$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/52d6fb63-d10e-3772-be72-745c1da323dc.roa File: 52d6fb63-d10e-3772-be72-745c1da323dc.roa (raw, json) Hash identifier: labga0IjteAicY3df+FA+J0uPVS9pQzoB60FaSaRN08= Subject key identifier: C8:89:56:3A:C2:2A:D9:93:EF:36:0C:B4:AF:9E:0E:83:D3:C8:78:7D Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F43285849CBCF8FDAD40C3895483B2500 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/52d6fb63-d10e-3772-be72-745c1da323dc.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 33477 IP address blocks: 104.152.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:8f:da:d4:0c:38:95:48:3b:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=5c02b956-88b3-42a9-b9dc-64b10ae56cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f6:f7:3d:e6:27:43:c2:2e:b6:ad:70:f9:d3: 9d:b2:d3:fd:9c:7c:9b:74:29:be:c8:8c:07:15:60: c0:13:f1:22:02:d7:a4:e9:63:ba:90:22:1a:b7:7c: f0:1b:e2:2e:ab:aa:c5:52:ed:1a:8e:b7:3b:c4:c3: 1b:3e:c9:f1:59:d6:e0:c3:ce:c9:64:79:c0:88:9a: 1b:52:9a:00:65:ec:e8:ec:87:da:9e:b4:2c:ea:af: a7:8f:2b:84:a8:1f:d0:b8:f2:70:5e:a0:d0:be:80: f4:c2:c7:58:68:3f:c8:8f:c8:1b:5c:f3:68:52:7e: fd:35:d7:4a:7e:07:5e:1f:2e:1f:a9:de:19:f8:e5: ec:ca:63:d8:22:87:52:83:31:12:10:89:d8:d4:43: 18:91:67:24:8b:dc:57:50:83:7f:91:31:d9:bb:88: 06:de:80:e6:65:a8:4f:40:16:c3:c1:91:00:52:ef: c9:c2:2a:d8:4e:3b:9c:80:d6:61:0c:77:63:0a:d7: cd:d9:c8:ef:c0:52:c1:ce:b0:d6:9f:48:51:fc:72: 48:4c:3f:76:18:a9:50:be:af:1e:70:1c:1a:40:ef: 30:78:d8:f1:5c:7d:48:52:54:cd:f4:9a:84:5c:59: 3b:13:74:3a:fc:76:c1:51:c0:3a:fd:f8:03:72:94: 6f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:89:56:3A:C2:2A:D9:93:EF:36:0C:B4:AF:9E:0E:83:D3:C8:78:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/52d6fb63-d10e-3772-be72-745c1da323dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 104.152.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ba:8e:01:81:54:a5:a5:5a:57:f9:dc:bd:40:d6:4c:4f:39: 2c:b9:ae:6b:51:59:78:42:ab:a9:25:ca:5b:88:90:db:d9:0b: b9:ad:3f:c5:3a:e3:06:bc:7a:28:48:5e:1d:3d:f8:69:d2:72: 9b:df:8d:b3:ff:cf:db:66:1b:9d:07:e3:4d:13:85:ce:f2:42: 80:6a:55:56:3d:51:ea:3e:f4:22:0a:d0:30:c2:5f:f7:ac:c4: ae:2f:d1:13:6a:15:88:28:f6:23:a4:2a:25:cc:d6:21:19:01: af:3b:da:96:b0:7a:e2:46:b4:2c:8e:26:2e:d6:d8:74:77:48: c4:fb:fb:03:66:c0:32:25:ae:5b:ec:05:7e:5a:f3:69:ff:c6: fd:67:46:2e:58:0d:60:7c:59:39:44:51:2c:74:26:f2:9f:e1: 1e:70:24:07:94:5c:77:f6:db:a3:1d:1c:59:27:f8:a8:46:4e: d8:b5:fb:35:a3:00:c2:39:54:8d:ca:c5:ba:83:7c:14:fb:07: 11:52:f9:76:e0:f0:34:ac:f7:21:20:79:f4:7d:69:f7:8a:a4: 85:80:c7:6c:3e:6a:83:b7:60:96:bb:5c:a5:bb:f6:56:0e:f6: fb:8e:cf:20:8e:c6:d0:ce:85:04:2c:13:47:c5:6c:26:17:5e: 0b:78:d8:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz4/a1Aw4lUg7JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk NWMwMmI5NTYtODhiMy00MmE5LWI5ZGMtNjRiMTBhZTU2Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Pb3PeYnQ8Iutq1w+dOdstP9nHybdCm+yIwH FWDAE/EiAtek6WO6kCIat3zwG+Iuq6rFUu0ajrc7xMMbPsnxWdbgw87JZHnAiJob UpoAZezo7IfanrQs6q+njyuEqB/QuPJwXqDQvoD0wsdYaD/Ij8gbXPNoUn79NddK fgdeHy4fqd4Z+OXsymPYIodSgzESEInY1EMYkWcki9xXUIN/kTHZu4gG3oDmZahP QBbDwZEAUu/JwirYTjucgNZhDHdjCtfN2cjvwFLBzrDWn0hR/HJITD92GKlQvq8e cBwaQO8weNjxXH1IUlTN9JqEXFk7E3Q6/HbBUcA6/fgDcpRvmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiJVjrCKtmT7zYMtK+eDoPTyHh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvNTJkNmZiNjMtZDEwZS0z NzcyLWJlNzItNzQ1YzFkYTMyM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJjHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG6jgGBVKWlWlf53L1A1kxPOSy5rmtRWXhCq6klyluIkNvZC7mtP8U6 4wa8eihIXh09+GnScpvfjbP/z9tmG50H400Thc7yQoBqVVY9Ueo+9CIK0DDCX/es xK4v0RNqFYgo9iOkKiXM1iEZAa872paweuJGtCyOJi7W2HR3SMT7+wNmwDIlrlvs BX5a82n/xv1nRi5YDWB8WTlEUSx0JvKf4R5wJAeUXHf226MdHFkn+KhGTti1+zWj AMI5VI3KxbqDfBT7BxFS+Xbg8DSs9yEgefR9afeKpIWAx2w+aoO3YJa7XKW79lYO 9vuOzyCOxtDOhQQsE0fFbCYXXgt42KE= -----END CERTIFICATE-----Generated at Sun Jun 15 17:27:40 2025 by rpki-client