$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa File: 388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa (raw, json) Hash identifier: bUEHH7GaX2ErsvHusDrDsWopdr0aC8B344Rq8XolxAg= Subject key identifier: 2F:41:AC:77:F2:16:19:3C:4B:BE:04:01:46:A6:C6:96:A8:3C:50:66 Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F43285848E2D117FEA4EF03F2C7C7CDA0 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 207.211.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:17:fe:a4:ef:03:f2:c7:c7:cd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=a996912d-2cc0-46c6-a252-2c2defe43213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:7e:19:25:b8:92:42:84:44:d1:f3:db:d2: d9:c2:7c:9c:9c:c2:86:c0:eb:60:0b:03:57:b5:49: 7a:57:de:19:2a:8b:a0:ce:65:44:53:6c:c8:3b:5e: d2:b2:33:19:b0:45:68:53:3a:4c:a1:fb:99:0b:a3: 1b:20:b8:62:30:85:bf:01:6e:48:72:29:cd:fe:eb: 0e:25:11:46:c7:f3:b4:ea:9d:82:c4:40:13:72:56: 39:e4:18:f8:1f:db:d1:0b:49:45:62:ef:8a:24:4e: 56:a7:9c:75:84:21:c6:d0:ee:de:2f:60:3d:e3:d5: d1:82:6b:35:98:c2:ea:ba:f3:49:e3:97:19:04:ae: 70:1e:ff:0d:7d:58:49:98:26:b0:5b:39:be:0a:75: 1a:33:0e:89:19:5e:dd:19:10:98:7e:90:94:e3:98: 8b:92:d5:fc:03:81:16:62:52:0d:cf:cf:6b:21:74: 1f:d7:57:4c:5b:09:05:66:45:d1:29:83:55:1e:37: 96:54:2a:25:d1:0b:b6:91:71:9c:48:72:ff:ed:65: a9:4d:32:60:6c:cb:f0:af:f3:fa:bc:a8:78:12:e5: 14:09:51:d9:ac:ee:c2:99:fd:71:f5:54:11:2d:3e: b1:03:26:af:d7:01:5f:d7:17:3d:08:57:b0:b9:4a: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:41:AC:77:F2:16:19:3C:4B:BE:04:01:46:A6:C6:96:A8:3C:50:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 207.211.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:09:53:81:b8:39:e0:e7:1e:a3:6d:ef:cc:55:be:c4:86:33: 26:10:00:d8:a7:83:b5:e8:75:7f:46:fb:cd:f3:ee:d3:19:75: ce:b1:40:78:6e:ea:b3:10:e2:47:8b:71:0b:21:6e:f9:f6:93: 04:dc:61:4f:1c:e3:0a:6d:cc:14:d0:1b:ad:2f:1c:c5:04:c0: 46:43:b6:a3:b3:99:db:d8:6e:c3:bf:2f:f6:f3:dc:1a:31:ee: 00:ae:16:3d:0f:02:76:96:8b:34:bf:10:70:79:f9:29:49:db: c1:04:be:67:44:02:2e:54:59:a6:56:3d:51:2a:a6:62:2e:47: 65:de:09:60:36:19:d8:6f:43:96:e0:09:08:99:af:f0:8a:b5: b5:26:d0:20:44:b3:18:ed:b0:b8:f0:9f:e9:c1:52:25:57:20: 13:59:d8:a4:70:3e:cb:14:37:26:a8:f6:fa:6b:b7:23:bd:13: 37:e1:10:65:82:6b:98:79:4d:b4:7b:94:b0:48:95:83:6a:0e: 38:5a:4c:42:45:68:24:0f:ae:85:87:72:e9:8a:48:bd:2a:f0: 34:c3:c9:83:7c:5a:0a:14:34:a2:ac:7f:9c:c9:bb:3a:6c:e5: e1:d5:78:ec:92:27:cb:b9:67:a7:0a:b1:0e:31:94:29:f2:30: d5:2a:a0:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Rf+pO8D8sfHzaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk YTk5NjkxMmQtMmNjMC00NmM2LWEyNTItMmMyZGVmZTQzMjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwx+GSW4kkKERNHz29LZwnycnMKGwOtgCwNX tUl6V94ZKougzmVEU2zIO17SsjMZsEVoUzpMofuZC6MbILhiMIW/AW5IcinN/usO JRFGx/O06p2CxEATclY55Bj4H9vRC0lFYu+KJE5Wp5x1hCHG0O7eL2A949XRgms1 mMLquvNJ45cZBK5wHv8NfVhJmCawWzm+CnUaMw6JGV7dGRCYfpCU45iLktX8A4EW YlINz89rIXQf11dMWwkFZkXRKYNVHjeWVCol0Qu2kXGcSHL/7WWpTTJgbMvwr/P6 vKh4EuUUCVHZrO7Cmf1x9VQRLT6xAyav1wFf1xc9CFewuUqL6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9BrHfyFhk8S74EAUamxpaoPFBmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvMzg4Y2U5NWEtMGU1ZC0z MzlkLWI4MTAtY2Y1OWIxYjAwZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz9PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsJU4G4OeDnHqNt78xVvsSGMyYQANing7XodX9G+83z7tMZdc6xQHhu 6rMQ4keLcQshbvn2kwTcYU8c4wptzBTQG60vHMUEwEZDtqOzmdvYbsO/L/bz3Box 7gCuFj0PAnaWizS/EHB5+SlJ28EEvmdEAi5UWaZWPVEqpmIuR2XeCWA2GdhvQ5bg CQiZr/CKtbUm0CBEsxjtsLjwn+nBUiVXIBNZ2KRwPssUNyao9vprtyO9EzfhEGWC a5h5TbR7lLBIlYNqDjhaTEJFaCQProWHcumKSL0q8DTDyYN8WgoUNKKsf5zJuzps 5eHVeOySJ8u5Z6cKsQ4xlCnyMNUqoLc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:31 2025 by rpki-client