$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa File: 52b1de85-0442-360b-b96d-bfcab54c4eac.roa (raw, json) Hash identifier: SJ+0sUlPtIuSPkV0N0k4bhFTHI4/tiyY5bgNZ0khl8U= Subject key identifier: E9:C8:94:3C:5E:14:4B:72:14:7B:FB:7D:6E:22:1A:D5:57:9F:BB:F2 Certificate issuer: /CN=2b52814e-343c-46a0-bf89-2e9064856503 Certificate serial: 010D0C9F4328584902EBF96DE7B3AD34405FDB00 Authority key identifier: E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 393410 IP address blocks: 192.30.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:eb:f9:6d:e7:b3:ad:34:40:5f:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b52814e-343c-46a0-bf89-2e9064856503 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=3a2b475c-aaa8-47c1-a204-1bccd790bb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e1:04:07:22:34:06:eb:1d:28:77:6f:10:23: a0:6a:0c:9e:d5:09:fb:c6:d3:fe:4b:c0:0a:19:90: 51:50:f6:9a:ea:f7:20:b8:ec:30:cd:93:d2:86:55: 57:dc:5e:d1:32:26:5c:3e:bc:70:34:41:bf:ae:e1: 5c:f8:ac:9a:d7:56:25:3a:db:b3:dd:0a:9e:c2:29: 93:1c:eb:19:ec:ba:5b:b2:83:ee:de:a0:54:f6:c2: 9f:28:1b:fe:19:f2:9a:3e:c5:6f:10:a2:ca:fe:bb: f3:c4:b2:4e:b2:c4:56:04:9a:cb:b8:7c:f6:45:04: ab:06:1f:6b:02:c6:7a:1e:84:52:90:d2:25:ca:4d: 43:6e:af:a4:4f:eb:71:fd:7a:6c:1b:83:ef:b1:12: 01:f0:6b:72:37:b3:de:fd:b3:0b:9e:dc:0b:54:da: 30:1d:5b:c0:17:ec:0f:90:3f:47:34:78:77:29:5c: a3:98:4e:ee:76:0b:6c:4f:71:e3:3d:18:59:68:8f: 02:1b:0b:15:b7:22:6c:e1:61:5f:a9:5f:a9:4a:1d: 3e:8a:b4:f6:15:ef:b5:1f:e1:40:c3:0c:ef:74:5d: e7:3f:1a:78:30:01:52:de:dc:88:88:1b:99:5f:c1: 1c:38:fd:61:09:49:62:a9:87:d4:b5:c6:62:6c:46: 5e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C8:94:3C:5E:14:4B:72:14:7B:FB:7D:6E:22:1A:D5:57:9F:BB:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl X509v3 Authority Key Identifier: keyid:E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer sbgp-ipAddrBlock: critical IPv4: 192.30.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:1e:72:be:c1:2d:4d:e1:45:82:9a:1b:71:88:cc:d4:1e:1c: 8b:55:05:e6:5f:91:b4:67:34:60:db:2f:2f:91:28:a8:28:d7: fe:2f:42:f0:13:95:70:c5:7e:17:7d:0c:4a:4b:a9:f4:6b:38: 3f:b7:50:fc:73:c3:f8:72:fc:c0:16:9e:97:b9:0a:41:b8:e8: 0d:c3:38:0f:4b:7c:8b:9f:a1:08:67:d5:7c:25:1c:a6:65:fb: 20:34:e4:01:18:8c:63:f8:62:2e:85:7d:69:60:10:5a:34:82: 6a:ca:cf:ba:c0:a7:bb:b2:37:24:37:b3:09:84:5d:e8:8c:2f: 0d:c1:cd:2d:3c:00:e2:9f:3a:31:4d:0f:7f:16:16:b3:af:d5: 1b:df:e6:1b:81:fa:50:00:8f:95:dc:04:77:af:7b:7d:07:13: 8a:04:34:f1:8d:4d:36:b9:12:70:95:69:f4:68:24:bc:3d:7f: 70:72:58:6c:45:92:62:77:4d:08:69:95:ff:88:07:cf:cf:6a: 0c:0d:1c:b3:4b:2c:62:d3:aa:33:5f:d6:e4:3e:cf:80:cf:45: 21:b1:67:6b:35:58:e6:14:98:4d:fc:c9:8b:85:2a:a9:18:ea: 91:aa:6a:8c:dc:b6:ed:0f:c9:08:64:c4:51:c1:8d:ed:4e:68: ba:34:9f:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/lt57OtNEBf2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1MjgxNGUtMzQzYy00NmEwLWJmODktMmU5MDY0ODU2 NTAzMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk M2EyYjQ3NWMtYWFhOC00N2MxLWEyMDQtMWJjY2Q3OTBiYjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOEEByI0BusdKHdvECOgagye1Qn7xtP+S8AK GZBRUPaa6vcguOwwzZPShlVX3F7RMiZcPrxwNEG/ruFc+Kya11YlOtuz3QqewimT HOsZ7LpbsoPu3qBU9sKfKBv+GfKaPsVvEKLK/rvzxLJOssRWBJrLuHz2RQSrBh9r AsZ6HoRSkNIlyk1Dbq+kT+tx/XpsG4PvsRIB8GtyN7Pe/bMLntwLVNowHVvAF+wP kD9HNHh3KVyjmE7udgtsT3HjPRhZaI8CGwsVtyJs4WFfqV+pSh0+irT2Fe+1H+FA wwzvdF3nPxp4MAFS3tyIiBuZX8EcOP1hCUliqYfUtcZibEZeVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnIlDxeFEtyFHv7fW4iGtVXn7vyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUy ODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkwNjQ4NTY1MDMvNTJiMWRlODUtMDQ0Mi0z NjBiLWI5NmQtYmZjYWI1NGM0ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmI1MjgxNGUtMzQzYy00NmEwLWJm ODktMmU5MDY0ODU2NTAzLzJiNTI4MTRlLTM0M2MtNDZhMC1iZjg5LTJlOTA2NDg1 NjUwMy5jcmwwHwYDVR0jBBgwFoAU6dRwuiGQ7tcv2d+VxyZ/OvYvKE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUyODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkw NjQ4NTY1MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAecr7BLU3hRYKaG3GIzNQeHItVBeZfkbRnNGDbLy+RKKgo1/4vQvAT lXDFfhd9DEpLqfRrOD+3UPxzw/hy/MAWnpe5CkG46A3DOA9LfIufoQhn1XwlHKZl +yA05AEYjGP4Yi6FfWlgEFo0gmrKz7rAp7uyNyQ3swmEXeiMLw3BzS08AOKfOjFN D38WFrOv1Rvf5huB+lAAj5XcBHeve30HE4oENPGNTTa5EnCVafRoJLw9f3ByWGxF kmJ3TQhplf+IB8/PagwNHLNLLGLTqjNf1uQ+z4DPRSGxZ2s1WOYUmE38yYuFKqkY 6pGqaozctu0PyQhkxFHBje1OaLo0n7Q= -----END CERTIFICATE-----Generated at Fri Mar 14 11:05:42 2025 by rpki-client