$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/4fb9524c-0027-3b38-a16e-a042538273be.roa File: 4fb9524c-0027-3b38-a16e-a042538273be.roa (raw, json) Hash identifier: mdYBleW3PvAg7E0HB/vsSCxgEHZUXGnaPRI2ck73i4k= Subject key identifier: 3D:3C:AE:C1:BA:63:94:A2:7F:49:10:7E:AC:27:B3:83:05:93:40:9A Certificate issuer: /CN=e63efa95-ea3a-452d-a757-7aad9b62d5b7 Certificate serial: 010D0C9F43285848F65BF3971658E4794C5FD2A0 Authority key identifier: 32:46:51:DF:98:86:45:92:0C:90:D0:95:02:4D:56:73:B5:D8:4A:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/4fb9524c-0027-3b38-a16e-a042538273be.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 399036 IP address blocks: 208.52.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/e63efa95-ea3a-452d-a757-7aad9b62d5b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/e63efa95-ea3a-452d-a757-7aad9b62d5b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f3:97:16:58:e4:79:4c:5f:d2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e63efa95-ea3a-452d-a757-7aad9b62d5b7 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=2e96ee7f-4ff4-405e-9f01-6bab4dca8594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:c4:0f:ea:4c:82:6d:96:2b:4f:42:f5:28: c4:06:a1:2d:ae:d3:49:ab:67:5e:72:74:9c:26:cc: 4b:de:bd:c7:1e:80:2a:b2:bd:30:72:fe:fd:69:51: 1a:09:c7:95:42:de:02:99:f7:86:83:d8:9b:6a:ef: 3b:7b:14:f0:48:d4:27:03:62:e1:39:10:d6:b4:85: 3a:4b:c6:08:0a:12:c2:e8:f0:d5:16:55:b4:dc:73: ff:05:bb:e9:98:a7:bb:04:d8:e1:46:79:3c:44:28: bf:31:69:83:53:0e:8c:07:f7:5a:eb:e4:1f:61:44: d7:ba:58:24:3c:a3:1d:86:42:ad:54:a9:44:6f:d0: e3:b1:65:5a:40:38:fc:e8:e4:0e:24:12:1c:45:f7: 27:1c:10:93:1e:4c:ff:2c:31:c3:7d:87:72:d4:f1: 68:0f:63:c1:c2:64:e4:ba:ce:ec:7a:37:dc:b1:a6: a9:03:51:cf:b1:75:34:50:02:b8:4c:55:2f:80:60: 99:9e:53:ee:eb:76:6f:16:31:90:c9:89:ba:74:10: 5d:ae:60:b4:c3:4f:58:77:91:7d:05:76:b6:10:32: b5:c1:91:cc:ac:1a:01:df:d7:4b:b8:ed:53:47:b8: b5:32:9c:e8:31:d6:5f:9f:a5:59:0c:01:4d:9a:fd: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3C:AE:C1:BA:63:94:A2:7F:49:10:7E:AC:27:B3:83:05:93:40:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/4fb9524c-0027-3b38-a16e-a042538273be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/e63efa95-ea3a-452d-a757-7aad9b62d5b7.crl X509v3 Authority Key Identifier: keyid:32:46:51:DF:98:86:45:92:0C:90:D0:95:02:4D:56:73:B5:D8:4A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7.cer sbgp-ipAddrBlock: critical IPv4: 208.52.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a9:c6:2e:6e:42:90:71:ef:db:29:a5:d1:69:74:2f:43:99: 0c:b4:09:4b:8c:05:1a:2c:2c:d3:36:e8:41:29:4f:c1:f7:d6: ee:5c:50:8c:40:dd:10:6b:b5:23:d4:a7:5d:b9:b9:d8:a8:e6: b5:60:95:7b:82:b0:5d:ad:8d:70:b6:3a:2a:09:23:3c:e8:69: 00:15:bc:f1:03:49:a6:56:65:c8:30:dd:f8:7d:11:3b:cc:8e: be:20:e6:f4:c3:8e:19:d4:29:35:22:ec:89:52:dc:4d:54:18: ea:e4:97:a0:90:9a:08:4a:8c:57:c5:96:70:1b:a6:86:51:25: 11:98:fa:36:16:de:bb:12:8d:16:89:d7:10:17:10:7a:cc:2e: 3d:c8:82:43:f7:94:8b:ae:6b:96:6c:0c:29:66:3b:30:2c:e2: 32:13:6c:75:07:13:b1:2c:cf:9d:29:9c:73:54:a2:e9:3c:e7: f3:39:fc:54:f5:97:ce:78:17:e8:95:98:02:7c:22:f8:80:c6: 0b:64:25:df:8d:9a:fa:56:be:b5:5f:f7:ed:f8:39:c4:ee:d9: e5:f2:4d:6d:12:18:92:58:94:6e:16:07:0d:f2:fb:55:8d:a1: 9c:bb:f2:b2:d0:09:3d:01:42:f4:45:ad:58:66:b7:7a:e4:dd: 22:43:95:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/OXFljkeUxf0qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYzZWZhOTUtZWEzYS00NTJkLWE3NTctN2FhZDliNjJk NWI3MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MmU5NmVlN2YtNGZmNC00MDVlLTlmMDEtNmJhYjRkY2E4NTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUnED+pMgm2WK09C9SjEBqEtrtNJq2decnSc JsxL3r3HHoAqsr0wcv79aVEaCceVQt4CmfeGg9ibau87exTwSNQnA2LhORDWtIU6 S8YIChLC6PDVFlW03HP/BbvpmKe7BNjhRnk8RCi/MWmDUw6MB/da6+QfYUTXulgk PKMdhkKtVKlEb9DjsWVaQDj86OQOJBIcRfcnHBCTHkz/LDHDfYdy1PFoD2PBwmTk us7sejfcsaapA1HPsXU0UAK4TFUvgGCZnlPu63ZvFjGQyYm6dBBdrmC0w09Yd5F9 BXa2EDK1wZHMrBoB39dLuO1TR7i1MpzoMdZfn6VZDAFNmv3GIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD08rsG6Y5Sif0kQfqwns4MFk0CaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lNjNl ZmE5NS1lYTNhLTQ1MmQtYTc1Ny03YWFkOWI2MmQ1YjcvNGZiOTUyNGMtMDAyNy0z YjM4LWExNmUtYTA0MjUzODI3M2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTYzZWZhOTUtZWEzYS00NTJkLWE3 NTctN2FhZDliNjJkNWI3L2U2M2VmYTk1LWVhM2EtNDUyZC1hNzU3LTdhYWQ5YjYy ZDViNy5jcmwwHwYDVR0jBBgwFoAUMkZR35iGRZIMkNCVAk1Wc7XYSi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lNjNlZmE5NS1lYTNhLTQ1MmQtYTc1Ny03YWFk OWI2MmQ1YjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DSOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACypxi5uQpBx79sppdFpdC9DmQy0CUuMBRosLNM26EEpT8H31u5cUIxA 3RBrtSPUp125udio5rVglXuCsF2tjXC2OioJIzzoaQAVvPEDSaZWZcgw3fh9ETvM jr4g5vTDjhnUKTUi7IlS3E1UGOrkl6CQmghKjFfFlnAbpoZRJRGY+jYW3rsSjRaJ 1xAXEHrMLj3IgkP3lIuua5ZsDClmOzAs4jITbHUHE7Esz50pnHNUouk85/M5/FT1 l854F+iVmAJ8IviAxgtkJd+NmvpWvrVf9+34OcTu2eXyTW0SGJJYlG4WBw3y+1WN oZy78rLQCT0BQvRFrVhmt3rk3SJDlb4= -----END CERTIFICATE-----Generated at Sat Apr 12 13:40:18 2025 by rpki-client