$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/3e5453eb-9c31-3840-8aaf-140329db4864.roa File: 3e5453eb-9c31-3840-8aaf-140329db4864.roa (raw, json) Hash identifier: ghIq9gkOulvdXEefnS1U6iHzm/x3ZVqiCzJRbqoYNFI= Subject key identifier: 92:BA:B0:5A:A5:47:BD:DA:9A:61:04:71:7F:2D:33:EA:E1:57:99:D5 Certificate issuer: /CN=43290c87-c43c-46a1-8633-9c4624dc1aaf Certificate serial: 010D0C9F43285849350EAA478A4028ADDDA47900 Authority key identifier: 6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/3e5453eb-9c31-3840-8aaf-140329db4864.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 52.129.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:aa:47:8a:40:28:ad:dd:a4:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43290c87-c43c-46a1-8633-9c4624dc1aaf Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=d1a3cc28-1338-4863-bbd5-072196491ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:c8:da:f9:64:63:f3:5a:16:ed:ee:f0:1c: be:57:1d:fd:7d:cb:30:9a:52:6f:2c:2b:7c:70:90: f8:58:8f:26:be:2e:6b:13:da:9e:99:06:e8:f1:fc: af:b0:4d:46:c9:2b:9e:55:f5:fd:ec:3b:4a:c1:1a: b5:9d:06:3c:9e:ea:b5:fe:6e:e9:f1:c9:3d:f5:01: a2:99:8b:d7:80:12:ce:b9:82:60:92:50:1a:a5:b3: 8e:9a:a5:36:5e:78:b2:96:a8:f6:11:2f:74:f0:a4: 04:52:79:16:a2:5e:2b:c0:c2:51:f3:16:b8:29:6f: 87:28:28:79:0c:da:a5:c2:4d:f8:ca:0f:69:2c:05: ad:1f:05:35:a8:e7:e1:cb:52:01:2c:ed:a0:b8:af: 72:85:cb:5e:d6:47:0b:08:a7:3a:3b:2b:a1:cf:12: 35:e2:ca:da:6f:04:1f:12:67:44:87:58:57:df:2a: 20:f2:40:4d:c5:73:0d:70:c3:b6:d1:bb:c7:aa:63: 47:af:61:1a:18:ae:76:ae:77:cb:45:9c:ac:cc:de: d8:94:b9:a3:13:6b:27:6c:0e:f2:55:04:fb:66:e4: 18:02:cf:dc:d2:a7:e5:ba:5c:62:12:a6:bd:90:9d: 76:99:82:75:f8:80:c8:71:17:5b:7c:9b:e7:1f:3b: 30:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BA:B0:5A:A5:47:BD:DA:9A:61:04:71:7F:2D:33:EA:E1:57:99:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/3e5453eb-9c31-3840-8aaf-140329db4864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl X509v3 Authority Key Identifier: keyid:6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer sbgp-ipAddrBlock: critical IPv4: 52.129.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:50:ef:b7:fa:31:e6:1c:79:4e:62:7b:81:05:35:e9:f1:41: 6d:ce:3b:e6:56:9c:db:17:32:95:db:9a:00:ae:a3:52:98:9c: 6e:3e:06:c3:2d:78:40:aa:05:b2:e9:a3:1c:65:57:0b:b9:0a: 3a:ed:4c:3d:49:6e:26:54:1f:5f:1b:38:39:85:f1:3e:e6:b7: a9:cf:d2:37:13:db:90:56:04:3a:4a:dd:e8:b3:53:79:05:85: 0a:e2:d1:98:d5:5f:41:52:10:af:84:5d:7a:cf:f0:cf:b5:18: d0:d4:1d:e5:c2:6a:7a:c7:6b:a6:db:96:8d:c0:a5:69:f4:e0: 7b:c7:0b:87:05:87:f7:ab:c0:cc:1f:80:6f:17:76:66:26:de: 59:d5:e5:c9:ea:1f:f0:fd:5a:bb:4c:18:48:21:39:07:16:7f: 53:66:98:8a:9a:ae:57:78:2f:5b:90:5c:04:fa:c0:6e:9c:1d: ae:a0:c5:0f:08:27:ca:ae:03:7c:5a:6f:62:7f:58:7e:49:03: 5b:d5:b0:a9:db:7c:0a:4f:4b:4e:6f:16:f9:8c:70:e3:da:e0: 09:11:72:6a:07:a2:36:80:c2:67:16:89:45:4d:7b:37:b3:be: 4c:fd:15:42:14:83:78:86:1e:ce:37:47:9d:8d:b3:83:a9:da: 60:e0:df:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqpHikAord2keQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyOTBjODctYzQzYy00NmExLTg2MzMtOWM0NjI0ZGMx YWFmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZDFhM2NjMjgtMTMzOC00ODYzLWJiZDUtMDcyMTk2NDkxZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+/I2vlkY/NaFu3u8By+Vx39fcswmlJvLCt8 cJD4WI8mvi5rE9qemQbo8fyvsE1GySueVfX97DtKwRq1nQY8nuq1/m7p8ck99QGi mYvXgBLOuYJgklAapbOOmqU2Xniylqj2ES908KQEUnkWol4rwMJR8xa4KW+HKCh5 DNqlwk34yg9pLAWtHwU1qOfhy1IBLO2guK9yhcte1kcLCKc6OyuhzxI14srabwQf EmdEh1hX3yog8kBNxXMNcMO20bvHqmNHr2EaGK52rnfLRZyszN7YlLmjE2snbA7y VQT7ZuQYAs/c0qflulxiEqa9kJ12mYJ1+IDIcRdbfJvnHzswfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJK6sFqlR73ammEEcX8tM+rhV5nVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MzI5 MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2MjRkYzFhYWYvM2U1NDUzZWItOWMzMS0z ODQwLThhYWYtMTQwMzI5ZGI0ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDMyOTBjODctYzQzYy00NmExLTg2 MzMtOWM0NjI0ZGMxYWFmLzQzMjkwYzg3LWM0M2MtNDZhMS04NjMzLTljNDYyNGRj MWFhZi5jcmwwHwYDVR0jBBgwFoAUbvy9Bm+Xe+iCEcYgjsPnOkES13gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MzI5MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2 MjRkYzFhYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDNIFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlQ77f6MeYceU5ie4EFNenxQW3OO+ZWnNsXMpXbmgCuo1KYnG4+BsMt eECqBbLpoxxlVwu5CjrtTD1JbiZUH18bODmF8T7mt6nP0jcT25BWBDpK3eizU3kF hQri0ZjVX0FSEK+EXXrP8M+1GNDUHeXCanrHa6bblo3ApWn04HvHC4cFh/erwMwf gG8XdmYm3lnV5cnqH/D9WrtMGEghOQcWf1NmmIqarld4L1uQXAT6wG6cHa6gxQ8I J8quA3xab2J/WH5JA1vVsKnbfApPS05vFvmMcOPa4AkRcmoHojaAwmcWiUVNezez vkz9FUIUg3iGHs43R52Ns4Op2mDg3xc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:52:25 2025 by rpki-client