$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/e74fae3a-44aa-3188-b2bc-0116bafe1d01.roa File: e74fae3a-44aa-3188-b2bc-0116bafe1d01.roa (raw, json) Hash identifier: Kk4fGhRlfnqLxoafHKWJ5AMz7hI482eCcwVECkgsbpA= Subject key identifier: 8D:21:09:24:72:18:36:0E:59:B8:D5:04:37:75:A0:42:5C:78:D5:C0 Certificate issuer: /CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187 Certificate serial: 010D0C9F4328584944693D93783F6107523E6000 Authority key identifier: 8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/e74fae3a-44aa-3188-b2bc-0116bafe1d01.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 5065 IP address blocks: 209.209.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3d:93:78:3f:61:07:52:3e:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=522273bd-cf44-475c-bd26-d0de4af26501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:37:14:26:e2:5e:b5:c9:70:c4:84:86:67:14: 21:0b:68:49:8a:21:b4:97:24:24:8e:4c:89:4e:ba: 4c:6c:ef:4c:fe:f8:41:19:d8:91:f5:59:9c:cb:62: 89:79:06:fe:af:b1:8d:80:58:91:30:dc:bc:4b:19: 09:c4:91:65:06:96:b0:cd:5c:44:06:ab:75:20:04: c8:06:8f:ad:8d:60:21:b7:0e:0c:7e:6c:5e:07:cc: e4:72:95:2f:81:8b:b1:39:3f:c4:68:4e:33:07:5d: 03:38:4e:26:91:0a:89:2a:a9:e1:32:39:69:d0:bc: eb:5d:75:21:fa:e1:31:aa:4f:aa:dc:43:19:c2:40: 5b:ac:78:1e:81:93:13:94:02:41:fb:1f:c7:2e:cd: 6f:43:da:68:f4:70:32:b6:b2:32:2c:18:d9:3a:48: 24:e4:64:9e:62:44:59:b5:da:60:77:ea:d7:a2:d7: 3d:3e:76:ef:22:e6:a8:8d:70:ff:b7:e6:25:ac:9e: 2d:17:b0:1a:40:1b:ad:81:18:c2:cc:c7:c5:76:f3: b2:a9:01:38:19:23:c5:b1:fe:8b:94:13:56:59:ba: 4a:61:d2:5e:91:8b:71:9f:27:d1:1b:2f:7a:ac:bc: a5:49:50:a8:78:c6:8c:d5:6f:12:04:24:c2:19:5b: 7e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:21:09:24:72:18:36:0E:59:B8:D5:04:37:75:A0:42:5C:78:D5:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/e74fae3a-44aa-3188-b2bc-0116bafe1d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl X509v3 Authority Key Identifier: keyid:8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer sbgp-ipAddrBlock: critical IPv4: 209.209.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:2f:f9:2f:a5:ed:08:82:10:1f:b5:9b:fd:d7:09:6f:b5:f3: b7:22:da:ab:91:5c:d5:1d:27:26:f0:36:a5:49:cd:05:27:05: 83:e4:2e:27:0a:04:75:4a:f8:13:4b:b8:b5:08:f8:e9:67:09: 1c:ab:cc:d4:da:61:72:48:cf:fc:96:4e:78:80:0c:12:45:fa: e6:23:80:a9:6c:61:0f:d5:3f:2d:cd:18:b8:a3:81:6d:69:b8: 24:83:90:90:c8:88:21:0c:60:5e:c6:b2:fc:b3:db:cd:a6:79: c2:f1:83:87:ea:23:47:a4:95:5f:d1:36:2c:e8:6c:93:67:6b: 28:61:27:1d:c8:ea:59:76:ee:03:63:e5:b7:8c:3d:34:0c:51: 63:db:15:84:af:05:50:0d:d3:88:a9:9c:71:96:3a:86:0d:92: b4:6c:45:d8:c1:4b:6e:ef:40:cb:1e:98:5b:2a:17:b2:0b:73: e5:9c:49:6e:82:7c:4f:51:6a:61:c1:fd:45:cc:3f:05:79:be: ae:37:45:81:f8:a5:84:be:68:9c:4d:6a:96:77:28:c8:06:5a: 47:6b:f2:b9:0a:fa:7c:f7:c6:48:bf:ff:83:ea:22:80:21:d4: 17:8e:25:fe:9c:ff:54:78:cd:b1:6b:88:96:df:5d:c2:33:8d: db:18:b4:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaT2TeD9hB1I+YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzYyYzQ1ZmQtNjFmOS00M2E2LThhZDUtZmVhNWVmMjdi MTg3MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NTIyMjczYmQtY2Y0NC00NzVjLWJkMjYtZDBkZTRhZjI2NTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijcUJuJetclwxISGZxQhC2hJiiG0lyQkjkyJ TrpMbO9M/vhBGdiR9Vmcy2KJeQb+r7GNgFiRMNy8SxkJxJFlBpawzVxEBqt1IATI Bo+tjWAhtw4MfmxeB8zkcpUvgYuxOT/EaE4zB10DOE4mkQqJKqnhMjlp0LzrXXUh +uExqk+q3EMZwkBbrHgegZMTlAJB+x/HLs1vQ9po9HAytrIyLBjZOkgk5GSeYkRZ tdpgd+rXotc9PnbvIuaojXD/t+YlrJ4tF7AaQButgRjCzMfFdvOyqQE4GSPFsf6L lBNWWbpKYdJekYtxnyfRGy96rLylSVCoeMaM1W8SBCTCGVt+6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0hCSRyGDYOWbjVBDd1oEJceNXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NjJj NDVmZC02MWY5LTQzYTYtOGFkNS1mZWE1ZWYyN2IxODcvZTc0ZmFlM2EtNDRhYS0z MTg4LWIyYmMtMDExNmJhZmUxZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzYyYzQ1ZmQtNjFmOS00M2E2LThh ZDUtZmVhNWVmMjdiMTg3Lzc2MmM0NWZkLTYxZjktNDNhNi04YWQ1LWZlYTVlZjI3 YjE4Ny5jcmwwHwYDVR0jBBgwFoAUjcMwoj3iAcsZMOdo8hMOqD42+bEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjJjNDVmZC02MWY5LTQzYTYtOGFkNS1mZWE1 ZWYyN2IxODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0dE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgv+S+l7QiCEB+1m/3XCW+187ci2quRXNUdJybwNqVJzQUnBYPkLicK BHVK+BNLuLUI+OlnCRyrzNTaYXJIz/yWTniADBJF+uYjgKlsYQ/VPy3NGLijgW1p uCSDkJDIiCEMYF7Gsvyz282mecLxg4fqI0eklV/RNizobJNnayhhJx3I6ll27gNj 5beMPTQMUWPbFYSvBVAN04ipnHGWOoYNkrRsRdjBS27vQMsemFsqF7ILc+WcSW6C fE9RamHB/UXMPwV5vq43RYH4pYS+aJxNapZ3KMgGWkdr8rkK+nz3xki//4PqIoAh 1BeOJf6c/1R4zbFriJbfXcIzjdsYtBA= -----END CERTIFICATE-----Generated at Fri Apr 11 23:50:34 2025 by rpki-client