$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa File: b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa (raw, json) Hash identifier: 2I1+BqySVfjjhRdn6iTQm4X+VoCL9U14/IJVFEyfsZw= Subject key identifier: B5:81:2F:17:67:F7:EC:E5:5B:D0:DC:FE:58:DF:06:D1:B6:9C:3F:18 Certificate issuer: /CN=2627756a-b322-49e6-941e-ed30e9ab9eae Certificate serial: 010D0C9F4328584949FE8764D05C6B54010A1F00 Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 46489 IP address blocks: 52.129.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:87:64:d0:5c:6b:54:01:0a:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=25a7be8f-849d-4d05-9b6c-54bcd716864b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:72:e4:0a:a0:5d:7e:b8:a2:c1:a9:41:dd: f1:da:43:9e:c6:d0:7a:15:26:c0:fb:88:4d:ec:91: 60:d5:a2:20:08:f5:de:bb:c4:cf:2d:8a:b6:5b:31: 48:2e:57:83:e4:72:ff:0e:fd:98:85:30:f8:b9:d6: ba:31:51:bc:0a:4f:5a:1e:27:f5:d2:07:1c:1c:51: 5e:c6:0c:c8:35:dc:86:31:a5:b5:bc:09:13:15:52: a2:4d:9d:24:c7:13:41:c8:8e:f8:2c:a6:a7:49:84: c4:4d:fc:3e:44:1f:0d:64:57:db:9c:b6:b5:38:f6: 2c:6e:a6:55:31:79:63:d4:12:4d:ab:a8:10:17:34: 16:26:8c:30:31:53:17:1a:8a:29:1f:dd:8a:52:9b: ae:3f:94:7b:ba:cb:35:27:b1:da:c6:15:a2:9b:db: 40:62:fe:0c:bd:74:a4:6b:91:54:09:4b:3a:49:b4: ad:92:91:10:d6:97:ee:fc:39:b8:d9:02:dc:72:41: bf:a5:c7:a5:b4:b1:1e:b1:6c:37:de:4b:86:4f:cd: 4a:6f:c9:71:db:2a:bc:71:2c:dd:b0:99:6f:65:3d: 9a:35:fa:41:e0:5d:3b:81:5d:bd:c3:9f:85:e7:00: dd:63:6f:c1:89:09:99:a5:50:2e:d4:de:12:13:eb: 19:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:81:2F:17:67:F7:EC:E5:5B:D0:DC:FE:58:DF:06:D1:B6:9C:3F:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl X509v3 Authority Key Identifier: keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer sbgp-ipAddrBlock: critical IPv4: 52.129.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:de:d0:8b:66:a7:e6:40:ca:04:9c:25:eb:17:16:af:53:49: 21:25:3b:c0:f0:f1:b0:b1:55:34:9d:7a:90:fc:e0:e7:1e:4e: fc:cb:69:48:e0:ca:9e:07:88:f4:fa:ca:ab:4a:52:63:1d:84: 3e:4b:33:99:f2:87:f6:35:e8:81:be:d0:41:68:40:b5:43:08: 27:51:d6:a1:d4:62:2a:95:34:eb:1d:f5:d3:88:d2:ec:f1:54: ab:38:f2:bb:56:79:dc:37:cd:53:7d:b3:2e:d9:fe:ed:b6:95: 2e:bb:6b:c3:95:eb:7e:e7:3f:30:ee:62:88:87:0c:39:84:aa: b8:57:8e:6a:73:4c:2a:18:3a:7b:d6:d5:ea:38:a5:52:6f:da: 50:41:55:af:4c:e3:58:93:63:c3:fd:ef:ab:6d:3b:2c:bf:2b: 0f:53:c8:db:0d:51:6a:55:1b:9e:5b:fc:64:be:dc:53:b0:43: ee:7e:b6:73:e6:34:b8:1c:0f:fc:e1:72:4f:34:46:7e:36:5a: 6b:00:b0:49:0a:ec:8d:bf:0a:2a:86:f1:e6:a3:47:55:b4:31: 79:ac:4b:47:0c:8d:f4:16:1c:08:b5:56:d0:af:c8:ed:dc:14: 8d:5a:5e:df:30:13:8a:22:8d:dd:d4:39:87:69:89:ea:92:13: 2d:1b:f3:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/odk0FxrVAEKHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjYyNzc1NmEtYjMyMi00OWU2LTk0MWUtZWQzMGU5YWI5 ZWFlMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk MjVhN2JlOGYtODQ5ZC00ZDA1LTliNmMtNTRiY2Q3MTY4NjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt45y5AqgXX64osGpQd3x2kOextB6FSbA+4hN 7JFg1aIgCPXeu8TPLYq2WzFILleD5HL/Dv2YhTD4uda6MVG8Ck9aHif10gccHFFe xgzINdyGMaW1vAkTFVKiTZ0kxxNByI74LKanSYTETfw+RB8NZFfbnLa1OPYsbqZV MXlj1BJNq6gQFzQWJowwMVMXGoopH92KUpuuP5R7uss1J7HaxhWim9tAYv4MvXSk a5FUCUs6SbStkpEQ1pfu/Dm42QLcckG/pceltLEesWw33kuGT81Kb8lx2yq8cSzd sJlvZT2aNfpB4F07gV29w5+F5wDdY2/BiQmZpVAu1N4SE+sZTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWBLxdn9+zlW9Dc/ljfBtG2nD8YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjI3 NzU2YS1iMzIyLTQ5ZTYtOTQxZS1lZDMwZTlhYjllYWUvYjNlOGJiODctZGI3YS0z NWQ3LTgxN2MtNzQ5Y2IyNzFiMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjYyNzc1NmEtYjMyMi00OWU2LTk0 MWUtZWQzMGU5YWI5ZWFlLzI2Mjc3NTZhLWIzMjItNDllNi05NDFlLWVkMzBlOWFi OWVhZS5jcmwwHwYDVR0jBBgwFoAUhEDJBl4qqtMfJnCblEkUz3KanGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjI3NzU2YS1iMzIyLTQ5ZTYtOTQxZS1lZDMw ZTlhYjllYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHNIGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHre0Itmp+ZAygScJesXFq9TSSElO8Dw8bCxVTSdepD84OceTvzLaUjg yp4HiPT6yqtKUmMdhD5LM5nyh/Y16IG+0EFoQLVDCCdR1qHUYiqVNOsd9dOI0uzx VKs48rtWedw3zVN9sy7Z/u22lS67a8OV637nPzDuYoiHDDmEqrhXjmpzTCoYOnvW 1eo4pVJv2lBBVa9M41iTY8P976ttOyy/Kw9TyNsNUWpVG55b/GS+3FOwQ+5+tnPm NLgcD/zhck80Rn42WmsAsEkK7I2/CiqG8eajR1W0MXmsS0cMjfQWHAi1VtCvyO3c FI1aXt8wE4oijd3UOYdpieqSEy0b8/I= -----END CERTIFICATE-----Generated at Mon Apr 7 15:39:54 2025 by rpki-client