$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/52f7b9e6-df79-3baa-ac0e-2834076abe44.roa File: 52f7b9e6-df79-3baa-ac0e-2834076abe44.roa (raw, json) Hash identifier: EDqcq0vRWOx5V4/U2CAnRLI20dmDqULrcJoJBrCIuSE= Subject key identifier: 27:96:47:6C:AC:1C:07:36:55:26:9D:77:1D:7E:3A:F8:BE:63:74:AC Certificate issuer: /CN=5d613e84-be93-4d7a-a56c-57a378f2c325 Certificate serial: 010D0C9F4328584917DC31F85FFF112602EC5340 Authority key identifier: 83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/52f7b9e6-df79-3baa-ac0e-2834076abe44.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 23188 IP address blocks: 199.102.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:31:f8:5f:ff:11:26:02:ec:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d613e84-be93-4d7a-a56c-57a378f2c325 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=42d99023-49fc-4e96-82bc-e6921c151534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6e:2b:fd:e6:32:14:3f:1f:03:21:05:a4:14: b2:e6:42:0c:20:35:75:13:c2:22:9f:f5:46:39:f3: 1b:4c:b7:61:98:26:12:d5:3e:31:7e:37:8f:e8:4e: 9e:e7:40:a1:55:7d:4e:61:99:88:5b:af:3e:86:72: 74:ed:87:31:cb:da:64:73:88:1c:d1:eb:ca:d9:93: 5b:9e:a1:64:a0:55:55:fc:bb:14:2a:d6:22:62:a5: ae:af:0f:63:08:60:09:fd:7a:7b:67:c0:02:75:6e: 5d:9a:c6:90:e2:3f:f8:0f:d1:58:20:78:3f:46:b4: fc:4a:d3:ed:b7:2e:f1:61:a9:20:f1:f3:9d:5a:7d: 2b:04:3d:da:70:b7:4a:98:83:eb:de:6d:e5:42:f4: b8:97:8f:2a:66:1a:0c:5d:d7:7b:bb:0e:f6:45:36: 34:c6:c9:6e:70:f6:ee:a8:59:f5:9d:9c:25:d2:29: eb:55:99:d0:1f:66:b4:89:e6:2f:2b:d1:66:13:d7: c0:32:a2:40:44:fb:38:1a:9e:6f:98:f0:c8:49:54: fe:56:ce:cc:f5:ad:27:95:25:6d:22:0d:b2:19:1e: f5:40:fd:51:4e:fc:47:a0:76:19:86:98:18:5a:79: c3:db:be:02:28:3e:d5:a4:9c:79:ba:df:ce:ab:8e: 37:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:96:47:6C:AC:1C:07:36:55:26:9D:77:1D:7E:3A:F8:BE:63:74:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/52f7b9e6-df79-3baa-ac0e-2834076abe44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl X509v3 Authority Key Identifier: keyid:83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer sbgp-ipAddrBlock: critical IPv4: 199.102.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2c:bf:ea:c0:74:d5:75:46:6a:dd:52:2d:e3:be:f7:4d:03: c1:71:c1:92:83:27:cd:8c:42:62:13:a5:67:60:02:c6:10:25: 51:e7:37:35:e7:5a:49:a7:7b:16:20:bb:a9:f3:9a:ba:91:48: 91:b9:dd:a4:17:bf:45:56:48:8d:b5:38:a1:9b:56:47:6e:80: 24:cd:65:6f:0a:4a:bf:3f:a7:99:ea:e6:7c:06:77:e0:08:5a: 4f:7f:7f:0a:b2:12:7e:0d:2c:a0:da:76:52:4e:40:eb:d8:ab: 58:9e:bf:c2:38:12:9d:0b:e7:31:1e:ad:54:f4:55:a3:4d:9a: 71:50:c1:db:ff:5e:48:61:60:bb:9c:8d:5a:ce:8d:bb:54:7c: 3b:1c:fe:76:ee:6e:bb:76:9e:b6:60:93:12:2b:ae:37:72:4f: f3:c3:66:e5:9f:9f:a5:06:fb:f4:5b:7b:89:47:3c:4a:1c:e6: ac:bf:77:ea:13:82:20:1e:12:22:45:28:99:67:32:22:fd:5a: 0d:0c:0a:87:67:e2:df:0b:7d:ab:3f:5c:66:ae:c9:a1:95:49: cb:da:d5:37:ca:92:98:56:e6:21:f2:d5:63:b7:d1:a1:3d:90: 81:34:ee:0a:41:fb:fc:17:db:0a:5d:d1:75:d3:4b:c6:b9:ac: ea:f3:08:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DH4X/8RJgLsU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2MTNlODQtYmU5My00ZDdhLWE1NmMtNTdhMzc4ZjJj MzI1MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NDJkOTkwMjMtNDlmYy00ZTk2LTgyYmMtZTY5MjFjMTUxNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW4r/eYyFD8fAyEFpBSy5kIMIDV1E8Iin/VG OfMbTLdhmCYS1T4xfjeP6E6e50ChVX1OYZmIW68+hnJ07Ycxy9pkc4gc0evK2ZNb nqFkoFVV/LsUKtYiYqWurw9jCGAJ/Xp7Z8ACdW5dmsaQ4j/4D9FYIHg/RrT8StPt ty7xYakg8fOdWn0rBD3acLdKmIPr3m3lQvS4l48qZhoMXdd7uw72RTY0xslucPbu qFn1nZwl0inrVZnQH2a0ieYvK9FmE9fAMqJARPs4Gp5vmPDISVT+Vs7M9a0nlSVt Ig2yGR71QP1RTvxHoHYZhpgYWnnD274CKD7VpJx5ut/Oq443mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeWR2ysHAc2VSaddx1+Ovi+Y3SsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZDYx M2U4NC1iZTkzLTRkN2EtYTU2Yy01N2EzNzhmMmMzMjUvNTJmN2I5ZTYtZGY3OS0z YmFhLWFjMGUtMjgzNDA3NmFiZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWQ2MTNlODQtYmU5My00ZDdhLWE1 NmMtNTdhMzc4ZjJjMzI1LzVkNjEzZTg0LWJlOTMtNGQ3YS1hNTZjLTU3YTM3OGYy YzMyNS5jcmwwHwYDVR0jBBgwFoAUg9l+5YkNlHKjca9r0BTQzHTTHZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81ZDYxM2U4NC1iZTkzLTRkN2EtYTU2Yy01N2Ez NzhmMmMzMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2aYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAsv+rAdNV1RmrdUi3jvvdNA8FxwZKDJ82MQmITpWdgAsYQJVHnNzXn WkmnexYgu6nzmrqRSJG53aQXv0VWSI21OKGbVkdugCTNZW8KSr8/p5nq5nwGd+AI Wk9/fwqyEn4NLKDadlJOQOvYq1iev8I4Ep0L5zEerVT0VaNNmnFQwdv/XkhhYLuc jVrOjbtUfDsc/nbubrt2nrZgkxIrrjdyT/PDZuWfn6UG+/Rbe4lHPEoc5qy/d+oT giAeEiJFKJlnMiL9Wg0MCodn4t8Lfas/XGauyaGVScva1TfKkphW5iHy1WO30aE9 kIE07gpB+/wX2wpd0XXTS8a5rOrzCNE= -----END CERTIFICATE-----Generated at Sat Apr 12 13:37:33 2025 by rpki-client