$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/52094d50-3f37-3b26-a33b-40ee8e9f6c93.roa File: 52094d50-3f37-3b26-a33b-40ee8e9f6c93.roa (raw, json) Hash identifier: K+6N97IXOfUXF9Ij0+Hz2iiVQF+sMeRy8lBleT7GNIc= Subject key identifier: 11:5A:1F:BB:D3:38:EA:30:94:38:2D:0D:35:04:3A:44:86:CD:A5:56 Certificate issuer: /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Certificate serial: 010D0C9F43285849955F21E88A7B468E0CB85400 Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/52094d50-3f37-3b26-a33b-40ee8e9f6c93.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 401041 IP address blocks: 192.170.28.0/22 maxlen: 24 192.170.32.0/22 maxlen: 24 192.170.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:21:e8:8a:7b:46:8e:0c:b8:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=dab42ef8-796f-4b76-970e-978293b6a646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0f:73:4f:c3:b6:f7:55:1e:64:ff:c7:a0:64: b6:f0:06:55:d5:14:e9:fb:ff:23:e4:12:77:9d:f5: 7b:d7:86:65:bb:7a:cf:8c:93:f2:5e:1b:66:44:48: bd:63:1f:f9:93:19:38:a0:a8:5b:1e:ca:38:ab:5c: 98:6a:b7:0c:09:12:b8:ca:31:eb:d9:43:fe:cd:89: b0:9b:95:08:ab:91:79:8b:ec:86:21:65:08:e6:f1: dc:51:06:fd:9e:94:4a:29:36:65:ec:5c:b4:8f:dd: 56:ed:9c:18:0d:94:94:c6:0b:2b:f2:59:f3:f1:32: 27:d4:3d:2a:fb:9a:18:d7:97:a0:54:bf:3d:ec:48: f2:2e:db:80:62:1f:90:31:79:4d:70:b5:7c:67:7a: db:60:61:d1:76:7d:af:02:f6:51:fd:cb:da:b2:58: 73:44:b1:ac:da:24:eb:9a:f0:e0:f0:2b:e8:29:be: 39:63:90:d7:87:52:a4:58:b9:a2:33:03:f4:38:a5: f2:2e:4a:33:b8:38:91:35:f3:53:d4:92:74:84:12: 5f:78:ac:30:d4:1b:0f:8d:99:d2:5a:44:cf:4f:4d: 92:c5:29:b0:4c:35:8f:3e:93:df:90:28:7a:a6:31: 19:2e:30:b7:71:a1:77:99:46:a9:28:78:a7:b6:20: 3d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5A:1F:BB:D3:38:EA:30:94:38:2D:0D:35:04:3A:44:86:CD:A5:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/52094d50-3f37-3b26-a33b-40ee8e9f6c93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl X509v3 Authority Key Identifier: keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer sbgp-ipAddrBlock: critical IPv4: 192.170.28.0-192.170.37.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:e1:4f:bf:52:3e:68:53:a1:b8:a4:b5:66:ea:42:1f:bd:1f: e2:38:20:f6:c8:dc:d6:b2:0a:41:b1:ae:02:3c:9a:f9:ce:bb: 5d:21:79:45:e2:f0:7d:8b:0a:46:ff:15:1d:34:c0:42:69:53: f0:79:23:61:cd:12:68:55:cd:2b:66:a4:fb:44:0a:a1:25:31: e6:e5:68:ac:5d:94:77:d7:c9:23:89:79:2c:90:62:84:5e:95: 66:35:93:1a:b4:cf:6b:59:ba:5d:b3:71:6c:91:91:33:5d:22: c7:50:dd:3f:90:75:dd:8e:7b:3d:ad:d0:d2:bf:f5:00:fd:91: 56:61:de:24:d2:53:fb:e1:4c:4b:09:a8:07:64:cc:58:49:e6: 49:e6:68:b9:0f:4c:b7:26:10:2e:07:e9:cc:f0:52:17:2c:6d: 58:16:db:2c:b2:83:84:90:28:84:5f:39:d5:31:35:5c:2c:b6: 82:7d:5b:dd:09:e8:ae:c5:37:9c:44:80:f4:cd:25:4b:20:fe: cf:a7:41:ba:13:c4:e9:ee:9b:0c:ea:3f:38:39:04:74:77:b8: 88:bb:4e:eb:a0:27:28:12:34:43:84:2f:2b:f1:08:b3:93:13: 32:57:86:a1:74:82:5e:8f:6f:65:91:23:a2:28:29:ff:ec:f2: 71:f0:08:80 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEmVXyHointGjgy4VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx MDQzMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk ZGFiNDJlZjgtNzk2Zi00Yjc2LTk3MGUtOTc4MjkzYjZhNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA9zT8O291UeZP/HoGS28AZV1RTp+/8j5BJ3 nfV714Zlu3rPjJPyXhtmREi9Yx/5kxk4oKhbHso4q1yYarcMCRK4yjHr2UP+zYmw m5UIq5F5i+yGIWUI5vHcUQb9npRKKTZl7Fy0j91W7ZwYDZSUxgsr8lnz8TIn1D0q +5oY15egVL897EjyLtuAYh+QMXlNcLV8Z3rbYGHRdn2vAvZR/cvaslhzRLGs2iTr mvDg8CvoKb45Y5DXh1KkWLmiMwP0OKXyLkozuDiRNfNT1JJ0hBJfeKww1BsPjZnS WkTPT02SxSmwTDWPPpPfkCh6pjEZLjC3caF3mUapKHintiA9MwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFBFaH7vTOOowlDgtDTUEOkSGzaVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvNTIwOTRkNTAtM2YzNy0z YjI2LWEzM2ItNDBlZThlOWY2YzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5 MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1 MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi YmJlNTEwNDMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALAqhwD BAHAqiQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAq+FPv1I+aFOhuKS1ZupCH70f4jgg9sjc1rIKQbGuAjya +c67XSF5ReLwfYsKRv8VHTTAQmlT8HkjYc0SaFXNK2ak+0QKoSUx5uVorF2Ud9fJ I4l5LJBihF6VZjWTGrTPa1m6XbNxbJGRM10ix1DdP5B13Y57Pa3Q0r/1AP2RVmHe JNJT++FMSwmoB2TMWEnmSeZouQ9MtyYQLgfpzPBSFyxtWBbbLLKDhJAohF851TE1 XCy2gn1b3QnorsU3nESA9M0lSyD+z6dBuhPE6e6bDOo/ODkEdHe4iLtO66AnKBI0 Q4QvK/EIs5MTMleGoXSCXo9vZZEjoigp/+zycfAIgA== -----END CERTIFICATE-----Generated at Mon Apr 28 12:35:04 2025 by rpki-client