$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/51c93d61-da59-3492-9aa3-1e6063528f1f.roa File: 51c93d61-da59-3492-9aa3-1e6063528f1f.roa (raw, json) Hash identifier: Yp+OWFYfaIq8A2ahmxn8SijFB3HPCVPl1I/KlfR8hEw= Subject key identifier: 58:56:63:67:A0:2D:BE:C7:44:CB:AC:29:C0:3D:AA:0B:5A:19:30:C0 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F43285848EF6139963F329DF5DDE0B700 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/51c93d61-da59-3492-9aa3-1e6063528f1f.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 13325 IP address blocks: 148.149.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:39:96:3f:32:9d:f5:dd:e0:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=e12ddec0-2b4d-40ec-ab34-ef954ed66279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7e:e4:74:2b:7e:6f:9c:ad:97:a4:fc:dc:57: 84:ab:38:fb:4e:50:ef:2e:22:00:a5:67:4e:b7:75: 55:79:ad:69:94:de:56:28:06:b3:f3:16:fc:a2:5a: 53:08:7b:db:6b:f2:06:0d:94:c4:2e:62:22:48:67: ac:bb:39:2c:c9:ad:60:a1:e8:08:90:4d:a5:b6:1f: a7:79:a3:a4:fa:1e:3b:51:f8:39:b6:c8:49:d3:40: af:e0:14:02:77:83:6f:7b:51:53:fc:54:45:d5:2c: 94:08:f5:eb:28:80:56:d1:f5:25:b9:16:70:96:de: f7:22:1a:33:b9:52:74:5c:3f:77:8a:d9:ef:5c:8c: 7b:1b:78:81:30:59:ac:c7:99:92:72:3d:f6:e8:03: 5b:ec:6d:53:7e:78:e0:24:8e:1f:3b:06:d8:ec:c8: 24:bb:b5:1c:0e:7f:b8:b3:6e:5a:14:02:26:7f:7f: 9a:9e:1f:51:3c:b9:c8:96:91:af:f0:e9:ee:37:6f: 0a:af:46:1a:f8:d4:bc:91:15:8e:75:95:8f:34:10: bb:d4:17:ec:c5:7b:19:f7:c0:a7:81:e2:2c:54:9d: e8:ae:e0:2f:e0:f8:11:17:e7:70:7f:37:6e:f1:86: 24:ab:ea:8f:ab:32:8f:16:59:5e:bb:68:bf:48:96: ac:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:56:63:67:A0:2D:BE:C7:44:CB:AC:29:C0:3D:AA:0B:5A:19:30:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/51c93d61-da59-3492-9aa3-1e6063528f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 148.149.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:9c:06:40:e6:95:34:1f:b7:06:aa:95:2a:43:8a:df:33:d0: 22:a7:c4:81:ab:67:8e:26:11:d8:cb:b1:07:ce:70:21:ae:54: 6f:9a:56:10:f3:a9:f3:23:85:89:9c:8d:28:93:e9:ba:03:7e: ad:9b:6e:3d:20:aa:bd:09:04:62:dd:f4:a6:72:14:50:24:b6: b3:e2:90:53:2b:48:b3:93:6d:01:3b:e2:99:a7:b0:14:28:05: c3:0e:c8:d1:40:dd:a6:52:19:2e:a3:fd:3a:b4:a4:0c:97:da: f8:e4:81:05:2b:8c:bd:7f:5b:10:78:a3:0a:ef:18:93:8c:66: 2b:cd:e1:2e:0d:3b:f9:e4:63:b6:c4:cf:5f:35:c1:1a:1c:83: 6c:55:d4:0b:32:36:c4:cb:02:e9:58:4d:e6:04:64:a1:1d:8d: 14:73:75:8d:e0:6e:4b:dc:07:5e:53:d8:f0:ae:ff:9d:69:68: a1:ae:01:50:1c:9c:0e:4b:3a:84:7d:e0:70:31:15:d4:52:d0: 8f:da:df:b4:96:db:e5:c6:47:42:d6:ff:1f:68:60:bf:a2:c4: 15:75:dc:aa:8b:a8:76:95:90:67:3d:00:f9:e8:18:65:09:45: 78:68:b6:ec:bd:a9:fa:73:08:bc:87:e1:2e:48:01:88:6f:16: db:a7:a9:09 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjvYTmWPzKd9d3gtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ZTEyZGRlYzAtMmI0ZC00MGVjLWFiMzQtZWY5NTRlZDY2Mjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn7kdCt+b5ytl6T83FeEqzj7TlDvLiIApWdO t3VVea1plN5WKAaz8xb8olpTCHvba/IGDZTELmIiSGesuzksya1goegIkE2lth+n eaOk+h47Ufg5tshJ00Cv4BQCd4Nve1FT/FRF1SyUCPXrKIBW0fUluRZwlt73Ihoz uVJ0XD93itnvXIx7G3iBMFmsx5mScj326ANb7G1TfnjgJI4fOwbY7Mgku7UcDn+4 s25aFAImf3+anh9RPLnIlpGv8OnuN28Kr0Ya+NS8kRWOdZWPNBC71BfsxXsZ98Cn geIsVJ3oruAv4PgRF+dwfzdu8YYkq+qPqzKPFlleu2i/SJasCwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFhWY2egLb7HRMusKcA9qgtaGTDAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvNTFjOTNkNjEtZGE1OS0z NDkyLTlhYTMtMWU2MDYzNTI4ZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlJUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUZwGQOaVNB+3BqqVKkOK3zPQIqfEgatnjiYR2MuxB85wIa5Ub5pWEPOp 8yOFiZyNKJPpugN+rZtuPSCqvQkEYt30pnIUUCS2s+KQUytIs5NtATvimaewFCgF ww7I0UDdplIZLqP9OrSkDJfa+OSBBSuMvX9bEHijCu8Yk4xmK83hLg07+eRjtsTP XzXBGhyDbFXUCzI2xMsC6VhN5gRkoR2NFHN1jeBuS9wHXlPY8K7/nWlooa4BUByc Dks6hH3gcDEV1FLQj9rftJbb5cZHQtb/H2hgv6LEFXXcqouodpWQZz0A+egYZQlF eGi27L2p+nMIvIfhLkgBiG8W26epCQ== -----END CERTIFICATE-----Generated at Fri Apr 11 23:06:28 2025 by rpki-client