$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52bbdc2f-bbde-3036-8aca-e24454a54d90.roa File: 52bbdc2f-bbde-3036-8aca-e24454a54d90.roa (raw, json) Hash identifier: yl7eIKVq5Um9854riC4aWIBwfn0803Db4JTF8losuOU= Subject key identifier: 4E:0A:FA:C5:0D:CA:3A:F4:65:37:43:0B:65:C2:91:F6:AD:3A:D5:4A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285848CB1659593BC0B0565E67B400 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52bbdc2f-bbde-3036-8aca-e24454a54d90.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 2000 IP address blocks: 192.41.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:59:59:3b:c0:b0:56:5e:67:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=d83ca052-176f-4bf5-95ff-2042ed310607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bd:e1:ae:b8:e1:0a:1f:54:ed:d5:7c:f2:4e: e7:fa:e4:83:e9:9d:59:e8:1b:4f:a7:00:c0:06:d4: e9:88:bc:47:35:81:fc:e8:5e:ee:0f:60:8c:ec:1d: 06:09:57:91:f1:79:89:87:bb:66:c0:21:0c:28:b5: 89:e7:9f:90:bd:8f:5b:ee:9e:fb:d9:3b:41:5e:38: b5:54:c2:c0:dd:90:1c:c7:9d:63:cf:00:18:9e:f0: 12:76:59:bd:7f:fb:cb:f6:ee:f9:f8:42:5e:26:d4: 48:99:62:47:04:fb:4b:52:7a:84:6a:3e:25:fe:e7: 85:e2:0a:2a:d2:a0:3d:bb:6c:5e:17:40:67:7a:98: 4d:15:0d:2a:e7:47:43:14:6f:8e:08:8a:e4:2a:05: 03:7a:f0:4a:db:b7:8c:d6:67:37:b2:12:e4:65:7a: 44:51:13:51:e6:9b:94:92:de:fa:e4:23:1e:7b:e1: bf:24:bf:35:22:a2:4c:73:bd:8e:27:b1:2c:99:ad: ab:5a:52:e7:cf:ec:4f:dc:12:c5:0b:49:09:05:38: 27:57:00:e4:bd:a1:14:e9:0e:4e:dd:0a:6d:db:b0: ea:64:4f:9a:f2:af:e1:c1:d4:9f:84:c8:20:77:b8: d0:22:0f:b6:fe:3c:e4:41:70:28:fd:9b:3e:79:9a: bc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0A:FA:C5:0D:CA:3A:F4:65:37:43:0B:65:C2:91:F6:AD:3A:D5:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52bbdc2f-bbde-3036-8aca-e24454a54d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 192.41.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:8c:8c:f5:c1:24:40:ce:73:1c:5d:5e:4d:01:51:3b:6c:99: a2:75:3e:dc:eb:46:d1:c5:5c:fe:47:9d:ba:2b:45:35:9b:f7: 33:7a:c9:3a:c8:b3:b3:1a:0f:aa:db:b2:e5:b9:86:65:cf:45: 8e:b0:e6:26:26:48:0b:51:b8:31:4b:ce:c7:44:38:b5:b3:4a: c6:95:b9:92:d5:c8:12:84:c7:5b:0c:09:71:13:a5:6c:1a:51: 12:18:47:6f:7b:6c:da:ef:2d:48:65:1c:b4:87:09:03:2a:a6: 9e:db:81:7f:02:d3:fc:5a:33:4b:f3:02:6b:b9:7b:27:3d:10: 8a:28:1c:51:3a:30:2a:31:20:64:02:04:d4:e8:83:63:b1:58: cd:ad:fe:86:c0:63:41:e0:f1:7a:7c:67:33:f8:04:9a:7e:e2: e2:37:12:b7:0d:8d:b3:8d:4f:6c:6a:52:b3:1d:c5:53:1e:46: 82:05:6e:b1:d0:93:15:d0:df:59:9e:04:8d:b8:06:71:a0:28: 16:02:32:0f:15:9d:3e:71:7d:4f:66:e8:f8:08:6e:0e:07:c0: 38:af:90:4f:63:27:ec:ee:7c:7d:12:7c:36:74:3a:6f:c5:78: 8b:b6:59:31:1f:1d:b4:22:b1:ef:62:b1:3a:19:84:99:e5:de: b7:7e:6a:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFllZO8CwVl5ntAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZDgzY2EwNTItMTc2Zi00YmY1LTk1ZmYtMjA0MmVkMzEwNjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r3hrrjhCh9U7dV88k7n+uSD6Z1Z6BtPpwDA BtTpiLxHNYH86F7uD2CM7B0GCVeR8XmJh7tmwCEMKLWJ55+QvY9b7p772TtBXji1 VMLA3ZAcx51jzwAYnvASdlm9f/vL9u75+EJeJtRImWJHBPtLUnqEaj4l/ueF4goq 0qA9u2xeF0BnephNFQ0q50dDFG+OCIrkKgUDevBK27eM1mc3shLkZXpEURNR5puU kt765CMee+G/JL81IqJMc72OJ7Esma2rWlLnz+xP3BLFC0kJBTgnVwDkvaEU6Q5O 3Qpt27DqZE+a8q/hwdSfhMggd7jQIg+2/jzkQXAo/Zs+eZq8hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4K+sUNyjr0ZTdDC2XCkfatOtVKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTJiYmRjMmYtYmJkZS0z MDM2LThhY2EtZTI0NDU0YTU0ZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCmrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWMjPXBJEDOcxxdXk0BUTtsmaJ1PtzrRtHFXP5HnborRTWb9zN6yTrI s7MaD6rbsuW5hmXPRY6w5iYmSAtRuDFLzsdEOLWzSsaVuZLVyBKEx1sMCXETpWwa URIYR297bNrvLUhlHLSHCQMqpp7bgX8C0/xaM0vzAmu5eyc9EIooHFE6MCoxIGQC BNTog2OxWM2t/obAY0Hg8Xp8ZzP4BJp+4uI3ErcNjbONT2xqUrMdxVMeRoIFbrHQ kxXQ31meBI24BnGgKBYCMg8VnT5xfU9m6PgIbg4HwDivkE9jJ+zufH0SfDZ0Om/F eIu2WTEfHbQise9isToZhJnl3rd+at4= -----END CERTIFICATE-----Generated at Sun Apr 27 00:19:38 2025 by rpki-client