$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/331337f9-45ca-33c2-be93-6ef2703fcc91.roa File: 331337f9-45ca-33c2-be93-6ef2703fcc91.roa (raw, json) Hash identifier: c718Jq42vOi6Pcm2rf69NEZT6nXRi9tsXIgr+r1qhkE= Subject key identifier: F6:E0:18:32:92:33:C1:DB:BA:1F:C6:E9:A9:EC:11:A3:B1:C1:BA:F7 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F43285848EF61409BD36DBCE5392D7780 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/331337f9-45ca-33c2-be93-6ef2703fcc91.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 13325 IP address blocks: 136.181.195.0/25 maxlen: 25 136.181.195.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:40:9b:d3:6d:bc:e5:39:2d:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=843763dc-b723-43a7-8556-7c285608c74f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:d0:62:1e:fa:66:a1:ec:d1:86:3d:9d:b8: 66:e5:6a:15:9e:8a:11:13:e7:69:e6:4e:b8:8b:3f: a2:7a:56:c7:4d:d8:43:e2:55:ca:81:56:ba:dc:88: 7d:09:de:44:1e:b6:5d:3a:d8:e5:71:5d:11:65:76: 04:3a:56:00:78:f0:55:2f:c2:29:5b:20:9e:71:9b: 5b:b5:7d:05:33:ca:ac:f1:e2:e0:0e:95:34:62:0e: ef:01:a0:30:f9:e3:aa:4f:db:10:25:66:91:e3:fb: d4:48:c2:16:16:4d:51:bb:1e:f5:02:e4:66:cd:52: 17:9a:14:da:56:0e:28:36:a6:a2:8a:32:a5:94:c7: 46:b1:03:13:e9:b3:86:85:04:ae:40:dd:6d:42:a7: b0:97:46:29:44:31:48:43:0b:0b:bf:9e:12:40:1d: 1f:0c:b3:cc:81:96:e1:01:84:f7:fa:d8:87:cd:f0: 0c:5a:84:53:a3:7b:e3:b4:62:b9:bf:cc:a4:44:9f: 13:7e:62:90:33:36:3c:76:07:7e:55:5e:3e:12:de: c6:63:f2:ff:dc:3e:d4:b7:c5:1d:68:aa:90:ad:f2: bd:4e:09:0c:b9:50:6b:21:df:c3:ab:91:6a:d5:06: e0:71:80:c9:d8:43:dd:a2:6c:58:3e:c6:d1:94:bb: c4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E0:18:32:92:33:C1:DB:BA:1F:C6:E9:A9:EC:11:A3:B1:C1:BA:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/331337f9-45ca-33c2-be93-6ef2703fcc91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 136.181.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a1:82:69:c3:5c:ca:21:cc:06:e5:57:a7:41:1d:47:95:e6: e7:28:a9:ea:aa:4e:17:15:1e:0a:94:d0:46:d8:86:a7:56:66: 8b:c6:f6:c4:21:85:30:2f:de:46:c5:ef:3a:ba:b5:c2:66:ad: 0a:3a:36:7e:fe:52:d6:d7:a4:83:3f:fd:45:e4:a7:42:0a:3c: a8:bf:b0:f9:e0:73:0d:ac:6f:56:41:ea:50:76:52:da:de:05: fe:12:62:7e:9f:d5:9a:5b:47:0b:48:66:a9:94:42:3f:85:d9: d4:0f:76:23:d6:5d:49:41:84:7c:77:a9:47:83:19:76:ca:57: 39:3e:9e:04:cf:92:a3:88:e9:1d:d5:66:5b:23:c1:c9:c2:bf: 7a:50:81:d2:bb:71:63:fd:fb:87:5c:7b:82:a8:cc:dc:06:99: 1b:36:ab:47:17:2b:92:6a:33:1b:9b:3b:6c:c6:26:28:9b:89: 59:5d:8d:c6:15:ec:ee:a9:a0:fa:f2:0b:fb:f3:6d:dd:f2:d1: a1:b9:b4:1b:0b:f3:20:41:33:9e:81:0b:1a:9f:f4:dd:2c:05: 98:4d:b2:c7:ab:c6:b9:57:1c:14:e6:3c:eb:47:bb:02:00:9d: 1d:24:d6:0e:26:ce:9c:db:af:e5:78:8d:8a:82:22:4c:e4:f4: 0e:e0:eb:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUCb02285Tktd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ODQzNzYzZGMtYjcyMy00M2E3LTg1NTYtN2MyODU2MDhjNzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws/QYh76ZqHs0YY9nbhm5WoVnooRE+dp5k64 iz+ielbHTdhD4lXKgVa63Ih9Cd5EHrZdOtjlcV0RZXYEOlYAePBVL8IpWyCecZtb tX0FM8qs8eLgDpU0Yg7vAaAw+eOqT9sQJWaR4/vUSMIWFk1Rux71AuRmzVIXmhTa Vg4oNqaiijKllMdGsQMT6bOGhQSuQN1tQqewl0YpRDFIQwsLv54SQB0fDLPMgZbh AYT3+tiHzfAMWoRTo3vjtGK5v8ykRJ8TfmKQMzY8dgd+VV4+Et7GY/L/3D7Ut8Ud aKqQrfK9TgkMuVBrId/Dq5Fq1QbgcYDJ2EPdomxYPsbRlLvE8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbgGDKSM8Hbuh/G6ansEaOxwbr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvMzMxMzM3ZjktNDVjYS0z M2MyLWJlOTMtNmVmMjcwM2ZjYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLXDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABahgmnDXMohzAblV6dBHUeV5ucoqeqqThcVHgqU0EbYhqdWZovG9sQh hTAv3kbF7zq6tcJmrQo6Nn7+UtbXpIM//UXkp0IKPKi/sPngcw2sb1ZB6lB2Utre Bf4SYn6f1ZpbRwtIZqmUQj+F2dQPdiPWXUlBhHx3qUeDGXbKVzk+ngTPkqOI6R3V ZlsjwcnCv3pQgdK7cWP9+4dce4KozNwGmRs2q0cXK5JqMxubO2zGJiibiVldjcYV 7O6poPryC/vzbd3y0aG5tBsL8yBBM56BCxqf9N0sBZhNsserxrlXHBTmPOtHuwIA nR0k1g4mzpzbr+V4jYqCIkzk9A7g6yA= -----END CERTIFICATE-----Generated at Fri Apr 11 23:15:58 2025 by rpki-client