$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa File: 7fe96268-b787-3529-9f78-3e3d0ced15ee.roa (raw, json) Hash identifier: Gp3F+DMPsJd3tnOwX26rITSMO1xQ+QhuZSUeOKvvnMg= Subject key identifier: 44:F7:8C:7C:22:F7:9D:23:E6:31:37:92:07:CE:EE:97:56:FB:6C:55 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F43285848EF61408A7F8DCEEB5BFF96C0 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 13325 IP address blocks: 204.25.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:40:8a:7f:8d:ce:eb:5b:ff:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=af6d3619-2a82-4f8a-a6cb-9a4018914fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cf:6e:f0:ef:88:35:9f:65:fe:67:15:4c:98: 24:de:c7:67:c9:73:2a:64:aa:4a:4c:37:39:65:90: 5f:85:5d:36:a4:c8:14:2f:9b:61:bc:42:fe:54:76: ee:d6:19:a6:e1:c4:c2:78:0b:19:d7:3c:2d:44:ef: 12:be:d2:3e:43:79:89:91:3a:80:68:e4:6d:eb:5d: 4e:71:fc:93:e9:b9:a5:be:41:4c:56:a2:51:c5:22: e8:51:92:56:0b:46:44:58:4a:84:32:77:8d:98:f6: 69:99:0a:f0:d4:f8:a3:93:d7:67:91:47:22:2a:4e: 7a:9c:f2:3c:6b:60:71:e6:cd:0e:4a:d6:b4:4c:35: a0:db:1c:55:c0:5a:b1:70:f5:50:e3:47:49:94:94: 3d:6d:46:11:ee:e3:1a:2c:bd:b7:6f:5f:30:f7:a4: 5c:ec:70:83:3c:46:af:67:b3:06:ff:dd:c6:ca:e5: e3:4e:ca:1b:0e:fe:89:ec:28:02:f8:a1:d5:50:b3: ab:a7:92:ac:72:fd:37:df:4e:d7:f4:6c:71:8f:be: fc:df:aa:8f:04:16:83:f9:84:73:5c:4f:cc:71:b2: 1e:26:e4:1c:6d:f0:95:8b:40:84:36:16:3c:e5:d5: c4:ca:f9:ef:d9:a5:f8:17:e3:ba:02:4c:32:3b:e5: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F7:8C:7C:22:F7:9D:23:E6:31:37:92:07:CE:EE:97:56:FB:6C:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 204.25.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d3:0f:68:b0:c1:e8:83:42:dd:bf:6e:16:79:b6:92:81:b8: d6:f9:65:43:61:c2:65:91:0a:2e:02:4d:c9:31:ed:ea:80:4c: 49:87:19:c1:60:1b:2f:5c:8c:9e:11:d0:e1:23:53:51:94:08: 03:78:68:d8:b9:16:38:52:8c:b4:4f:c6:3b:c6:ca:c0:d2:c8: 07:15:a0:10:55:47:c0:7d:ec:d0:23:a5:6d:2c:48:00:77:c3: b3:41:dd:b7:7d:2f:b6:d3:e6:be:8c:7c:50:e8:0b:03:2a:50: ce:33:7a:9c:ae:03:9d:5c:28:ce:54:b2:f5:ea:08:ef:3b:a3: 56:e2:91:8c:ad:0b:af:cb:4b:ad:a4:a6:8e:c5:71:07:da:f6: 51:e1:b2:c6:f7:e5:a8:ca:06:60:2d:5a:cf:33:98:f6:ae:d3: ce:80:a9:c5:c9:49:3b:a8:b5:f3:3e:f8:68:cd:51:c5:82:08: eb:1d:56:0a:75:6c:62:10:ba:e8:0a:ce:8c:56:95:54:d2:17: 0e:eb:d1:82:30:95:d0:f4:34:d0:f9:e6:c2:c0:c0:2f:58:3f: 3e:76:e6:2d:11:2b:6d:98:7d:d4:4d:45:9f:51:d7:5b:80:3b: dd:26:c2:7e:ac:2f:d6:86:ad:28:f0:e1:5b:f2:f3:db:50:20: db:f2:a9:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUCKf43O61v/lsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YWY2ZDM2MTktMmE4Mi00ZjhhLWE2Y2ItOWE0MDE4OTE0ZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl89u8O+INZ9l/mcVTJgk3sdnyXMqZKpKTDc5 ZZBfhV02pMgUL5thvEL+VHbu1hmm4cTCeAsZ1zwtRO8SvtI+Q3mJkTqAaORt611O cfyT6bmlvkFMVqJRxSLoUZJWC0ZEWEqEMneNmPZpmQrw1Pijk9dnkUciKk56nPI8 a2Bx5s0OSta0TDWg2xxVwFqxcPVQ40dJlJQ9bUYR7uMaLL23b18w96Rc7HCDPEav Z7MG/93GyuXjTsobDv6J7CgC+KHVULOrp5Kscv03307X9Gxxj77836qPBBaD+YRz XE/McbIeJuQcbfCVi0CENhY85dXEyvnv2aX4F+O6AkwyO+X9ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFET3jHwi950j5jE3kgfO7pdW+2xVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvN2ZlOTYyNjgtYjc4Ny0z NTI5LTlmNzgtM2UzZDBjZWQxNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzBmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvTD2iwweiDQt2/bhZ5tpKBuNb5ZUNhwmWRCi4CTckx7eqATEmHGcFg Gy9cjJ4R0OEjU1GUCAN4aNi5FjhSjLRPxjvGysDSyAcVoBBVR8B97NAjpW0sSAB3 w7NB3bd9L7bT5r6MfFDoCwMqUM4zepyuA51cKM5UsvXqCO87o1bikYytC6/LS62k po7FcQfa9lHhssb35ajKBmAtWs8zmPau086AqcXJSTuotfM++GjNUcWCCOsdVgp1 bGIQuugKzoxWlVTSFw7r0YIwldD0NND55sLAwC9YPz525i0RK22YfdRNRZ9R11uA O90mwn6sL9aGrSjw4Vvy89tQINvyqTY= -----END CERTIFICATE-----Generated at Tue Apr 29 03:09:22 2025 by rpki-client