$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa File: 573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa (raw, json) Hash identifier: FTlQO0OLXHGraavEDiGUSnarm1kRVIVjUu3K45NnPIs= Subject key identifier: 05:E0:2D:24:E3:5D:BB:05:A2:4A:2D:BB:6C:DA:32:C3:2D:B4:EC:4B Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F43285849B9AA082FA04E19ADF87A5600 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 5645 IP address blocks: 192.0.128.0/17 maxlen: 17 192.0.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:08:2f:a0:4e:19:ad:f8:7a:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=e1ff6732-1226-4aee-9d50-3a4ce35347fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:68:cf:d1:60:20:f8:bb:cc:70:e0:4f:99:1e: 6c:23:98:84:e0:50:96:bb:54:51:e1:df:47:c1:27: c2:0f:3f:f8:2b:29:92:50:ba:34:d6:e3:c1:3a:36: e6:67:b6:2f:00:36:be:21:3a:d0:ce:a2:29:32:a8: 39:1f:78:9e:27:b3:0d:ae:c7:44:2f:2b:61:63:b3: 6b:0d:73:64:98:f0:7e:0e:05:80:89:47:72:ac:9f: 4c:db:fc:66:df:f8:bc:d1:e2:44:b5:6c:a1:b4:57: 8c:e4:5b:da:01:64:98:2e:81:b6:bc:6e:28:18:8a: 34:f9:c8:97:c1:4b:f8:a5:68:81:ac:24:25:57:8c: 4a:8c:8c:23:37:35:2b:fb:75:6b:ba:c2:91:cc:9f: 79:91:63:e2:22:0c:7d:88:41:13:88:b9:e3:82:ed: 81:bc:2a:c6:eb:e2:ab:fe:3e:fc:a5:cb:35:07:1d: 6b:f7:0c:b1:f3:65:1b:26:1d:ba:3a:a2:b8:c5:39: 7a:85:55:6a:1f:6c:36:60:2c:5f:37:7b:16:d6:a1: a0:49:31:e9:7b:9d:f8:61:57:9d:ee:cf:af:03:e2: 60:d9:60:d7:2a:a6:35:c5:18:b9:13:e2:fd:92:60: 5b:5f:81:6d:44:27:06:9d:87:1d:2b:2b:7f:b5:ec: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E0:2D:24:E3:5D:BB:05:A2:4A:2D:BB:6C:DA:32:C3:2D:B4:EC:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 192.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:74:a0:44:19:3e:5c:ee:87:82:83:92:5a:39:80:82:59:34: 78:32:ed:9f:ea:8e:ab:0f:dd:13:bb:89:59:16:cc:97:e5:4b: ae:f5:32:a4:76:bb:f9:d3:13:10:3f:13:d3:b8:93:f8:82:cc: 90:99:98:a5:31:21:c7:39:54:34:1f:f3:67:6a:38:c7:e4:13: 06:a7:0f:92:9b:ec:ae:8e:52:fa:ad:eb:39:41:e9:51:b7:b3: 1a:4f:c5:03:fd:7c:8a:d2:59:04:ca:ff:11:5c:74:74:63:80: 5d:8c:1e:31:3b:04:44:c3:3d:0c:1f:36:63:36:be:8d:54:13: a1:71:c6:68:13:5e:ed:55:e1:e6:e5:52:5f:4e:2f:1c:2d:6a: 19:2c:b4:40:55:c5:bf:4d:8c:40:de:19:16:21:c7:0f:3a:31: 3c:2c:ae:cd:db:72:60:f8:6f:7c:cf:f5:ac:c2:ca:65:88:74: 77:55:68:51:7d:19:9f:7f:9a:f1:34:07:86:45:33:ab:71:f4: 79:a0:e8:74:04:72:45:db:7b:e1:e8:84:9b:03:9a:fc:99:27: 23:16:58:10:85:89:be:54:e9:83:95:6d:fc:0c:02:c6:bd:91: d3:c8:88:ab:08:ad:33:d7:8a:46:fa:b3:e1:53:de:86:86:3c: d1:0a:ab:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qggvoE4Zrfh6VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ZTFmZjY3MzItMTIyNi00YWVlLTlkNTAtM2E0Y2UzNTM0N2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2jP0WAg+LvMcOBPmR5sI5iE4FCWu1RR4d9H wSfCDz/4KymSULo01uPBOjbmZ7YvADa+ITrQzqIpMqg5H3ieJ7MNrsdELythY7Nr DXNkmPB+DgWAiUdyrJ9M2/xm3/i80eJEtWyhtFeM5FvaAWSYLoG2vG4oGIo0+ciX wUv4pWiBrCQlV4xKjIwjNzUr+3VrusKRzJ95kWPiIgx9iEETiLnjgu2BvCrG6+Kr /j78pcs1Bx1r9wyx82UbJh26OqK4xTl6hVVqH2w2YCxfN3sW1qGgSTHpe534YVed 7s+vA+Jg2WDXKqY1xRi5E+L9kmBbX4FtRCcGnYcdKyt/texD0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXgLSTjXbsFokotu2zaMsMttOxLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNTczZjNlYmEtNjlmNy0z ZDE3LThkZGYtYmVjNDEwYWMxMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHwACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMN0oEQZPlzuh4KDklo5gIJZNHgy7Z/qjqsP3RO7iVkWzJflS671MqR2 u/nTExA/E9O4k/iCzJCZmKUxIcc5VDQf82dqOMfkEwanD5Kb7K6OUvqt6zlB6VG3 sxpPxQP9fIrSWQTK/xFcdHRjgF2MHjE7BETDPQwfNmM2vo1UE6FxxmgTXu1V4ebl Ul9OLxwtahkstEBVxb9NjEDeGRYhxw86MTwsrs3bcmD4b3zP9azCymWIdHdVaFF9 GZ9/mvE0B4ZFM6tx9Hmg6HQEckXbe+HohJsDmvyZJyMWWBCFib5U6YOVbfwMAsa9 kdPIiKsIrTPXikb6s+FT3oaGPNEKq3w= -----END CERTIFICATE-----Generated at Tue May 6 21:00:55 2025 by rpki-client