$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa File: 388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa (raw, json) Hash identifier: og6i8aYlMl3rusCRcKVUoil4M18DcjBdooRM8F7AhUc= Subject key identifier: C6:54:8C:24:36:2A:9D:D2:1D:D1:3E:59:DC:E5:A7:2B:E8:34:F1:25 Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F43285849C20A19C2B200A4C0447C8D00 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 207.211.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:19:c2:b2:00:a4:c0:44:7c:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=cfae8f18-5d58-429d-8164-6f16d3bc3577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2d:7a:a4:89:40:62:1f:8f:51:ee:7d:4f:77: ca:f2:43:09:d0:12:1c:96:86:e6:24:b7:a5:be:a3: 69:c7:c6:8f:c6:0e:48:ad:2f:46:65:4c:e6:e0:5d: 5f:62:0a:6d:8d:43:53:2b:7b:da:04:72:16:60:61: b5:8e:4a:56:26:e4:af:28:e4:20:43:58:79:ef:86: bc:58:5d:df:5c:6e:bb:f2:5b:17:66:99:c5:f2:33: e8:3f:47:64:eb:69:45:b9:74:6d:fd:20:0f:29:c3: 34:28:8f:a1:a0:b4:66:6a:20:d3:c5:18:50:ba:93: ba:1b:95:42:e8:84:9a:02:d0:2c:09:7a:6d:c8:00: 85:35:e3:f3:44:b7:d1:36:a6:26:e8:59:06:21:6c: d8:ee:c3:6c:9b:6d:15:e7:f5:af:18:5b:27:47:e4: 87:5c:4b:eb:e6:b1:f0:ed:f1:4e:e1:d5:7f:58:e7: 96:f7:8f:dd:73:07:99:b2:1b:39:67:55:73:f3:7b: 88:b5:d0:5d:11:06:f3:50:a7:55:4b:7f:f6:d3:9e: 8a:b3:c0:55:a2:23:00:91:e9:b7:e9:0c:80:8f:64: d6:4d:ba:9e:3d:ca:69:e7:6a:ff:1d:54:1e:c8:a5: 09:49:ec:d9:13:1e:82:66:cf:51:8c:ba:e8:3c:67: e5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:54:8C:24:36:2A:9D:D2:1D:D1:3E:59:DC:E5:A7:2B:E8:34:F1:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 207.211.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e4:d6:6f:a2:50:fb:7b:4a:31:99:f0:07:51:40:8c:77:4e:fb: 81:e0:b8:9e:84:e5:cd:97:39:fc:7a:15:2c:1c:8e:19:66:56: e5:13:93:1a:98:93:ce:54:db:33:e8:7a:69:a4:55:c7:4c:e3: b2:d8:b9:4e:07:2c:87:8f:de:0e:d6:7e:6d:a9:90:cc:7b:21: 77:c2:6f:a6:bd:47:70:7b:e3:f8:94:51:21:6c:6e:55:85:a2: c1:55:a0:7b:84:bd:2f:e3:ed:a2:bd:b6:59:15:ee:8e:55:7e: 6e:11:a8:e1:6b:53:0f:d5:1c:2d:a2:bd:1e:ed:cd:b8:79:29: e7:89:95:cb:a2:45:6f:df:6c:e1:fa:6c:46:66:dd:3a:31:fe: 0a:f2:46:6e:3e:b9:cf:8a:b4:86:71:ad:19:56:de:4a:38:5a: f2:23:bb:f8:5e:a0:bb:00:eb:61:4e:28:20:25:9e:9d:fd:dd: f3:55:90:62:9a:98:93:a8:b1:3c:d3:40:aa:c8:e4:ed:85:79: 91:e5:73:c5:f7:87:e8:7f:e8:2f:b0:1b:56:71:61:0a:da:f9: 0c:fe:ae:a1:8f:39:6e:f7:dd:69:65:30:a4:3e:20:ab:e2:f8: cd:da:33:09:84:48:fd:5d:01:64:30:dc:32:ac:e2:15:1a:17: 05:03:ff:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChnCsgCkwER8jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk Y2ZhZThmMTgtNWQ1OC00MjlkLTgxNjQtNmYxNmQzYmMzNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS16pIlAYh+PUe59T3fK8kMJ0BIclobmJLel vqNpx8aPxg5IrS9GZUzm4F1fYgptjUNTK3vaBHIWYGG1jkpWJuSvKOQgQ1h574a8 WF3fXG678lsXZpnF8jPoP0dk62lFuXRt/SAPKcM0KI+hoLRmaiDTxRhQupO6G5VC 6ISaAtAsCXptyACFNePzRLfRNqYm6FkGIWzY7sNsm20V5/WvGFsnR+SHXEvr5rHw 7fFO4dV/WOeW94/dcweZshs5Z1Vz83uItdBdEQbzUKdVS3/2056Ks8BVoiMAkem3 6QyAj2TWTbqePcpp52r/HVQeyKUJSezZEx6CZs9RjLroPGfluwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZUjCQ2Kp3SHdE+WdzlpyvoNPElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvMzg4Y2U5NWEtMGU1ZC0z MzlkLWI4MTAtY2Y1OWIxYjAwZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz9PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOTWb6JQ+3tKMZnwB1FAjHdO+4HguJ6E5c2XOfx6FSwcjhlmVuUTkxqY k85U2zPoemmkVcdM47LYuU4HLIeP3g7Wfm2pkMx7IXfCb6a9R3B74/iUUSFsblWF osFVoHuEvS/j7aK9tlkV7o5Vfm4RqOFrUw/VHC2ivR7tzbh5KeeJlcuiRW/fbOH6 bEZm3Tox/gryRm4+uc+KtIZxrRlW3ko4WvIju/heoLsA62FOKCAlnp393fNVkGKa mJOosTzTQKrI5O2FeZHlc8X3h+h/6C+wG1ZxYQra+Qz+rqGPOW733WllMKQ+IKvi +M3aMwmESP1dAWQw3DKs4hUaFwUD/8c= -----END CERTIFICATE-----Generated at Sun May 11 01:02:27 2025 by rpki-client