$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/52817f00-994e-3c4d-a1c2-1c8eb90fba26.roa File: 52817f00-994e-3c4d-a1c2-1c8eb90fba26.roa (raw, json) Hash identifier: 2K2uTilkOHkoXAKl9NpDC65Xe4CStPGKM6RgP69VYlU= Subject key identifier: 33:FB:25:A5:E0:92:CC:97:4B:67:CA:5E:25:50:79:8A:99:A4:8F:7E Certificate issuer: /CN=c52cd663-63ec-4bd4-8516-40b4bfe624c2 Certificate serial: 010D0C9F432858493ED3D977FC6F29FED86AD340 Authority key identifier: 69:58:46:39:7A:D5:9A:8C:FA:65:B4:9A:C3:C5:F3:77:C1:0A:D2:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/52817f00-994e-3c4d-a1c2-1c8eb90fba26.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 400464 IP address blocks: 167.88.185.0/24 maxlen: 24 167.88.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/c52cd663-63ec-4bd4-8516-40b4bfe624c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/c52cd663-63ec-4bd4-8516-40b4bfe624c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d9:77:fc:6f:29:fe:d8:6a:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c52cd663-63ec-4bd4-8516-40b4bfe624c2 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=1e432dfe-9698-4ef2-b1e9-b506734bd77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dd:b5:cf:4c:ed:81:f2:58:42:9a:ea:96:b2: 4e:65:6e:e7:8e:80:24:03:55:ec:b4:7d:0b:ed:f8: d4:39:a9:76:2c:df:3d:45:ed:8e:89:57:b5:33:6b: 84:2c:dd:ce:19:f5:42:e2:0c:fb:64:31:22:80:4d: 35:79:90:9e:a5:e2:a6:da:16:6d:bf:69:09:d7:2d: 60:33:73:1e:ba:90:4a:19:e7:e4:63:83:1b:3f:7a: 05:db:0a:96:5d:0e:3c:e4:1a:0e:db:a1:02:d8:6c: a2:79:ff:fb:87:92:84:94:91:87:2a:25:d2:04:7c: 54:14:f1:9e:e6:f5:fd:63:3f:3e:ba:07:f3:7f:90: 92:f1:0b:c3:4d:19:e6:c8:d5:0f:b1:92:dd:cb:02: fc:2f:43:48:46:39:58:6d:7d:b5:fd:84:70:62:02: 0a:f6:4e:ab:ed:0d:7d:66:32:05:3d:11:77:a9:e4: b6:ad:ca:03:55:63:e9:4c:b7:bd:ae:65:69:93:18: 9d:51:ea:d8:33:bf:3c:12:c7:bd:23:c3:34:38:ae: 65:1d:ad:8a:a3:c5:f5:8a:16:28:85:e6:ff:dd:ba: 30:d1:f5:ba:d0:e1:bf:bb:d5:1a:4d:d0:42:50:d0: c1:29:d2:75:30:f8:ee:6e:6d:e2:61:77:c3:64:a1: 16:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FB:25:A5:E0:92:CC:97:4B:67:CA:5E:25:50:79:8A:99:A4:8F:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/52817f00-994e-3c4d-a1c2-1c8eb90fba26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/c52cd663-63ec-4bd4-8516-40b4bfe624c2.crl X509v3 Authority Key Identifier: keyid:69:58:46:39:7A:D5:9A:8C:FA:65:B4:9A:C3:C5:F3:77:C1:0A:D2:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2.cer sbgp-ipAddrBlock: critical IPv4: 167.88.185.0-167.88.186.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:9f:c7:35:70:8e:9a:8a:86:7f:8d:f5:10:53:c8:f9:fa:0c: 8e:73:09:e3:19:69:ac:ee:fd:a2:46:b6:8a:5f:54:8b:7b:92: 05:84:ef:6d:c4:56:ca:ac:5b:6e:02:c3:fb:74:24:f7:db:3f: 0f:5c:91:65:de:99:7f:b5:21:19:b9:e5:61:57:25:c1:01:c9: fc:f6:e2:ee:f5:08:33:0b:3e:a4:53:df:09:26:f6:cf:d6:b7: 42:8a:69:34:9e:4b:3d:f0:a8:c5:1b:53:67:dc:03:b8:a9:4d: 40:76:d5:2a:3d:ae:de:4d:f8:0c:ef:f5:ff:f4:27:20:38:6b: 35:8b:67:03:be:b4:09:01:ae:56:fd:32:2c:80:98:28:19:ab: bf:43:8e:bf:e5:ee:79:71:3e:0f:19:6c:ad:d0:a5:fa:aa:15: 6e:5b:51:b5:61:7b:8f:18:ec:99:a9:42:63:c9:9f:ef:8a:ad: eb:10:ce:b7:bf:4b:25:7d:81:bb:2e:ca:84:9d:34:95:83:09: af:a9:81:2e:4b:5e:06:ed:02:41:9d:9c:21:92:b5:d5:bc:ac: 21:c1:70:e5:ee:31:00:09:b5:58:6d:00:f0:90:e8:30:a2:74: 52:ba:4c:18:a8:13:fd:8e:01:c3:79:68:bc:e0:8c:e2:c2:18: b5:fd:8f:cc -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEk+09l3/G8p/thq00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUyY2Q2NjMtNjNlYy00YmQ0LTg1MTYtNDBiNGJmZTYy NGMyMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MWU0MzJkZmUtOTY5OC00ZWYyLWIxZTktYjUwNjczNGJkNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN21z0ztgfJYQprqlrJOZW7njoAkA1XstH0L 7fjUOal2LN89Re2OiVe1M2uELN3OGfVC4gz7ZDEigE01eZCepeKm2hZtv2kJ1y1g M3MeupBKGefkY4MbP3oF2wqWXQ485BoO26EC2Gyief/7h5KElJGHKiXSBHxUFPGe 5vX9Yz8+ugfzf5CS8QvDTRnmyNUPsZLdywL8L0NIRjlYbX21/YRwYgIK9k6r7Q19 ZjIFPRF3qeS2rcoDVWPpTLe9rmVpkxidUerYM788Ese9I8M0OK5lHa2Ko8X1ihYo heb/3bow0fW60OG/u9UaTdBCUNDBKdJ1MPjubm3iYXfDZKEWZwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFDP7JaXgksyXS2fKXiVQeYqZpI9+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNTJj ZDY2My02M2VjLTRiZDQtODUxNi00MGI0YmZlNjI0YzIvNTI4MTdmMDAtOTk0ZS0z YzRkLWExYzItMWM4ZWI5MGZiYTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzUyY2Q2NjMtNjNlYy00YmQ0LTg1 MTYtNDBiNGJmZTYyNGMyL2M1MmNkNjYzLTYzZWMtNGJkNC04NTE2LTQwYjRiZmU2 MjRjMi5jcmwwHwYDVR0jBBgwFoAUaVhGOXrVmoz6ZbSaw8Xzd8EK0uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNTJjZDY2My02M2VjLTRiZDQtODUxNi00MGI0 YmZlNjI0YzIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACnWLkD BACnWLowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAO5/HNXCOmoqGf431EFPI+foMjnMJ4xlprO79oka2il9U i3uSBYTvbcRWyqxbbgLD+3Qk99s/D1yRZd6Zf7UhGbnlYVclwQHJ/Pbi7vUIMws+ pFPfCSb2z9a3QoppNJ5LPfCoxRtTZ9wDuKlNQHbVKj2u3k34DO/1//QnIDhrNYtn A760CQGuVv0yLICYKBmrv0OOv+XueXE+DxlsrdCl+qoVbltRtWF7jxjsmalCY8mf 74qt6xDOt79LJX2Buy7KhJ00lYMJr6mBLkteBu0CQZ2cIZK11bysIcFw5e4xAAm1 WG0A8JDoMKJ0UrpMGKgT/Y4Bw3lovOCM4sIYtf2PzA== -----END CERTIFICATE-----Generated at Sun Apr 27 16:27:31 2025 by rpki-client