$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/52db2717-1b9b-3731-b7ef-694372415cef.roa File: 52db2717-1b9b-3731-b7ef-694372415cef.roa (raw, json) Hash identifier: UZfYTySwmVi34IzK7MdQSSvYnulRuAD+5vhGgZvUgwA= Subject key identifier: C1:E6:60:DD:F6:03:8F:4D:CC:98:E8:3B:CD:FC:55:F6:43:D1:E8:34 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F43285849CBCF9794F7EDBB1EF522B240 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/52db2717-1b9b-3731-b7ef-694372415cef.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 394353 IP address blocks: 192.228.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:97:94:f7:ed:bb:1e:f5:22:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=dcdd4ebd-1901-476e-96b3-86778d174781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:03:1b:40:52:e4:12:b2:ee:c1:dc:de:24:10: 6d:7b:5f:30:2f:93:ed:a2:88:48:ae:55:b4:8a:eb: dd:69:6c:8d:bf:8a:0b:49:07:2e:32:9f:5a:e1:de: da:8b:ca:e7:66:71:37:48:cf:b4:b5:6a:33:ac:0b: a3:d7:37:fd:09:6e:c1:3a:d3:34:d0:33:12:fa:d6: c5:5e:87:2d:ec:74:71:63:8f:2e:fe:51:14:11:12: 88:28:79:0d:c9:08:0c:f4:1d:03:ed:b0:9d:0e:99: 68:13:98:2b:fc:3f:0f:91:1e:f8:4a:73:85:1a:03: 27:1f:7d:87:b0:5d:52:4e:8d:af:f6:d9:38:df:5a: bb:5f:ad:99:97:8c:98:0c:fc:2f:fd:f9:98:fe:75: a9:91:1a:b0:1c:50:0e:78:fc:43:7d:28:b0:a3:77: 3f:16:42:90:b2:be:b5:ca:f6:7a:be:bb:8a:8e:e5: 1b:22:1b:27:4c:b6:d1:03:43:c0:d2:a0:7c:59:92: 6c:41:d3:35:fe:0b:9a:dd:a9:ff:cd:e6:c7:46:c2: 1a:d8:65:30:40:18:2e:10:24:b5:8a:a8:1c:ce:f1: 72:2b:56:85:1a:1d:24:36:bd:c8:71:ac:b5:bb:8e: 37:bb:f0:c1:78:4c:23:fa:96:7e:66:26:ba:f3:82: 6b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E6:60:DD:F6:03:8F:4D:CC:98:E8:3B:CD:FC:55:F6:43:D1:E8:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/52db2717-1b9b-3731-b7ef-694372415cef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv4: 192.228.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:25:00:df:9c:c3:f7:3c:a9:a4:d5:9f:9d:09:75:63:81:c9: d3:38:39:a5:6e:61:e7:32:99:fb:1b:c6:f5:47:69:7b:c4:1b: f3:d9:f9:02:8d:26:12:63:48:b5:e9:e4:d4:2f:6a:0f:d2:76: b0:aa:cf:b4:71:84:8d:91:59:fa:1a:14:d7:f1:0f:9e:37:a1: a9:1c:f2:65:ee:da:df:9f:30:44:18:83:d7:bf:c2:99:c1:a3: 70:fe:33:b7:08:33:6c:9d:2b:85:a0:05:12:1d:04:47:17:25: 09:1a:3e:7b:e9:d9:f2:c2:e7:45:55:9d:f5:98:70:be:b5:5e: 20:32:a3:d1:ff:26:74:37:09:d2:6a:81:cd:6a:27:ff:75:ad: 95:18:e5:71:a6:36:1b:09:13:e7:b6:88:6d:2d:f0:f9:7f:06: cb:90:48:b9:f6:7c:e2:8b:53:d3:26:62:11:1b:63:d2:b6:7b: c5:90:23:17:49:fd:dc:81:ac:31:3e:3f:48:2a:31:76:47:c2: c3:6d:fb:4b:d8:79:b2:fc:43:62:43:1e:d9:0e:73:e1:cb:7a: 49:2f:50:4f:b7:ac:6d:4c:9e:0d:ec:72:9d:08:b1:65:c3:17: 9b:96:d8:30:ab:e8:f8:f5:20:0f:fa:e4:ef:b7:84:a6:fb:b7: 93:68:c4:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5eU9+27HvUiskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZGNkZDRlYmQtMTkwMS00NzZlLTk2YjMtODY3NzhkMTc0NzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigMbQFLkErLuwdzeJBBte18wL5PtoohIrlW0 iuvdaWyNv4oLSQcuMp9a4d7ai8rnZnE3SM+0tWozrAuj1zf9CW7BOtM00DMS+tbF Xoct7HRxY48u/lEUERKIKHkNyQgM9B0D7bCdDploE5gr/D8PkR74SnOFGgMnH32H sF1STo2v9tk431q7X62Zl4yYDPwv/fmY/nWpkRqwHFAOePxDfSiwo3c/FkKQsr61 yvZ6vruKjuUbIhsnTLbRA0PA0qB8WZJsQdM1/gua3an/zebHRsIa2GUwQBguECS1 iqgczvFyK1aFGh0kNr3Icay1u443u/DBeEwj+pZ+Zia684Jr3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHmYN32A49NzJjoO838VfZD0eg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvNTJkYjI3MTctMWI5Yi0z NzMxLWI3ZWYtNjk0MzcyNDE1Y2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8lAN+cw/c8qaTVn50JdWOBydM4OaVuYecymfsbxvVHaXvEG/PZ+QKN JhJjSLXp5NQvag/SdrCqz7RxhI2RWfoaFNfxD543oakc8mXu2t+fMEQYg9e/wpnB o3D+M7cIM2ydK4WgBRIdBEcXJQkaPnvp2fLC50VVnfWYcL61XiAyo9H/JnQ3CdJq gc1qJ/91rZUY5XGmNhsJE+e2iG0t8Pl/BsuQSLn2fOKLU9MmYhEbY9K2e8WQIxdJ /dyBrDE+P0gqMXZHwsNt+0vYebL8Q2JDHtkOc+HLekkvUE+3rG1Mng3scp0IsWXD F5uW2DCr6Pj1IA/65O+3hKb7t5NoxN8= -----END CERTIFICATE-----Generated at Sat May 10 20:56:07 2025 by rpki-client