$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/afb9b482-d4f1-3dc3-aa6c-a9bf17bd1b47.roa File: afb9b482-d4f1-3dc3-aa6c-a9bf17bd1b47.roa (raw, json) Hash identifier: GEAtjQWTQv15195kXajFCcK6miIGX71rg7NMwWqnSUA= Subject key identifier: B0:12:9E:1A:B5:F7:AB:D5:16:90:C2:53:FD:B2:DA:02:03:04:61:DE Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F432858495C243D0E757B8B2C30933480 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/afb9b482-d4f1-3dc3-aa6c-a9bf17bd1b47.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 16509 IP address blocks: 52.129.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:3d:0e:75:7b:8b:2c:30:93:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=30d72c2f-2043-4bfb-8978-ef4cda9af881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:90:15:49:0b:fe:43:d9:b8:76:01:b3:a7:6a: d5:3b:78:26:11:e2:24:ee:31:7c:d7:f3:27:9d:8c: f4:6d:05:70:db:16:10:41:62:5b:dc:24:92:64:13: 06:32:f2:1f:4a:00:90:bf:7e:62:3b:db:ca:a3:8a: 4f:ae:08:53:3d:4a:8c:e0:d1:2e:d7:c8:27:dc:25: a5:7b:fe:4c:36:24:cc:25:71:83:1f:0e:1b:c5:c9: 89:2b:eb:2b:3a:9f:4f:56:d7:ca:5d:7a:52:f4:01: ac:5d:22:fd:4f:b9:eb:a7:82:96:c2:84:00:fd:a5: b0:51:49:5b:af:cd:e7:4f:76:c3:37:fb:26:49:00: b6:cf:68:8d:d2:ab:4f:e9:dc:ad:67:1e:ab:92:6e: ce:6e:44:56:48:5c:0c:25:aa:a8:6d:08:d7:84:33: fd:18:5c:82:13:16:57:37:9c:61:26:fa:c3:8f:44: 64:3c:00:46:b5:1e:96:1d:2f:75:31:76:b2:78:47: af:b4:61:0b:46:3b:86:22:b2:2d:ff:f6:72:39:dc: b3:ec:f1:ed:d4:b6:62:99:65:c8:81:1d:1f:7c:48: 57:74:60:59:ea:f7:e3:f0:51:bd:a2:14:0a:e9:5f: 33:64:99:02:f6:ae:d7:15:31:ea:1e:c0:7f:fa:21: 99:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:12:9E:1A:B5:F7:AB:D5:16:90:C2:53:FD:B2:DA:02:03:04:61:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/afb9b482-d4f1-3dc3-aa6c-a9bf17bd1b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:90:5e:e2:10:5e:c9:cc:2f:3d:81:f1:e3:9e:9f:1c:81:68: 52:d7:8d:6d:3e:af:e0:17:31:fe:28:cb:86:48:62:4e:30:64: ff:e4:29:9f:5c:4d:9a:04:37:68:e4:fa:c0:46:aa:10:14:05: 06:dd:fe:48:da:7b:86:75:f5:d1:d2:4f:93:a1:cf:f1:2f:1a: 21:b7:4a:39:9a:d9:49:d8:69:32:1d:9f:75:c0:23:84:69:41: 3e:d2:f5:fe:2e:14:d4:59:7c:6d:35:05:a8:48:25:9e:4a:14: 07:1e:ed:0b:2f:bf:dc:59:73:aa:62:c6:e2:cf:ea:19:37:c8: c4:da:b7:c1:de:b7:ff:a7:c2:0f:52:6a:04:c8:09:cc:6f:6e: ba:67:8d:f5:a5:4d:70:5c:c8:f5:86:06:4c:8e:9a:4e:b2:2e: 50:dc:0c:fb:1c:2a:6d:78:f7:bf:84:6c:c4:cd:5a:b4:da:79: 0a:c8:a0:b7:e3:36:1a:e4:f4:f5:5e:1a:b4:cc:62:f6:9d:23: 8e:dc:73:48:18:84:20:86:de:2a:aa:d9:80:8f:a3:0a:fa:7c: 96:65:9a:c3:d6:ba:14:79:36:bc:1d:cd:25:b1:7f:9a:9c:99: 87:e2:f5:ac:b1:8e:e2:ba:d1:6b:6b:c6:05:a4:4b:be:22:7c: 79:6b:05:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJD0OdXuLLDCTNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MzBkNzJjMmYtMjA0My00YmZiLTg5NzgtZWY0Y2RhOWFmODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZAVSQv+Q9m4dgGzp2rVO3gmEeIk7jF81/Mn nYz0bQVw2xYQQWJb3CSSZBMGMvIfSgCQv35iO9vKo4pPrghTPUqM4NEu18gn3CWl e/5MNiTMJXGDHw4bxcmJK+srOp9PVtfKXXpS9AGsXSL9T7nrp4KWwoQA/aWwUUlb r83nT3bDN/smSQC2z2iN0qtP6dytZx6rkm7ObkRWSFwMJaqobQjXhDP9GFyCExZX N5xhJvrDj0RkPABGtR6WHS91MXayeEevtGELRjuGIrIt//ZyOdyz7PHt1LZimWXI gR0ffEhXdGBZ6vfj8FG9ohQK6V8zZJkC9q7XFTHqHsB/+iGZbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLASnhq196vVFpDCU/2y2gIDBGHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvYWZiOWI0ODItZDRmMS0z ZGMzLWFhNmMtYTliZjE3YmQxYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGQXuIQXsnMLz2B8eOenxyBaFLXjW0+r+AXMf4oy4ZIYk4wZP/kKZ9c TZoEN2jk+sBGqhAUBQbd/kjae4Z19dHST5Ohz/EvGiG3Sjma2UnYaTIdn3XAI4Rp QT7S9f4uFNRZfG01BahIJZ5KFAce7Qsvv9xZc6pixuLP6hk3yMTat8Het/+nwg9S agTICcxvbrpnjfWlTXBcyPWGBkyOmk6yLlDcDPscKm1497+EbMTNWrTaeQrIoLfj Nhrk9PVeGrTMYvadI47cc0gYhCCG3iqq2YCPowr6fJZlmsPWuhR5NrwdzSWxf5qc mYfi9ayxjuK60WtrxgWkS74ifHlrBZk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:36 2025 by rpki-client