$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa File: 5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa (raw, json) Hash identifier: VzXWQDybuD//l9nOECRrVCMWFiLbZ+83JVZmOXRhZYQ= Subject key identifier: 84:DC:A1:80:D2:77:DE:B9:2C:8A:A4:71:70:5B:63:32:CA:9D:8E:80 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F43285848EF6139B754B071B0F2469100 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 13325 IP address blocks: 167.240.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:39:b7:54:b0:71:b0:f2:46:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=8b814a9f-a343-474a-a93b-ed1714f0312e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:68:08:03:9d:b0:1e:83:cc:6f:1a:54:6c:3d: db:d4:b4:1c:62:42:cb:e1:c4:e8:1d:cd:a4:f3:78: 4e:02:9a:47:bb:98:c2:7e:2c:c6:d3:81:21:72:3a: 1b:5d:d8:1f:da:da:c5:e6:48:40:c7:ad:4c:37:f1: 24:72:05:0c:29:6f:73:da:5a:8e:bd:83:5f:f3:99: 7e:9c:c2:ef:30:1d:f0:85:51:e0:ac:6f:71:f4:93: f5:ff:d3:4c:10:c5:05:8f:d1:01:49:78:f7:bc:3a: be:e0:f9:79:62:87:9c:2c:fa:b8:d5:d9:1f:1c:12: ea:cb:22:4d:ce:0a:b0:7a:7c:ce:17:0e:20:04:74: 60:d2:b7:6f:5b:cb:a7:e0:6f:57:66:48:1c:96:68: ac:c1:4a:ad:28:d7:d2:7f:16:28:6e:c8:58:41:5b: 0b:4a:7a:62:72:3f:e8:7f:65:9c:a3:f5:74:59:aa: 3c:22:7e:41:30:83:fb:a9:35:f4:db:f4:65:82:28: 7e:24:07:fb:77:ff:bc:1f:f3:20:f6:36:4d:2d:34: 7a:20:cc:e7:bc:a9:b6:df:eb:19:82:10:b9:3d:d4: de:02:c3:7e:98:8b:d5:ae:b8:8b:f2:a7:cc:6e:3b: b5:a1:72:97:72:a4:dc:6e:e8:9c:aa:5b:7f:81:fe: db:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DC:A1:80:D2:77:DE:B9:2C:8A:A4:71:70:5B:63:32:CA:9D:8E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 167.240.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:29:79:aa:b1:99:f1:cb:45:5d:72:85:10:57:e0:65:06:6f: 15:8d:16:35:11:60:9f:3a:86:12:7a:b4:ed:ec:0f:c5:34:5d: 56:4c:e9:fb:6c:bc:4c:d2:79:17:f3:15:fa:00:c0:2b:a3:6d: 21:a4:65:85:d8:39:df:f8:e8:6e:d8:94:66:c6:82:fc:70:d0: 35:71:16:f4:79:bb:93:39:4a:d8:ca:68:1a:61:96:eb:13:d8: d7:e2:15:14:42:7e:e4:35:4b:59:3c:04:2b:a4:7a:c0:7c:2e: fb:63:a6:d6:f0:6f:95:49:81:14:2a:08:99:33:b2:df:62:44: 35:7b:99:1d:0d:a7:f2:62:ff:cf:00:dc:94:b9:21:32:63:db: a0:8b:12:6f:bb:95:e1:3b:a5:b0:f7:97:98:95:71:85:dd:ca: 89:e0:74:ae:08:7c:c2:bf:83:3c:d9:ad:87:09:0b:63:7f:be: 4a:ce:04:95:35:9d:15:77:73:28:5d:23:76:32:ad:8f:3b:56: 25:05:e6:7d:46:a3:c0:4e:60:c1:81:51:3c:40:a5:6b:0d:7a: 73:6b:b9:44:2f:34:23:d0:e9:3f:f5:ae:74:89:7c:ee:66:a1: b1:65:32:f4:22:9f:a6:20:7a:de:5e:b9:69:42:2e:f8:d8:9a: 07:1e:15:29 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjvYTm3VLBxsPJGkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk OGI4MTRhOWYtYTM0My00NzRhLWE5M2ItZWQxNzE0ZjAzMTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWgIA52wHoPMbxpUbD3b1LQcYkLL4cToHc2k 83hOAppHu5jCfizG04EhcjobXdgf2trF5khAx61MN/EkcgUMKW9z2lqOvYNf85l+ nMLvMB3whVHgrG9x9JP1/9NMEMUFj9EBSXj3vDq+4Pl5YoecLPq41dkfHBLqyyJN zgqwenzOFw4gBHRg0rdvW8un4G9XZkgclmiswUqtKNfSfxYobshYQVsLSnpicj/o f2Wco/V0Wao8In5BMIP7qTX02/Rlgih+JAf7d/+8H/Mg9jZNLTR6IMznvKm23+sZ ghC5PdTeAsN+mIvVrriL8qfMbju1oXKXcqTcbuicqlt/gf7bzQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFITcoYDSd965LIqkcXBbYzLKnY6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvNTEzNWQwYmYtMmZjMi0z ZDU0LTgyMzEtNzBmNDU3NGViZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp/AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAeyl5qrGZ8ctFXXKFEFfgZQZvFY0WNRFgnzqGEnq07ewPxTRdVkzp+2y8 TNJ5F/MV+gDAK6NtIaRlhdg53/jobtiUZsaC/HDQNXEW9Hm7kzlK2MpoGmGW6xPY 1+IVFEJ+5DVLWTwEK6R6wHwu+2Om1vBvlUmBFCoImTOy32JENXuZHQ2n8mL/zwDc lLkhMmPboIsSb7uV4TulsPeXmJVxhd3KieB0rgh8wr+DPNmthwkLY3++Ss4ElTWd FXdzKF0jdjKtjztWJQXmfUajwE5gwYFRPEClaw16c2u5RC80I9DpP/WudIl87mah sWUy9CKfpiB63l65aUIu+NiaBx4VKQ== -----END CERTIFICATE-----Generated at Fri Apr 11 23:21:04 2025 by rpki-client