$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/04ae4b72-55bf-3cbc-af3c-1501abc5faa4.roa File: 04ae4b72-55bf-3cbc-af3c-1501abc5faa4.roa (raw, json) Hash identifier: g9zwlOv+frWpFkdF4KtOIlCEQPpbYLtDxizpEhg7dO8= Subject key identifier: 59:D1:35:79:CC:71:80:D9:6A:10:20:79:3C:87:8F:49:A2:DB:43:B4 Certificate issuer: /CN=1c3c552c-5e23-4989-8af0-9450094442e8 Certificate serial: 010D0C9F43285849A61F3CA4510C6EBA95388F80 Authority key identifier: 1A:93:B0:E0:60:7D:5D:45:A7:A5:FE:02:0C:FB:19:86:20:FE:CC:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/04ae4b72-55bf-3cbc-af3c-1501abc5faa4.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 142.225.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3c:a4:51:0c:6e:ba:95:38:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c3c552c-5e23-4989-8af0-9450094442e8 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=09f8184d-a3a7-4392-bf8d-25497b8085f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:78:54:b4:f2:5e:37:7a:2e:24:32:31:8d:aa: b8:aa:e1:8e:b6:27:1b:d4:9a:8c:3c:81:a1:01:28: 12:92:d3:90:f1:dc:3a:9f:c7:9e:74:36:ad:b3:bb: e0:3c:5e:91:50:af:47:95:b2:3c:a4:ad:ef:b4:1a: d9:0f:65:f3:eb:4a:a7:aa:2e:2a:bc:cf:05:bb:4d: 3c:66:cb:06:e0:f2:95:fa:17:cc:02:e3:66:45:7e: 39:72:a8:6b:2c:26:a8:e2:c8:0b:cb:b2:49:e2:8e: 82:e3:e9:5b:32:37:25:18:8a:ca:e0:82:e4:82:a5: 8a:01:26:51:7e:63:2b:7f:4a:f4:da:45:f7:df:03: a2:be:ea:3f:7b:3d:3c:60:6d:b0:db:8f:da:b7:c7: 42:0a:fc:55:b8:dd:1a:d3:97:80:b5:f6:2a:39:5d: 35:e1:09:f8:d4:df:f0:2a:c1:17:0b:dc:8d:db:80: 52:16:a0:fe:38:7b:ab:61:ac:9c:c3:ac:8a:99:b4: 1d:ed:09:07:9c:9d:a9:c1:90:ce:05:58:7d:b2:4b: 49:4b:2d:77:ed:64:40:15:08:55:52:31:d5:9a:c1: 78:79:39:60:69:05:28:38:fe:25:71:38:7a:3d:7a: cf:92:83:01:df:3c:72:8d:56:3f:c7:b1:82:4e:a5: d4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D1:35:79:CC:71:80:D9:6A:10:20:79:3C:87:8F:49:A2:DB:43:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/04ae4b72-55bf-3cbc-af3c-1501abc5faa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.crl X509v3 Authority Key Identifier: keyid:1A:93:B0:E0:60:7D:5D:45:A7:A5:FE:02:0C:FB:19:86:20:FE:CC:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer sbgp-ipAddrBlock: critical IPv4: 142.225.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:65:93:a1:21:50:bb:f1:5c:f2:33:3e:88:89:b9:41:78:a1: 17:d5:ae:fd:da:ba:24:59:1c:70:e9:1c:bb:37:e7:d3:1b:cc: ca:20:7f:d1:74:86:18:8b:df:f0:7d:85:43:9f:47:78:34:3f: 72:66:5f:ff:48:78:0c:ba:5c:72:66:77:7a:c3:94:01:1f:d3: b2:a7:d2:24:9c:55:3a:c6:70:cc:71:5f:dc:ee:95:2b:b4:bd: a3:e9:2e:11:af:f1:13:9d:f5:d5:5a:88:cc:1e:dd:81:f6:65: 7f:7f:60:9e:5f:57:94:c8:12:99:94:05:5e:18:e4:eb:d1:e6: 93:90:94:05:aa:90:9b:70:2d:2b:ae:5a:a1:d5:21:ac:8d:66: ff:e5:b4:e7:50:d6:25:79:ec:cd:1f:fc:5e:f4:60:6c:d9:0f: d1:95:2a:e6:af:75:be:a0:20:38:a0:e5:90:a6:8f:7c:70:bb: f6:ad:98:3d:2c:73:01:89:f5:bb:89:79:51:02:15:99:1c:e8: dd:7c:78:19:66:bd:7a:78:91:d1:b8:21:fc:a0:9e:b1:75:dc: 52:73:fd:8f:82:9a:58:37:b9:d5:51:5e:51:c2:e4:3c:39:64: 2e:2d:35:43:62:52:f4:8f:f2:8d:77:bc:10:6a:fa:c2:ef:d7: 45:29:12:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzykUQxuupU4j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMzYzU1MmMtNWUyMy00OTg5LThhZjAtOTQ1MDA5NDQ0 MmU4MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk MDlmODE4NGQtYTNhNy00MzkyLWJmOGQtMjU0OTdiODA4NWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HhUtPJeN3ouJDIxjaq4quGOticb1JqMPIGh ASgSktOQ8dw6n8eedDats7vgPF6RUK9HlbI8pK3vtBrZD2Xz60qnqi4qvM8Fu008 ZssG4PKV+hfMAuNmRX45cqhrLCao4sgLy7JJ4o6C4+lbMjclGIrK4ILkgqWKASZR fmMrf0r02kX33wOivuo/ez08YG2w24/at8dCCvxVuN0a05eAtfYqOV014Qn41N/w KsEXC9yN24BSFqD+OHurYaycw6yKmbQd7QkHnJ2pwZDOBVh9sktJSy137WRAFQhV UjHVmsF4eTlgaQUoOP4lcTh6PXrPkoMB3zxyjVY/x7GCTqXU2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnRNXnMcYDZahAgeTyHj0mi20O0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYzNj NTUyYy01ZTIzLTQ5ODktOGFmMC05NDUwMDk0NDQyZTgvMDRhZTRiNzItNTViZi0z Y2JjLWFmM2MtMTUwMWFiYzVmYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWMzYzU1MmMtNWUyMy00OTg5LThh ZjAtOTQ1MDA5NDQ0MmU4LzFjM2M1NTJjLTVlMjMtNDk4OS04YWYwLTk0NTAwOTQ0 NDJlOC5jcmwwHwYDVR0jBBgwFoAUGpOw4GB9XUWnpf4CDPsZhiD+zJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYzNjNTUyYy01ZTIzLTQ5ODktOGFmMC05NDUw MDk0NDQyZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjuEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJlk6EhULvxXPIzPoiJuUF4oRfVrv3auiRZHHDpHLs359MbzMogf9F0 hhiL3/B9hUOfR3g0P3JmX/9IeAy6XHJmd3rDlAEf07Kn0iScVTrGcMxxX9zulSu0 vaPpLhGv8ROd9dVaiMwe3YH2ZX9/YJ5fV5TIEpmUBV4Y5OvR5pOQlAWqkJtwLSuu WqHVIayNZv/ltOdQ1iV57M0f/F70YGzZD9GVKuavdb6gIDig5ZCmj3xwu/atmD0s cwGJ9buJeVECFZkc6N18eBlmvXp4kdG4IfygnrF13FJz/Y+Cmlg3udVRXlHC5Dw5 ZC4tNUNiUvSP8o13vBBq+sLv10UpEsc= -----END CERTIFICATE-----Generated at Sat Apr 26 13:29:51 2025 by rpki-client