$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa File: 7fe96268-b787-3529-9f78-3e3d0ced15ee.roa (raw, json) Hash identifier: c1PlLhdK/X5lrNKCfOU8rBTicZDOnmF0vMQzcKTGaaQ= Subject key identifier: 88:5A:25:8F:70:22:06:73:07:4E:58:EE:0A:F3:4A:BC:10:DB:11:BD Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F43285849CE9A64324FF9E6B5DD628C00 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 13325 IP address blocks: 204.25.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:64:32:4f:f9:e6:b5:dd:62:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=485b6d2f-dccc-41d7-9494-53e1a76c2d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:aa:a6:00:66:8a:d1:0b:0a:87:41:08:fe:c7: 4d:83:e1:f8:a9:9d:b8:4f:d9:ab:81:f8:fc:f2:14: 08:a3:7a:af:e9:7a:a9:4c:a5:7e:ca:3a:8b:95:a0: 6f:03:5c:af:2d:8e:88:4f:7b:4e:9b:a5:a9:5c:28: bc:05:42:96:d1:e4:29:57:79:1d:b1:99:67:b0:41: c0:04:2d:e9:38:17:98:e5:c9:0d:88:e1:83:95:2d: 8f:7d:78:4e:bd:69:3c:ae:46:9f:6c:0b:f2:70:5e: 31:62:07:d6:23:3b:34:09:5b:f5:f3:6c:88:75:eb: 7e:df:c5:42:1f:2c:f6:76:ff:7f:51:ed:9e:4c:69: 6a:9e:8e:03:a8:ed:7d:6a:30:47:9b:c7:04:85:22: 01:20:fa:a2:8b:53:ab:f3:3f:69:17:7e:07:f7:3a: ee:2e:71:fd:d7:a5:ce:89:9f:07:fa:96:13:9d:95: 8f:61:81:42:1b:89:f3:9d:59:e3:d7:7e:1c:78:89: f4:ae:a3:f1:94:1f:39:0d:a2:31:13:66:ab:44:8b: 1d:ba:87:d7:14:70:bc:8e:9d:b9:58:48:77:78:6b: 12:de:ff:02:62:d7:02:51:c7:13:be:2e:0d:8d:54: 34:cb:d8:5a:00:8e:d6:1d:c2:4c:c1:42:19:d6:8b: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5A:25:8F:70:22:06:73:07:4E:58:EE:0A:F3:4A:BC:10:DB:11:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 204.25.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ef:1a:09:73:65:e8:51:67:49:b9:bc:f3:e0:46:f2:ac:ba: 25:5c:1d:a5:c6:38:b2:88:ee:c0:c4:62:b2:b1:26:e3:e0:e5: 2f:41:80:d5:66:7d:13:6f:4b:f7:b0:b4:79:43:56:b7:20:b3: 0b:4f:ae:42:8d:e3:f0:00:2e:25:22:2d:30:85:a6:0c:df:87: ad:28:7e:9d:d9:47:6a:13:43:48:f6:2d:8d:8a:96:d1:49:40: 1d:d0:ac:3f:b3:90:4a:9c:43:68:9f:42:86:cc:fb:c6:99:3a: 63:aa:ec:96:6c:e4:40:47:cd:59:18:3d:a2:94:5e:fa:0c:9a: 73:44:4e:97:01:68:9b:ae:fa:01:bb:17:78:89:03:a3:20:c1: bd:79:ae:40:23:d6:4a:50:22:c1:9e:55:43:0b:57:78:ff:d5: 06:c9:dd:6e:06:de:96:77:c0:0f:b1:c4:c2:24:55:ee:60:ff: a2:91:e9:38:51:7c:4e:fb:84:ba:63:1b:4d:b3:28:0d:5e:5e: be:7d:9e:fc:6f:fb:64:d0:38:dc:01:90:df:68:49:dc:53:f3: a3:41:1b:9b:de:8a:28:72:4c:e3:51:59:f6:85:da:46:29:4e: 6d:c8:5a:88:f1:26:25:12:5c:4d:32:29:8c:45:f8:af:74:8c: 7e:ad:ee:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmQyT/nmtd1ijAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NDg1YjZkMmYtZGNjYy00MWQ3LTk0OTQtNTNlMWE3NmMyZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqqmAGaK0QsKh0EI/sdNg+H4qZ24T9mrgfj8 8hQIo3qv6XqpTKV+yjqLlaBvA1yvLY6IT3tOm6WpXCi8BUKW0eQpV3kdsZlnsEHA BC3pOBeY5ckNiOGDlS2PfXhOvWk8rkafbAvycF4xYgfWIzs0CVv182yIdet+38VC Hyz2dv9/Ue2eTGlqno4DqO19ajBHm8cEhSIBIPqii1Or8z9pF34H9zruLnH916XO iZ8H+pYTnZWPYYFCG4nznVnj134ceIn0rqPxlB85DaIxE2arRIsduofXFHC8jp25 WEh3eGsS3v8CYtcCUccTvi4NjVQ0y9haAI7WHcJMwUIZ1ouvjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhaJY9wIgZzB05Y7grzSrwQ2xG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvN2ZlOTYyNjgtYjc4Ny0z NTI5LTlmNzgtM2UzZDBjZWQxNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzBmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHvGglzZehRZ0m5vPPgRvKsuiVcHaXGOLKI7sDEYrKxJuPg5S9BgNVm fRNvS/ewtHlDVrcgswtPrkKN4/AALiUiLTCFpgzfh60ofp3ZR2oTQ0j2LY2KltFJ QB3QrD+zkEqcQ2ifQobM+8aZOmOq7JZs5EBHzVkYPaKUXvoMmnNETpcBaJuu+gG7 F3iJA6Mgwb15rkAj1kpQIsGeVUMLV3j/1QbJ3W4G3pZ3wA+xxMIkVe5g/6KR6ThR fE77hLpjG02zKA1eXr59nvxv+2TQONwBkN9oSdxT86NBG5veiihyTONRWfaF2kYp Tm3IWojxJiUSXE0yKYxF+K90jH6t7pE= -----END CERTIFICATE-----Generated at Sun May 11 15:24:28 2025 by rpki-client