$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/d2823ca9-bbea-3694-9cb6-01bbbb1dcac5.roa File: d2823ca9-bbea-3694-9cb6-01bbbb1dcac5.roa (raw, json) Hash identifier: eeip7UwcD4Fv+j/ug3C8cJ1PGaaKlk0y7LUnG247UoU= Subject key identifier: 03:DD:F5:67:AC:F0:8B:5A:76:28:9D:CE:35:A5:3B:93:13:F0:E9:01 Certificate issuer: /CN=4c077b20-9311-4e07-96bf-a5c414450c8a Certificate serial: 010D0C9F4328584A0FE42382432FC2787E8DFE80 Authority key identifier: 15:2A:AA:09:98:F4:80:7A:1F:8E:91:6E:6A:D6:8A:1E:0D:D1:3F:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/d2823ca9-bbea-3694-9cb6-01bbbb1dcac5.roa Signing time: Mon 02 Jun 2025 22:17:34 +0000 ROA not before: Mon 02 Jun 2025 22:17:34 +0000 ROA not after: Sun 31 Aug 2025 22:17:34 +0000 asID: 852 IP address blocks: 142.52.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/4c077b20-9311-4e07-96bf-a5c414450c8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/4c077b20-9311-4e07-96bf-a5c414450c8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0f:e4:23:82:43:2f:c2:78:7e:8d:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c077b20-9311-4e07-96bf-a5c414450c8a Validity Not Before: Jun 2 22:17:34 2025 GMT Not After : Aug 31 22:17:34 2025 GMT Subject: CN=1949a8cf-990e-4c9f-8839-97981c86d78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d4:b9:0a:76:0a:11:f1:7a:de:70:47:b3:d6: 04:b3:2d:89:20:06:87:3f:ea:58:8d:b3:f7:3c:8c: 34:ab:f1:84:d0:aa:9d:8b:5e:f6:28:8d:73:f4:d8: 2e:bd:d1:2c:d6:29:ad:cc:c5:2b:2d:f9:2c:79:60: 35:fe:99:0e:95:70:87:95:6e:eb:95:92:8d:0c:05: 0a:5c:80:a3:fc:eb:84:9a:fb:0d:64:7b:f0:c4:0e: 4b:55:20:e4:1f:50:93:c2:ce:73:d8:68:ad:6c:46: d1:7a:f2:53:29:b7:37:d7:62:d7:99:9e:28:09:b7: 50:bc:a3:63:6e:0f:00:8d:94:91:06:5b:fc:6e:a4: 35:0f:9b:c7:15:e4:b7:34:46:1e:4c:b5:06:90:5e: 06:b4:2f:60:ae:05:91:a3:b1:24:81:24:69:7a:56: 81:df:23:2d:8c:54:1d:3d:0e:63:0f:a9:27:f3:87: 3c:8a:06:ae:db:be:ac:f9:ac:8a:c0:68:10:d3:d6: f5:ba:92:7f:2f:47:e8:0d:9d:8c:4d:d0:59:7d:30: 07:ac:29:cd:a8:73:b9:50:c8:9f:e4:30:17:e4:47: 7d:04:99:b8:ff:94:a4:85:94:ee:86:a0:6f:7d:e2: 7b:d5:10:da:93:ce:74:da:09:81:5d:6b:09:99:17: 9c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DD:F5:67:AC:F0:8B:5A:76:28:9D:CE:35:A5:3B:93:13:F0:E9:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/d2823ca9-bbea-3694-9cb6-01bbbb1dcac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/4c077b20-9311-4e07-96bf-a5c414450c8a.crl X509v3 Authority Key Identifier: keyid:15:2A:AA:09:98:F4:80:7A:1F:8E:91:6E:6A:D6:8A:1E:0D:D1:3F:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a.cer sbgp-ipAddrBlock: critical IPv4: 142.52.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:36:72:88:73:bf:ef:8f:d8:85:71:02:7d:a2:35:b0:e8:23: ec:d9:f4:52:ca:d4:a2:60:6c:67:84:02:81:2b:b0:c9:09:f2: 18:f4:f3:06:6d:49:b2:4e:d7:ae:a6:57:6a:c3:43:4d:f7:ba: c7:28:cc:3f:7e:b1:6f:45:e3:d0:40:87:d2:db:c8:78:00:fb: 5e:a4:90:aa:64:68:71:5f:1e:70:53:da:ef:44:7c:c5:f0:3b: ce:02:a9:3e:18:aa:09:32:ba:46:58:7f:74:28:99:59:e4:05: cf:ee:27:fe:18:1a:aa:4d:27:ab:85:6b:ff:6c:41:c5:88:9d: 76:58:92:d4:90:5a:1e:6b:cb:b2:f2:55:44:48:af:a4:07:93: f7:87:01:fa:9d:bf:f5:ac:9c:12:37:ed:9f:7c:50:b2:ff:d0: e0:49:09:ff:97:98:9c:79:8b:19:4b:0f:b3:4d:e6:a7:ca:69: f1:a2:9f:8e:08:0e:96:f6:63:35:29:ea:39:0e:21:0d:48:3b: 8e:2a:8c:b5:9f:a7:d0:fd:8a:be:21:9a:cf:f0:ac:8b:36:22: e8:a9:2f:86:bd:98:28:fe:e6:ed:95:ef:65:8e:7b:8c:0b:a2: 64:03:03:9f:f0:06:0d:95:7c:69:61:8e:c3:f1:b1:ef:e0:d6: 0b:e7:21:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoP5COCQy/CeH6N/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMwNzdiMjAtOTMxMS00ZTA3LTk2YmYtYTVjNDE0NDUw YzhhMB4XDTI1MDYwMjIyMTczNFoXDTI1MDgzMTIyMTczNFowLzEtMCsGA1UEAxMk MTk0OWE4Y2YtOTkwZS00YzlmLTg4MzktOTc5ODFjODZkNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NS5CnYKEfF63nBHs9YEsy2JIAaHP+pYjbP3 PIw0q/GE0Kqdi172KI1z9NguvdEs1imtzMUrLfkseWA1/pkOlXCHlW7rlZKNDAUK XICj/OuEmvsNZHvwxA5LVSDkH1CTws5z2GitbEbRevJTKbc312LXmZ4oCbdQvKNj bg8AjZSRBlv8bqQ1D5vHFeS3NEYeTLUGkF4GtC9grgWRo7EkgSRpelaB3yMtjFQd PQ5jD6kn84c8igau276s+ayKwGgQ09b1upJ/L0foDZ2MTdBZfTAHrCnNqHO5UMif 5DAX5Ed9BJm4/5SkhZTuhqBvfeJ71RDak8502gmBXWsJmReccwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPd9Wes8ItadiidzjWlO5MT8OkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80YzA3 N2IyMC05MzExLTRlMDctOTZiZi1hNWM0MTQ0NTBjOGEvZDI4MjNjYTktYmJlYS0z Njk0LTljYjYtMDFiYmJiMWRjYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGMwNzdiMjAtOTMxMS00ZTA3LTk2 YmYtYTVjNDE0NDUwYzhhLzRjMDc3YjIwLTkzMTEtNGUwNy05NmJmLWE1YzQxNDQ1 MGM4YS5jcmwwHwYDVR0jBBgwFoAUFSqqCZj0gHofjpFuataKHg3RP6MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80YzA3N2IyMC05MzExLTRlMDctOTZiZi1hNWM0 MTQ0NTBjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjjTFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc2cohzv++P2IVxAn2iNbDoI+zZ9FLK1KJgbGeEAoErsMkJ8hj08wZt SbJO166mV2rDQ033uscozD9+sW9F49BAh9LbyHgA+16kkKpkaHFfHnBT2u9EfMXw O84CqT4YqgkyukZYf3QomVnkBc/uJ/4YGqpNJ6uFa/9sQcWInXZYktSQWh5ry7Ly VURIr6QHk/eHAfqdv/WsnBI37Z98ULL/0OBJCf+XmJx5ixlLD7NN5qfKafGin44I Dpb2YzUp6jkOIQ1IO44qjLWfp9D9ir4hms/wrIs2IuipL4a9mCj+5u2V72WOe4wL omQDA5/wBg2VfGlhjsPxse/g1gvnIdQ= -----END CERTIFICATE-----Generated at Sun Jun 8 17:09:11 2025 by rpki-client