$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa File: d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa (raw, json) Hash identifier: ijkI8AFatbq8QuHff8v91ewxINH2ycDBNbtPAkgh2X8= Subject key identifier: A5:CD:4A:0D:3A:4D:3F:18:4A:31:3A:35:E6:C0:50:58:22:5A:88:22 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F43285848EF61405081982C7D50811880 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 13325 IP address blocks: 199.33.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:40:50:81:98:2c:7d:50:81:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=b69ac527-3d4c-4458-9e34-04d31582501b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2a:36:92:d7:40:48:fb:95:45:dc:db:f9:c8: da:9d:41:24:69:66:2d:7a:8d:b9:81:67:34:3f:bd: 43:91:00:2b:eb:03:1b:53:90:2f:55:80:e7:9c:27: 4a:51:b9:f8:80:be:e7:de:44:96:0e:5c:62:8d:c7: 0e:0f:a0:b4:1e:7d:20:e0:66:8c:61:27:0d:7b:79: 86:31:34:a0:ee:93:8b:d5:50:61:3c:93:7c:4a:04: a9:27:8e:cb:fd:08:a3:f0:35:3e:38:40:1b:f6:14: 65:52:73:08:5a:b3:c5:d8:ea:96:c5:90:56:96:9c: 88:c0:10:22:33:87:98:8c:67:cb:5e:e4:d9:5f:60: 99:8f:1c:26:c7:d6:d4:6b:9e:56:42:39:5b:09:52: 0b:f5:0f:45:46:12:52:d0:6b:88:3f:cc:38:87:dc: 40:ae:c4:cf:1c:a7:eb:31:6e:9d:82:f3:54:2a:e5: 57:b1:96:e0:80:90:ec:eb:71:2f:19:c9:37:e5:51: 3f:66:e1:a2:e7:6a:2b:e6:e3:50:86:5a:1d:2c:d4: 6e:87:04:be:c9:13:e0:3c:06:9b:99:6a:60:df:5e: db:d6:a6:07:6d:62:70:65:36:fc:27:cf:2d:4c:6b: 23:0a:42:0a:5a:b2:cd:65:1a:ed:9f:65:15:ba:ea: af:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CD:4A:0D:3A:4D:3F:18:4A:31:3A:35:E6:C0:50:58:22:5A:88:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 199.33.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:6e:1a:5e:44:a8:8e:27:7a:72:1e:ab:ea:23:eb:4e:96:78: 9a:f9:c2:09:1c:bd:66:ee:3c:74:66:e4:31:97:2d:c4:2d:2a: a6:91:db:98:ee:d2:6b:54:bb:6b:fa:50:6f:76:82:f7:76:25: 19:08:af:47:5d:7d:52:7b:8b:57:3e:44:5b:14:b4:4b:04:2a: ce:0c:f6:26:bd:47:73:c4:cf:b4:be:15:9e:6c:64:96:16:30: 07:ff:90:3c:dd:f7:9f:28:4f:6b:f0:82:02:3a:bc:7a:36:50: 2c:96:9e:0b:22:8c:12:5b:4e:e1:f8:bf:57:ec:eb:46:8c:1c: 35:62:d2:77:22:8d:d5:76:ab:d0:12:d6:4b:91:d9:25:76:51: 35:e4:2c:bd:e4:aa:83:55:00:fd:31:dd:91:45:b3:59:c1:f7: a4:9f:d6:93:c8:4c:76:d7:e2:b1:78:17:0f:66:15:cc:03:78: ca:31:37:bb:a1:f5:d2:3d:4f:35:40:68:96:67:ad:97:06:c6: 01:f3:e1:23:44:8f:5c:98:7e:35:8e:2d:15:c1:46:ac:a3:2b: ad:45:76:dc:a9:bf:b5:ff:54:5e:43:8e:20:79:81:8b:e6:bc: 1f:a8:e1:01:e3:c6:c9:09:6f:55:b1:d9:7e:88:92:e3:bc:e0: 79:1e:c1:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUBQgZgsfVCBGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YjY5YWM1MjctM2Q0Yy00NDU4LTllMzQtMDRkMzE1ODI1MDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkio2ktdASPuVRdzb+cjanUEkaWYteo25gWc0 P71DkQAr6wMbU5AvVYDnnCdKUbn4gL7n3kSWDlxijccOD6C0Hn0g4GaMYScNe3mG MTSg7pOL1VBhPJN8SgSpJ47L/Qij8DU+OEAb9hRlUnMIWrPF2OqWxZBWlpyIwBAi M4eYjGfLXuTZX2CZjxwmx9bUa55WQjlbCVIL9Q9FRhJS0GuIP8w4h9xArsTPHKfr MW6dgvNUKuVXsZbggJDs63EvGck35VE/ZuGi52or5uNQhlodLNRuhwS+yRPgPAab mWpg317b1qYHbWJwZTb8J88tTGsjCkIKWrLNZRrtn2UVuuqvswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXNSg06TT8YSjE6NebAUFgiWogiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvZDRiOGZiZjgtOTFjNC0z M2YzLWEwZDEtZTRiMWU4MTVkZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5uGl5EqI4nenIeq+oj606WeJr5wgkcvWbuPHRm5DGXLcQtKqaR25ju 0mtUu2v6UG92gvd2JRkIr0ddfVJ7i1c+RFsUtEsEKs4M9ia9R3PEz7S+FZ5sZJYW MAf/kDzd958oT2vwggI6vHo2UCyWngsijBJbTuH4v1fs60aMHDVi0ncijdV2q9AS 1kuR2SV2UTXkLL3kqoNVAP0x3ZFFs1nB96Sf1pPITHbX4rF4Fw9mFcwDeMoxN7uh 9dI9TzVAaJZnrZcGxgHz4SNEj1yYfjWOLRXBRqyjK61Fdtypv7X/VF5DjiB5gYvm vB+o4QHjxskJb1Wx2X6IkuO84HkewR0= -----END CERTIFICATE-----Generated at Fri Apr 11 23:46:29 2025 by rpki-client