$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa File: 0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa (raw, json) Hash identifier: I1Vg4BbzB4g+JDHNUWhIVd38NmFI3gWDpduG7cZzsu0= Subject key identifier: C2:E9:AE:44:42:6D:8F:36:AE:A8:DF:E6:E1:33:A9:DB:F1:23:ED:EB Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F43285849B9AA07AACBEFAC6917B23960 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 5645 IP address blocks: 157.52.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:07:aa:cb:ef:ac:69:17:b2:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=c86130d8-352a-4836-abe7-3907cbee823d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:37:a5:a8:d9:21:0a:c4:5d:70:17:c4:ce: 08:3d:f5:c2:f0:24:15:ca:85:3b:d4:1f:41:43:8b: 62:bd:5a:12:a8:11:bf:19:65:a4:68:ba:cd:19:c6: ad:3a:34:1a:5c:27:ac:6a:7f:73:2e:43:17:d8:ce: db:2b:35:56:e9:4c:55:73:bc:cd:80:3a:5c:08:89: ce:ff:43:dc:33:fc:aa:ef:58:b3:1f:e4:85:5b:7a: 6e:e6:71:cd:ed:32:8b:d4:ed:66:0b:85:28:c4:f4: d7:b5:d3:99:85:0f:a5:02:8a:bd:06:53:8d:e8:41: 25:a4:ea:1b:e3:2d:6a:e5:a8:fe:ab:1a:10:29:b8: d2:a5:49:56:3b:84:38:2a:e0:da:75:90:fb:26:d3: 64:fb:b6:ce:7b:8a:42:40:a4:db:af:f6:59:c6:9c: 1e:5d:75:36:37:81:1e:3c:77:6d:51:ab:60:a1:95: e6:54:96:8c:86:51:94:b1:7a:55:07:cf:3a:6d:eb: f0:a0:05:73:92:2f:f1:df:27:eb:27:fb:23:2f:3d: ac:47:6d:39:fc:f8:43:5a:6b:64:45:e7:9f:d8:97: 1f:1b:94:8c:70:0d:30:ce:b0:b7:5b:af:ee:73:26: 50:7c:39:42:7f:38:4e:4d:1a:31:ed:b1:17:bf:7c: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E9:AE:44:42:6D:8F:36:AE:A8:DF:E6:E1:33:A9:DB:F1:23:ED:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 157.52.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:7b:b9:9e:9b:f1:31:d7:f7:df:6d:ff:19:10:eb:8d:e0:be: 04:9b:e9:7c:4c:1d:83:09:7d:58:17:fb:aa:a2:eb:af:ba:14: da:8e:3b:68:ad:4b:9b:67:01:bc:bc:07:e2:19:c7:12:be:85: ca:b8:cf:e5:70:fb:ac:33:99:46:b5:6c:c8:9b:43:12:8f:f6: c0:93:e6:b1:b0:62:98:8d:d0:b1:57:f4:53:c1:9c:df:be:17: 91:a1:fa:04:dd:17:40:e6:4c:55:f0:23:96:bd:ee:0c:f3:47: c0:31:53:07:59:50:f1:0a:4b:75:81:46:08:1c:16:30:b1:d5: 46:83:5b:d3:57:2c:cc:73:52:9d:3a:5a:37:32:24:19:6a:e5: 14:a2:0c:8f:4b:d1:4a:43:9b:81:db:84:97:17:9f:c6:dc:ca: 4d:6f:b1:21:b3:a2:db:94:21:19:86:74:4a:6b:9e:f9:4c:2d: ce:f3:42:43:13:d5:d1:55:cd:ef:c2:ad:0b:a4:c8:43:80:c4: d1:b2:f4:46:27:f9:b1:4b:47:93:91:16:e0:98:01:6c:19:89: 68:f3:20:8e:86:d6:0a:61:6d:cb:58:96:89:c7:50:b8:7d:67: f4:a5:de:9f:21:a2:47:80:45:81:01:a7:e0:f8:e1:12:95:9f: 08:3c:af:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgeqy++saReyOWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk Yzg2MTMwZDgtMzUyYS00ODM2LWFiZTctMzkwN2NiZWU4MjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vY3pajZIQrEXXAXxM4IPfXC8CQVyoU71B9B Q4tivVoSqBG/GWWkaLrNGcatOjQaXCesan9zLkMX2M7bKzVW6UxVc7zNgDpcCInO /0PcM/yq71izH+SFW3pu5nHN7TKL1O1mC4UoxPTXtdOZhQ+lAoq9BlON6EElpOob 4y1q5aj+qxoQKbjSpUlWO4Q4KuDadZD7JtNk+7bOe4pCQKTbr/ZZxpweXXU2N4Ee PHdtUatgoZXmVJaMhlGUsXpVB886bevwoAVzki/x3yfrJ/sjLz2sR205/PhDWmtk Reef2JcfG5SMcA0wzrC3W6/ucyZQfDlCfzhOTRox7bEXv3yEkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLprkRCbY82rqjf5uEzqdvxI+3rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMGYxMjk0YTMtOThhNC0z ZWJiLTgxYjQtN2YxYTlhMWQyN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnTQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN7uZ6b8THX999t/xkQ643gvgSb6XxMHYMJfVgX+6qi66+6FNqOO2it S5tnAby8B+IZxxK+hcq4z+Vw+6wzmUa1bMibQxKP9sCT5rGwYpiN0LFX9FPBnN++ F5Gh+gTdF0DmTFXwI5a97gzzR8AxUwdZUPEKS3WBRggcFjCx1UaDW9NXLMxzUp06 WjcyJBlq5RSiDI9L0UpDm4HbhJcXn8bcyk1vsSGzotuUIRmGdEprnvlMLc7zQkMT 1dFVze/CrQukyEOAxNGy9EYn+bFLR5ORFuCYAWwZiWjzII6G1gphbctYlonHULh9 Z/Sl3p8hokeARYEBp+D44RKVnwg8r+g= -----END CERTIFICATE-----Generated at Tue May 6 08:31:06 2025 by rpki-client