$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/67ba8417-9a25-34c4-adcb-541f98289bb1.roa File: 67ba8417-9a25-34c4-adcb-541f98289bb1.roa (raw, json) Hash identifier: yd4bGO+Wzekb/t2LrjdMYvdbcPL4ZudsXTqm21uwweI= Subject key identifier: C0:4E:9E:75:85:B1:E9:FF:0C:6E:19:E3:43:6A:A7:B0:65:40:E3:D9 Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F432858492CB2141257ABC2ECED4C0400 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/67ba8417-9a25-34c4-adcb-541f98289bb1.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 394625 IP address blocks: 185.151.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:14:12:57:ab:c2:ec:ed:4c:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=25065c08-3a47-40a7-ae40-f8996af00d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:c7:81:a6:a4:0e:ef:57:85:3b:b9:25:53: 5e:58:5d:71:b8:42:c6:36:49:ac:51:e4:dd:29:86: 3c:32:c8:49:d6:0f:15:23:56:71:73:f0:5c:6b:f1: c8:04:58:71:a6:b9:3a:c7:b1:3f:1c:19:95:84:01: 08:bb:cf:e8:2b:75:eb:32:f2:94:91:42:b2:55:2b: e8:ab:3a:05:9e:46:32:dd:a3:02:bf:e8:94:4c:2d: c5:94:dd:a1:3b:45:73:bd:5c:9e:e5:a8:0b:e7:67: bb:74:35:40:01:fe:5c:31:f1:b9:f5:94:5f:91:24: db:07:92:e9:a2:d3:6d:04:a4:a7:29:2f:0c:1c:35: bf:95:4f:86:c0:ea:da:f9:61:73:e8:a9:39:a8:34: 7a:bc:a7:26:93:1a:96:cb:d2:03:8c:c6:8e:8f:2e: e2:09:43:03:77:ec:3b:9d:21:5e:c3:f9:52:08:74: d1:57:6b:b7:c4:06:41:10:cf:f9:cd:9e:c9:b1:01: db:5a:b1:da:17:65:61:d3:27:5f:a5:21:c0:69:1c: d6:01:a5:5d:1a:d4:89:8a:48:be:06:c5:17:cc:89: b4:ff:66:0e:1b:77:10:75:a9:5a:3a:a2:47:0e:75: 5e:cf:c7:82:4c:65:c0:c7:dd:f2:55:d9:ff:42:d1: db:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4E:9E:75:85:B1:E9:FF:0C:6E:19:E3:43:6A:A7:B0:65:40:E3:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/67ba8417-9a25-34c4-adcb-541f98289bb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 185.151.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e9:19:38:03:74:9f:58:2f:d7:9b:b4:65:e6:1d:14:0b:3c: a8:be:e8:f2:29:51:cb:18:40:84:21:bc:65:84:24:12:75:bb: ec:f5:2b:0a:f2:52:19:7c:9d:fc:d5:ae:61:0c:6c:25:3d:ed: 37:34:52:e1:41:88:c7:db:99:71:89:a9:00:57:1a:06:b4:31: 42:70:27:55:23:ac:34:d0:ca:36:9c:d7:25:1b:cd:4c:d2:67: d6:0f:60:db:12:21:74:fe:e3:d6:ce:f2:8d:14:96:16:4e:92: fc:03:f0:3c:d4:0e:c4:62:c6:0a:7f:bb:c3:8e:63:c2:2a:cd: 4a:32:21:b9:3f:13:ad:0c:ee:78:31:3e:54:92:f4:b3:bb:79: 45:18:d8:b6:dd:f9:33:8f:17:fc:e8:6d:20:0e:7c:95:db:e2: 97:b0:c9:e8:15:68:ba:58:3c:ac:61:d0:44:f3:01:9f:95:15: a9:a2:33:cd:95:44:25:fd:8d:2e:83:8d:d3:e3:2f:77:d0:2b: c4:0e:a0:3e:08:02:e8:10:c6:35:72:16:82:c5:22:bb:94:55: a1:cc:62:82:2c:0e:fc:a7:0d:da:87:a9:44:8e:df:ff:f5:c5: 8d:32:2c:67:63:34:ac:e0:4f:17:3e:a5:f3:75:83:c1:30:62: 9b:6a:9b:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksshQSV6vC7O1MBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MjUwNjVjMDgtM2E0Ny00MGE3LWFlNDAtZjg5OTZhZjAwZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln3HgaakDu9XhTu5JVNeWF1xuELGNkmsUeTd KYY8MshJ1g8VI1Zxc/Bca/HIBFhxprk6x7E/HBmVhAEIu8/oK3XrMvKUkUKyVSvo qzoFnkYy3aMCv+iUTC3FlN2hO0VzvVye5agL52e7dDVAAf5cMfG59ZRfkSTbB5Lp otNtBKSnKS8MHDW/lU+GwOra+WFz6Kk5qDR6vKcmkxqWy9IDjMaOjy7iCUMDd+w7 nSFew/lSCHTRV2u3xAZBEM/5zZ7JsQHbWrHaF2Vh0ydfpSHAaRzWAaVdGtSJiki+ BsUXzIm0/2YOG3cQdalaOqJHDnVez8eCTGXAx93yVdn/QtHbHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBOnnWFsen/DG4Z40Nqp7BlQOPZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvNjdiYTg0MTctOWEyNS0z NGM0LWFkY2ItNTQxZjk4Mjg5YmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZe4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfpGTgDdJ9YL9ebtGXmHRQLPKi+6PIpUcsYQIQhvGWEJBJ1u+z1Kwry Uhl8nfzVrmEMbCU97Tc0UuFBiMfbmXGJqQBXGga0MUJwJ1UjrDTQyjac1yUbzUzS Z9YPYNsSIXT+49bO8o0UlhZOkvwD8DzUDsRixgp/u8OOY8IqzUoyIbk/E60M7ngx PlSS9LO7eUUY2Lbd+TOPF/zobSAOfJXb4pewyegVaLpYPKxh0ETzAZ+VFamiM82V RCX9jS6DjdPjL3fQK8QOoD4IAugQxjVyFoLFIruUVaHMYoIsDvynDdqHqUSO3//1 xY0yLGdjNKzgTxc+pfN1g8EwYptqm7g= -----END CERTIFICATE-----Generated at Mon Apr 7 15:48:44 2025 by rpki-client