$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa File: 866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa (raw, json) Hash identifier: QYN3/d0YKjQfmmIffRhVspI6xh3b+EuzeBHLtWVZj0E= Subject key identifier: 40:D8:8A:D5:51:C4:D9:5D:9F:B9:7A:AC:D4:C1:11:3B:3F:25:E8:2F Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F43285849CE9A64229428B373574BF780 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 13325 IP address blocks: 204.25.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:64:22:94:28:b3:73:57:4b:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=dc883929-5529-479a-a263-d35cd980a3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:50:04:5e:a2:33:b5:29:69:c5:27:d1:95:47: 87:39:56:79:ce:0a:a3:b7:78:8c:c9:ec:13:39:a3: 82:1f:49:60:7c:be:44:f1:85:40:3d:40:58:c2:42: d7:7b:bb:95:eb:7b:55:49:be:65:24:7b:dc:74:63: 85:d4:50:d8:f7:fd:73:30:67:5b:f6:18:94:fa:03: b1:e6:33:e2:16:f3:40:6f:b7:ff:ea:40:a1:ab:50: 31:cf:25:bc:11:54:2f:c2:e6:73:6c:d3:32:31:6a: 39:1a:77:e9:d6:31:c7:ac:38:f3:98:c1:ba:4b:ae: 17:f1:0d:c5:fd:11:78:6f:d1:d6:9d:5c:d5:da:bf: f2:1b:55:02:6d:96:fa:c7:31:41:76:6b:30:db:60: 23:10:30:8a:2c:aa:f1:da:60:9d:c3:2d:6f:44:85: 73:a5:5f:c5:23:b6:0c:8e:f4:62:0b:e5:7c:d5:84: d7:72:1c:90:db:e8:6b:6f:50:f8:62:38:25:94:7b: fb:af:be:c2:cb:99:23:9d:73:83:5e:b5:98:7c:9a: 8a:22:5a:d9:18:02:54:cf:59:21:2a:ae:8a:6e:49: 30:de:0d:79:25:26:8f:b1:2b:d1:6e:d9:4d:5f:f8: 9d:ae:e6:a0:f4:5c:e5:92:a5:06:0c:0d:7d:08:d8: be:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D8:8A:D5:51:C4:D9:5D:9F:B9:7A:AC:D4:C1:11:3B:3F:25:E8:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 204.25.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:76:91:f1:17:26:53:cb:fa:37:11:99:58:05:66:16:20:7a: 3a:fa:22:a8:b6:2e:77:d1:1c:02:f2:09:d8:7a:80:5a:d6:a4: 75:fe:c3:27:8d:e1:b0:7c:71:27:2f:26:b5:e9:62:14:41:1f: be:45:54:a6:ac:b4:72:3e:90:98:ec:2e:fa:8b:e2:03:14:84: 67:87:16:7c:17:a9:d7:15:a1:c9:1b:33:1e:45:d4:b4:d3:fe: 32:bc:37:2c:4c:f8:45:5a:56:d7:79:d8:07:15:4b:b5:8f:02: c8:f9:c4:0f:ac:e3:33:46:32:8d:1c:c8:45:39:bf:c6:41:d2: 00:0b:d1:e4:8a:77:06:73:2a:04:4b:9a:bc:c3:01:5f:c7:fe: 87:d0:10:d6:53:7d:12:d0:17:9a:d2:21:61:cc:49:83:b2:21: 36:7e:d5:2e:ed:57:40:f3:b7:43:de:11:71:6a:7a:a7:57:db: e5:83:17:2a:da:0a:41:ff:4f:af:df:40:08:32:2c:f5:ea:91: e4:f2:1d:b9:60:e2:75:ad:38:88:0b:c9:b3:b7:c1:60:c1:66: e0:7a:68:ee:81:b3:10:a7:05:3d:8c:5a:53:b3:ef:e0:eb:f4: 9c:35:63:23:00:61:7c:00:2e:84:25:44:5e:1a:36:f6:42:91: 2e:e2:e1:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmQilCizc1dL94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZGM4ODM5MjktNTUyOS00NzlhLWEyNjMtZDM1Y2Q5ODBhM2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFAEXqIztSlpxSfRlUeHOVZ5zgqjt3iMyewT OaOCH0lgfL5E8YVAPUBYwkLXe7uV63tVSb5lJHvcdGOF1FDY9/1zMGdb9hiU+gOx 5jPiFvNAb7f/6kChq1AxzyW8EVQvwuZzbNMyMWo5Gnfp1jHHrDjzmMG6S64X8Q3F /RF4b9HWnVzV2r/yG1UCbZb6xzFBdmsw22AjEDCKLKrx2mCdwy1vRIVzpV/FI7YM jvRiC+V81YTXchyQ2+hrb1D4YjgllHv7r77Cy5kjnXODXrWYfJqKIlrZGAJUz1kh Kq6Kbkkw3g15JSaPsSvRbtlNX/idruag9FzlkqUGDA19CNi+QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDYitVRxNldn7l6rNTBETs/JegvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvODY2ZGEzZTAtMGQyZi0z OWU1LTg2OGItMmY2MGU0ZmY5MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzBkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV2kfEXJlPL+jcRmVgFZhYgejr6Iqi2LnfRHALyCdh6gFrWpHX+wyeN 4bB8cScvJrXpYhRBH75FVKastHI+kJjsLvqL4gMUhGeHFnwXqdcVockbMx5F1LTT /jK8NyxM+EVaVtd52AcVS7WPAsj5xA+s4zNGMo0cyEU5v8ZB0gAL0eSKdwZzKgRL mrzDAV/H/ofQENZTfRLQF5rSIWHMSYOyITZ+1S7tV0Dzt0PeEXFqeqdX2+WDFyra CkH/T6/fQAgyLPXqkeTyHblg4nWtOIgLybO3wWDBZuB6aO6BsxCnBT2MWlOz7+Dr 9Jw1YyMAYXwALoQlRF4aNvZCkS7i4Yw= -----END CERTIFICATE-----Generated at Mon Jun 16 02:35:18 2025 by rpki-client