$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa File: 5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa (raw, json) Hash identifier: WZOuFDTi86gUdTFzFmPP+QfdnUEth1vMtxo9G8/T8ek= Subject key identifier: A9:F3:93:CE:61:35:87:5D:5B:CC:84:73:D6:BA:9F:0A:CC:0E:7A:AD Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F43285849CE9A5930F836B0A4694852F8 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 13325 IP address blocks: 167.240.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:59:30:f8:36:b0:a4:69:48:52:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=683e55e3-12ec-42fe-8c43-32aae34d1186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f5:96:63:6e:9c:b1:00:4d:0f:50:e7:e3:54: fa:ab:9b:f3:79:4b:e8:7e:89:55:8d:22:d7:85:be: aa:05:d4:00:5a:a3:2b:51:3d:9c:ce:32:cd:01:f7: 9d:d1:cb:91:fb:26:5b:d9:6f:2b:4c:d1:79:c0:7e: 59:45:6b:2c:ac:ba:4d:ea:00:4d:1a:17:a5:cf:95: 5c:c0:57:44:68:02:ae:8d:6d:82:07:eb:b2:a4:29: f6:69:f0:b5:53:10:b4:ce:ff:0f:91:08:58:a5:74: a1:b8:91:0a:02:c1:3b:3e:d2:34:34:2a:7a:ab:6b: 91:83:f9:ca:e7:c0:1b:78:2a:cd:b8:cc:5c:29:96: c1:61:8d:9b:30:6d:f6:d7:56:1a:bf:f7:f9:2d:ca: 04:17:65:b3:4d:04:54:48:e3:b5:5b:3e:2c:15:86: ed:16:81:b8:30:78:e5:6a:1a:8a:6a:4c:23:62:50: 7e:56:0a:f0:05:72:9e:66:9a:79:d4:5d:99:31:ba: c6:7b:35:27:48:2e:c0:72:1a:8e:14:a9:ea:7b:d2: 67:ce:3f:43:a4:30:8b:12:b3:57:ef:4b:ed:2b:84: e4:57:36:12:ff:c2:2e:37:3a:95:d9:7e:d1:0b:c2: 09:a5:90:07:df:1a:50:58:11:09:c9:ec:d7:36:5c: 74:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F3:93:CE:61:35:87:5D:5B:CC:84:73:D6:BA:9F:0A:CC:0E:7A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 167.240.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:dd:98:67:08:f1:35:33:bb:cf:5f:3a:ff:4a:60:cb:92:81: f4:f6:39:20:68:9e:bf:1c:18:74:80:d9:b3:5d:e3:7c:f2:a4: de:b7:a0:d6:08:c3:18:40:f7:43:04:8a:57:d5:15:f7:9d:f0: 09:12:62:fc:a8:47:ea:af:c2:93:40:48:7f:06:44:78:a8:9a: 2f:85:f1:2f:fc:3a:dd:94:68:06:4c:aa:83:4a:a0:c6:87:27: 7e:17:98:69:b4:df:19:4d:fc:cd:76:64:87:a1:90:f4:23:0e: 18:61:e8:61:38:bf:8d:f9:a3:04:14:e3:89:7f:2b:f4:d9:2c: 6e:52:83:89:c7:b2:9a:f7:08:1c:e8:cf:d0:4e:ab:d9:7a:c6: 78:03:bd:07:be:4c:01:65:18:f0:d2:69:6b:5a:c7:6a:bb:0b: 46:1b:e6:45:43:84:93:d1:ea:ca:52:82:98:5e:7e:16:6e:f2: 86:67:a7:ee:12:e6:32:e1:ae:93:1e:60:0d:01:fd:b7:1c:d5: 8b:6e:bb:ec:1b:94:ba:96:fe:d3:c4:16:e2:3c:93:19:c2:bf: fe:06:4b:8e:fa:4f:b5:63:d2:a1:da:e0:46:96:2b:b4:f0:8f: d1:99:64:ac:f0:9b:7e:a9:06:22:41:b4:62:f3:6b:13:7a:9e: f7:0e:73:2e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnOmlkw+DawpGlIUvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NjgzZTU1ZTMtMTJlYy00MmZlLThjNDMtMzJhYWUzNGQxMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fWWY26csQBND1Dn41T6q5vzeUvofolVjSLX hb6qBdQAWqMrUT2czjLNAfed0cuR+yZb2W8rTNF5wH5ZRWssrLpN6gBNGhelz5Vc wFdEaAKujW2CB+uypCn2afC1UxC0zv8PkQhYpXShuJEKAsE7PtI0NCp6q2uRg/nK 58AbeCrNuMxcKZbBYY2bMG3211Yav/f5LcoEF2WzTQRUSOO1Wz4sFYbtFoG4MHjl ahqKakwjYlB+VgrwBXKeZpp51F2ZMbrGezUnSC7AchqOFKnqe9Jnzj9DpDCLErNX 70vtK4TkVzYS/8IuNzqV2X7RC8IJpZAH3xpQWBEJyezXNlx0PQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKnzk85hNYddW8yEc9a6nwrMDnqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvNTEzNWQwYmYtMmZjMi0z ZDU0LTgyMzEtNzBmNDU3NGViZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp/AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALt2YZwjxNTO7z186/0pgy5KB9PY5IGievxwYdIDZs13jfPKk3reg1gjD GED3QwSKV9UV953wCRJi/KhH6q/Ck0BIfwZEeKiaL4XxL/w63ZRoBkyqg0qgxocn fheYabTfGU38zXZkh6GQ9CMOGGHoYTi/jfmjBBTjiX8r9NksblKDiceymvcIHOjP 0E6r2XrGeAO9B75MAWUY8NJpa1rHarsLRhvmRUOEk9HqylKCmF5+Fm7yhmen7hLm MuGukx5gDQH9txzVi2677BuUupb+08QW4jyTGcK//gZLjvpPtWPSodrgRpYrtPCP 0ZlkrPCbfqkGIkG0YvNrE3qe9w5zLg== -----END CERTIFICATE-----Generated at Sun May 11 15:56:45 2025 by rpki-client