$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/eadf60c7-3f3f-3252-bab0-1034ec94352d.roa File: eadf60c7-3f3f-3252-bab0-1034ec94352d.roa (raw, json) Hash identifier: T+d6wMpsilZhuEztUjWtIUbTkxlQ2UJUYK2KiqfOyeY= Subject key identifier: EF:1B:50:78:CF:45:A4:19:BC:C8:4E:99:94:C0:D3:04:0B:06:BD:00 Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F43285848E59BBDD3F758777DE2E83280 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/eadf60c7-3f3f-3252-bab0-1034ec94352d.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16509 IP address blocks: 52.128.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:bd:d3:f7:58:77:7d:e2:e8:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=29208fc8-f393-4d4b-976e-1a3ba737df50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:55:8d:17:6c:4f:9f:f9:19:2e:c5:e8:52:23: 03:ec:0d:ab:02:f6:64:35:44:bc:75:71:11:c4:83: 45:b4:8d:13:f6:80:90:0b:c4:8f:5f:11:c3:48:a7: 1f:68:3c:7b:55:12:22:e9:15:32:a8:ac:f9:bd:68: df:c0:74:59:57:72:46:ca:cd:80:0a:43:8e:3f:ec: 0e:64:be:cd:65:33:71:f0:f8:f1:e4:36:48:53:0c: 82:6c:2b:88:ef:04:66:d7:d7:0d:ad:0e:25:e2:29: 38:8a:0f:24:fd:28:c2:33:37:be:17:3e:58:1e:3e: d3:77:b6:42:43:23:62:47:f0:e8:33:15:24:ad:61: eb:44:2e:56:6f:8d:d6:aa:39:48:68:7d:94:a0:48: d1:f9:76:84:ed:ae:95:6b:f1:27:f1:a1:d2:bd:b5: 1f:a6:73:6b:30:7f:30:5f:a2:1a:c1:35:c6:7a:0d: 1b:2f:e8:84:5b:25:2b:b8:81:79:c1:b2:0c:ed:28: b4:ad:83:9e:18:d2:fd:e9:7d:3b:02:54:b4:0a:72: 02:17:99:9b:cb:9f:e8:14:87:45:24:ef:b5:42:9e: 47:80:cc:4b:d5:63:b6:29:4b:76:6a:6b:1e:32:26: e8:39:fb:70:93:1d:5f:d6:5a:bb:ca:e1:54:01:e9: 51:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1B:50:78:CF:45:A4:19:BC:C8:4E:99:94:C0:D3:04:0B:06:BD:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/eadf60c7-3f3f-3252-bab0-1034ec94352d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7c:22:5c:de:c7:31:8d:ae:6a:b2:6b:58:12:05:86:e7:a1: 85:a3:09:61:c7:86:20:49:c2:ad:3c:94:1c:53:71:5a:a4:c6: b3:5d:e5:9c:73:45:cb:5d:a3:26:d2:39:6b:ef:5b:50:6b:7d: ec:e6:28:3e:22:d0:e2:2e:a7:c4:66:77:55:5c:ce:49:5e:44: 51:f2:60:b6:c8:99:f8:62:26:a5:52:65:d5:11:13:84:71:bf: 1f:ea:ae:cd:f5:5e:d5:1e:e9:3c:b4:56:09:c0:76:f3:ff:b1: 8b:00:7c:91:27:2f:61:b9:e6:71:dd:9b:44:a8:e2:af:13:10: 4b:ce:2b:7a:dc:f9:3b:76:5d:46:c2:9e:a5:25:f6:5c:e6:89: 7d:17:4b:44:5a:91:83:93:f7:83:25:0a:10:6a:50:7c:57:07: f3:33:22:79:7e:15:41:6d:ce:23:fe:f8:b3:87:5a:0e:56:0e: 60:c9:73:ec:3d:cd:ae:34:1c:2f:0f:e1:49:7f:60:85:ac:87: ca:1b:44:31:f8:c5:50:ef:9c:4d:20:5e:22:08:79:22:e9:86: 5d:88:51:89:a6:c6:5c:9c:a5:2c:b6:14:ff:c8:7b:99:a7:b5: ea:73:b9:9b:b0:c5:92:6b:3a:f0:0a:81:39:a7:6a:44:70:dd: 12:2c:5e:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm73T91h3feLoMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MjkyMDhmYzgtZjM5My00ZDRiLTk3NmUtMWEzYmE3MzdkZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFWNF2xPn/kZLsXoUiMD7A2rAvZkNUS8dXER xINFtI0T9oCQC8SPXxHDSKcfaDx7VRIi6RUyqKz5vWjfwHRZV3JGys2ACkOOP+wO ZL7NZTNx8Pjx5DZIUwyCbCuI7wRm19cNrQ4l4ik4ig8k/SjCMze+Fz5YHj7Td7ZC QyNiR/DoMxUkrWHrRC5Wb43WqjlIaH2UoEjR+XaE7a6Va/En8aHSvbUfpnNrMH8w X6IawTXGeg0bL+iEWyUruIF5wbIM7Si0rYOeGNL96X07AlS0CnICF5mby5/oFIdF JO+1Qp5HgMxL1WO2KUt2amseMiboOftwkx1f1lq7yuFUAelREwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8bUHjPRaQZvMhOmZTA0wQLBr0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvZWFkZjYwYzctM2YzZi0z MjUyLWJhYjAtMTAzNGVjOTQzNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG98IlzexzGNrmqya1gSBYbnoYWjCWHHhiBJwq08lBxTcVqkxrNd5Zxz RctdoybSOWvvW1BrfezmKD4i0OIup8Rmd1VczkleRFHyYLbImfhiJqVSZdURE4Rx vx/qrs31XtUe6Ty0VgnAdvP/sYsAfJEnL2G55nHdm0So4q8TEEvOK3rc+Tt2XUbC nqUl9lzmiX0XS0RakYOT94MlChBqUHxXB/MzInl+FUFtziP++LOHWg5WDmDJc+w9 za40HC8P4Ul/YIWsh8obRDH4xVDvnE0gXiIIeSLphl2IUYmmxlycpSy2FP/Ie5mn tepzuZuwxZJrOvAKgTmnakRw3RIsXp0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:30 2025 by rpki-client