a:a4:5d:a1:e6:c4:bd:02:9f:eb:fa: 32:fc:91:be:55:f0:ab:61:ae:81:24:46:b2:ec:a7:d3:c0:51: 28:93:4d:2a:4e:15:91:43:78:5c:1a:02:f9:0b:60:f2:3c:0c: 65:46:ab:fe:eb:1c:9d:1f:46:bd:42:c3:75:c6:eb:ed:37:b0: 2f:0d:ee:57:80:00:46:71:b4:09:93:5c:d8:58:65:85:a0:b4: 35:7f:cd:53:3f:fc:cf:d4:93:6a:10:55:98:f9:12:1c:06:fe: 5a:27:21:47:17:62:e9:32:72:37:18:de:6a:4d:62:eb:c5:7c: f9:6e:c4:51:ba:f8:00:d2:0d:e1:03:35:5c:10:39:b6:7e:69: 05:1e:be:be:96:16:08:2c:6e:db:39:3c:5c:0f:b7:38:48:46: 89:1e:fe:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWh+WDBg2nhtRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ODgwMDMzMmYtMmVkOC00Y2Q2LWE3M2MtNWQ5NTFlMWE5ZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIW6Sbs/arWTYw88OdrGbK+JTOwiLBvLzexo R7Sv/DuoXfKIMKdIqNk1/lDNurATXPZzocZpt3WXXMLfIHnO207VqnQ3ZZv8ktd6 flUfIA0lBMTQqIy0yFU1pQle2Qx+s8Lklq2cjl1HeiPBXC+yvEWAbZtWx4d6gguM WfUHCtMdV9KRV4x0qYfafjTQhC6uQ5ZU9OQsro0sYrgFgYl6fwmLCZWnzmTj1RCQ ufSHWoMgXUOG27LpynvWVaq9KU7MFVfG053bZNLwzNIelobOX2WKlLiiuAtf7fLn 3ztTQuu0mEoAMqajNfpbbeSmI/0dbpl6J8IbQivyYawg5CmrGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCW7IZBQJJi7QtmkWwLduF5m+5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvM2Q5N2Q2NDktZGQ2MS0z OWU4LTk0YjEtMmU1YTM0NWNmMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/lARQd7hTWLl3MMJ2zswSOtCDxRNNs9K0S9PSTosZiw5YFGm71Mhpo WwxuBcOcdqg+JZ6kcJDTd0EQqHC34aP3ayj9uyPqIhnR3YrbFKI/uBxHKkuctSwq wG3ADTTRPpYapF2h5sS9Ap/r+jL8kb5V8KthroEkRrLsp9PAUSiTTSpOFZFDeFwa AvkLYPI8DGVGq/7rHJ0fRr1Cw3XG6+03sC8N7leAAEZxtAmTXNhYZYWgtDV/zVM/ /M/Uk2oQVZj5EhwG/lonIUcXYukycjcY3mpNYuvFfPluxFG6+ADSDeEDNVwQObZ+ aQUevr6WFggsbts5PFwPtzhIRoke/jI= -----END CERTIFICATE-----Generated at Mon Apr 7 07:10:07 2025 by rpki-client