$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f81deceb-236e-3438-9acb-ac93d8bb498a.roa File: f81deceb-236e-3438-9acb-ac93d8bb498a.roa (raw, json) Hash identifier: QR8U+aOpQlLuqDBAOdMcOjMvqfueICHYkLeUENgG03I= Subject key identifier: C1:F8:52:5E:25:F0:91:5D:1E:38:B6:8D:90:A9:D5:56:C9:4C:A1:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF612E594D97E79812BD7A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f81deceb-236e-3438-9acb-ac93d8bb498a.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 72.52.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:2e:59:4d:97:e7:98:12:bd:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=260947af-9df7-48f9-9bfc-1b7891962e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:30:08:06:a6:4b:be:2a:62:ea:47:43:1c: de:35:06:be:de:b4:3b:bc:fc:06:dc:cc:a4:2a:fc: 86:30:08:4b:7f:17:96:32:e8:26:f3:a9:9c:64:7d: d0:56:85:06:2b:50:b7:07:54:e2:80:53:36:3c:a2: 6c:c7:2f:fd:27:12:19:9d:5b:85:d1:3d:ea:b1:ac: 32:15:ee:d1:a5:a0:38:97:42:39:3e:5d:cf:55:ff: 72:27:04:51:ec:34:83:5a:1d:a5:90:a3:ce:e3:94: de:0b:09:d3:fe:e4:00:27:ca:11:86:27:d6:45:aa: b8:bb:ca:f0:9c:04:32:dd:df:a3:06:73:85:d9:0e: 24:c0:b2:2e:da:70:4f:bd:e4:0d:36:9f:9b:b3:f9: f6:60:27:90:99:8f:fc:71:68:0e:c8:e6:80:f6:a0: b0:08:59:e2:5a:72:c4:74:cd:b3:49:54:5a:0b:98: 26:0c:ee:3a:30:5c:58:b8:a3:d0:80:4c:05:7d:1d: 4a:03:02:b1:6f:61:e7:94:b8:11:46:81:4a:9f:6b: dd:5b:e9:a4:14:77:85:61:11:a2:4f:23:ec:25:ef: 6c:df:73:a2:d5:e8:9d:9b:54:50:1d:c8:d0:f6:70: 36:9b:fc:ad:4f:45:0c:9b:52:bc:55:58:8f:a9:16: 00:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F8:52:5E:25:F0:91:5D:1E:38:B6:8D:90:A9:D5:56:C9:4C:A1:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f81deceb-236e-3438-9acb-ac93d8bb498a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f8:95:35:7b:38:d4:76:e4:ef:cd:73:60:25:eb:1a:8b:a9: 7e:28:c5:ff:86:5d:6a:fd:92:4b:34:14:5a:c3:ac:b1:94:66: 24:ba:ec:d6:b6:d1:37:62:f4:6d:16:bd:d3:75:0e:39:ca:cb: af:a6:4b:44:96:88:fb:35:ef:d7:ce:a3:f6:3e:29:d3:c5:e6: dd:3f:58:9b:98:45:39:f9:42:a9:62:e7:4a:ef:9a:9b:24:06: 71:77:cd:45:20:50:82:de:26:0c:d8:f1:12:c0:40:83:c3:2a: 93:c5:5c:27:0d:7f:06:4f:c3:c6:c1:e6:cf:74:79:82:a7:42: fd:d0:b0:9d:fe:f4:ec:aa:56:0e:20:81:35:01:a1:99:7a:d2: 07:cc:e2:86:3c:d6:f0:ff:9b:e4:0e:a9:98:7b:9c:c0:98:d9: 06:bd:a1:fb:ba:41:d5:e6:5a:b1:04:7f:7f:17:62:ee:85:23: 0f:d0:16:ce:28:e4:1f:26:5b:21:aa:bc:65:10:2d:9c:e1:21: 42:18:e7:74:99:df:53:c8:ea:8f:c0:89:b4:74:ab:df:98:61: fa:ad:59:76:21:38:1b:f2:f6:3d:32:0c:f3:93:87:df:4b:15: b7:1f:fe:ac:a3:27:02:2d:49:06:06:c8:9a:cd:86:40:f5:cc: b9:58:ae:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYS5ZTZfnmBK9egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MjYwOTQ3YWYtOWRmNy00OGY5LTliZmMtMWI3ODkxOTYyZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd0wCAamS74qYupHQxzeNQa+3rQ7vPwG3Myk KvyGMAhLfxeWMugm86mcZH3QVoUGK1C3B1TigFM2PKJsxy/9JxIZnVuF0T3qsawy Fe7RpaA4l0I5Pl3PVf9yJwRR7DSDWh2lkKPO45TeCwnT/uQAJ8oRhifWRaq4u8rw nAQy3d+jBnOF2Q4kwLIu2nBPveQNNp+bs/n2YCeQmY/8cWgOyOaA9qCwCFniWnLE dM2zSVRaC5gmDO46MFxYuKPQgEwFfR1KAwKxb2HnlLgRRoFKn2vdW+mkFHeFYRGi TyPsJe9s33Oi1eidm1RQHcjQ9nA2m/ytT0UMm1K8VViPqRYAQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH4Ul4l8JFdHji2jZCp1VbJTKE6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjgxZGVjZWItMjM2ZS0z NDM4LTlhY2ItYWM5M2Q4YmI0OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL4lTV7ONR25O/Nc2Al6xqLqX4oxf+GXWr9kks0FFrDrLGUZiS67Na2 0Tdi9G0WvdN1DjnKy6+mS0SWiPs179fOo/Y+KdPF5t0/WJuYRTn5Qqli50rvmpsk BnF3zUUgUILeJgzY8RLAQIPDKpPFXCcNfwZPw8bB5s90eYKnQv3QsJ3+9OyqVg4g gTUBoZl60gfM4oY81vD/m+QOqZh7nMCY2Qa9ofu6QdXmWrEEf38XYu6FIw/QFs4o 5B8mWyGqvGUQLZzhIUIY53SZ31PI6o/AibR0q9+YYfqtWXYhOBvy9j0yDPOTh99L Fbcf/qyjJwItSQYGyJrNhkD1zLlYris= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:32 2025 by rpki-client