$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa File: 4c09f404-0682-3e12-a569-27fb667f5de3.roa (raw, json) Hash identifier: ItmKZbUDiHCId0G8IZjoML17JFMXwArZjjDA5U2lLXY= Subject key identifier: 73:17:2A:9E:EC:31:50:2C:F7:05:DF:6A:BF:5E:59:38:41:7B:DC:D8 Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Certificate serial: 010D0C9F4328584913AC17F267FB15CA65DAA640 Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 52.144.58.0/24 maxlen: 24 168.245.151.0/24 maxlen: 24 192.139.134.0/24 maxlen: 24 199.19.89.0/24 maxlen: 24 199.19.90.0/24 maxlen: 24 199.19.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:17:f2:67:fb:15:ca:65:da:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=817337bb-ff33-4725-a4b4-93d24aa7dfde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:12:5a:5e:3a:6d:29:45:bd:f4:7c:b2:2f:db: 4c:7f:9e:a3:f9:be:40:a0:c3:55:a4:d3:b9:bc:2d: 92:9b:f1:40:49:4b:e0:09:f1:ec:cd:cb:2e:ac:b8: 5d:49:d9:06:73:84:df:bd:70:c5:41:fc:a3:ab:14: ed:de:e5:6c:69:46:ff:f5:a4:ba:8e:e1:2b:dd:95: 9a:0b:3c:33:4a:7c:7d:c5:e9:3c:f4:e0:a3:2e:cc: bd:d0:6f:6e:dd:99:61:f3:78:5c:45:ac:f7:f9:09: 52:58:0b:54:aa:53:71:06:be:f2:c8:07:80:2c:d0: de:96:50:1d:e8:5b:8c:41:af:56:e3:e6:39:ce:cd: 06:e3:f6:fd:29:fa:59:ef:9d:a2:2f:e7:87:30:14: ba:6d:92:7c:f7:ef:65:0e:b6:f7:84:d3:e1:b4:fd: e1:f2:b5:62:5d:13:60:59:76:b0:f0:bc:1f:82:b7: b5:11:98:e7:aa:4d:4e:a4:1d:39:b0:5f:b7:5c:27: be:e6:ed:b9:f8:cf:0c:1e:32:8e:4e:45:d9:12:e5: 6b:9c:e9:e9:40:21:08:8b:03:2b:0b:41:ef:cf:25: 21:f0:77:a5:42:34:36:6f:c0:5b:23:76:cf:68:a2: d3:9e:5f:ab:3e:a3:6f:31:c8:a3:5b:8a:08:26:49: 2b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:17:2A:9E:EC:31:50:2C:F7:05:DF:6A:BF:5E:59:38:41:7B:DC:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl X509v3 Authority Key Identifier: keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer sbgp-ipAddrBlock: critical IPv4: 52.144.58.0/24 168.245.151.0/24 192.139.134.0/24 199.19.89.0-199.19.91.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:97:47:4a:63:69:93:e2:bd:27:48:51:ed:19:a0:23:c8:7d: 91:74:8e:41:d8:bf:71:bc:01:c9:ac:d2:5f:90:fc:42:57:30: 05:00:eb:69:bd:c5:0a:d2:88:d5:2e:b3:44:81:d3:3b:e0:97: a7:e6:92:89:58:74:83:22:e1:48:48:23:be:9b:16:9f:03:27: 7c:e9:61:b5:e2:bf:a7:13:83:8a:3e:77:ad:64:b4:21:ad:b4: 90:26:e7:88:d4:63:25:4d:75:cc:6b:fe:94:70:ee:0d:ed:28: 2a:16:d2:fe:44:c4:34:77:38:30:84:99:4e:89:a2:9b:8a:fa: 47:02:9c:38:a9:05:44:d8:e9:70:2f:33:29:77:9c:4e:90:75: 96:09:3c:3f:d8:d5:ca:e1:23:0d:76:5c:1f:d4:00:cf:9a:3d: 7c:9c:c8:ba:7b:96:79:b2:83:4a:bd:cc:2f:2f:08:f2:09:3c: fe:2d:12:3c:50:52:99:2e:b9:86:d2:51:a3:d9:34:a7:ab:c1: d5:26:c2:2f:05:4e:71:39:9f:dc:6b:93:e8:9b:89:6c:ff:7b: 8d:c6:34:6e:1c:33:7b:27:6e:46:29:56:ee:f6:aa:e1:44:8c: 66:5b:75:7f:86:dc:e9:f7:7d:3c:a4:43:18:d0:0b:4d:44:a2: 4c:d9:69:87 -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWEkTrBfyZ/sVymXapkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZj YTk4MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk ODE3MzM3YmItZmYzMy00NzI1LWE0YjQtOTNkMjRhYTdkZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxJaXjptKUW99HyyL9tMf56j+b5AoMNVpNO5 vC2Sm/FASUvgCfHszcsurLhdSdkGc4TfvXDFQfyjqxTt3uVsaUb/9aS6juEr3ZWa CzwzSnx9xek89OCjLsy90G9u3Zlh83hcRaz3+QlSWAtUqlNxBr7yyAeALNDellAd 6FuMQa9W4+Y5zs0G4/b9KfpZ752iL+eHMBS6bZJ89+9lDrb3hNPhtP3h8rViXRNg WXaw8Lwfgre1EZjnqk1OpB05sF+3XCe+5u25+M8MHjKOTkXZEuVrnOnpQCEIiwMr C0HvzyUh8HelQjQ2b8BbI3bPaKLTnl+rPqNvMcijW4oIJkkrhwIDAQABo4IDbzCC A2swHQYDVR0OBBYEFHMXKp7sMVAs9wXfar9eWThBe9zYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUz YTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvNGMwOWY0MDQtMDY4Mi0z ZTEyLWE1NjktMjdmYjY2N2Y1ZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJlM2EzYWQtYjFhYy00MTNkLThm OTgtYTY5NDI5YTZjYTk4LzMyZTNhM2FkLWIxYWMtNDEzZC04Zjk4LWE2OTQyOWE2 Y2E5OC5jcmwwHwYDVR0jBBgwFoAUyZVUezn1d+0L44pwe/Z3Q/qsyX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0 MjlhNmNhOTguY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQANJA6AwQA qPWXAwQAwIuGMAwDBADHE1kDBALHE1gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADZdHSmNpk+K9J0hR7Rmg I8h9kXSOQdi/cbwByazSX5D8QlcwBQDrab3FCtKI1S6zRIHTO+CXp+aSiVh0gyLh SEgjvpsWnwMnfOlhteK/pxODij53rWS0Ia20kCbniNRjJU11zGv+lHDuDe0oKhbS /kTENHc4MISZTomim4r6RwKcOKkFRNjpcC8zKXecTpB1lgk8P9jVyuEjDXZcH9QA z5o9fJzIunuWebKDSr3MLy8I8gk8/i0SPFBSmS65htJRo9k0p6vB1SbCLwVOcTmf 3GuT6JuJbP97jcY0bhwzeyduRilW7vaq4USMZlt1f4bc6fd9PKRDGNALTUSiTNlp hw== -----END CERTIFICATE-----Generated at Fri Mar 14 09:22:25 2025 by rpki-client