$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa File: de8c254d-a582-3b01-9da5-fc1d49739f37.roa (raw, json) Hash identifier: Gen9JbfAr4RMrC2ObZMmPl52OaboqxGYsTTL9l126zw= Subject key identifier: 29:03:B6:A5:CA:56:C2:DF:BC:92:BC:1A:1E:94:93:3F:65:EA:2A:BB Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584905B6A8454D75903319A0B900 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 394625 IP address blocks: 199.38.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:a8:45:4d:75:90:33:19:a0:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=f996dd7d-1c77-46f9-af97-47fe2325f7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:56:f6:af:81:5a:0a:39:41:8b:69:f2:cc:97: e2:ca:57:ae:6e:9e:9a:75:de:9d:aa:4a:89:96:ae: e5:3b:21:32:f7:55:56:c4:9d:72:50:83:e3:84:e1: 58:62:f9:3a:bb:c3:c3:4d:02:c7:95:4b:a5:31:e0: 88:de:03:86:b3:3e:bc:32:54:0f:9e:5b:a9:13:22: d2:66:ff:78:56:74:6a:8c:89:d2:84:cb:f7:2a:96: ae:7c:f4:21:00:6e:b1:37:5c:3f:be:d8:c3:6f:97: 34:8e:4d:b9:81:6d:7d:88:12:c4:4f:96:68:42:73: 0e:13:02:76:28:75:2b:d3:37:73:df:93:81:41:cb: 5b:0c:3f:e4:2e:fc:c1:b6:c7:7a:fc:cc:32:27:c6: 92:96:84:10:02:98:91:30:1b:52:c0:32:81:35:b4: 7f:9a:00:e9:e4:48:ca:2d:94:ff:7c:c4:a4:10:61: 32:54:fc:e6:06:ba:54:c2:5a:6f:eb:60:3d:77:a9: ae:90:e4:cc:28:a5:19:12:09:00:c6:5e:8a:cb:88: 8b:e2:46:28:2b:ad:72:ad:bd:53:1e:23:09:b5:13: d2:5c:06:fc:37:3b:79:6c:1a:8a:37:dd:08:91:bc: d1:02:7d:5e:86:b4:33:56:cf:13:62:f5:b5:08:37: bd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:03:B6:A5:CA:56:C2:DF:BC:92:BC:1A:1E:94:93:3F:65:EA:2A:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 199.38.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:39:62:91:82:b7:15:37:0b:e9:20:03:17:4e:e9:c1:5a:d8: ae:36:77:06:e1:9a:5e:6a:59:25:47:dd:72:a2:26:b3:15:27: c9:b8:c3:bb:8a:89:44:be:e3:48:c8:9d:fb:5d:41:0a:e1:1f: 91:ba:7e:e7:e6:f8:e4:58:03:7a:cb:41:9d:ee:bd:6e:7a:0a: b1:89:b5:51:90:43:8d:e3:a8:2d:23:79:27:ef:d1:5c:8f:32: f0:08:83:a0:d1:4a:aa:51:b7:ce:7a:4a:25:01:18:21:0f:16: be:1d:f2:d7:96:0e:eb:a4:73:fc:94:e6:8f:00:cc:54:08:ef: ec:4a:59:2b:08:e2:0e:80:51:bb:c3:bb:2e:36:f7:32:09:8a: 9b:b0:1b:f0:26:35:83:12:24:13:ab:35:a4:09:50:04:11:64: b6:c2:b6:f6:23:40:a1:c9:6e:c8:88:09:47:cd:db:46:33:a4: 5d:5e:4a:2a:a9:c1:54:3b:ef:da:52:e9:d3:0a:e3:9f:75:38: da:fb:83:dc:80:03:29:69:3d:b6:e7:b6:1c:6f:4a:43:43:68: f6:94:b8:73:c0:e8:63:e0:d3:79:fb:b8:2c:63:cf:d3:54:d2: d4:bc:39:79:41:89:97:3b:f2:55:4e:28:00:6b:c4:92:80:20: e0:81:d7:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtqhFTXWQMxmguQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk Zjk5NmRkN2QtMWM3Ny00NmY5LWFmOTctNDdmZTIzMjVmN2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFb2r4FaCjlBi2nyzJfiyleubp6add6dqkqJ lq7lOyEy91VWxJ1yUIPjhOFYYvk6u8PDTQLHlUulMeCI3gOGsz68MlQPnlupEyLS Zv94VnRqjInShMv3KpaufPQhAG6xN1w/vtjDb5c0jk25gW19iBLET5ZoQnMOEwJ2 KHUr0zdz35OBQctbDD/kLvzBtsd6/MwyJ8aSloQQApiRMBtSwDKBNbR/mgDp5EjK LZT/fMSkEGEyVPzmBrpUwlpv62A9d6mukOTMKKUZEgkAxl6Ky4iL4kYoK61yrb1T HiMJtRPSXAb8Nzt5bBqKN90IkbzRAn1ehrQzVs8TYvW1CDe9IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkDtqXKVsLfvJK8Gh6Ukz9l6iq7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvZGU4YzI1NGQtYTU4Mi0z YjAxLTlkYTUtZmMxZDQ5NzM5ZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxybyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg5YpGCtxU3C+kgAxdO6cFa2K42dwbhml5qWSVH3XKiJrMVJ8m4w7uK iUS+40jInftdQQrhH5G6fufm+ORYA3rLQZ3uvW56CrGJtVGQQ43jqC0jeSfv0VyP MvAIg6DRSqpRt856SiUBGCEPFr4d8teWDuukc/yU5o8AzFQI7+xKWSsI4g6AUbvD uy429zIJipuwG/AmNYMSJBOrNaQJUAQRZLbCtvYjQKHJbsiICUfN20YzpF1eSiqp wVQ779pS6dMK4591ONr7g9yAAylpPbbnthxvSkNDaPaUuHPA6GPg03n7uCxjz9NU 0tS8OXlBiZc78lVOKABrxJKAIOCB1x8= -----END CERTIFICATE-----Generated at Mon Apr 7 15:40:05 2025 by rpki-client