$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/b98046e9-e215-3beb-b627-8d082108f26e.roa File: b98046e9-e215-3beb-b627-8d082108f26e.roa (raw, json) Hash identifier: EiegBB3OakBMOhEI5gjbRiqfxoYPrTrEsz0gkVnJRIc= Subject key identifier: 56:F3:D9:18:9E:C4:B1:7B:0A:3B:B4:36:D2:9D:FE:C7:60:F1:99:96 Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F432858495ABEC3013D757182D2DC0C80 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/b98046e9-e215-3beb-b627-8d082108f26e.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16509 IP address blocks: 170.203.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:c3:01:3d:75:71:82:d2:dc:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=fee0aa1b-4c97-4168-91c3-fd33f7c04663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0c:13:7b:81:47:db:bd:b5:80:9f:50:d2:60: 55:b1:5c:93:be:7a:b0:0d:99:8a:2a:ee:71:8c:19: 5a:63:eb:e0:76:15:4d:25:6f:80:8d:3d:64:29:bc: 03:dd:98:42:32:68:8a:04:f9:63:ad:6e:83:13:ac: b0:4c:70:ae:ff:4d:68:f4:f2:73:7f:e2:fe:2e:71: 72:90:9f:8f:a9:c7:07:80:df:fb:cf:b3:6f:e5:61: 6d:a5:9f:61:7f:a1:54:d1:bc:08:c9:b1:c5:e0:b9: 1d:3b:8b:04:d6:c9:38:20:d2:56:cd:87:9b:57:81: 69:30:37:ec:b3:7c:77:08:bf:89:84:f5:df:96:66: 05:d6:91:bd:69:2e:bf:20:16:4e:90:87:c3:2f:72: 05:3e:d3:fc:6c:d9:f6:5d:df:26:e4:a3:9e:af:ed: 79:ca:f9:f1:5c:e1:39:ef:52:95:0d:f4:bf:40:ac: df:66:14:e3:69:1a:f9:fe:b7:e7:72:bf:fa:0d:fb: fb:9b:dd:6c:37:a3:95:ca:a0:a1:35:8e:21:cb:14: fe:b9:6d:b0:c9:e9:63:4d:e6:8f:ce:b0:fb:70:4c: 86:95:c8:c0:2c:e3:53:81:44:8d:3f:23:59:69:8b: 8e:2e:f8:5e:87:a4:37:06:06:10:73:f5:30:66:ed: 18:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F3:D9:18:9E:C4:B1:7B:0A:3B:B4:36:D2:9D:FE:C7:60:F1:99:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/b98046e9-e215-3beb-b627-8d082108f26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 170.203.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:92:94:ef:e2:8f:24:a0:bc:c5:f7:ac:5f:21:1a:74:3d:d8: 15:14:da:d2:0f:f4:61:ca:48:8c:05:af:78:68:dd:1a:0a:d5: d8:39:b2:b1:e5:9c:79:c7:ee:e1:72:bf:0c:97:1e:6c:9e:bb: 5f:b4:7f:7c:fb:27:71:24:da:ca:6b:c6:18:1c:8d:98:63:05: ad:e7:eb:cf:62:cc:f7:23:8f:2a:23:d6:5b:a2:b0:f8:c8:ef: 3b:38:78:93:1e:a5:31:e2:95:7d:90:d6:8b:cf:5e:30:88:90: ff:c7:56:99:4c:f9:dd:dd:bb:b5:c0:9b:af:4b:25:5b:04:5d: 38:96:66:fa:36:db:87:a6:2b:4d:84:2a:f5:e7:4f:1b:90:4d: 20:7b:25:41:28:2d:f0:c7:36:25:da:bd:54:15:44:42:f0:20: 8f:1d:d1:ce:bc:7c:ef:49:ae:2a:65:48:60:0b:c3:35:0c:02: 97:4f:69:2e:6b:5f:17:cc:9e:82:3f:a8:76:7a:48:5f:e3:c2: 67:18:25:b4:3f:a6:ed:c6:ab:30:87:e6:c4:db:fc:e3:b0:5d: 73:8b:59:bb:c2:cc:14:6a:d5:a1:fa:12:b8:48:c3:fa:61:d2: b8:c6:8b:96:79:9d:99:8e:58:fb:37:e1:82:f1:17:28:45:8f: b6:9e:72:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavsMBPXVxgtLcDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZmVlMGFhMWItNGM5Ny00MTY4LTkxYzMtZmQzM2Y3YzA0NjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgwTe4FH2721gJ9Q0mBVsVyTvnqwDZmKKu5x jBlaY+vgdhVNJW+AjT1kKbwD3ZhCMmiKBPljrW6DE6ywTHCu/01o9PJzf+L+LnFy kJ+PqccHgN/7z7Nv5WFtpZ9hf6FU0bwIybHF4LkdO4sE1sk4INJWzYebV4FpMDfs s3x3CL+JhPXflmYF1pG9aS6/IBZOkIfDL3IFPtP8bNn2Xd8m5KOer+15yvnxXOE5 71KVDfS/QKzfZhTjaRr5/rfncr/6Dfv7m91sN6OVyqChNY4hyxT+uW2wyeljTeaP zrD7cEyGlcjALONTgUSNPyNZaYuOLvheh6Q3BgYQc/UwZu0YqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbz2RiexLF7Cju0NtKd/sdg8ZmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvYjk4MDQ2ZTktZTIxNS0z YmViLWI2MjctOGQwODIxMDhmMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqssQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFySlO/ijySgvMX3rF8hGnQ92BUU2tIP9GHKSIwFr3ho3RoK1dg5srHl nHnH7uFyvwyXHmyeu1+0f3z7J3Ek2sprxhgcjZhjBa3n689izPcjjyoj1luisPjI 7zs4eJMepTHilX2Q1ovPXjCIkP/HVplM+d3du7XAm69LJVsEXTiWZvo224emK02E KvXnTxuQTSB7JUEoLfDHNiXavVQVRELwII8d0c68fO9JriplSGALwzUMApdPaS5r XxfMnoI/qHZ6SF/jwmcYJbQ/pu3GqzCH5sTb/OOwXXOLWbvCzBRq1aH6ErhIw/ph 0rjGi5Z5nZmOWPs34YLxFyhFj7aecqY= -----END CERTIFICATE-----Generated at Wed Apr 16 17:00:38 2025 by rpki-client