$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa File: 3aa15edc-b7c6-318d-9de6-46d235ff9320.roa (raw, json) Hash identifier: ouU6FusoUYts90DQ32bVFjtdZwpPMCATTpI38aymwpY= Subject key identifier: 35:24:CB:50:E4:A6:87:67:39:16:6B:0A:54:61:3D:75:F2:92:C0:06 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F43285849CE9A59025B62656AB4DADD40 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 13325 IP address blocks: 136.181.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:59:02:5b:62:65:6a:b4:da:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=4482eacc-f63d-4749-8e82-e7baa91eda02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1c:3d:88:99:30:92:ef:ac:c6:eb:30:41:29: 17:35:40:e6:62:99:93:1f:2c:96:f6:bc:20:45:93: 95:41:0c:62:1c:a9:b5:a8:9c:1a:fa:95:4d:05:6c: a5:af:e4:62:47:03:e3:05:51:5a:02:c4:fa:ff:e3: df:fd:53:a5:0c:0c:c3:d5:e3:de:fe:4a:c4:02:b3: 2b:36:6a:d5:ef:05:cc:35:82:7f:ee:98:f1:75:20: ec:10:16:8d:5a:ab:5f:f0:54:63:c7:94:e1:cd:16: 95:ec:ad:ba:5e:80:c2:88:d1:18:49:8e:b3:94:fd: 4b:25:35:47:be:06:90:11:c3:16:bf:6f:b7:ed:31: 13:48:2f:7e:55:ed:93:9a:30:36:2c:38:85:84:03: ad:ec:94:ff:f4:b0:90:18:29:c9:8d:2d:c6:15:c2: e8:ff:46:4e:df:1a:f7:88:2d:2d:7f:26:95:ef:28: c4:20:91:5f:20:bf:6c:b0:3e:55:2a:4f:ff:f2:0c: 3a:56:68:80:0b:8f:b9:34:fb:09:08:60:c5:ca:ec: 10:f3:0a:a2:90:2c:f5:57:11:2e:94:92:4a:8d:81: f4:68:02:44:d6:15:9f:e6:24:f0:d7:45:78:1f:fe: d5:87:f4:2d:02:23:84:e2:8c:86:c1:72:b4:95:06: c2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:24:CB:50:E4:A6:87:67:39:16:6B:0A:54:61:3D:75:F2:92:C0:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 136.181.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c3:31:cd:fa:48:a2:19:ba:05:be:6f:81:fe:7a:7e:c2:b6: 43:44:a9:60:fe:6e:df:2d:a2:44:c9:f1:cc:35:f8:69:81:77: e7:5f:31:1b:7a:15:9e:a6:06:fd:a3:f5:58:af:ad:c0:c2:cf: 3f:ab:cb:ae:3f:14:ac:51:5e:29:cd:77:14:6e:a1:18:12:07: 5d:90:0f:de:ba:ce:8f:ae:bb:5b:42:04:be:a1:06:96:da:99: 24:d3:83:29:cc:de:fa:4c:c3:9b:8a:94:03:07:1c:fc:c7:1d: 07:dd:94:67:e1:04:9b:dd:64:9f:4e:94:d5:c5:60:80:64:8f: 22:2f:16:a6:03:72:59:63:cc:37:b8:7c:c1:a3:aa:90:04:d5: 34:44:86:bf:01:a8:c1:ec:26:57:b4:72:cb:5f:6d:fb:68:94: aa:b9:28:6c:c7:04:bc:d6:6a:1c:d4:fc:fe:ac:b8:97:76:7a: 5f:06:16:d7:de:5a:22:de:c7:6f:73:5d:cb:34:eb:3b:cb:c0: c6:64:23:17:bf:49:43:86:d5:2a:5a:8c:94:8b:95:11:0d:7a: d1:73:8f:02:ca:f8:32:46:0f:7a:f4:78:12:5f:88:8c:df:c4: 86:2d:40:d6:3d:fd:a3:16:7d:4d:79:14:df:13:76:2b:64:36: 2f:bd:fe:b2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnOmlkCW2JlarTa3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NDQ4MmVhY2MtZjYzZC00NzQ5LThlODItZTdiYWE5MWVkYTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBw9iJkwku+sxuswQSkXNUDmYpmTHyyW9rwg RZOVQQxiHKm1qJwa+pVNBWylr+RiRwPjBVFaAsT6/+Pf/VOlDAzD1ePe/krEArMr NmrV7wXMNYJ/7pjxdSDsEBaNWqtf8FRjx5ThzRaV7K26XoDCiNEYSY6zlP1LJTVH vgaQEcMWv2+37TETSC9+Ve2TmjA2LDiFhAOt7JT/9LCQGCnJjS3GFcLo/0ZO3xr3 iC0tfyaV7yjEIJFfIL9ssD5VKk//8gw6VmiAC4+5NPsJCGDFyuwQ8wqikCz1VxEu lJJKjYH0aAJE1hWf5iTw10V4H/7Vh/QtAiOE4oyGwXK0lQbCaQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDUky1DkpodnORZrClRhPXXyksAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvM2FhMTVlZGMtYjdjNi0z MThkLTlkZTYtNDZkMjM1ZmY5MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiLUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAisMxzfpIohm6Bb5vgf56fsK2Q0SpYP5u3y2iRMnxzDX4aYF3518xG3oV nqYG/aP1WK+twMLPP6vLrj8UrFFeKc13FG6hGBIHXZAP3rrOj667W0IEvqEGltqZ JNODKcze+kzDm4qUAwcc/McdB92UZ+EEm91kn06U1cVggGSPIi8WpgNyWWPMN7h8 waOqkATVNESGvwGowewmV7Ryy19t+2iUqrkobMcEvNZqHNT8/qy4l3Z6XwYW195a It7Hb3NdyzTrO8vAxmQjF79JQ4bVKlqMlIuVEQ160XOPAsr4MkYPevR4El+IjN/E hi1A1j39oxZ9TXkU3xN2K2Q2L73+sg== -----END CERTIFICATE-----Generated at Sun May 11 09:15:55 2025 by rpki-client