$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/c44a7c9f-8f5f-3ecf-a9a8-70e963d0092b.roa File: c44a7c9f-8f5f-3ecf-a9a8-70e963d0092b.roa (raw, json) Hash identifier: /TAOOd+CXxZ2O/54ANRG78/EHr4V40kE1uv/j0+skfA= Subject key identifier: 2C:F1:BF:62:2C:A4:58:06:52:24:1B:C7:9D:30:B7:B5:C6:24:28:E1 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F43285849CE9A591F1FBAA8BD7C174E00 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/c44a7c9f-8f5f-3ecf-a9a8-70e963d0092b.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 13325 IP address blocks: 162.108.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:59:1f:1f:ba:a8:bd:7c:17:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=a5de97bb-c5fc-4235-a384-41d245ce2d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:db:ae:22:96:8a:7e:d6:e6:45:6f:37:18:03: bd:b9:68:d3:de:a1:26:7f:b4:b4:6e:6f:40:1e:25: 23:85:f3:d9:4d:8e:c5:bc:23:2e:61:f9:66:a6:c1: 12:e8:10:60:00:80:6b:a2:6a:af:18:d5:ff:90:02: 83:7a:51:9b:9d:6f:54:42:c2:4b:3e:18:b3:f9:16: 9c:7e:e2:f5:b6:5b:7a:65:26:f7:77:5f:b5:1c:71: 71:d7:da:21:70:8f:14:83:df:f3:10:42:e5:51:8e: 41:dd:72:b6:f1:52:9b:96:dd:96:3a:f2:04:36:98: 39:86:aa:17:b6:a9:dc:54:76:ad:95:86:e8:db:e4: 5e:68:42:1a:45:b2:bc:a4:bd:2b:e4:17:d0:1b:18: f0:9c:2c:78:db:61:91:f2:01:fb:05:d7:a7:97:33: 37:20:3b:8d:26:a1:96:5d:6a:e3:1b:b6:11:dd:30: 4e:28:59:8c:66:55:ca:01:25:f7:f9:c8:06:de:ae: dc:f3:83:03:73:3c:97:a3:24:e6:02:a1:a7:33:0e: 60:a8:4a:b2:c6:5e:c4:51:47:e9:21:5d:b9:80:6e: 28:ed:1a:50:46:76:88:47:34:85:99:f1:2c:55:48: 63:54:c0:99:10:0c:9e:8e:9a:cc:7d:6a:14:48:5b: 03:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F1:BF:62:2C:A4:58:06:52:24:1B:C7:9D:30:B7:B5:C6:24:28:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/c44a7c9f-8f5f-3ecf-a9a8-70e963d0092b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 162.108.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:0d:20:16:7f:ed:81:55:c8:91:1b:df:52:1c:32:a3:4d:7a: 8f:03:4c:5f:68:8b:f5:47:fe:f7:95:d7:77:ec:ca:af:8d:99: 8d:43:50:88:d6:40:21:44:9b:f1:a6:c4:54:30:b2:65:a0:31: 2b:71:a2:9c:7f:5a:95:0c:d2:73:fc:74:47:3f:11:9a:20:a5: 6d:8d:cd:bc:a2:fb:6f:07:18:9e:00:42:15:08:39:b2:47:65: 88:c9:ef:8b:d7:59:9c:6c:c8:64:2c:84:29:a3:0b:17:08:bf: d9:35:2c:fb:7f:40:da:ee:41:98:d0:df:ba:8d:6e:8c:99:1d: e3:5b:76:02:b1:7c:5c:03:45:28:c4:d3:f3:21:cc:b2:08:3a: 33:c1:a8:88:bd:70:8c:9f:0e:e0:d6:3a:f6:91:5e:89:9b:19: d9:66:5f:3b:7e:d5:b4:b8:e7:90:86:43:9d:95:2c:5c:3f:c8: 8f:49:a6:50:0f:e6:c5:59:58:5a:83:52:f3:2f:5c:63:8a:71: d7:55:52:7f:6a:c9:4c:0a:75:7a:7b:18:14:48:52:0a:fb:e7: e2:45:f4:77:af:21:60:3e:a7:f5:72:ad:87:27:ff:ca:a9:57: df:02:de:e2:54:2c:71:6f:3e:42:7b:38:e1:86:b7:28:da:29: 30:b0:b7:75 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnOmlkfH7qovXwXTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YTVkZTk3YmItYzVmYy00MjM1LWEzODQtNDFkMjQ1Y2UyZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktuuIpaKftbmRW83GAO9uWjT3qEmf7S0bm9A HiUjhfPZTY7FvCMuYflmpsES6BBgAIBromqvGNX/kAKDelGbnW9UQsJLPhiz+Rac fuL1tlt6ZSb3d1+1HHFx19ohcI8Ug9/zEELlUY5B3XK28VKblt2WOvIENpg5hqoX tqncVHatlYbo2+ReaEIaRbK8pL0r5BfQGxjwnCx422GR8gH7BdenlzM3IDuNJqGW XWrjG7YR3TBOKFmMZlXKASX3+cgG3q7c84MDczyXoyTmAqGnMw5gqEqyxl7EUUfp IV25gG4o7RpQRnaIRzSFmfEsVUhjVMCZEAyejprMfWoUSFsD+QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCzxv2IspFgGUiQbx50wt7XGJCjhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvYzQ0YTdjOWYtOGY1Zi0z ZWNmLWE5YTgtNzBlOTYzZDAwOTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAomwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgw0gFn/tgVXIkRvfUhwyo016jwNMX2iL9Uf+95XXd+zKr42ZjUNQiNZA IUSb8abEVDCyZaAxK3GinH9alQzSc/x0Rz8RmiClbY3NvKL7bwcYngBCFQg5skdl iMnvi9dZnGzIZCyEKaMLFwi/2TUs+39A2u5BmNDfuo1ujJkd41t2ArF8XANFKMTT 8yHMsgg6M8GoiL1wjJ8O4NY69pFeiZsZ2WZfO37VtLjnkIZDnZUsXD/Ij0mmUA/m xVlYWoNS8y9cY4px11VSf2rJTAp1ensYFEhSCvvn4kX0d68hYD6n9XKthyf/yqlX 3wLe4lQscW8+Qns44Ya3KNopMLC3dQ== -----END CERTIFICATE-----Generated at Tue Jul 1 20:11:55 2025 by rpki-client