$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa File: d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa (raw, json) Hash identifier: x/+IZX2GhhVpthDW4dMy/3HGEHzaONJJoBO6OfCfvWo= Subject key identifier: 49:92:18:46:63:DF:BD:6D:74:FB:06:28:88:83:F6:4A:73:8D:4A:ED Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F43285849CE9A63F7C1175C232C924E00 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 13325 IP address blocks: 199.33.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:63:f7:c1:17:5c:23:2c:92:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=f1d8aacf-b012-432a-a37b-55f0ed6d4078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:f9:21:0f:4f:6f:d9:be:0e:28:27:12:1f: 75:2d:02:b1:64:ea:31:00:00:e9:c9:5e:65:a7:17: 6b:8e:7d:dc:11:d4:26:05:1e:c4:b0:55:e3:dd:a1: 7a:1a:61:44:ef:b7:26:5a:0e:94:91:b2:d3:cc:8d: 73:24:70:f9:17:38:26:21:ff:dd:6d:91:1d:bc:17: 40:cc:b3:7c:0f:eb:02:70:61:a2:0a:f3:90:15:fd: 8c:d8:9a:38:84:db:ce:b4:eb:29:88:df:f1:79:35: c3:c3:cc:06:24:92:39:50:eb:9c:d0:45:a8:b7:ef: 6e:0d:17:f1:1d:c6:f5:ed:2d:8b:4a:71:88:a6:22: df:4b:87:1b:15:56:cc:27:c2:df:34:ad:47:cb:3e: cd:ab:4d:f1:eb:6a:82:7e:6b:e0:2f:a9:b7:f0:b3: 83:c2:e7:5d:88:03:79:43:7a:e5:26:26:98:92:af: 8a:22:04:d0:e7:ad:e7:67:aa:8b:10:d7:f8:7d:70: a2:15:f5:45:36:79:c3:ea:22:1a:cb:94:2f:53:87: ad:96:1e:31:2c:3c:af:db:e7:70:83:2e:c4:db:36: d7:28:1e:9f:63:69:dc:64:34:6d:38:ce:b9:2e:c8: 74:18:42:1f:c8:f0:5c:a6:a3:7f:9f:c9:ca:e8:ee: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:92:18:46:63:DF:BD:6D:74:FB:06:28:88:83:F6:4A:73:8D:4A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 199.33.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:06:6a:ad:16:59:82:aa:d0:56:ae:63:0b:c1:6d:21:39:51: 32:02:18:bc:f0:25:49:b9:bb:7d:64:6f:9f:3a:a0:be:cb:aa: c9:9c:ed:8c:bb:74:9a:31:fb:3d:1c:0a:3a:9b:16:a8:79:6d: 3e:1b:c1:b5:b3:72:89:0c:8d:35:99:f3:5c:e0:1c:a4:28:c9: a0:01:73:cf:b9:01:14:2f:c4:32:9d:35:d7:64:50:0a:6d:63: df:d3:f2:59:c8:c4:ca:ee:5e:8c:31:cd:d3:9f:02:5c:56:d4: 2d:a9:c2:01:8b:6e:09:ad:2a:07:fd:ab:3f:6e:2d:6a:ee:e5: 9e:7a:e7:90:bc:a0:94:94:de:c1:a5:41:c6:5f:7f:41:bb:94: 27:5b:76:a9:52:e7:fd:22:c8:46:ae:ff:0e:92:2c:29:b9:51: 0d:45:72:37:26:7a:16:72:69:ea:6f:ba:70:a4:82:f4:30:9f: 20:7e:5c:90:dc:89:8b:fe:b3:90:03:d4:70:20:49:cd:38:bc: 3a:d6:4f:a7:75:b7:4d:f0:ce:da:f0:30:65:bc:07:8f:03:1f: 7c:25:57:70:c0:b2:f6:30:1e:7f:a9:d0:46:3d:ff:d1:2f:17: 18:60:24:77:4d:6a:be:d1:2c:7a:cc:09:af:dc:f8:93:25:3a: 7b:d9:43:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmP3wRdcIyySTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZjFkOGFhY2YtYjAxMi00MzJhLWEzN2ItNTVmMGVkNmQ0MDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpL5IQ9Pb9m+DignEh91LQKxZOoxAADpyV5l pxdrjn3cEdQmBR7EsFXj3aF6GmFE77cmWg6UkbLTzI1zJHD5FzgmIf/dbZEdvBdA zLN8D+sCcGGiCvOQFf2M2Jo4hNvOtOspiN/xeTXDw8wGJJI5UOuc0EWot+9uDRfx Hcb17S2LSnGIpiLfS4cbFVbMJ8LfNK1Hyz7Nq03x62qCfmvgL6m38LODwuddiAN5 Q3rlJiaYkq+KIgTQ563nZ6qLENf4fXCiFfVFNnnD6iIay5QvU4etlh4xLDyv2+dw gy7E2zbXKB6fY2ncZDRtOM65Lsh0GEIfyPBcpqN/n8nK6O6O2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmSGEZj371tdPsGKIiD9kpzjUrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvZDRiOGZiZjgtOTFjNC0z M2YzLWEwZDEtZTRiMWU4MTVkZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIGaq0WWYKq0FauYwvBbSE5UTICGLzwJUm5u31kb586oL7Lqsmc7Yy7 dJox+z0cCjqbFqh5bT4bwbWzcokMjTWZ81zgHKQoyaABc8+5ARQvxDKdNddkUApt Y9/T8lnIxMruXowxzdOfAlxW1C2pwgGLbgmtKgf9qz9uLWru5Z5655C8oJSU3sGl QcZff0G7lCdbdqlS5/0iyEau/w6SLCm5UQ1FcjcmehZyaepvunCkgvQwnyB+XJDc iYv+s5AD1HAgSc04vDrWT6d1t03wztrwMGW8B48DH3wlV3DAsvYwHn+p0EY9/9Ev FxhgJHdNar7RLHrMCa/c+JMlOnvZQ80= -----END CERTIFICATE-----Generated at Mon Jun 16 02:09:02 2025 by rpki-client